$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft File: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft (raw, json) Hash identifier: qjbniMPITzd0EIOhU8ZvJD8OGlZG68U+4NMjxU16+gY= Subject key identifier: 98:5B:DE:ED:EE:8D:94:8A:4E:61:34:B3:9C:CF:72:4F:A5:E4:46:74 Authority key identifier: D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B Certificate issuer: /CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B Certificate serial: 4A50E4EB5C8BA3164469BA40F65A8592FCFF2991 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft Manifest number: 013B Signing time: Sun 01 Mar 2026 21:42:36 +0000 Manifest this update: Sun 01 Mar 2026 21:37:36 +0000 Manifest next update: Thu 05 Mar 2026 00:55:36 +0000 Files and hashes: 1: 3135372e36362e372e302f32342d3234203d3e20313338383239.roa (hash: uWa3eBa3m0ZjHO1KSjQNzgzw8RBx0gUrmzXHFx4FbVs=) 2: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl (hash: JVnjccxdBlzMdGwAN16++3mu/O43KCe5/3idpQwCS4c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:55:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:50:e4:eb:5c:8b:a3:16:44:69:ba:40:f6:5a:85:92:fc:ff:29:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B Validity Not Before: Mar 1 21:37:36 2026 GMT Not After : Mar 5 00:55:36 2026 GMT Subject: CN=985BDEEDEE8D948A4E6134B39CCF724FA5E44674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ed:00:f6:82:b1:68:3d:16:5c:82:97:3e:29: a1:38:da:09:fe:84:63:cf:dc:15:c8:f3:1c:e7:a9: 0e:13:6d:b1:d7:83:b3:ba:97:b6:cc:af:b4:9e:1f: d1:20:0d:97:8e:90:b4:74:ee:3b:cc:85:13:f3:29: 2a:63:c7:1e:3b:03:58:c5:2d:99:cc:fa:00:b9:18: 15:17:e9:bb:dd:be:7e:9b:c1:8e:5a:c2:1c:c0:70: 9d:d7:30:cc:c1:a4:e3:a2:61:a5:c6:a7:09:26:92: 36:0b:8c:21:5f:da:4c:6b:ef:a7:97:7e:3c:ab:99: fd:26:7a:a4:27:6e:1f:a4:e1:a7:76:78:c7:ff:05: 6b:0a:06:04:1d:cf:aa:b2:a4:ad:76:73:7c:17:16: fb:91:52:65:d2:96:0f:d1:9d:a6:1d:31:91:87:00: 9c:91:03:d9:d8:28:2d:28:ab:62:af:f5:96:8e:77: bd:45:f8:60:a6:06:da:99:a3:64:c1:d8:c7:31:9c: 74:78:bc:81:0a:c6:8c:20:3b:a4:92:23:bb:30:8d: 3f:02:b3:f4:0d:59:72:9c:d0:93:b5:29:bd:39:ca: 3c:18:bb:50:63:99:06:df:54:9b:d8:cf:d7:09:ee: d1:dc:65:55:ca:fe:a9:38:3f:60:2a:5a:f7:69:06: bd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5B:DE:ED:EE:8D:94:8A:4E:61:34:B3:9C:CF:72:4F:A5:E4:46:74 X509v3 Authority Key Identifier: keyid:D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:9e:04:90:47:d2:e0:f0:64:6c:ca:61:73:e7:a8:08:fe:f1: d8:4b:8f:17:b2:22:06:9f:39:79:41:1f:54:4c:34:d0:0d:0b: cd:a3:24:77:44:dc:65:fe:1d:c9:ad:96:ac:90:09:0b:8a:17: a0:9f:4b:32:df:2a:fe:39:01:40:2f:dc:c7:7d:dd:73:d7:97: e9:04:2c:d3:60:36:ca:93:78:a4:4a:62:7c:73:cc:82:64:31: 41:56:47:be:d2:e0:a1:8d:f6:ff:a9:32:19:78:91:c8:d1:0f: 15:3f:bb:34:ef:7f:ba:56:48:43:fd:7a:23:73:78:07:79:89: ee:7e:72:39:8b:15:5b:a9:06:15:7f:72:64:12:2a:d9:ce:0d: 3f:e2:cc:b4:8b:59:12:af:fa:d0:03:b9:49:37:74:0a:9c:99: 9c:86:0d:0b:28:2b:81:75:ce:66:60:8e:69:21:29:57:74:53: 75:f8:a2:b8:c4:01:7c:5b:3a:c6:50:b3:45:da:c0:de:ec:09: 7d:c7:ab:cd:7e:47:10:cf:0c:b7:f1:22:7b:c1:28:3a:25:f6: fe:d9:e8:45:9b:40:a9:fc:de:32:f5:05:91:46:b6:67:c3:db: b7:24:72:97:b4:9b:94:aa:d0:3c:f9:d4:bc:eb:7d:37:9a:9f: 04:68:0c:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSlDk61yLoxZEabpA9lqFkvz/KZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0Q0Ey MTBEODg2QjAeFw0yNjAzMDEyMTM3MzZaFw0yNjAzMDUwMDU1MzZaMDMxMTAvBgNV BAMTKDk4NUJERUVERUU4RDk0OEE0RTYxMzRCMzlDQ0Y3MjRGQTVFNDQ2NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ7QD2grFoPRZcgpc+KaE42gn+ hGPP3BXI8xznqQ4TbbHXg7O6l7bMr7SeH9EgDZeOkLR07jvMhRPzKSpjxx47A1jF LZnM+gC5GBUX6bvdvn6bwY5awhzAcJ3XMMzBpOOiYaXGpwkmkjYLjCFf2kxr76eX fjyrmf0meqQnbh+k4ad2eMf/BWsKBgQdz6qypK12c3wXFvuRUmXSlg/RnaYdMZGH AJyRA9nYKC0oq2Kv9ZaOd71F+GCmBtqZo2TB2McxnHR4vIEKxowgO6SSI7swjT8C s/QNWXKc0JO1Kb05yjwYu1BjmQbfVJvYz9cJ7tHcZVXK/qk4P2AqWvdpBr0DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmFve7e6NlIpOYTSznM9yT6XkRnQwHwYDVR0j BBgwFoAU2QxwQrXcGDQdzHfKXPj0yiENiGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE2ZmVhYS02YjRmLTQ3Y2YtOWUzYy0wMGFlYWM2N2EzMmEvMC9EOTBDNzA0MkI1 REMxODM0MURDQzc3Q0E1Q0Y4RjRDQTIxMEQ4ODZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0Q0EyMTBE ODg2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzAvRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0 Q0EyMTBEODg2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGeBJBH0uDwZGzKYXPnqAj+8dhLjxeyIgaf OXlBH1RMNNANC82jJHdE3GX+HcmtlqyQCQuKF6CfSzLfKv45AUAv3Md93XPXl+kE LNNgNsqTeKRKYnxzzIJkMUFWR77S4KGN9v+pMhl4kcjRDxU/uzTvf7pWSEP9eiNz eAd5ie5+cjmLFVupBhV/cmQSKtnODT/izLSLWRKv+tADuUk3dAqcmZyGDQsoK4F1 zmZgjmkhKVd0U3X4orjEAXxbOsZQs0XawN7sCX3Hq81+RxDPDLfxInvBKDol9v7Z 6EWbQKn83jL1BZFGtmfD27ckcpe0m5Sq0Dz51LzrfTeanwRoDCA= -----END CERTIFICATE-----Generated at Mon Mar 2 16:47:24 2026 by rpki-client