$ rpki-client -vvf rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft File: 91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft (raw, json) Hash identifier: P8NQ4oZviGtVcmZ/t06kGRtsanZwonl/1etbqlhvN8w= Subject key identifier: 68:AF:9D:F9:68:B1:1A:E6:2C:AA:32:07:F1:19:7A:5B:40:60:AB:38 Authority key identifier: 91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5 Certificate issuer: /CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5 Certificate serial: 584D9F2ADF5297464972CFD655A87CBE92A32826 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft Manifest number: 6A Signing time: Sun 19 Jul 2026 21:08:04 +0000 Manifest this update: Sun 19 Jul 2026 21:03:04 +0000 Manifest next update: Mon 20 Jul 2026 21:37:04 +0000 Files and hashes: 1: 91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl (hash: nvFOYPxRV8IVQwmMh6qkhvx94b7p6w2Yw5GpMMdBrIE=) 2: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: uikJ4h+kBmTlo/wV286gj8QmBKk/antrFLp6NHaL3Jo=) 3: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: 6Np+q+5XOW4vxlMbVGZKdZf5J6Gwh/BuKQFsPk2H03I=) 4: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: SC10OytBie2MbXaqxSkSZEMl+ckzrKygzl2td6Lp/wc=) 5: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: XA8Mg7RR9LICJm4QVN9sHHYBGExGVWnRlfGuHZaWDXk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 21:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:4d:9f:2a:df:52:97:46:49:72:cf:d6:55:a8:7c:be:92:a3:28:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5 Validity Not Before: Jul 19 21:03:04 2026 GMT Not After : Jul 20 21:37:04 2026 GMT Subject: CN=68AF9DF968B11AE62CAA3207F1197A5B4060AB38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:58:82:5d:a8:fb:e1:53:fa:3a:40:2f:d7:76: c8:ae:c2:f9:ef:05:bd:14:af:37:60:9c:03:cc:eb: 21:6f:1c:e4:60:79:34:90:70:c7:a6:9b:9b:87:ca: 2b:f8:2c:cc:04:31:44:4c:8e:51:2b:6a:94:42:47: 63:b0:6b:cc:b3:e8:d2:ca:70:4a:fe:7d:60:d5:e5: bf:e6:30:ac:ee:e3:b4:ef:f0:3c:1a:de:00:09:7c: b7:89:38:38:51:2f:5a:41:84:a6:58:40:2e:20:3c: 2c:da:ac:df:eb:77:94:a9:b6:a9:87:a1:78:5c:20: 55:aa:03:25:4c:0a:1d:84:34:90:47:f1:31:f9:0e: 4f:1d:5b:f1:6d:1f:fa:44:16:3b:6a:c1:6e:6b:03: 36:b1:13:4e:68:5a:7c:b6:89:ba:15:00:b7:b7:9c: ff:78:ac:07:5e:ac:6a:2b:e7:f9:97:84:db:64:5a: 21:14:97:9c:32:ed:4e:10:94:61:09:5b:93:06:dd: cf:73:86:7b:06:24:37:06:90:4f:3e:57:69:b0:5c: d9:61:18:8f:71:8b:d0:93:97:44:48:19:34:7e:f7: c7:30:3e:87:0d:76:e9:d9:48:24:46:62:28:b1:d7: 71:6f:76:c2:fd:fb:e9:21:6e:61:04:64:3f:de:40: c5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AF:9D:F9:68:B1:1A:E6:2C:AA:32:07:F1:19:7A:5B:40:60:AB:38 X509v3 Authority Key Identifier: keyid:91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c6:33:59:5c:ac:0e:00:15:87:28:92:65:e7:c9:1d:6c:6a: d3:e8:9a:f0:b7:28:80:b8:42:5e:2d:a6:cd:bf:f6:dc:d5:bc: f9:e7:dd:a3:46:03:c8:23:2f:fc:08:5a:f6:76:7d:a9:ab:99: 6c:1e:2f:90:ff:33:3f:5e:4e:69:bf:ce:be:bc:0b:09:ed:65: a3:9c:81:e5:3a:bf:7f:f6:27:dd:20:30:fc:24:05:64:b8:3e: 9f:c6:af:82:20:03:e3:b8:10:f2:37:1f:ce:7d:74:0d:a3:c8: bf:64:ce:7d:ff:74:05:89:68:12:2e:20:30:88:6c:98:83:e6: 12:a4:9a:a7:33:54:0f:ca:5a:f0:15:50:d8:70:02:f7:ae:47: 0b:f3:47:fb:5a:fe:ad:b8:c5:04:a4:fb:a1:2e:ec:85:4c:c7: 1b:bd:24:20:0f:c1:8c:24:d9:d3:e7:59:18:db:30:b8:6f:44: aa:19:cc:d6:d0:29:70:08:8f:1a:c7:fa:0c:82:31:c3:e4:6c: 18:77:d5:12:df:d7:91:bc:91:81:45:ae:bd:57:9d:c4:8c:df: ef:bc:54:e3:b8:e7:2d:0f:ba:f5:d3:62:23:f2:f0:61:8b:e9: 83:64:20:d5:ce:94:eb:98:1c:73:53:88:05:67:0a:3f:ef:59: 15:76:5f:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWE2fKt9Sl0ZJcs/WVah8vpKjKCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTExOTZBOThGRTJFMjIzNkJCNjVDRTI4RENCNTkyM0U1 NTFDOUNBNTAeFw0yNjA3MTkyMTAzMDRaFw0yNjA3MjAyMTM3MDRaMDMxMTAvBgNV BAMTKDY4QUY5REY5NjhCMTFBRTYyQ0FBMzIwN0YxMTk3QTVCNDA2MEFCMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpWIJdqPvhU/o6QC/Xdsiuwvnv Bb0UrzdgnAPM6yFvHORgeTSQcMemm5uHyiv4LMwEMURMjlErapRCR2Owa8yz6NLK cEr+fWDV5b/mMKzu47Tv8Dwa3gAJfLeJODhRL1pBhKZYQC4gPCzarN/rd5SptqmH oXhcIFWqAyVMCh2ENJBH8TH5Dk8dW/FtH/pEFjtqwW5rAzaxE05oWny2iboVALe3 nP94rAderGor5/mXhNtkWiEUl5wy7U4QlGEJW5MG3c9zhnsGJDcGkE8+V2mwXNlh GI9xi9CTl0RIGTR+98cwPocNdunZSCRGYiix13FvdsL9++khbmEEZD/eQMUTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaK+d+WixGuYsqjIH8Rl6W0BgqzgwHwYDVR0j BBgwFoAUkRlqmP4uIja7Zc4o3LWSPlUcnKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU1M2VkYWItNGEzZC00NGU0LThkOTYtNjI1YTFjMjAzNzhkLzAvOTExOTZBOThG RTJFMjIzNkJCNjVDRTI4RENCNTkyM0U1NTFDOUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTE5NkE5OEZFMkUyMjM2QkI2NUNFMjhEQ0I1OTIzRTU1MUM5 Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk OTYtNjI1YTFjMjAzNzhkLzAvOTExOTZBOThGRTJFMjIzNkJCNjVDRTI4RENCNTky M0U1NTFDOUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALGM1lcrA4AFYcokmXnyR1satPomvC3KIC4 Ql4tps2/9tzVvPnn3aNGA8gjL/wIWvZ2famrmWweL5D/Mz9eTmm/zr68CwntZaOc geU6v3/2J90gMPwkBWS4Pp/Gr4IgA+O4EPI3H859dA2jyL9kzn3/dAWJaBIuIDCI bJiD5hKkmqczVA/KWvAVUNhwAveuRwvzR/ta/q24xQSk+6Eu7IVMxxu9JCAPwYwk 2dPnWRjbMLhvRKoZzNbQKXAIjxrH+gyCMcPkbBh31RLf15G8kYFFrr1XncSM3++8 VOO45y0PuvXTYiPy8GGL6YNkINXOlOuYHHNTiAVnCj/vWRV2X00= -----END CERTIFICATE-----Generated at Mon Jul 20 04:15:19 2026 by rpki-client