
$ rpki-client -vvf repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft
File: 90173425DBB7D1DBD164BBA26F4657B17A266A97.mft (raw, json)
Hash identifier: IES0a6gmiBzJoP2A8lyoaGL2E8bvrcu5MXlJsZop+68=
Subject key identifier: ED:AB:D0:1B:6A:46:07:1C:64:1F:C4:B8:FB:24:CD:41:A1:87:60:18
Authority key identifier: 90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97
Certificate issuer: /CN=90173425DBB7D1DBD164BBA26F4657B17A266A97
Certificate serial: 74ADFF29D8DB42FAA610F62EE6C4C058403E9ACE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft
Manifest number: 0555
Signing time: Sun 01 Mar 2026 03:41:31 +0000
Manifest this update: Sun 01 Mar 2026 03:36:31 +0000
Manifest next update: Wed 04 Mar 2026 04:55:31 +0000
Files and hashes: 1: 90173425DBB7D1DBD164BBA26F4657B17A266A97.crl (hash: ITdfBBPbdnvMZdUirIWnX0SWZzpj9Byg6AjL4Pmwg0o=)
2: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: JVL+81yV9zQDwPcNgvThrCD77NCHFX7cSVK21vFtKao=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl
rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 04:55:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ad:ff:29:d8:db:42:fa:a6:10:f6:2e:e6:c4:c0:58:40:3e:9a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90173425DBB7D1DBD164BBA26F4657B17A266A97
Validity
Not Before: Mar 1 03:36:31 2026 GMT
Not After : Mar 4 04:55:31 2026 GMT
Subject: CN=EDABD01B6A46071C641FC4B8FB24CD41A1876018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9b:3c:9e:5d:d6:33:61:ef:b2:f5:79:d6:63:
c1:4f:7b:0b:ba:fd:56:05:2a:cf:a8:3a:b7:61:0f:
53:f4:c8:47:f9:f5:01:e5:b3:ae:b0:9b:5d:b5:d4:
ec:76:76:2f:86:dd:a4:29:ef:22:4b:3e:cb:54:e0:
f9:89:53:80:ea:69:d0:c5:d5:c9:46:75:a0:e6:cf:
09:f0:d7:8f:e7:b3:88:43:25:1b:75:7d:a2:52:52:
bf:7e:1a:36:ca:a9:7c:1b:9f:ba:63:7c:48:d0:c3:
df:cd:8b:0d:ee:7e:5b:ae:75:b1:ff:06:75:79:13:
59:5a:22:d4:33:5c:a0:33:4d:7c:2b:fd:80:82:70:
d6:10:c8:2b:80:f2:53:2e:36:66:51:9a:7d:ef:c3:
e0:7c:aa:fa:21:66:32:c8:40:88:b7:94:ab:24:5a:
27:01:03:c8:de:be:f1:da:fb:62:25:64:73:b5:a3:
63:61:46:2f:58:4e:08:68:e5:28:b4:1c:4e:ae:22:
5c:2f:0f:49:a5:0d:fa:3f:a9:5e:92:58:00:5c:83:
cd:25:16:75:6f:3f:64:6e:e7:8d:af:b3:db:51:ae:
3c:88:0c:dd:79:47:10:3e:98:c7:ca:a0:11:fe:1b:
d7:97:25:d9:c6:23:d2:6a:ed:ec:28:ec:1c:3a:f4:
14:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AB:D0:1B:6A:46:07:1C:64:1F:C4:B8:FB:24:CD:41:A1:87:60:18
X509v3 Authority Key Identifier:
keyid:90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c1:c8:52:db:34:23:8f:a1:71:9d:21:ce:71:ec:33:43:a1:
70:29:51:24:34:bb:02:ca:48:46:fe:6d:9c:f1:fa:aa:aa:86:
7d:93:fb:be:59:18:dc:b4:6b:f8:eb:60:d9:24:14:fa:a6:31:
0c:65:3e:cc:3e:54:7c:21:54:d9:77:ae:e1:30:c0:17:24:8d:
95:88:59:53:01:fb:03:4a:3a:25:6f:de:31:38:04:10:39:83:
d0:b7:6d:86:ac:0a:f7:88:eb:c2:f8:e6:dd:9b:03:47:72:71:
33:fe:f4:8e:62:48:92:5c:3d:5c:d6:92:b3:a4:9c:15:87:d8:
42:7f:eb:91:b9:15:ba:59:79:b2:84:3d:0f:e7:91:51:14:0a:
36:93:ee:4f:29:06:52:3f:1d:36:c7:90:94:30:e6:fc:17:73:
40:3a:f3:54:84:e0:08:7f:9d:6f:3b:1d:76:f3:7e:5d:6b:cd:
52:3c:3d:e4:36:99:d6:a5:33:8b:7d:3d:08:3a:ab:d8:68:f9:
fc:6d:bc:b9:28:b6:6d:8d:b2:4f:46:95:b3:d2:85:b1:78:e4:
44:0d:76:9a:85:94:f2:ba:74:65:c9:be:d8:d2:63:0e:ea:5a:
68:97:62:57:81:e9:94:b1:a0:4c:81:08:e6:94:f8:33:87:fa:
34:fc:52:88
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdK3/KdjbQvqmEPYu5sTAWEA+ms4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3
QTI2NkE5NzAeFw0yNjAzMDEwMzM2MzFaFw0yNjAzMDQwNDU1MzFaMDMxMTAvBgNV
BAMTKEVEQUJEMDFCNkE0NjA3MUM2NDFGQzRCOEZCMjRDRDQxQTE4NzYwMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOmzyeXdYzYe+y9XnWY8FPewu6
/VYFKs+oOrdhD1P0yEf59QHls66wm1211Ox2di+G3aQp7yJLPstU4PmJU4DqadDF
1clGdaDmzwnw14/ns4hDJRt1faJSUr9+GjbKqXwbn7pjfEjQw9/Niw3ufluudbH/
BnV5E1laItQzXKAzTXwr/YCCcNYQyCuA8lMuNmZRmn3vw+B8qvohZjLIQIi3lKsk
WicBA8jevvHa+2IlZHO1o2NhRi9YTgho5Si0HE6uIlwvD0mlDfo/qV6SWABcg80l
FnVvP2Ru542vs9tRrjyIDN15RxA+mMfKoBH+G9eXJdnGI9Jq7ewo7Bw69BRhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU7avQG2pGBxxkH8S4+yTNQaGHYBgwHwYDVR0j
BBgwFoAUkBc0Jdu30dvRZLuib0ZXsXomapcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YmQ0MzQwYi0yMWM0LTRmYzctYTI1OS1lMjM1NGM1M2ZkZDIvMC85MDE3MzQyNURC
QjdEMURCRDE2NEJCQTI2RjQ2NTdCMTdBMjY2QTk3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3QTI2
NkE5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJkNDM0MGItMjFjNC00ZmM3LWEy
NTktZTIzNTRjNTNmZGQyLzAvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3
QjE3QTI2NkE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD7ByFLbNCOPoXGdIc5x7DNDoXApUSQ0uwLK
SEb+bZzx+qqqhn2T+75ZGNy0a/jrYNkkFPqmMQxlPsw+VHwhVNl3ruEwwBckjZWI
WVMB+wNKOiVv3jE4BBA5g9C3bYasCveI68L45t2bA0dycTP+9I5iSJJcPVzWkrOk
nBWH2EJ/65G5FbpZebKEPQ/nkVEUCjaT7k8pBlI/HTbHkJQw5vwXc0A681SE4Ah/
nW87HXbzfl1rzVI8PeQ2mdalM4t9PQg6q9ho+fxtvLkotm2Nsk9GlbPShbF45EQN
dpqFlPK6dGXJvtjSYw7qWmiXYleB6ZSxoEyBCOaU+DOH+jT8Uog=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:55 2026 by rpki-client