
$ rpki-client -vvf repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft
File: 90EF20986B3061451D9F1178EB4D439522186281.mft (raw, json)
Hash identifier: eESShjM3xcGFhnyVX1AqRG0nr6OmXVDyvbHtJu8KYiM=
Subject key identifier: E1:9E:62:77:2A:D8:C1:24:85:A5:09:52:F9:FC:F1:AC:22:BD:01:CC
Authority key identifier: 90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81
Certificate issuer: /CN=90EF20986B3061451D9F1178EB4D439522186281
Certificate serial: 6B99F4374716B2C2D4679BB1CBCE685317BC32A4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft
Manifest number: 02DF
Signing time: Sun 01 Mar 2026 16:02:08 +0000
Manifest this update: Sun 01 Mar 2026 15:57:08 +0000
Manifest next update: Wed 04 Mar 2026 22:14:08 +0000
Files and hashes: 1: 90EF20986B3061451D9F1178EB4D439522186281.crl (hash: Dzp6EUB3iTWw3eX/30seowXtghbWZPAruCoswTvm5tQ=)
2: 3130332e3137382e32312e302f32342d3234203d3e20313439333139.roa (hash: n2eHTuRPz7VRKqIm4y6ERY38jrtnwA1mKjZRAuLNji8=)
3: 3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa (hash: /g+5nQoioDTt8teej8QvN1daXZtQyJ0RCEnJEqM8tz8=)
4: 3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa (hash: juxqVk4Pjv7HWg3rc7qy+poTuVXup5lljxn80d82VOs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl
rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 22:14:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:99:f4:37:47:16:b2:c2:d4:67:9b:b1:cb:ce:68:53:17:bc:32:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90EF20986B3061451D9F1178EB4D439522186281
Validity
Not Before: Mar 1 15:57:08 2026 GMT
Not After : Mar 4 22:14:08 2026 GMT
Subject: CN=E19E62772AD8C12485A50952F9FCF1AC22BD01CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:f8:32:43:b7:fa:eb:5f:bd:6d:85:90:da:
0a:61:eb:1a:ae:7b:67:ed:f4:e2:d0:62:ef:63:f5:
57:12:d0:b3:1a:42:78:fc:17:1c:3f:b2:30:c1:99:
df:53:c1:71:0e:36:ec:03:f2:31:ac:f6:c2:de:fb:
e1:77:74:8f:2e:8d:d5:6b:ae:17:94:f2:9a:c8:89:
c1:40:ce:a4:ab:57:fa:80:7b:73:26:8f:a4:72:95:
c1:d5:77:5f:be:c4:fc:7b:82:76:7d:0a:01:73:d3:
f7:50:d0:44:74:cd:db:66:fe:5f:d3:2c:11:e4:ed:
87:d8:d7:f0:98:b0:a5:8f:f0:a5:09:03:21:6d:24:
42:7b:e4:be:39:26:99:5e:2f:8a:27:ee:73:3b:06:
49:e4:81:06:98:f1:b4:9c:3a:a5:1f:63:53:7c:11:
40:fb:ef:fc:8f:3c:74:68:b9:52:3c:c6:8d:5f:8f:
0a:23:b8:34:c1:17:a8:2a:95:06:2c:48:4b:83:ce:
26:d8:0d:a5:4e:38:71:61:f1:f4:b2:ce:ba:c0:97:
71:70:42:2a:ab:be:9d:6d:9c:7f:7c:09:9b:34:09:
d5:2c:24:3d:db:bd:ed:a8:a7:27:47:49:63:4b:33:
33:4a:48:bc:9c:fd:37:cb:d5:d9:d0:13:7b:5e:31:
5a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9E:62:77:2A:D8:C1:24:85:A5:09:52:F9:FC:F1:AC:22:BD:01:CC
X509v3 Authority Key Identifier:
keyid:90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:10:a9:e5:2d:96:5a:b4:07:27:3d:3d:10:2a:73:f0:63:99:
21:60:47:f2:89:75:96:ea:81:6b:81:29:41:3d:35:43:67:91:
b3:d6:f8:d1:63:a0:85:98:ce:52:2b:45:37:fa:b8:31:20:ae:
91:3c:df:44:ee:96:50:9a:63:bd:00:d9:4f:b3:d1:40:dc:78:
f8:66:88:6a:17:e2:2e:e6:4e:28:6f:5a:6d:f5:31:19:07:7a:
b8:14:83:fe:86:9a:52:5d:8e:3b:f5:da:73:ab:10:48:3a:9c:
50:62:c6:5f:b5:8f:79:dd:fd:5e:05:3f:7f:e7:da:d8:98:ce:
83:4f:a8:54:d4:e0:45:bb:cb:fe:4c:22:5d:2a:a3:6f:60:09:
35:a6:05:b0:1e:4e:8b:a0:78:85:76:d3:ec:07:9e:7b:c5:89:
89:b7:3b:27:33:8d:5a:f3:e8:b3:ba:17:69:97:14:65:4a:08:
34:36:1e:3f:7e:b0:33:e1:30:65:13:21:a6:e2:00:20:24:93:
cf:e8:8b:45:2a:54:79:0b:3b:3f:a3:af:83:c9:28:eb:93:21:
e8:0f:d8:64:0b:91:2b:59:ee:f7:0d:d0:c0:3d:d2:ae:7b:94:
ee:7b:bc:38:10:34:18:a1:d4:e6:34:2f:dd:90:e4:e5:00:64:
6a:9d:92:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:13 2026 by rpki-client