$ rpki-client -vvf rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft File: 91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft (raw, json) Hash identifier: DfW5W1brKV95extXZc/czMS+rTIrtGolM/kaBrHD6CA= Subject key identifier: 86:ED:7C:9F:5D:83:51:69:28:49:7E:8E:7F:95:27:3B:8D:48:18:4D Authority key identifier: 91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5 Certificate issuer: /CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5 Certificate serial: 11640572BD490F90920C651D1D2A12F1030572F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 10:06:01 +0000 Manifest this update: Sat 13 Jun 2026 10:01:01 +0000 Manifest next update: Sun 14 Jun 2026 11:58:01 +0000 Files and hashes: 1: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: uikJ4h+kBmTlo/wV286gj8QmBKk/antrFLp6NHaL3Jo=) 2: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: XA8Mg7RR9LICJm4QVN9sHHYBGExGVWnRlfGuHZaWDXk=) 3: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: SC10OytBie2MbXaqxSkSZEMl+ckzrKygzl2td6Lp/wc=) 4: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: 6Np+q+5XOW4vxlMbVGZKdZf5J6Gwh/BuKQFsPk2H03I=) 5: 91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl (hash: G03ixVK/5sRxZntuFkC7xLlo5B7RYlgbBC8Za7gMqcs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 11:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:64:05:72:bd:49:0f:90:92:0c:65:1d:1d:2a:12:f1:03:05:72:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5 Validity Not Before: Jun 13 10:01:01 2026 GMT Not After : Jun 14 11:58:01 2026 GMT Subject: CN=86ED7C9F5D83516928497E8E7F95273B8D48184D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1c:1a:c8:cf:c2:ee:ea:58:0e:b5:92:ab:f0: ce:96:82:41:60:c8:2c:83:d1:d3:55:50:db:81:03: 60:a7:2a:24:12:db:48:10:9b:0b:a6:4c:ce:0c:1f: 26:8b:ec:cb:81:76:a0:31:9c:73:b6:e9:b5:c6:4c: 2c:e3:24:ab:13:2f:4b:37:22:0a:02:f4:7d:42:df: f0:ea:bc:45:02:c4:5f:7d:cb:48:6e:42:cf:7f:91: 8b:53:45:c8:4f:ec:de:07:49:a3:a8:1e:2b:f8:25: c5:a9:64:c7:91:82:5d:db:48:38:ea:43:b9:d4:37: e7:41:47:b2:e8:75:1a:75:70:38:48:99:9a:d3:9d: 2b:b7:c7:f4:6e:bd:6c:42:19:a7:10:31:56:7d:98: 0a:ce:bd:dc:49:64:9d:a9:fb:03:1d:6d:a2:16:9d: 75:09:81:72:e3:f7:ac:78:1c:46:24:a4:19:2e:32: 9c:65:75:d6:91:12:61:d4:0f:56:5f:61:33:e2:8f: 81:02:88:19:fc:b8:f9:69:83:3c:0e:8c:24:b8:f6: 78:bf:49:11:24:13:17:ae:e5:3d:41:3d:7d:e7:e2: 86:81:dc:69:bb:75:0b:63:19:4c:96:4a:db:49:22: 92:a5:4e:c6:e9:e8:5d:d1:18:8a:2f:df:d5:b3:e0: e1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:ED:7C:9F:5D:83:51:69:28:49:7E:8E:7F:95:27:3B:8D:48:18:4D X509v3 Authority Key Identifier: keyid:91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:7f:71:c6:bb:e3:3d:5e:2d:ec:8a:5b:0a:b0:ad:69:74:94: ef:dc:0e:61:97:09:16:a2:c6:2f:7c:82:ba:92:6c:f0:bd:52: d6:1e:aa:a4:49:8b:00:ae:ab:bb:a7:6e:60:50:b9:44:c4:0a: c6:40:69:f6:a5:c8:a4:08:dd:b3:0b:af:d8:41:45:f2:c6:e7: 27:c2:cb:c1:4e:b6:60:d3:91:28:46:46:21:c9:00:69:41:6a: 46:2e:37:d4:e3:e7:f5:fb:85:39:2f:1f:94:c0:32:22:79:d4: ec:84:7c:6f:b4:e7:fd:c2:b8:16:2a:42:9a:53:59:0f:a1:ef: 64:69:02:c8:28:40:ad:9a:d7:f8:ea:2d:b3:ac:5c:29:bb:ad: 5a:35:34:06:71:8f:34:6b:29:58:63:0c:76:cc:28:b9:a5:d0: f1:9f:1f:b5:65:b5:6f:d4:5c:fa:12:e2:6c:5d:4b:f7:4c:fb: 18:08:72:4a:aa:73:26:9d:9a:e2:77:91:4a:bf:70:6e:c3:d2: 63:79:b9:1a:87:da:38:ce:c6:b6:cb:f1:18:9d:3d:b2:0d:31: c2:53:9c:d3:8f:28:03:6c:37:e0:58:a3:d3:e7:e9:89:ab:e7: c1:7a:bf:e5:e6:3a:47:03:07:33:cd:dc:99:1a:29:6b:64:94: c2:0f:86:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEWQFcr1JD5CSDGUdHSoS8QMFcvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTExOTZBOThGRTJFMjIzNkJCNjVDRTI4RENCNTkyM0U1 NTFDOUNBNTAeFw0yNjA2MTMxMDAxMDFaFw0yNjA2MTQxMTU4MDFaMDMxMTAvBgNV BAMTKDg2RUQ3QzlGNUQ4MzUxNjkyODQ5N0U4RTdGOTUyNzNCOEQ0ODE4NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFHBrIz8Lu6lgOtZKr8M6WgkFg yCyD0dNVUNuBA2CnKiQS20gQmwumTM4MHyaL7MuBdqAxnHO26bXGTCzjJKsTL0s3 IgoC9H1C3/DqvEUCxF99y0huQs9/kYtTRchP7N4HSaOoHiv4JcWpZMeRgl3bSDjq Q7nUN+dBR7LodRp1cDhImZrTnSu3x/RuvWxCGacQMVZ9mArOvdxJZJ2p+wMdbaIW nXUJgXLj96x4HEYkpBkuMpxlddaREmHUD1ZfYTPij4ECiBn8uPlpgzwOjCS49ni/ SREkExeu5T1BPX3n4oaB3Gm7dQtjGUyWSttJIpKlTsbp6F3RGIov39Wz4OEZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhu18n12DUWkoSX6Of5UnO41IGE0wHwYDVR0j BBgwFoAUkRlqmP4uIja7Zc4o3LWSPlUcnKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU1M2VkYWItNGEzZC00NGU0LThkOTYtNjI1YTFjMjAzNzhkLzAvOTExOTZBOThG RTJFMjIzNkJCNjVDRTI4RENCNTkyM0U1NTFDOUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTE5NkE5OEZFMkUyMjM2QkI2NUNFMjhEQ0I1OTIzRTU1MUM5 Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk OTYtNjI1YTFjMjAzNzhkLzAvOTExOTZBOThGRTJFMjIzNkJCNjVDRTI4RENCNTky M0U1NTFDOUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJ/cca74z1eLeyKWwqwrWl0lO/cDmGXCRai xi98grqSbPC9UtYeqqRJiwCuq7unbmBQuUTECsZAafalyKQI3bMLr9hBRfLG5yfC y8FOtmDTkShGRiHJAGlBakYuN9Tj5/X7hTkvH5TAMiJ51OyEfG+05/3CuBYqQppT WQ+h72RpAsgoQK2a1/jqLbOsXCm7rVo1NAZxjzRrKVhjDHbMKLml0PGfH7VltW/U XPoS4mxdS/dM+xgIckqqcyadmuJ3kUq/cG7D0mN5uRqH2jjOxrbL8RidPbINMcJT nNOPKANsN+BYo9Pn6Ymr58F6v+XmOkcDBzPN3JkaKWtklMIPhhA= -----END CERTIFICATE-----Generated at Sat Jun 13 21:52:10 2026 by rpki-client