$ rpki-client -vvf rpki-rsync.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.mft File: 910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.mft (raw, json) Hash identifier: d8E+P45JlrtmBMPE6QxfTW2ArOn9Ep8so6A1DdwrA6w= Subject key identifier: DD:C9:5E:89:E8:55:3B:51:B1:58:B2:1B:74:2E:A0:32:65:F8:95:E0 Authority key identifier: 91:0B:BD:8E:DE:1B:FA:0D:6C:FE:B0:37:EA:0D:54:85:D7:3D:C0:B6 Certificate issuer: /CN=910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6 Certificate serial: 3CD63AF91BAAB6167FF07AADE9D0120740514609 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.mft Manifest number: 11 Signing time: Thu 14 May 2026 04:36:11 +0000 Manifest this update: Thu 14 May 2026 04:31:11 +0000 Manifest next update: Fri 15 May 2026 08:01:11 +0000 Files and hashes: 1: 910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.crl (hash: 9bZx7ToH8mZISnUjTvvmC5edWc6bR26B2eRdUyV8C38=) 2: 3130332e3135362e3231372e302f32342d3234203d3e203538333639.roa (hash: 7e0kueZvukBaw/w+2U3am34yJGnMeR4ZQpPBC80ggF4=) 3: 3130332e3135362e3231362e302f32342d3234203d3e203538333639.roa (hash: uEwJ39Esd5UK0/qDEB/17rp/+8xbpISLdutBSs4AKYk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.crl rsync://rpki-rsync.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 May 2026 03:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d6:3a:f9:1b:aa:b6:16:7f:f0:7a:ad:e9:d0:12:07:40:51:46:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6 Validity Not Before: May 14 04:31:11 2026 GMT Not After : May 15 08:01:11 2026 GMT Subject: CN=DDC95E89E8553B51B158B21B742EA03265F895E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:6b:06:9f:84:4f:05:89:85:e7:25:2f:38: 5c:f2:2b:c6:1b:46:91:31:92:ab:e6:ff:20:ab:5b: f8:70:dd:41:3e:62:de:e4:ef:8b:18:0e:9d:f2:a4: 7a:a3:0c:e6:84:35:b5:ba:d8:d4:27:40:f5:b3:b7: 44:51:20:b3:8e:39:07:3d:ef:9d:8f:e7:6c:f1:cb: 07:9b:89:f5:8a:69:e9:c7:49:6b:cd:64:e3:86:71: 27:c0:15:e7:e9:71:43:6f:bc:82:5b:37:eb:05:b8: df:2f:2e:30:b2:ba:89:48:bf:79:5e:9c:db:3d:f6: f8:90:48:31:4f:2b:85:09:86:fe:d9:b3:83:5e:31: 42:4c:fe:8e:e2:e5:e9:78:19:f8:0c:c4:50:bb:93: 42:7a:41:97:d8:a2:65:99:f6:63:69:59:4a:ba:f5: 11:40:08:2c:e9:b3:5d:20:30:69:99:92:91:69:f3: ee:68:0a:65:19:a3:ec:77:cb:47:f2:66:ab:86:3c: 00:2c:f2:dc:59:13:34:b9:14:58:1b:a8:9f:e6:2c: 2e:72:d0:2f:ff:13:97:9a:de:4b:70:69:ef:9f:15: 90:28:8c:db:26:69:99:80:70:ec:a5:43:8e:86:34: b8:c4:80:81:cf:29:fb:56:10:6c:a2:74:93:b1:fe: ea:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C9:5E:89:E8:55:3B:51:B1:58:B2:1B:74:2E:A0:32:65:F8:95:E0 X509v3 Authority Key Identifier: keyid:91:0B:BD:8E:DE:1B:FA:0D:6C:FE:B0:37:EA:0D:54:85:D7:3D:C0:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:0b:d6:37:d0:de:7c:d9:52:7a:94:55:44:00:f0:30:f5:42: 0e:d5:cb:41:b6:ec:b3:04:b1:4a:68:48:07:eb:6a:18:e0:1c: d4:ef:dd:56:2e:9f:51:17:4d:4c:1e:55:84:f0:f0:4c:d3:75: aa:ab:0d:a5:d3:12:76:27:ed:fa:ea:3b:a7:76:bb:d2:9d:2e: 20:c6:6d:6c:b8:6b:0c:35:9e:bc:8a:4a:d0:61:a6:8d:4a:55: c2:e7:f8:7d:53:8b:dc:b0:a7:12:e1:fb:78:09:fb:e3:b0:2c: d0:b3:c6:97:b8:13:aa:bc:16:ea:42:43:ed:b7:ce:8c:11:ca: 04:34:2a:28:de:b9:37:0f:0c:99:0b:8d:b9:a5:79:5a:fd:7d: db:ff:ec:df:49:29:f1:db:be:35:ad:b0:b2:df:4d:94:dc:68: 78:07:88:a5:82:8c:f8:72:5b:ec:be:c7:de:cd:96:65:cb:b2: 5d:8a:51:fb:b1:44:14:5f:52:36:8a:07:b6:cc:87:9e:66:0a: 3b:5f:69:53:c5:e4:a9:33:a1:e6:2f:65:2b:c3:89:54:19:a3: b0:c0:f8:75:71:11:dc:00:13:df:6e:56:7b:b6:ac:9c:0d:3a: 91:96:8f:8d:6a:0b:50:23:cf:43:25:a7:28:52:56:36:0a:27: 33:59:c0:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPNY6+RuqthZ/8Hqt6dASB0BRRgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTEwQkJEOEVERTFCRkEwRDZDRkVCMDM3RUEwRDU0ODVE NzNEQzBCNjAeFw0yNjA1MTQwNDMxMTFaFw0yNjA1MTUwODAxMTFaMDMxMTAvBgNV BAMTKEREQzk1RTg5RTg1NTNCNTFCMTU4QjIxQjc0MkVBMDMyNjVGODk1RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xmsGn4RPBYmF5yUvOFzyK8Yb RpExkqvm/yCrW/hw3UE+Yt7k74sYDp3ypHqjDOaENbW62NQnQPWzt0RRILOOOQc9 752P52zxywebifWKaenHSWvNZOOGcSfAFefpcUNvvIJbN+sFuN8vLjCyuolIv3le nNs99viQSDFPK4UJhv7Zs4NeMUJM/o7i5el4GfgMxFC7k0J6QZfYomWZ9mNpWUq6 9RFACCzps10gMGmZkpFp8+5oCmUZo+x3y0fyZquGPAAs8txZEzS5FFgbqJ/mLC5y 0C//E5ea3ktwae+fFZAojNsmaZmAcOylQ46GNLjEgIHPKftWEGyidJOx/uqLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3cleiehVO1GxWLIbdC6gMmX4leAwHwYDVR0j BBgwFoAUkQu9jt4b+g1s/rA36g1Uhdc9wLYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTNhN2YzNGMtNjNiOC00OTczLTgyMjYtZTEwNjk1YjI1ZDk0LzAvOTEwQkJEOEVE RTFCRkEwRDZDRkVCMDM3RUEwRDU0ODVENzNEQzBCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTBCQkQ4RURFMUJGQTBENkNGRUIwMzdFQTBENTQ4NUQ3M0RD MEI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTNhN2YzNGMtNjNiOC00OTczLTgy MjYtZTEwNjk1YjI1ZDk0LzAvOTEwQkJEOEVERTFCRkEwRDZDRkVCMDM3RUEwRDU0 ODVENzNEQzBCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIL1jfQ3nzZUnqUVUQA8DD1Qg7Vy0G27LME sUpoSAfrahjgHNTv3VYun1EXTUweVYTw8EzTdaqrDaXTEnYn7frqO6d2u9KdLiDG bWy4aww1nryKStBhpo1KVcLn+H1Ti9ywpxLh+3gJ++OwLNCzxpe4E6q8FupCQ+23 zowRygQ0KijeuTcPDJkLjbmleVr9fdv/7N9JKfHbvjWtsLLfTZTcaHgHiKWCjPhy W+y+x97NlmXLsl2KUfuxRBRfUjaKB7bMh55mCjtfaVPF5KkzoeYvZSvDiVQZo7DA +HVxEdwAE99uVnu2rJwNOpGWj41qC1Ajz0MlpyhSVjYKJzNZwP0= -----END CERTIFICATE-----Generated at Thu May 14 09:09:47 2026 by rpki-client