$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft File: 91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft (raw, json) Hash identifier: TTr6Llvivm0j9t+S6ZVcyiHBJGVu0uUDDEcko3Fl5Ac= Subject key identifier: 1B:04:BA:29:A7:F3:74:68:F1:98:A5:1D:F4:2F:F5:8B:D1:74:93:EA Authority key identifier: 91:DA:5E:3E:AE:C7:82:50:02:C2:B0:B2:11:69:10:98:E8:46:E9:FC Certificate issuer: /CN=91DA5E3EAEC7825002C2B0B211691098E846E9FC Certificate serial: 6F30E6A4D1E8437FB62C04EB2FC2003381C02869 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 15:12:57 +0000 Manifest this update: Wed 16 Sep 2026 15:07:57 +0000 Manifest next update: Thu 17 Sep 2026 16:54:57 +0000 Files and hashes: 1: 3130332e38372e31392e302f32342d3234203d3e20313336303835.roa (hash: F6jYcafaJJAQNsDnKDwNAvNPZwSOu96osD17ejMa0IA=) 2: 3130332e38372e31362e302f32342d3234203d3e20313336303835.roa (hash: 9rQw2DH4LTYRz6Ld/+alvv30wJq+CpxWAZ/IZNVGNXA=) 3: 323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa (hash: lSaknhLFqjOMQh5hKJz89kJXJK6lU8/KmLPb953U3wQ=) 4: 3130332e38372e31372e302f32342d3234203d3e20313336303835.roa (hash: LlPUFkB0sceEK94Yu8wPw+JUw9peMjPuBGA5gFdUP0s=) 5: 91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl (hash: lQdMIbAjJAczG/iUkEPeYK/NrAfSP1oGM/Ziz1q0GIQ=) 6: 3130332e38372e31382e302f32342d3234203d3e20313336303835.roa (hash: 3YW3wpzif7Ii0+9H5ajQcKu+WhGUBsXKkY6vurMFFkQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 16:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:30:e6:a4:d1:e8:43:7f:b6:2c:04:eb:2f:c2:00:33:81:c0:28:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91DA5E3EAEC7825002C2B0B211691098E846E9FC Validity Not Before: Sep 16 15:07:57 2026 GMT Not After : Sep 17 16:54:57 2026 GMT Subject: CN=1B04BA29A7F37468F198A51DF42FF58BD17493EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a9:47:bc:cc:7e:9a:cf:b9:fd:73:1f:c2:a5: 5d:67:09:5f:e1:b8:00:82:de:96:3e:05:28:70:47: 54:1e:70:fb:9d:8c:9a:04:8f:b0:e4:86:8c:4b:dd: ae:c1:89:e4:2e:e4:a0:f9:fc:33:14:79:b5:e9:58: 41:1a:36:37:0f:af:44:db:c3:66:85:a3:7a:f6:85: e5:d1:83:7c:49:55:8d:dd:d0:f4:44:1e:1a:b7:f0: 5c:1b:8c:0f:60:97:7b:56:d9:f4:7d:41:56:dd:60: 75:26:ca:fc:e6:c7:54:ef:69:01:eb:b2:9a:ee:56: eb:62:9c:cd:b2:6c:3c:08:0e:9f:6f:b9:9d:88:bd: 3d:5d:58:81:76:fd:7a:aa:ce:3f:e4:bd:97:4d:3b: 6d:a4:1d:35:62:1a:12:aa:3e:de:05:21:a3:a9:cc: f6:f0:83:be:97:6d:52:38:71:9e:cf:6c:10:76:72: 6e:62:eb:51:61:d1:da:5c:dc:c1:02:97:cb:20:11: c1:a5:de:68:97:f0:62:a2:08:ad:17:68:14:14:d7: 0c:c2:0f:05:0e:84:fb:b4:70:9a:6d:81:01:74:b8: 4f:59:41:f4:60:26:6a:35:34:0f:a6:b3:dd:d8:bc: f3:d0:0b:1e:b9:bf:93:ae:bf:30:f3:53:5f:e4:75: 82:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:04:BA:29:A7:F3:74:68:F1:98:A5:1D:F4:2F:F5:8B:D1:74:93:EA X509v3 Authority Key Identifier: keyid:91:DA:5E:3E:AE:C7:82:50:02:C2:B0:B2:11:69:10:98:E8:46:E9:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:20:bd:ee:20:32:dd:98:57:c6:2b:39:64:0f:11:52:44:23: 3c:e8:da:36:cc:0f:1e:6a:6d:1b:e0:e4:b4:4c:f9:cb:e0:37: 74:cd:83:b8:c7:e0:f0:4a:26:27:94:00:1f:78:fb:17:c9:7d: 17:dd:b9:09:b2:a3:ea:29:6d:d7:38:86:b2:ba:e6:6c:44:27: 3c:1f:6b:f5:bc:ea:e0:1f:a5:d8:b9:c4:a2:b6:cf:c3:f8:e9: d4:1b:5e:a9:03:f1:4a:33:d4:1a:eb:11:e1:07:22:1d:f8:62: 5d:94:57:b1:aa:4c:04:26:23:b8:de:e0:f9:71:c8:d7:d5:9c: cc:a0:5b:f5:98:7c:8f:0a:f5:36:e5:17:68:88:0f:0e:4f:e3: c4:11:5b:b8:4a:c4:db:15:fd:67:6c:60:42:94:4c:3f:f7:50: ef:24:f3:a2:48:2f:d5:e9:0a:6f:dc:b3:02:de:80:4b:1b:0a: da:ad:df:7d:9d:3d:ff:f3:e6:a8:e7:7b:c6:f4:ab:f6:65:2d: bc:5c:22:cb:52:13:56:6d:ac:1f:57:53:3e:cf:a8:59:44:6d: b5:a3:69:d0:45:95:60:bb:8f:5e:3d:e2:28:c5:8d:2c:68:63: 6b:37:93:69:73:70:b4:b7:80:e4:ae:93:25:0c:ac:a9:ee:5f: ff:8b:01:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbzDmpNHoQ3+2LATrL8IAM4HAKGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFEQTVFM0VBRUM3ODI1MDAyQzJCMEIyMTE2OTEwOThF ODQ2RTlGQzAeFw0yNjA5MTYxNTA3NTdaFw0yNjA5MTcxNjU0NTdaMDMxMTAvBgNV BAMTKDFCMDRCQTI5QTdGMzc0NjhGMTk4QTUxREY0MkZGNThCRDE3NDkzRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqqUe8zH6az7n9cx/CpV1nCV/h uACC3pY+BShwR1QecPudjJoEj7DkhoxL3a7BieQu5KD5/DMUebXpWEEaNjcPr0Tb w2aFo3r2heXRg3xJVY3d0PREHhq38FwbjA9gl3tW2fR9QVbdYHUmyvzmx1TvaQHr spruVutinM2ybDwIDp9vuZ2IvT1dWIF2/Xqqzj/kvZdNO22kHTViGhKqPt4FIaOp zPbwg76XbVI4cZ7PbBB2cm5i61Fh0dpc3MECl8sgEcGl3miX8GKiCK0XaBQU1wzC DwUOhPu0cJptgQF0uE9ZQfRgJmo1NA+ms93YvPPQCx65v5OuvzDzU1/kdYL5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGwS6KafzdGjxmKUd9C/1i9F0k+owHwYDVR0j BBgwFoAUkdpePq7HglACwrCyEWkQmOhG6fwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGMyNzg3NDctNmFjNy00Zjg3LTliMmItMjEzNTkyOTRmMDM0LzAvOTFEQTVFM0VB RUM3ODI1MDAyQzJCMEIyMTE2OTEwOThFODQ2RTlGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MURBNUUzRUFFQzc4MjUwMDJDMkIwQjIxMTY5MTA5OEU4NDZF OUZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGMyNzg3NDctNmFjNy00Zjg3LTli MmItMjEzNTkyOTRmMDM0LzAvOTFEQTVFM0VBRUM3ODI1MDAyQzJCMEIyMTE2OTEw OThFODQ2RTlGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkgve4gMt2YV8YrOWQPEVJEIzzo2jbMDx5q bRvg5LRM+cvgN3TNg7jH4PBKJieUAB94+xfJfRfduQmyo+opbdc4hrK65mxEJzwf a/W86uAfpdi5xKK2z8P46dQbXqkD8Uoz1BrrEeEHIh34Yl2UV7GqTAQmI7je4Plx yNfVnMygW/WYfI8K9TblF2iIDw5P48QRW7hKxNsV/WdsYEKUTD/3UO8k86JIL9Xp Cm/cswLegEsbCtqt332dPf/z5qjne8b0q/ZlLbxcIstSE1ZtrB9XUz7PqFlEbbWj adBFlWC7j1494ijFjSxoY2s3k2lzcLS3gOSukyUMrKnuX/+LAU4= -----END CERTIFICATE-----Generated at Thu Sep 17 08:36:27 2026 by rpki-client