$ rpki-client -vvf rpki-rsync.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.mft File: 91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.mft (raw, json) Hash identifier: xmT/l6VEgry2T3IH/oHJDoJAXoaXCc/XT3QEEu1E8YU= Subject key identifier: B1:D9:46:B9:5A:48:9C:35:F5:A3:4B:8A:11:89:5C:E8:0E:D8:C1:A5 Authority key identifier: 91:68:3C:0C:0C:29:89:A9:F5:9C:3D:00:EE:C5:0C:6C:FD:30:27:9B Certificate issuer: /CN=91683C0C0C2989A9F59C3D00EEC50C6CFD30279B Certificate serial: 69CC5171A65B3D73762CFA92F5C14A9166CE855F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.mft Manifest number: 29 Signing time: Tue 02 Jun 2026 07:14:07 +0000 Manifest this update: Tue 02 Jun 2026 07:09:07 +0000 Manifest next update: Wed 03 Jun 2026 11:11:07 +0000 Files and hashes: 1: 91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.crl (hash: xkYHxBw3X4QivRyOt5WCn+NeBCdT2R/TBKQzz5Uy5OI=) 2: 3130332e3137362e3138322e302f32332d3234203d3e20313437313332.roa (hash: qojtjE9o52vzXHMZCgvkvLBCgGKTsugY41lPAH2vlqA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.crl rsync://rpki-rsync.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:cc:51:71:a6:5b:3d:73:76:2c:fa:92:f5:c1:4a:91:66:ce:85:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91683C0C0C2989A9F59C3D00EEC50C6CFD30279B Validity Not Before: Jun 2 07:09:07 2026 GMT Not After : Jun 3 11:11:07 2026 GMT Subject: CN=B1D946B95A489C35F5A34B8A11895CE80ED8C1A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:08:a0:55:a9:03:79:0b:ce:fd:6d:c5:c8:56: f1:72:68:e0:34:51:bf:ed:00:03:8c:ef:f2:9d:47: 5d:93:ec:f2:85:ff:7c:c9:85:57:56:47:a7:2d:3b: 6c:2c:99:a2:9c:45:24:48:82:64:42:d4:3c:bd:82: 71:f5:ca:eb:d2:69:64:d9:e6:7b:71:82:17:bd:0d: 49:04:50:2c:35:7a:0d:c3:f7:5c:02:8d:03:29:65: 3f:1e:32:77:cc:ff:ff:32:7f:4e:82:d7:ac:1b:7d: d2:22:6b:08:a8:3f:48:cd:d4:a4:00:da:50:4a:e3: 6c:0f:42:89:fb:f8:4e:db:23:6e:21:77:f3:ed:20: 46:e3:38:7f:dc:1a:5e:f7:15:2f:d5:96:17:4f:d2: 88:98:42:60:07:e3:b4:63:24:cd:b9:34:d6:f4:a6: 81:b6:a3:8b:13:a4:89:d2:3f:84:14:76:cb:20:57: d0:4a:56:e5:b9:fc:ef:a2:79:44:98:f7:2c:29:b3: fd:52:21:e2:36:ab:15:7b:24:45:75:4b:f2:43:c1: 9c:a3:c9:d4:0d:9a:63:55:55:fd:f7:4f:42:6a:3a: b4:ba:23:c4:2e:48:45:0c:d6:c0:7c:ef:0c:1a:1b: 22:1f:dc:a9:3a:74:14:e9:f1:6d:cd:72:e6:f3:24: 51:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D9:46:B9:5A:48:9C:35:F5:A3:4B:8A:11:89:5C:E8:0E:D8:C1:A5 X509v3 Authority Key Identifier: keyid:91:68:3C:0C:0C:29:89:A9:F5:9C:3D:00:EE:C5:0C:6C:FD:30:27:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:29:1a:b6:07:4c:c9:76:63:53:61:97:5a:27:9f:45:92:95: 9d:92:8b:d4:c2:b1:7e:57:60:38:54:3f:20:c7:8b:1b:83:02: 24:28:37:a9:4d:39:19:37:f4:fd:61:93:60:fc:aa:4f:c1:d9: 1a:27:25:a1:6a:92:ff:8d:83:7a:a2:be:3b:67:88:e6:d8:b4: 74:5b:40:04:51:48:9b:fa:47:66:4d:7c:ef:7f:a3:3f:3e:09: b5:3c:11:b9:ff:50:e6:00:f8:20:df:d3:34:c5:f1:22:0b:1e: 54:aa:f7:83:3d:a7:3c:79:72:dd:ec:54:cd:60:67:a5:70:c7: 48:54:bf:6e:5f:97:b0:b1:e6:85:f2:50:60:74:02:aa:5d:ec: d2:ab:5a:82:81:d7:61:22:98:f1:2e:10:f7:2b:32:4b:bb:e3: 2b:eb:46:bd:77:ae:91:7f:fd:cd:f9:48:6d:78:3b:3d:46:3b: 68:7d:4a:87:da:8c:d1:66:4a:da:73:d1:32:ea:43:c7:1b:4a: f8:5b:03:f9:ae:cc:1d:75:4b:2c:40:18:ce:09:ed:84:c7:5a: 8c:d2:8f:a1:52:8c:44:f1:c0:c2:7d:00:4f:ad:6e:b7:66:95: 83:c0:19:5a:17:7c:25:d5:d5:51:49:b9:e1:c2:f7:68:77:e6: 3c:c3:0e:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUacxRcaZbPXN2LPqS9cFKkWbOhV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2ODNDMEMwQzI5ODlBOUY1OUMzRDAwRUVDNTBDNkNG RDMwMjc5QjAeFw0yNjA2MDIwNzA5MDdaFw0yNjA2MDMxMTExMDdaMDMxMTAvBgNV BAMTKEIxRDk0NkI5NUE0ODlDMzVGNUEzNEI4QTExODk1Q0U4MEVEOEMxQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOCKBVqQN5C879bcXIVvFyaOA0 Ub/tAAOM7/KdR12T7PKF/3zJhVdWR6ctO2wsmaKcRSRIgmRC1Dy9gnH1yuvSaWTZ 5ntxghe9DUkEUCw1eg3D91wCjQMpZT8eMnfM//8yf06C16wbfdIiawioP0jN1KQA 2lBK42wPQon7+E7bI24hd/PtIEbjOH/cGl73FS/VlhdP0oiYQmAH47RjJM25NNb0 poG2o4sTpInSP4QUdssgV9BKVuW5/O+ieUSY9ywps/1SIeI2qxV7JEV1S/JDwZyj ydQNmmNVVf33T0JqOrS6I8QuSEUM1sB87wwaGyIf3Kk6dBTp8W3NcubzJFGHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsdlGuVpInDX1o0uKEYlc6A7YwaUwHwYDVR0j BBgwFoAUkWg8DAwpian1nD0A7sUMbP0wJ5swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBlNmZkODEtYjg3Ny00ZjdjLWFiYzYtMDgyZmNiZWExODlmLzAvOTE2ODNDMEMw QzI5ODlBOUY1OUMzRDAwRUVDNTBDNkNGRDMwMjc5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTY4M0MwQzBDMjk4OUE5RjU5QzNEMDBFRUM1MEM2Q0ZEMzAy NzlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzBlNmZkODEtYjg3Ny00ZjdjLWFi YzYtMDgyZmNiZWExODlmLzAvOTE2ODNDMEMwQzI5ODlBOUY1OUMzRDAwRUVDNTBD NkNGRDMwMjc5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUpGrYHTMl2Y1Nhl1onn0WSlZ2Si9TCsX5X YDhUPyDHixuDAiQoN6lNORk39P1hk2D8qk/B2RonJaFqkv+Ng3qivjtniObYtHRb QARRSJv6R2ZNfO9/oz8+CbU8Ebn/UOYA+CDf0zTF8SILHlSq94M9pzx5ct3sVM1g Z6Vwx0hUv25fl7Cx5oXyUGB0Aqpd7NKrWoKB12EimPEuEPcrMku74yvrRr13rpF/ /c35SG14Oz1GO2h9SofajNFmStpz0TLqQ8cbSvhbA/muzB11SyxAGM4J7YTHWozS j6FSjETxwMJ9AE+tbrdmlYPAGVoXfCXV1VFJueHC92h35jzDDnE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:44 2026 by rpki-client