$ rpki-client -vvf repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft File: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft (raw, json) Hash identifier: mkYdC6gPCGoiLgsDLx9tvaQGcZER0i8h14vQD7+eiQE= Subject key identifier: 30:FD:24:7B:AE:54:09:2B:AE:B5:B4:F7:6F:F3:03:C9:CE:44:98:B8 Authority key identifier: 91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 Certificate issuer: /CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Certificate serial: 3CEFB47BDBB47AEA2585803C9B9D892959C23475 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft Manifest number: 03EB Signing time: Wed 15 Apr 2026 20:11:11 +0000 Manifest this update: Wed 15 Apr 2026 20:06:11 +0000 Manifest next update: Sun 19 Apr 2026 05:23:11 +0000 Files and hashes: 1: 3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa (hash: QFVEqtesaTrmTJQnAhXdEFMlhzgCjQGVydaTISBOk4I=) 2: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl (hash: Ys+F2cqRNeHE8E92frwcaD8bDWsbherVmchlF3TWAOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 05:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ef:b4:7b:db:b4:7a:ea:25:85:80:3c:9b:9d:89:29:59:c2:34:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Validity Not Before: Apr 15 20:06:11 2026 GMT Not After : Apr 19 05:23:11 2026 GMT Subject: CN=30FD247BAE54092BAEB5B4F76FF303C9CE4498B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2e:bf:f3:c9:fb:a6:ef:56:7c:62:17:ab:ae: 20:6c:3c:71:5b:7f:68:40:9d:ca:43:c2:09:2a:aa: 58:88:d7:ed:43:dc:d0:c8:cf:8e:cc:0a:fc:13:95: 62:5b:2d:ad:3a:d8:f4:cd:e7:55:90:ff:12:05:67: e6:e5:24:79:31:94:5f:8f:42:ed:eb:39:d0:6d:89: f6:0b:ca:01:7c:2b:e4:61:82:7b:39:43:1c:c1:8f: b2:57:0f:b8:8a:f8:43:17:b2:b4:8b:ee:b4:e0:31: 5b:e6:96:6e:b2:c6:d6:f7:0e:b0:c0:7b:e1:ce:8c: 70:cd:66:53:67:72:93:27:0d:6a:c2:57:a6:72:6a: 00:66:cd:14:c1:94:06:bc:58:ed:92:8f:d2:25:b3: 63:c3:96:34:17:37:73:3a:91:f5:c3:4c:02:80:a1: 90:e9:42:68:71:45:d7:27:13:87:ca:61:82:6f:d2: 7a:f1:af:cd:d2:04:50:85:25:25:6b:de:45:f8:35: 66:9b:a5:b0:46:aa:8d:e6:ee:9b:1c:86:b3:a8:bc: b0:4c:8f:da:03:59:87:26:3a:11:c2:87:97:14:9f: 40:3b:f3:01:fc:c3:27:1c:1a:0c:29:c6:e3:70:41: 78:04:a7:b8:c8:03:a6:ad:55:c1:70:ce:56:c6:b1: ba:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FD:24:7B:AE:54:09:2B:AE:B5:B4:F7:6F:F3:03:C9:CE:44:98:B8 X509v3 Authority Key Identifier: keyid:91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:e4:6c:2a:64:b6:2f:1c:cb:a1:3c:97:b4:d8:aa:c4:33:17: cc:ae:f2:56:dc:4c:1c:ac:c7:c9:df:f2:ab:55:85:ff:ee:28: 9d:bd:7c:e1:09:3a:fb:5a:de:34:e3:83:30:e0:f0:2d:d3:64: d8:5f:39:98:11:e1:5b:6b:45:da:ee:78:56:b3:74:49:1b:c9: 42:e0:1b:ed:64:37:c0:c3:02:58:da:73:50:c4:18:a7:bf:8b: 03:25:7f:51:2c:97:84:5c:a6:62:54:c5:2c:38:e5:85:be:90: 55:8a:20:25:d6:78:ad:92:db:89:25:62:f2:fd:15:3b:fc:ba: 98:28:d8:04:b2:89:b0:16:5f:f2:66:d9:90:3c:fd:04:36:74: 1f:1d:cc:64:91:54:e6:f2:9a:d8:b0:2e:dd:8a:1b:8a:f4:52: 8f:46:54:e6:76:c5:b9:b2:ce:3b:ff:f2:d0:f6:69:d6:94:3a: fa:7a:26:36:07:8d:23:7c:02:9c:8d:ef:2c:42:df:2e:62:c2: b7:5f:b7:eb:dd:ce:be:78:7e:d2:6e:d1:b9:52:f4:25:3e:b7: 7c:d4:94:dc:76:e8:9d:da:f0:7c:93:b0:97:7c:22:6c:8a:71: 04:24:57:f8:53:7d:db:68:63:02:b1:8e:38:7e:a3:c9:b5:75: 31:fb:50:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPO+0e9u0euolhYA8m52JKVnCNHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMy NjI2NEY1MDAeFw0yNjA0MTUyMDA2MTFaFw0yNjA0MTkwNTIzMTFaMDMxMTAvBgNV BAMTKDMwRkQyNDdCQUU1NDA5MkJBRUI1QjRGNzZGRjMwM0M5Q0U0NDk4QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgLr/zyfum71Z8YherriBsPHFb f2hAncpDwgkqqliI1+1D3NDIz47MCvwTlWJbLa062PTN51WQ/xIFZ+blJHkxlF+P Qu3rOdBtifYLygF8K+Rhgns5QxzBj7JXD7iK+EMXsrSL7rTgMVvmlm6yxtb3DrDA e+HOjHDNZlNncpMnDWrCV6ZyagBmzRTBlAa8WO2Sj9Ils2PDljQXN3M6kfXDTAKA oZDpQmhxRdcnE4fKYYJv0nrxr83SBFCFJSVr3kX4NWabpbBGqo3m7pschrOovLBM j9oDWYcmOhHCh5cUn0A78wH8wyccGgwpxuNwQXgEp7jIA6atVcFwzlbGsbopAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMP0ke65UCSuutbT3b/MDyc5EmLgwHwYDVR0j BBgwFoAUkd8FjWrG9WPcrobbr7SKwyYmT1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjBlMzY0Yi03NzllLTQwZDUtYWQwZS1kOTE3ODc3OGQ2YjEvMC85MURGMDU4RDZB QzZGNTYzRENBRTg2REJBRkI0OEFDMzI2MjY0RjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhBQzMyNjI2 NEY1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmIwZTM2NGItNzc5ZS00MGQ1LWFk MGUtZDkxNzg3NzhkNmIxLzAvOTFERjA1OEQ2QUM2RjU2M0RDQUU4NkRCQUZCNDhB QzMyNjI2NEY1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM3kbCpkti8cy6E8l7TYqsQzF8yu8lbcTBys x8nf8qtVhf/uKJ29fOEJOvta3jTjgzDg8C3TZNhfOZgR4VtrRdrueFazdEkbyULg G+1kN8DDAljac1DEGKe/iwMlf1Esl4RcpmJUxSw45YW+kFWKICXWeK2S24klYvL9 FTv8upgo2ASyibAWX/Jm2ZA8/QQ2dB8dzGSRVObymtiwLt2KG4r0Uo9GVOZ2xbmy zjv/8tD2adaUOvp6JjYHjSN8ApyN7yxC3y5iwrdft+vdzr54ftJu0blS9CU+t3zU lNx26J3a8HyTsJd8ImyKcQQkV/hTfdtoYwKxjjh+o8m1dTH7UAU= -----END CERTIFICATE-----Generated at Fri Apr 17 20:47:33 2026 by rpki-client