$ rpki-client -vvf rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft File: 11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft (raw, json) Hash identifier: 4pn1Hyd/7Y00cDkP1a6kV57U2ky9JwBABvtJhmBMCNM= Subject key identifier: B8:23:16:95:CF:94:8A:28:20:0A:E1:9B:A8:44:B7:40:AB:B9:AB:FB Authority key identifier: 11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0 Certificate issuer: /CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0 Certificate serial: 5A4BC7A6B4A171E6C3642917ADFB1CD32F56EA40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 12:35:34 +0000 Manifest this update: Tue 02 Jun 2026 12:30:34 +0000 Manifest next update: Wed 03 Jun 2026 13:46:34 +0000 Files and hashes: 1: 11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl (hash: RaBwtTLQbZ0s/0QaIHhX/jf5xd0S2UI3GAwB1xG70y8=) 2: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: W3s/SdESd03hapvVNS8Tej6LatNo1tGxXixL2qrpljI=) 3: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: 50fnO1/znCwvGbIxgziShFyETpxwE5iSmjctpgUo0sk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 13:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:4b:c7:a6:b4:a1:71:e6:c3:64:29:17:ad:fb:1c:d3:2f:56:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11900E431DF4CADF5D8220E1753DCCAD3C154EA0 Validity Not Before: Jun 2 12:30:34 2026 GMT Not After : Jun 3 13:46:34 2026 GMT Subject: CN=B8231695CF948A28200AE19BA844B740ABB9ABFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d9:66:30:35:84:32:df:4e:32:25:f3:99:41: b5:0f:b9:df:4c:d2:a6:fb:fc:39:53:95:f0:40:ea: 71:3e:28:26:f3:34:35:5e:95:c9:55:6f:6c:6e:d4: 43:59:2d:40:b8:7b:c1:78:0c:44:eb:28:ab:6d:8e: a6:cb:06:51:03:2b:d0:68:e8:c5:4e:11:e8:c7:4f: 6b:43:61:20:8c:cd:3e:5e:c8:91:ff:ba:b5:b0:73: d7:de:b9:11:1d:a2:93:8f:e0:dc:d8:97:31:0d:00: fd:5f:0b:06:bd:ef:c4:a5:62:15:3c:0d:19:b7:c5: bc:b1:86:58:57:7b:35:74:65:a9:68:d4:95:62:8c: 1b:6f:af:3a:66:e7:32:c8:31:90:15:b5:78:c6:76: 5c:8b:54:18:06:19:fb:09:76:7e:b7:62:96:6f:eb: 5f:b1:4a:c2:85:35:62:cd:6d:6f:f1:8b:ed:9d:33: 23:00:15:4d:ab:28:69:82:b7:d4:34:e6:fe:09:05: f7:b5:f3:bd:0b:63:8c:f7:75:dd:2a:52:0b:80:57: 3e:bf:28:0e:5e:f9:58:e0:32:ac:01:ec:a2:1a:72: 45:83:8e:1d:a4:20:b3:8e:4e:e1:a1:db:db:52:6a: b7:e5:3a:40:bd:df:f2:bd:40:e1:8f:60:14:fc:16: c2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:23:16:95:CF:94:8A:28:20:0A:E1:9B:A8:44:B7:40:AB:B9:AB:FB X509v3 Authority Key Identifier: keyid:11:90:0E:43:1D:F4:CA:DF:5D:82:20:E1:75:3D:CC:AD:3C:15:4E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/11900E431DF4CADF5D8220E1753DCCAD3C154EA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:96:c6:7f:7a:52:54:2b:09:fe:d6:f6:8a:9c:0d:97:ef:21: 41:47:d0:71:9e:21:33:93:cd:ea:b0:9b:90:91:fe:ea:cc:3b: ad:f5:c7:44:3e:8e:f9:79:af:3d:a7:11:cc:f0:19:cb:e9:42: c9:cd:c6:74:78:47:88:e6:e0:ff:8a:6d:2c:84:04:e2:5d:19: 67:ce:cc:75:39:31:e9:3d:06:5c:16:0c:24:d9:18:1a:6e:0d: ce:6e:51:a1:b5:ce:ce:73:ae:c7:6a:8c:59:11:67:b2:50:2b: ec:04:4f:e0:fe:e5:50:93:ee:32:79:eb:aa:a2:20:7e:39:b6: a2:c5:61:02:96:a6:94:67:0c:ad:28:b4:07:29:58:3d:e8:71: b9:df:9c:97:79:7f:cb:82:4f:db:3b:5a:f6:44:3c:02:67:2c: d6:bc:95:0a:44:86:54:af:7e:7d:4c:73:64:db:e9:a9:4d:77: 7f:46:a7:0b:a0:9b:89:8d:6a:64:ce:50:4b:e2:3a:ca:bc:37: a8:7f:eb:9c:b6:d0:b0:2c:bd:ec:4e:76:89:1a:2b:8f:c1:25: ff:f1:2f:fa:d1:f8:d2:38:bd:39:fb:e2:59:e1:1a:e8:10:04: 11:6f:22:7b:98:e9:a9:a0:5f:86:06:d4:16:fc:77:ca:fb:32: fa:1c:74:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWkvHprShcebDZCkXrfsc0y9W6kAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE5MDBFNDMxREY0Q0FERjVEODIyMEUxNzUzRENDQUQz QzE1NEVBMDAeFw0yNjA2MDIxMjMwMzRaFw0yNjA2MDMxMzQ2MzRaMDMxMTAvBgNV BAMTKEI4MjMxNjk1Q0Y5NDhBMjgyMDBBRTE5QkE4NDRCNzQwQUJCOUFCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG2WYwNYQy304yJfOZQbUPud9M 0qb7/DlTlfBA6nE+KCbzNDVelclVb2xu1ENZLUC4e8F4DETrKKttjqbLBlEDK9Bo 6MVOEejHT2tDYSCMzT5eyJH/urWwc9feuREdopOP4NzYlzENAP1fCwa978SlYhU8 DRm3xbyxhlhXezV0Zalo1JVijBtvrzpm5zLIMZAVtXjGdlyLVBgGGfsJdn63YpZv 61+xSsKFNWLNbW/xi+2dMyMAFU2rKGmCt9Q05v4JBfe1870LY4z3dd0qUguAVz6/ KA5e+VjgMqwB7KIackWDjh2kILOOTuGh29tSarflOkC93/K9QOGPYBT8FsIHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuCMWlc+UiiggCuGbqES3QKu5q/swHwYDVR0j BBgwFoAUEZAOQx30yt9dgiDhdT3MrTwVTqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjk3Y2Y5YTAtZTkyNy00ODE0LTg0NDctOGIzYTAwMjc2MGE4LzAvMTE5MDBFNDMx REY0Q0FERjVEODIyMEUxNzUzRENDQUQzQzE1NEVBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMTkwMEU0MzFERjRDQURGNUQ4MjIwRTE3NTNEQ0NBRDNDMTU0 RUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvMTE5MDBFNDMxREY0Q0FERjVEODIyMEUxNzUzREND QUQzQzE1NEVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuWxn96UlQrCf7W9oqcDZfvIUFH0HGeITOT zeqwm5CR/urMO631x0Q+jvl5rz2nEczwGcvpQsnNxnR4R4jm4P+KbSyEBOJdGWfO zHU5Mek9BlwWDCTZGBpuDc5uUaG1zs5zrsdqjFkRZ7JQK+wET+D+5VCT7jJ566qi IH45tqLFYQKWppRnDK0otAcpWD3ocbnfnJd5f8uCT9s7WvZEPAJnLNa8lQpEhlSv fn1Mc2Tb6alNd39Gpwugm4mNamTOUEviOsq8N6h/65y20LAsvexOdokaK4/BJf/x L/rR+NI4vTn74lnhGugQBBFvInuY6amgX4YG1Bb8d8r7MvocdLs= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:56 2026 by rpki-client