$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft File: 91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft (raw, json) Hash identifier: DAqNO943iusVZP41k1p2Tm9qWdEwklRRN3lfbwiOr3o= Subject key identifier: 7C:D2:6D:67:4E:DE:66:6C:FA:3B:99:36:D7:6C:69:1E:CA:8F:02:B4 Authority key identifier: 91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5 Certificate issuer: /CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5 Certificate serial: 5A6530BC59962D940C4EDA74572D3C35BFE6E940 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft Manifest number: EA Signing time: Sat 24 Oct 2026 14:16:56 +0000 Manifest this update: Sat 24 Oct 2026 14:11:56 +0000 Manifest next update: Sun 25 Oct 2026 16:38:56 +0000 Files and hashes: 1: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: uikJ4h+kBmTlo/wV286gj8QmBKk/antrFLp6NHaL3Jo=) 2: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: SC10OytBie2MbXaqxSkSZEMl+ckzrKygzl2td6Lp/wc=) 3: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: XA8Mg7RR9LICJm4QVN9sHHYBGExGVWnRlfGuHZaWDXk=) 4: 91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl (hash: TTlTIQFwqfJqDi7XnkOIqvyldqr7Q0L9boqNDyYrE5E=) 5: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: 6Np+q+5XOW4vxlMbVGZKdZf5J6Gwh/BuKQFsPk2H03I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 16:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:65:30:bc:59:96:2d:94:0c:4e:da:74:57:2d:3c:35:bf:e6:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5 Validity Not Before: Oct 24 14:11:56 2026 GMT Not After : Oct 25 16:38:56 2026 GMT Subject: CN=7CD26D674EDE666CFA3B9936D76C691ECA8F02B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:65:59:bb:2a:5f:08:8c:5e:a4:83:43:fb:87: 7e:ac:6d:16:bc:9b:fe:26:8c:e5:a3:5b:02:ce:20: 7c:92:d2:e0:10:b4:07:7d:f1:74:a6:bf:19:c2:df: 7b:c4:f3:23:9b:1c:fa:5e:c8:f4:31:40:b3:93:e2: ca:b5:98:86:87:04:52:86:08:cc:6e:b9:70:1f:d5: 56:a1:9e:0d:80:b1:c1:3e:f9:63:a1:d7:42:bb:09: 6d:07:3a:fd:b5:75:32:b4:da:ed:9f:15:fd:d1:b1: e8:83:e6:d4:b6:d0:ee:4c:56:c2:54:d2:6b:46:44: 63:91:a3:96:34:1c:2d:06:3f:d6:ba:c4:a7:00:2d: 8c:cd:8c:f5:a3:dd:ff:5b:c0:6a:14:54:79:60:68: 7f:2a:f9:c8:56:b8:47:f5:91:16:89:26:a9:3e:b4: 52:13:c9:b0:0e:0d:7e:c4:d1:34:af:93:e6:10:84: f8:cb:c0:8e:60:a4:12:1c:90:b8:42:84:dd:ed:dd: fc:61:e9:e3:71:0f:2d:2f:8a:9d:cd:55:ac:3a:bb: 77:2e:f4:2e:de:a8:57:a3:9a:ab:76:95:70:96:a9: 6d:69:c2:9b:51:cd:28:9f:3a:b3:fd:c9:1a:d7:9e: fe:c4:d1:76:88:3d:6c:98:bb:0b:b8:02:28:e8:9e: 61:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D2:6D:67:4E:DE:66:6C:FA:3B:99:36:D7:6C:69:1E:CA:8F:02:B4 X509v3 Authority Key Identifier: keyid:91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:73:8c:4c:b8:f5:65:2b:0a:84:17:e3:c9:db:d1:74:cc:5d: 11:5d:1f:75:89:4b:09:d4:6b:01:f0:2e:64:97:0c:3f:51:c3: a5:4a:06:7d:af:f5:79:39:29:ee:b4:f2:f8:a4:26:5c:d9:b2: ea:d3:43:ae:e4:d3:ba:68:2b:07:e6:f4:d0:93:f6:e8:1a:a8: ca:a3:ee:c6:60:38:52:11:55:75:a0:3f:ee:2a:c9:f4:0c:ed: d6:08:be:9e:0a:e2:2b:9e:d6:17:54:ce:b2:4c:a1:fd:bd:3c: 53:75:ae:5e:10:ba:06:d9:e9:aa:7c:74:79:e4:86:90:d1:80: 5a:4a:4e:2f:7f:1e:bc:ab:a8:6c:85:02:f9:b1:e2:c9:30:fd: 0f:53:92:33:7e:b8:77:36:31:59:8e:87:c8:d6:e8:0a:d1:ca: f5:5d:41:6f:6e:04:65:38:45:35:d4:6f:18:ab:bc:04:76:91: 25:79:0e:64:61:e7:5d:20:1f:2c:24:9a:54:9d:1e:55:9e:7c: 32:bf:02:ca:9e:79:b3:a2:b7:62:6c:95:29:ce:3e:1f:12:cf: 37:43:7f:18:8d:2a:cd:3b:dd:a0:b3:51:c8:73:ab:6e:36:dc: a4:d9:74:76:5f:d2:28:00:51:8c:b6:5b:0a:0b:d9:af:c8:df: e9:1a:01:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWmUwvFmWLZQMTtp0Vy08Nb/m6UAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTExOTZBOThGRTJFMjIzNkJCNjVDRTI4RENCNTkyM0U1 NTFDOUNBNTAeFw0yNjEwMjQxNDExNTZaFw0yNjEwMjUxNjM4NTZaMDMxMTAvBgNV BAMTKDdDRDI2RDY3NEVERTY2NkNGQTNCOTkzNkQ3NkM2OTFFQ0E4RjAyQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaZVm7Kl8IjF6kg0P7h36sbRa8 m/4mjOWjWwLOIHyS0uAQtAd98XSmvxnC33vE8yObHPpeyPQxQLOT4sq1mIaHBFKG CMxuuXAf1Vahng2AscE++WOh10K7CW0HOv21dTK02u2fFf3RseiD5tS20O5MVsJU 0mtGRGORo5Y0HC0GP9a6xKcALYzNjPWj3f9bwGoUVHlgaH8q+chWuEf1kRaJJqk+ tFITybAODX7E0TSvk+YQhPjLwI5gpBIckLhChN3t3fxh6eNxDy0vip3NVaw6u3cu 9C7eqFejmqt2lXCWqW1pwptRzSifOrP9yRrXnv7E0XaIPWyYuwu4AijonmHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfNJtZ07eZmz6O5k212xpHsqPArQwHwYDVR0j BBgwFoAUkRlqmP4uIja7Zc4o3LWSPlUcnKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU1M2VkYWItNGEzZC00NGU0LThkOTYtNjI1YTFjMjAzNzhkLzAvOTExOTZBOThG RTJFMjIzNkJCNjVDRTI4RENCNTkyM0U1NTFDOUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTE5NkE5OEZFMkUyMjM2QkI2NUNFMjhEQ0I1OTIzRTU1MUM5 Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk OTYtNjI1YTFjMjAzNzhkLzAvOTExOTZBOThGRTJFMjIzNkJCNjVDRTI4RENCNTky M0U1NTFDOUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxzjEy49WUrCoQX48nb0XTMXRFdH3WJSwnU awHwLmSXDD9Rw6VKBn2v9Xk5Ke608vikJlzZsurTQ67k07poKwfm9NCT9ugaqMqj 7sZgOFIRVXWgP+4qyfQM7dYIvp4K4iue1hdUzrJMof29PFN1rl4QugbZ6ap8dHnk hpDRgFpKTi9/HryrqGyFAvmx4skw/Q9TkjN+uHc2MVmOh8jW6ArRyvVdQW9uBGU4 RTXUbxirvAR2kSV5DmRh510gHywkmlSdHlWefDK/AsqeebOit2JslSnOPh8SzzdD fxiNKs073aCzUchzq2423KTZdHZf0igAUYy2WwoL2a/I3+kaAbo= -----END CERTIFICATE-----Generated at Sun Oct 25 04:56:00 2026 by rpki-client