$ rpki-client -vvf rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft File: 91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft (raw, json) Hash identifier: H+q0HFcKLL03IvNHJEU46srB12SFl+0VgDFg4jt7Oi0= Subject key identifier: 93:E9:41:CB:82:EF:F2:D4:A3:FE:92:BF:09:60:6D:0E:D9:74:B2:DE Authority key identifier: 91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5 Certificate issuer: /CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5 Certificate serial: 56F8C5055D927C880791DC37D63BA643DC5DC920 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:52:17 +0000 Manifest this update: Tue 02 Jun 2026 21:47:17 +0000 Manifest next update: Wed 03 Jun 2026 23:08:17 +0000 Files and hashes: 1: 91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl (hash: 6m+QUy3Fv5Qk9Dd4PnadwwM9t2udbFX2qZF/XmxCU0k=) 2: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: SC10OytBie2MbXaqxSkSZEMl+ckzrKygzl2td6Lp/wc=) 3: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: 6Np+q+5XOW4vxlMbVGZKdZf5J6Gwh/BuKQFsPk2H03I=) 4: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: uikJ4h+kBmTlo/wV286gj8QmBKk/antrFLp6NHaL3Jo=) 5: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: XA8Mg7RR9LICJm4QVN9sHHYBGExGVWnRlfGuHZaWDXk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f8:c5:05:5d:92:7c:88:07:91:dc:37:d6:3b:a6:43:dc:5d:c9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5 Validity Not Before: Jun 2 21:47:17 2026 GMT Not After : Jun 3 23:08:17 2026 GMT Subject: CN=93E941CB82EFF2D4A3FE92BF09606D0ED974B2DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2a:c0:6b:a8:2c:75:f1:ec:a9:78:53:62:67: d9:34:a9:19:c2:2f:d2:ef:8f:55:77:9c:45:c7:bc: b9:24:49:38:54:e7:6b:2a:a0:42:71:d4:ef:ec:ce: 1c:15:e0:36:fd:99:b9:8b:23:4f:2d:64:5b:db:17: e0:c2:a1:0a:93:09:f3:b3:1d:d6:04:c0:ff:1c:2a: da:b4:89:f8:44:72:a0:e7:11:da:77:80:31:42:eb: c5:31:f0:01:c6:be:b9:f2:8f:59:f1:c9:10:a6:27: da:59:a1:22:c6:16:01:12:22:aa:67:39:04:c5:02: 09:59:fe:d5:04:5b:21:f9:91:d6:85:5c:f5:eb:06: 92:8f:d6:d1:6f:ca:83:5b:e9:cc:da:7f:b5:5b:94: 44:2a:7f:6d:77:cb:8c:30:a0:22:67:cc:17:37:69: 25:25:65:e0:47:e0:fa:d4:6a:a6:55:1c:fa:6a:85: e0:4d:ad:8b:7e:32:d2:d0:a6:27:de:e1:24:d1:6a: 3e:22:eb:00:fd:af:51:0f:1a:06:21:64:41:c1:f6: f4:bb:b2:c4:85:ff:0b:a9:d2:c7:d5:d3:4d:47:f0: 5e:6b:33:17:9b:12:91:2a:84:da:f5:c4:be:6d:59: 2c:f3:3a:af:85:99:eb:49:63:9c:01:5c:d2:5f:04: 9d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E9:41:CB:82:EF:F2:D4:A3:FE:92:BF:09:60:6D:0E:D9:74:B2:DE X509v3 Authority Key Identifier: keyid:91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:01:a0:01:67:3b:3c:29:d5:ab:6b:d4:8a:c7:3d:12:bc:61: 41:03:dd:41:e8:55:00:23:e8:e3:95:76:a9:57:c3:3f:e2:93: 71:16:52:99:13:a7:9e:f8:87:53:c0:65:83:87:53:ec:37:4f: 42:46:45:bc:a0:6c:bd:ef:2d:75:5e:8c:8f:21:89:80:51:9c: fd:16:62:38:87:62:29:7c:ec:ad:dc:a5:36:1b:c0:c8:e1:1d: 16:7b:07:24:5c:14:d5:e6:4e:03:04:d2:e2:85:b8:f6:d8:26: db:bc:a1:f2:5d:bc:1d:a3:a6:7d:ed:52:f6:84:35:68:5d:e3: 00:61:7c:e4:de:f7:b0:85:97:83:3a:a1:6a:d1:a7:50:05:9d: 07:61:ee:b0:9d:1b:fb:cb:57:71:84:f7:84:d0:b3:72:50:e7: 5c:0d:f0:1a:31:a9:95:eb:bb:db:c7:ff:5b:b5:52:cc:fa:aa: fb:00:57:a0:61:d5:ee:75:15:fe:d5:a8:54:bb:b1:41:60:ac: 84:e4:ea:b5:db:1e:3b:24:51:a9:c4:0c:2c:2b:6c:1d:0c:d8: ed:34:05:12:9c:44:05:05:c1:83:2a:82:d7:57:ee:09:9b:65: 40:e9:7f:60:5c:c6:27:35:88:10:cc:92:f1:86:9c:9e:21:fa: fd:8e:c3:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVvjFBV2SfIgHkdw31jumQ9xdySAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTExOTZBOThGRTJFMjIzNkJCNjVDRTI4RENCNTkyM0U1 NTFDOUNBNTAeFw0yNjA2MDIyMTQ3MTdaFw0yNjA2MDMyMzA4MTdaMDMxMTAvBgNV BAMTKDkzRTk0MUNCODJFRkYyRDRBM0ZFOTJCRjA5NjA2RDBFRDk3NEIyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoKsBrqCx18eypeFNiZ9k0qRnC L9Lvj1V3nEXHvLkkSThU52sqoEJx1O/szhwV4Db9mbmLI08tZFvbF+DCoQqTCfOz HdYEwP8cKtq0ifhEcqDnEdp3gDFC68Ux8AHGvrnyj1nxyRCmJ9pZoSLGFgESIqpn OQTFAglZ/tUEWyH5kdaFXPXrBpKP1tFvyoNb6czaf7VblEQqf213y4wwoCJnzBc3 aSUlZeBH4PrUaqZVHPpqheBNrYt+MtLQpife4STRaj4i6wD9r1EPGgYhZEHB9vS7 ssSF/wup0sfV001H8F5rMxebEpEqhNr1xL5tWSzzOq+FmetJY5wBXNJfBJ3ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk+lBy4Lv8tSj/pK/CWBtDtl0st4wHwYDVR0j BBgwFoAUkRlqmP4uIja7Zc4o3LWSPlUcnKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU1M2VkYWItNGEzZC00NGU0LThkOTYtNjI1YTFjMjAzNzhkLzAvOTExOTZBOThG RTJFMjIzNkJCNjVDRTI4RENCNTkyM0U1NTFDOUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTE5NkE5OEZFMkUyMjM2QkI2NUNFMjhEQ0I1OTIzRTU1MUM5 Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk OTYtNjI1YTFjMjAzNzhkLzAvOTExOTZBOThGRTJFMjIzNkJCNjVDRTI4RENCNTky M0U1NTFDOUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgBoAFnOzwp1atr1IrHPRK8YUED3UHoVQAj 6OOVdqlXwz/ik3EWUpkTp574h1PAZYOHU+w3T0JGRbygbL3vLXVejI8hiYBRnP0W YjiHYil87K3cpTYbwMjhHRZ7ByRcFNXmTgME0uKFuPbYJtu8ofJdvB2jpn3tUvaE NWhd4wBhfOTe97CFl4M6oWrRp1AFnQdh7rCdG/vLV3GE94TQs3JQ51wN8BoxqZXr u9vH/1u1Usz6qvsAV6Bh1e51Ff7VqFS7sUFgrITk6rXbHjskUanEDCwrbB0M2O00 BRKcRAUFwYMqgtdX7gmbZUDpf2Bcxic1iBDMkvGGnJ4h+v2Owxg= -----END CERTIFICATE-----Generated at Wed Jun 3 04:09:06 2026 by rpki-client