$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft File: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft (raw, json) Hash identifier: jzKUGDLoLBQmDvHwTTB/u6EUOqaZ2iZ5WGmnpXOlZVk= Subject key identifier: 34:2D:11:47:1B:C2:BF:44:E9:9A:1F:68:3B:9B:35:18:B6:9B:68:24 Authority key identifier: D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B Certificate issuer: /CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B Certificate serial: 1D700E8A9E58C177661C4FEC5963DA055ED391CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft Manifest number: 0150 Signing time: Fri 17 Apr 2026 04:52:35 +0000 Manifest this update: Fri 17 Apr 2026 04:47:35 +0000 Manifest next update: Mon 20 Apr 2026 13:33:35 +0000 Files and hashes: 1: 3135372e36362e372e302f32342d3234203d3e20313338383239.roa (hash: uWa3eBa3m0ZjHO1KSjQNzgzw8RBx0gUrmzXHFx4FbVs=) 2: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl (hash: dv1evroGQrCJQO8vxPByMP4n1oKHdIF4pdqHnOEenQQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:70:0e:8a:9e:58:c1:77:66:1c:4f:ec:59:63:da:05:5e:d3:91:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B Validity Not Before: Apr 17 04:47:35 2026 GMT Not After : Apr 20 13:33:35 2026 GMT Subject: CN=342D11471BC2BF44E99A1F683B9B3518B69B6824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:84:5b:79:f3:9a:68:d5:30:a7:1c:69:2c:7c: 75:42:3b:3d:7f:28:ba:07:3f:c9:aa:15:00:78:31: ef:74:31:12:23:8c:6b:56:61:c0:32:96:f9:be:d6: 53:b2:48:7f:0f:2d:e6:0b:d9:0c:6e:db:33:ca:f5: 73:78:c0:79:6f:11:a7:f3:e7:43:2e:27:e7:63:77: cd:c6:46:9e:80:41:0f:ed:97:a5:1a:dc:b8:df:ac: 4d:01:6d:cb:54:31:e4:21:52:3b:d4:4f:00:56:af: c8:2b:44:93:e4:a3:65:18:53:96:10:55:71:2d:a4: 8d:9c:c2:18:1c:c7:65:2c:4f:9d:30:12:6a:58:57: ae:ed:d3:72:9c:ef:6e:e7:43:eb:aa:49:68:79:d9: db:39:70:62:09:14:93:cf:42:6d:20:0c:ba:10:23: 1e:3f:a7:30:f8:fb:c9:84:6e:d5:da:ed:38:48:ec: 0d:0e:1c:ba:6c:7c:c0:3c:0f:b4:69:00:32:93:24: f7:86:a3:a7:97:02:78:79:5b:c5:bb:06:41:f5:97: 2a:8e:14:bb:46:87:b1:4e:0f:65:32:a9:58:77:7f: 45:37:d7:c1:25:c0:9d:6a:73:cc:f2:89:1f:27:9e: d1:44:07:b0:77:01:e4:52:14:81:2a:08:ea:42:d9: 26:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2D:11:47:1B:C2:BF:44:E9:9A:1F:68:3B:9B:35:18:B6:9B:68:24 X509v3 Authority Key Identifier: keyid:D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e8:29:bd:09:e4:a1:85:4d:d7:c8:90:42:7d:58:fa:82:5b: 08:f4:12:d6:82:e7:20:76:b7:87:4a:bd:70:f8:bb:2c:31:73: 8b:d7:06:07:c5:9c:3c:ee:17:e4:22:94:5a:a2:60:b8:57:28: 24:47:6b:33:fb:78:37:51:b9:d5:ec:97:50:0d:eb:d6:6f:ce: 6f:ad:8d:3e:20:6c:98:bf:66:03:c1:4c:3b:a6:d9:a0:c3:10: a2:6e:cc:54:2d:65:01:30:7d:c3:e6:53:7b:f0:a1:65:cf:19: 9d:d2:2d:c1:0d:54:f3:c9:88:61:bc:57:1a:eb:a3:73:17:95: b7:7e:28:b2:0f:50:80:1d:ab:c0:37:22:fd:1e:05:ae:73:a8: 54:f0:e9:b8:0d:b3:f2:51:81:4f:6f:13:6d:79:76:56:eb:17: b7:00:7c:71:31:79:25:56:24:1d:b5:f7:8d:71:8c:4c:b1:0c: 2a:30:f4:ed:1d:dd:60:2e:f8:02:0f:5d:ab:e6:6f:60:a0:46: d9:59:62:a7:d5:49:88:6d:df:06:14:f9:4f:ab:8e:37:04:dc: 61:83:f1:18:55:be:50:4f:30:7a:35:f9:de:a1:a8:22:1e:c3: a2:c1:97:b4:bd:7f:10:cb:22:02:b0:e1:a7:4c:0c:5d:87:cc: c9:fe:3e:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHXAOip5YwXdmHE/sWWPaBV7TkcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0Q0Ey MTBEODg2QjAeFw0yNjA0MTcwNDQ3MzVaFw0yNjA0MjAxMzMzMzVaMDMxMTAvBgNV BAMTKDM0MkQxMTQ3MUJDMkJGNDRFOTlBMUY2ODNCOUIzNTE4QjY5QjY4MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7hFt585po1TCnHGksfHVCOz1/ KLoHP8mqFQB4Me90MRIjjGtWYcAylvm+1lOySH8PLeYL2Qxu2zPK9XN4wHlvEafz 50MuJ+djd83GRp6AQQ/tl6Ua3LjfrE0BbctUMeQhUjvUTwBWr8grRJPko2UYU5YQ VXEtpI2cwhgcx2UsT50wEmpYV67t03Kc727nQ+uqSWh52ds5cGIJFJPPQm0gDLoQ Ix4/pzD4+8mEbtXa7ThI7A0OHLpsfMA8D7RpADKTJPeGo6eXAnh5W8W7BkH1lyqO FLtGh7FOD2UyqVh3f0U318ElwJ1qc8zyiR8nntFEB7B3AeRSFIEqCOpC2SYlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNC0RRxvCv0Tpmh9oO5s1GLabaCQwHwYDVR0j BBgwFoAU2QxwQrXcGDQdzHfKXPj0yiENiGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE2ZmVhYS02YjRmLTQ3Y2YtOWUzYy0wMGFlYWM2N2EzMmEvMC9EOTBDNzA0MkI1 REMxODM0MURDQzc3Q0E1Q0Y4RjRDQTIxMEQ4ODZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0Q0EyMTBE ODg2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzAvRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0 Q0EyMTBEODg2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvoKb0J5KGFTdfIkEJ9WPqCWwj0EtaC5yB2 t4dKvXD4uywxc4vXBgfFnDzuF+QilFqiYLhXKCRHazP7eDdRudXsl1AN69Zvzm+t jT4gbJi/ZgPBTDum2aDDEKJuzFQtZQEwfcPmU3vwoWXPGZ3SLcENVPPJiGG8Vxrr o3MXlbd+KLIPUIAdq8A3Iv0eBa5zqFTw6bgNs/JRgU9vE215dlbrF7cAfHExeSVW JB21941xjEyxDCow9O0d3WAu+AIPXavmb2CgRtlZYqfVSYht3wYU+U+rjjcE3GGD 8RhVvlBPMHo1+d6hqCIew6LBl7S9fxDLIgKw4adMDF2HzMn+Puc= -----END CERTIFICATE-----Generated at Fri Apr 17 12:29:21 2026 by rpki-client