$ rpki-client -vvf rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft File: 91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft (raw, json) Hash identifier: hd1YVH86rRxf+FymmvGU9k+SnJ0qq8nGu53V7nbds60= Subject key identifier: 56:45:AA:81:52:D6:35:55:E3:E3:B0:D4:F2:60:8D:11:0F:28:CE:8B Authority key identifier: 91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9 Certificate issuer: /CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9 Certificate serial: 0F35034FA232EA4B0F77078DCE839018A5111B1D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 03:54:31 +0000 Manifest this update: Sat 20 Jun 2026 03:49:31 +0000 Manifest next update: Sun 21 Jun 2026 05:35:31 +0000 Files and hashes: 1: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: wfUQ37XeOGm7jzZpf2FPTMaP2YK1PBiPpRHVJZh3ugQ=) 2: 91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl (hash: CNJgHp8uEJYuKkha0UcSANBLBIpspDSjqxpUxQsjbG4=) 3: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: k+fN663QoGkAVafLC19nOM8MyT5BZaDIktaNW/yCe7M=) 4: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: jIh+jw53Ys2p6MNmWuM3k5khpTf8/hkKVSJ8JJmzh6w=) 5: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: wnLMTQk8SQ7lV0/M9rjyfzbhdbpAXWWgoE3gZvCji1E=) 6: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: 9UFc5/2EEKBmLJRS06htYDtGWMCExY3p8nIYkJcd4QM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 05:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:35:03:4f:a2:32:ea:4b:0f:77:07:8d:ce:83:90:18:a5:11:1b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9 Validity Not Before: Jun 20 03:49:31 2026 GMT Not After : Jun 21 05:35:31 2026 GMT Subject: CN=5645AA8152D63555E3E3B0D4F2608D110F28CE8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:47:6b:17:3e:7b:ac:8f:85:2e:1f:27:1d:ed: 5a:ca:34:d1:12:c1:57:92:b6:37:bb:5d:b5:ee:1d: d3:ff:f6:60:f4:af:24:7b:80:46:b4:1b:b8:ff:9c: fe:e3:09:c8:1b:d0:a1:72:18:78:b7:64:16:a5:e8: f6:53:cc:ec:71:63:d2:c3:ad:51:54:97:8d:52:72: 3d:e3:13:e4:7b:a1:4e:94:54:e6:9d:41:e4:fd:47: 36:46:bd:f1:99:a8:ed:ef:a7:4a:9e:dd:f2:ba:5a: b8:bd:03:4e:dc:88:45:88:8a:81:02:e7:c2:38:59: 5e:a7:bc:e8:06:e5:f1:91:18:34:16:18:2a:5e:c7: ad:66:08:ec:cb:3f:54:fe:d5:d0:3a:4a:ce:ac:3a: 36:ba:48:1c:ec:d7:0e:a5:5c:97:7d:b2:4c:bd:c8: c0:87:bc:0b:62:dc:fd:d1:cf:e5:79:dd:92:26:80: 1f:23:19:d7:f1:ed:e7:c4:3a:37:31:b4:60:27:e9: 14:45:c5:1d:3a:03:27:de:0f:38:8e:35:b8:d2:8a: 2e:c1:3c:10:b7:a6:ab:30:f0:30:01:08:0e:5f:29: 6c:90:9a:c4:24:d4:4e:55:7a:13:8e:22:1a:b8:00: e8:a4:9f:ed:95:a6:cf:3c:e4:86:fd:28:0c:04:94: d6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:45:AA:81:52:D6:35:55:E3:E3:B0:D4:F2:60:8D:11:0F:28:CE:8B X509v3 Authority Key Identifier: keyid:91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:3a:06:14:31:3f:3c:e6:81:d1:9e:52:64:55:91:ed:8a:dd: 18:74:6b:0e:eb:87:1c:e8:32:cb:76:dd:21:b0:94:0f:ad:29: 1b:a1:5a:67:4d:3a:1d:aa:2b:15:ca:88:bb:87:fd:f1:0d:8a: e1:a9:ff:95:f4:38:c6:bb:f3:08:06:fb:93:1f:0d:5b:e4:2f: 84:4a:56:24:f7:72:6d:e6:7a:3e:46:06:28:a8:87:c4:2d:2c: 18:97:d9:af:09:d8:4d:48:80:f2:e9:36:f1:4c:ec:fd:fd:8e: 35:97:ce:56:03:da:bf:14:87:e2:d4:3a:72:3b:72:89:3d:f7: ba:0b:5d:43:e3:47:17:90:02:09:ff:7d:e4:4f:35:cb:23:db: cd:98:a6:54:f1:81:40:a4:ea:43:b4:1f:79:7a:3f:e0:34:92: 08:95:c8:af:1f:03:22:c7:40:fe:4b:ea:68:fd:12:81:97:60: 39:a2:7e:75:a7:6a:13:1f:9f:f6:85:d5:81:f3:f2:df:d0:7f: 28:c4:19:bc:34:12:93:e5:12:9f:ef:bf:55:bd:c6:b5:00:c4: 98:8e:d3:50:f2:9c:78:41:60:1d:b5:fb:5a:a0:da:2e:68:d4: 8b:f0:b6:e9:ba:99:66:91:c3:ed:7d:37:d6:23:85:b7:f7:5b: b6:fb:47:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDzUDT6Iy6ksPdweNzoOQGKURGx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTEyMzRFQjE5NUUxOTc4MzBBRjc1QTZFQ0I2RDU4M0RG RjRBQjlCOTAeFw0yNjA2MjAwMzQ5MzFaFw0yNjA2MjEwNTM1MzFaMDMxMTAvBgNV BAMTKDU2NDVBQTgxNTJENjM1NTVFM0UzQjBENEYyNjA4RDExMEYyOENFOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDR2sXPnusj4UuHycd7VrKNNES wVeStje7XbXuHdP/9mD0ryR7gEa0G7j/nP7jCcgb0KFyGHi3ZBal6PZTzOxxY9LD rVFUl41Scj3jE+R7oU6UVOadQeT9RzZGvfGZqO3vp0qe3fK6Wri9A07ciEWIioEC 58I4WV6nvOgG5fGRGDQWGCpex61mCOzLP1T+1dA6Ss6sOja6SBzs1w6lXJd9sky9 yMCHvAti3P3Rz+V53ZImgB8jGdfx7efEOjcxtGAn6RRFxR06AyfeDziONbjSii7B PBC3pqsw8DABCA5fKWyQmsQk1E5VehOOIhq4AOikn+2Vps885Ib9KAwElNaZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVkWqgVLWNVXj47DU8mCNEQ8ozoswHwYDVR0j BBgwFoAUkSNOsZXhl4MK91puy21YPf9KubkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmZjOTA5NmMtMjhkYy00NGU0LWI0Y2YtOTZkNjMxYjczYWMwLzAvOTEyMzRFQjE5 NUUxOTc4MzBBRjc1QTZFQ0I2RDU4M0RGRjRBQjlCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTIzNEVCMTk1RTE5NzgzMEFGNzVBNkVDQjZENTgzREZGNEFC OUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmZjOTA5NmMtMjhkYy00NGU0LWI0 Y2YtOTZkNjMxYjczYWMwLzAvOTEyMzRFQjE5NUUxOTc4MzBBRjc1QTZFQ0I2RDU4 M0RGRjRBQjlCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAk6BhQxPzzmgdGeUmRVke2K3Rh0aw7rhxzo Mst23SGwlA+tKRuhWmdNOh2qKxXKiLuH/fENiuGp/5X0OMa78wgG+5MfDVvkL4RK ViT3cm3mej5GBiioh8QtLBiX2a8J2E1IgPLpNvFM7P39jjWXzlYD2r8Uh+LUOnI7 cok997oLXUPjRxeQAgn/feRPNcsj282YplTxgUCk6kO0H3l6P+A0kgiVyK8fAyLH QP5L6mj9EoGXYDmifnWnahMfn/aF1YHz8t/QfyjEGbw0EpPlEp/vv1W9xrUAxJiO 01DynHhBYB21+1qg2i5o1Ivwtum6mWaRw+19N9Yjhbf3W7b7R8U= -----END CERTIFICATE-----Generated at Sat Jun 20 16:55:15 2026 by rpki-client