$ rpki-client -vvf rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft File: 91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft (raw, json) Hash identifier: FQ1EXkwp0IilfjxY/wEl3D/vmCkjuSEGhEe4yerWkiw= Subject key identifier: FD:06:11:7A:83:CD:A9:57:EE:1B:D3:56:E0:28:92:C9:99:4E:18:38 Authority key identifier: 91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5 Certificate issuer: /CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5 Certificate serial: 70EA5B52DFEA43B464796CF779A8D840F914B070 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:08:09 +0000 Manifest this update: Tue 12 May 2026 18:03:09 +0000 Manifest next update: Wed 13 May 2026 18:36:09 +0000 Files and hashes: 1: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: SC10OytBie2MbXaqxSkSZEMl+ckzrKygzl2td6Lp/wc=) 2: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: uikJ4h+kBmTlo/wV286gj8QmBKk/antrFLp6NHaL3Jo=) 3: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: XA8Mg7RR9LICJm4QVN9sHHYBGExGVWnRlfGuHZaWDXk=) 4: 91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl (hash: SGXMzE3NdYsrfqLj9Sk3+a9Ch0Sh6zHctPdR8bNg1yM=) 5: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: 6Np+q+5XOW4vxlMbVGZKdZf5J6Gwh/BuKQFsPk2H03I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ea:5b:52:df:ea:43:b4:64:79:6c:f7:79:a8:d8:40:f9:14:b0:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5 Validity Not Before: May 12 18:03:09 2026 GMT Not After : May 13 18:36:09 2026 GMT Subject: CN=FD06117A83CDA957EE1BD356E02892C9994E1838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:81:7d:5b:0c:e0:c3:60:2b:28:21:07:55: d6:f2:ab:8d:4b:ab:0e:f3:fb:93:cc:f3:90:db:58: fd:22:3a:bd:ff:7d:b8:e9:83:c1:8b:97:75:ba:19: 15:52:70:3b:c9:7b:96:06:2b:ca:dc:c1:76:d9:51: 19:d9:e1:d0:af:a8:ad:ad:1c:d4:fc:e5:3e:21:b0: 06:66:c7:85:d3:c6:3f:65:61:09:e8:12:42:5e:86: c2:de:8f:86:83:9a:aa:85:38:d1:f2:01:e5:15:f4: f9:86:9b:cb:7d:c8:f5:e5:bc:4f:1a:30:59:4a:8c: e6:39:9a:04:d3:29:16:de:06:2b:f5:29:7f:d0:7e: 0d:d3:da:b5:1c:21:f3:d8:4d:29:c2:8b:af:aa:1f: 8e:5b:8f:ef:5e:9f:67:f0:e9:93:df:52:1a:91:5c: 37:4a:18:25:59:31:fb:e8:ae:17:38:b4:ef:ab:0b: e9:95:c4:ae:59:5a:53:47:a3:e5:e2:48:df:b8:db: f8:24:a5:6a:52:d7:b1:0b:0e:5c:23:a4:64:5e:4a: 60:93:e0:f1:b4:48:2c:b6:a4:b3:39:6f:6d:04:be: db:97:f5:14:3e:ce:40:79:1e:ec:18:92:86:06:e1: 60:6c:79:68:75:b0:3e:71:23:ff:51:e3:f4:33:5f: c4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:06:11:7A:83:CD:A9:57:EE:1B:D3:56:E0:28:92:C9:99:4E:18:38 X509v3 Authority Key Identifier: keyid:91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:3a:c0:72:10:dc:eb:38:ff:28:5f:bb:7b:e9:9b:70:f2:3f: 01:68:6c:85:74:17:34:c3:cf:21:1a:3c:51:11:bd:a9:d6:a7: 2d:d0:3a:30:b3:dd:43:52:dd:e6:69:5f:02:0c:28:4a:3f:7e: 18:d5:96:50:02:55:3e:3e:62:0a:bb:ea:8f:0b:f0:78:31:fc: cc:3f:69:a5:e7:b1:30:23:7a:5e:5d:a7:c5:a6:21:09:ed:00: 26:01:3f:fc:2b:44:6d:1c:ac:44:19:22:71:9b:fb:4e:4f:3a: 8d:39:8f:3d:fa:e3:d7:ec:98:00:2a:ee:ef:33:f6:b8:82:29: 90:fb:86:3a:3f:14:3a:38:f5:9d:2b:bc:95:19:76:88:22:3a: bb:8d:65:cc:01:a5:7f:24:21:61:25:da:34:19:03:e3:c2:8a: fd:7b:24:4f:b9:92:28:e3:4e:08:8b:6f:71:ec:e0:c9:eb:96: 9c:2e:e5:51:3d:87:60:a0:04:a0:fc:a9:b9:97:79:d8:14:29: 2f:0c:4a:7b:81:37:47:17:47:dd:75:30:d4:56:78:81:43:8e: df:37:f3:77:4b:93:a4:63:09:c3:4b:99:32:18:ad:26:6b:f8: d9:b2:2f:50:1e:1f:7c:7a:29:3c:3f:09:bf:97:3a:ce:c9:76: 6f:a8:31:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcOpbUt/qQ7RkeWz3eajYQPkUsHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTExOTZBOThGRTJFMjIzNkJCNjVDRTI4RENCNTkyM0U1 NTFDOUNBNTAeFw0yNjA1MTIxODAzMDlaFw0yNjA1MTMxODM2MDlaMDMxMTAvBgNV BAMTKEZEMDYxMTdBODNDREE5NTdFRTFCRDM1NkUwMjg5MkM5OTk0RTE4MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCji4F9Wwzgw2ArKCEHVdbyq41L qw7z+5PM85DbWP0iOr3/fbjpg8GLl3W6GRVScDvJe5YGK8rcwXbZURnZ4dCvqK2t HNT85T4hsAZmx4XTxj9lYQnoEkJehsLej4aDmqqFONHyAeUV9PmGm8t9yPXlvE8a MFlKjOY5mgTTKRbeBiv1KX/Qfg3T2rUcIfPYTSnCi6+qH45bj+9en2fw6ZPfUhqR XDdKGCVZMfvorhc4tO+rC+mVxK5ZWlNHo+XiSN+42/gkpWpS17ELDlwjpGReSmCT 4PG0SCy2pLM5b20EvtuX9RQ+zkB5HuwYkoYG4WBseWh1sD5xI/9R4/QzX8RhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/QYReoPNqVfuG9NW4CiSyZlOGDgwHwYDVR0j BBgwFoAUkRlqmP4uIja7Zc4o3LWSPlUcnKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU1M2VkYWItNGEzZC00NGU0LThkOTYtNjI1YTFjMjAzNzhkLzAvOTExOTZBOThG RTJFMjIzNkJCNjVDRTI4RENCNTkyM0U1NTFDOUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTE5NkE5OEZFMkUyMjM2QkI2NUNFMjhEQ0I1OTIzRTU1MUM5 Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk OTYtNjI1YTFjMjAzNzhkLzAvOTExOTZBOThGRTJFMjIzNkJCNjVDRTI4RENCNTky M0U1NTFDOUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABY6wHIQ3Os4/yhfu3vpm3DyPwFobIV0FzTD zyEaPFERvanWpy3QOjCz3UNS3eZpXwIMKEo/fhjVllACVT4+Ygq76o8L8Hgx/Mw/ aaXnsTAjel5dp8WmIQntACYBP/wrRG0crEQZInGb+05POo05jz3649fsmAAq7u8z 9riCKZD7hjo/FDo49Z0rvJUZdogiOruNZcwBpX8kIWEl2jQZA+PCiv17JE+5kijj TgiLb3Hs4Mnrlpwu5VE9h2CgBKD8qbmXedgUKS8MSnuBN0cXR911MNRWeIFDjt83 83dLk6RjCcNLmTIYrSZr+NmyL1AeH3x6KTw/Cb+XOs7Jdm+oMcQ= -----END CERTIFICATE-----Generated at Wed May 13 05:36:44 2026 by rpki-client