$ rpki-client -vvf rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft File: 91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft (raw, json) Hash identifier: bRYvssyMWjk4WgzvMXxUl2trzPUY/6VitJW/ApKGkFY= Subject key identifier: A2:63:5D:B1:C1:43:4F:D9:77:AA:DE:E0:56:FE:83:25:B5:80:BB:53 Authority key identifier: 91:A6:9B:B2:7F:BA:EC:A8:EA:46:BC:5D:8A:42:D2:09:97:8E:1F:92 Certificate issuer: /CN=91A69BB27FBAECA8EA46BC5D8A42D209978E1F92 Certificate serial: 1A7E802A65B67EF7F34D5994E62E2C1DFEDFDEB8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 23:17:18 +0000 Manifest this update: Tue 16 Jun 2026 23:12:18 +0000 Manifest next update: Thu 18 Jun 2026 02:06:18 +0000 Files and hashes: 1: 91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl (hash: /STfs/NLYWney9WZplUMdtmp3TI9aizlE/fz94bNyX0=) 2: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: yk1O5C1BOxz+IbSF0vGTgF2z9BWG6BcqwgclHoMMF8k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:7e:80:2a:65:b6:7e:f7:f3:4d:59:94:e6:2e:2c:1d:fe:df:de:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91A69BB27FBAECA8EA46BC5D8A42D209978E1F92 Validity Not Before: Jun 16 23:12:18 2026 GMT Not After : Jun 18 02:06:18 2026 GMT Subject: CN=A2635DB1C1434FD977AADEE056FE8325B580BB53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:24:bb:12:8c:ff:d4:74:6f:48:d5:3a:86: 75:d5:8a:2b:a9:4f:30:a0:1b:f4:84:b4:b3:63:51: 11:3b:2c:cf:a6:7d:77:e9:31:d9:95:97:d1:d1:e9: 1c:89:52:22:e5:eb:88:69:ff:ba:1d:0e:20:a8:78: 02:5e:c8:9d:72:24:d3:b6:ed:83:a4:42:61:33:7e: e5:43:50:87:d2:53:ce:83:3b:5d:71:cc:b6:7a:08: 06:e8:7f:6f:a1:f5:9a:95:14:6d:2f:e0:4e:c6:7b: 8a:e5:ff:02:52:21:68:e5:bf:86:53:c8:54:fd:f9: 0b:d5:47:08:a9:e1:4f:fd:40:3d:73:66:58:0c:8e: e5:fa:0c:fc:48:33:00:eb:1e:3f:f6:de:67:a6:d3: 4e:b5:6f:6b:fb:d3:68:1e:8d:a6:73:86:92:b1:23: 05:85:62:59:1e:85:80:d3:f7:94:93:17:91:ee:d0: d8:24:f9:b1:78:5a:2c:dc:13:ea:e4:c8:15:80:9f: 58:89:26:3d:5f:e0:cb:ed:e5:8a:52:e8:63:75:b0: 66:91:bf:82:a7:da:1e:88:92:50:5e:9d:3d:99:73: e7:53:84:de:9f:28:08:c6:9c:fb:4a:62:72:28:8b: 87:98:79:cb:4b:d2:c8:89:c9:e6:87:0e:09:94:b7: 70:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:63:5D:B1:C1:43:4F:D9:77:AA:DE:E0:56:FE:83:25:B5:80:BB:53 X509v3 Authority Key Identifier: keyid:91:A6:9B:B2:7F:BA:EC:A8:EA:46:BC:5D:8A:42:D2:09:97:8E:1F:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:e9:d7:f1:f8:8d:10:45:1d:46:ef:ae:de:3f:70:19:3d:85: 8b:91:74:d4:5c:e0:66:83:ec:0c:7d:4a:ce:81:f0:cd:05:01: e0:4f:6a:52:09:a1:2a:c1:e8:1d:cd:31:eb:e2:65:8a:7e:11: 22:7c:b5:9c:8a:3e:38:63:af:3c:22:05:7e:68:48:9b:5a:17: d8:12:57:ce:6b:b7:7b:e3:cb:8f:01:a9:36:a5:36:0d:b3:4d: bf:2d:d2:15:fb:6c:b9:a1:8e:6d:97:6e:29:01:51:fb:9e:42: 23:e2:45:c9:a2:96:a9:6d:37:68:c5:b2:73:12:fe:a3:ec:6d: d8:69:82:85:0f:d3:c5:02:bd:d2:8e:7c:a2:99:24:86:a5:2c: cb:0e:7a:8b:ef:14:b7:fd:cc:b1:0d:6c:ef:8b:b9:ff:63:a2: c9:21:0f:25:9c:7b:52:e4:83:14:d2:5d:78:4a:b9:b3:de:c7: c7:2a:22:33:75:18:61:bf:6b:ae:c6:8d:12:22:c3:ff:38:a7: c3:23:c8:e6:7c:70:3c:0a:fb:40:17:42:ec:dc:28:58:f2:14: fa:03:7a:c1:d8:20:3c:75:62:0f:4a:31:23:37:d3:5c:76:3b: 7d:ca:81:32:b9:a0:72:28:ba:5d:d1:af:9b:86:da:b9:e9:cc: e9:76:93:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGn6AKmW2fvfzTVmU5i4sHf7f3rgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFBNjlCQjI3RkJBRUNBOEVBNDZCQzVEOEE0MkQyMDk5 NzhFMUY5MjAeFw0yNjA2MTYyMzEyMThaFw0yNjA2MTgwMjA2MThaMDMxMTAvBgNV BAMTKEEyNjM1REIxQzE0MzRGRDk3N0FBREVFMDU2RkU4MzI1QjU4MEJCNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJQSS7Eoz/1HRvSNU6hnXViiup TzCgG/SEtLNjURE7LM+mfXfpMdmVl9HR6RyJUiLl64hp/7odDiCoeAJeyJ1yJNO2 7YOkQmEzfuVDUIfSU86DO11xzLZ6CAbof2+h9ZqVFG0v4E7Ge4rl/wJSIWjlv4ZT yFT9+QvVRwip4U/9QD1zZlgMjuX6DPxIMwDrHj/23mem0061b2v702gejaZzhpKx IwWFYlkehYDT95STF5Hu0Ngk+bF4WizcE+rkyBWAn1iJJj1f4Mvt5YpS6GN1sGaR v4Kn2h6IklBenT2Zc+dThN6fKAjGnPtKYnIoi4eYectL0siJyeaHDgmUt3DnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUomNdscFDT9l3qt7gVv6DJbWAu1MwHwYDVR0j BBgwFoAUkaabsn+67KjqRrxdikLSCZeOH5IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzc3NmYyZTUtZGZiZC00ZjdmLThiM2QtN2I5NzBkNTQxYjhmLzAvOTFBNjlCQjI3 RkJBRUNBOEVBNDZCQzVEOEE0MkQyMDk5NzhFMUY5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MUE2OUJCMjdGQkFFQ0E4RUE0NkJDNUQ4QTQyRDIwOTk3OEUx RjkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc3NmYyZTUtZGZiZC00ZjdmLThi M2QtN2I5NzBkNTQxYjhmLzAvOTFBNjlCQjI3RkJBRUNBOEVBNDZCQzVEOEE0MkQy MDk5NzhFMUY5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnp1/H4jRBFHUbvrt4/cBk9hYuRdNRc4GaD 7Ax9Ss6B8M0FAeBPalIJoSrB6B3NMeviZYp+ESJ8tZyKPjhjrzwiBX5oSJtaF9gS V85rt3vjy48BqTalNg2zTb8t0hX7bLmhjm2XbikBUfueQiPiRcmilqltN2jFsnMS /qPsbdhpgoUP08UCvdKOfKKZJIalLMsOeovvFLf9zLENbO+Luf9joskhDyWce1Lk gxTSXXhKubPex8cqIjN1GGG/a67GjRIiw/84p8MjyOZ8cDwK+0AXQuzcKFjyFPoD esHYIDx1Yg9KMSM301x2O33KgTK5oHIoul3Rr5uG2rnpzOl2kxQ= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:24 2026 by rpki-client