$ rpki-client -vvf rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft File: 11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft (raw, json) Hash identifier: HFwSKF9NHw53plWoVvcPutLmyMbFEClCj+7yGj7KYlU= Subject key identifier: 95:B0:35:01:8E:00:95:C4:4A:39:69:D0:96:67:AF:13:23:0F:8A:60 Authority key identifier: 11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0 Certificate issuer: /CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0 Certificate serial: 67DC530FBC4491E4A08FD5E42E3C5556AACD3054 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 17:51:06 +0000 Manifest this update: Sat 13 Jun 2026 17:46:06 +0000 Manifest next update: Sun 14 Jun 2026 18:20:06 +0000 Files and hashes: 1: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: 50fnO1/znCwvGbIxgziShFyETpxwE5iSmjctpgUo0sk=) 2: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: W3s/SdESd03hapvVNS8Tej6LatNo1tGxXixL2qrpljI=) 3: 11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl (hash: DACc6kXi56xSuHX5e/T9CdXD2/nxF+lDExJqxBdV5WQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:dc:53:0f:bc:44:91:e4:a0:8f:d5:e4:2e:3c:55:56:aa:cd:30:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0 Validity Not Before: Jun 13 17:46:06 2026 GMT Not After : Jun 14 18:20:06 2026 GMT Subject: CN=95B035018E0095C44A3969D09667AF13230F8A60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:34:18:8c:b2:96:63:96:42:0a:3c:6a:89:cd: 42:2a:77:bf:11:fb:13:bd:43:dc:db:34:e9:c4:97: 3c:fb:ae:54:e3:17:89:22:9a:17:d8:1a:72:55:f4: 61:0d:1b:fe:86:00:e4:6e:aa:79:87:6f:79:bc:13: d3:1e:5a:8f:52:7c:0b:09:a0:a5:fa:d7:5d:33:4a: bc:b4:d6:cc:83:c5:86:f4:3f:69:9c:8e:8b:20:e9: 24:23:a9:63:e9:01:c3:bd:e6:c2:11:27:7d:89:8e: 6b:c1:76:cb:40:95:80:4f:01:a1:7f:15:42:af:d4: cc:c6:2a:ad:1e:a0:9c:b3:a3:55:01:dc:78:f2:c8: 52:b9:ad:7a:6d:9a:1c:26:ba:0d:39:bf:3f:58:d3: 38:93:90:b1:d2:25:14:19:46:3f:ee:5e:ce:99:f9: 89:7c:6f:ba:47:f6:d1:08:69:68:ab:66:b0:8d:c8: 27:e3:eb:e4:14:54:b3:9a:6b:9d:21:c9:85:48:0e: b0:b9:8c:8a:53:5b:2a:17:64:0f:06:ed:ae:de:6e: ab:36:c8:d7:57:6f:06:81:5a:3d:ac:fb:40:07:bd: 66:aa:e5:11:17:6c:3b:2e:31:89:da:38:59:68:89: 04:d1:2e:33:6e:ac:8c:a6:02:49:f7:0e:6a:27:e3: 7f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B0:35:01:8E:00:95:C4:4A:39:69:D0:96:67:AF:13:23:0F:8A:60 X509v3 Authority Key Identifier: keyid:11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:1d:ea:f5:a3:11:0c:4e:b8:b5:f0:aa:a0:fe:1e:88:0b:b0: 38:f8:dc:98:a4:00:65:ca:62:08:ea:f3:14:6b:84:a8:5e:04: 85:c6:3c:c8:ea:30:05:83:8f:0b:5d:47:50:9c:4c:31:c8:d2: 89:a4:f7:e6:4a:62:10:2f:38:04:fc:73:48:64:05:e4:c8:44: 96:28:c9:8a:79:c7:a4:0d:26:24:a0:3a:ed:51:55:0f:b2:52: 0c:86:ad:77:08:5e:8f:61:c8:d9:c8:fc:c7:b3:fc:4f:96:4c: d5:29:fc:77:4f:e7:c3:d8:e5:19:f6:d2:09:8b:9d:3a:ba:69: 3c:79:78:97:a3:2e:f7:ca:da:6a:16:14:36:54:4a:14:91:26: 96:f1:69:ba:7c:ee:d4:d1:4c:ad:f1:9e:e6:d0:cc:52:25:dc: 40:33:26:2d:ee:11:9d:4e:75:84:ff:28:06:9f:c3:18:b9:f5: e8:4c:37:d0:b4:02:8f:2a:76:f7:ee:d4:76:54:1f:78:55:f0: e4:3c:42:f9:00:d0:f9:e3:08:a0:de:22:54:1a:08:60:27:46: 5d:6e:d0:f6:75:ca:7e:40:b3:6f:a7:40:5f:a4:b1:3e:59:83: 4b:9c:c2:23:fb:8f:9f:3c:8e:59:b6:9a:52:b5:0c:59:91:d5: 53:92:6d:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ9xTD7xEkeSgj9XkLjxVVqrNMFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE5MDBFNDMxREY0Q0FERjVEODIyMEUxNzUzRENDQUQz QzE1NEVBMDAeFw0yNjA2MTMxNzQ2MDZaFw0yNjA2MTQxODIwMDZaMDMxMTAvBgNV BAMTKDk1QjAzNTAxOEUwMDk1QzQ0QTM5NjlEMDk2NjdBRjEzMjMwRjhBNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5NBiMspZjlkIKPGqJzUIqd78R +xO9Q9zbNOnElzz7rlTjF4kimhfYGnJV9GENG/6GAORuqnmHb3m8E9MeWo9SfAsJ oKX6110zSry01syDxYb0P2mcjosg6SQjqWPpAcO95sIRJ32JjmvBdstAlYBPAaF/ FUKv1MzGKq0eoJyzo1UB3HjyyFK5rXptmhwmug05vz9Y0ziTkLHSJRQZRj/uXs6Z +Yl8b7pH9tEIaWirZrCNyCfj6+QUVLOaa50hyYVIDrC5jIpTWyoXZA8G7a7ebqs2 yNdXbwaBWj2s+0AHvWaq5REXbDsuMYnaOFloiQTRLjNurIymAkn3Dmon438XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlbA1AY4AlcRKOWnQlmevEyMPimAwHwYDVR0j BBgwFoAUEZAOQx30yt9dgiDhdT3MrTwVTqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjk3Y2Y5YTAtZTkyNy00ODE0LTg0NDctOGIzYTAwMjc2MGE4LzAvMTE5MDBFNDMx REY0Q0FERjVEODIyMEUxNzUzRENDQUQzQzE1NEVBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTkwMEU0MzFERjRDQURGNUQ4MjIwRTE3NTNEQ0NBRDNDMTU0 RUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvMTE5MDBFNDMxREY0Q0FERjVEODIyMEUxNzUzREND QUQzQzE1NEVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwd6vWjEQxOuLXwqqD+HogLsDj43JikAGXK Ygjq8xRrhKheBIXGPMjqMAWDjwtdR1CcTDHI0omk9+ZKYhAvOAT8c0hkBeTIRJYo yYp5x6QNJiSgOu1RVQ+yUgyGrXcIXo9hyNnI/Mez/E+WTNUp/HdP58PY5Rn20gmL nTq6aTx5eJejLvfK2moWFDZUShSRJpbxabp87tTRTK3xnubQzFIl3EAzJi3uEZ1O dYT/KAafwxi59ehMN9C0Ao8qdvfu1HZUH3hV8OQ8QvkA0PnjCKDeIlQaCGAnRl1u 0PZ1yn5As2+nQF+ksT5Zg0ucwiP7j588jlm2mlK1DFmR1VOSbaQ= -----END CERTIFICATE-----Generated at Sat Jun 13 22:39:17 2026 by rpki-client