$ rpki-client -vvf repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft File: 90173425DBB7D1DBD164BBA26F4657B17A266A97.mft (raw, json) Hash identifier: +x4qIUbKP3+/WqgLxYR04yjJDbFKMosrkbWVv0HRQ3M= Subject key identifier: CB:CE:3D:E4:A3:68:ED:18:BF:7B:4E:B6:FC:D5:B2:53:B5:B2:21:D5 Authority key identifier: 90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 Certificate issuer: /CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Certificate serial: 737F98E4EB7B512E4FC8894398FCA993DC78FD1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft Manifest number: 0569 Signing time: Wed 15 Apr 2026 03:21:31 +0000 Manifest this update: Wed 15 Apr 2026 03:16:31 +0000 Manifest next update: Sat 18 Apr 2026 12:27:31 +0000 Files and hashes: 1: 90173425DBB7D1DBD164BBA26F4657B17A266A97.crl (hash: D/bFdKwV3i7bLgY0FtqYMelCP8//X1VRxEPfKVdZwdo=) 2: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: JVL+81yV9zQDwPcNgvThrCD77NCHFX7cSVK21vFtKao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:7f:98:e4:eb:7b:51:2e:4f:c8:89:43:98:fc:a9:93:dc:78:fd:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Validity Not Before: Apr 15 03:16:31 2026 GMT Not After : Apr 18 12:27:31 2026 GMT Subject: CN=CBCE3DE4A368ED18BF7B4EB6FCD5B253B5B221D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:2f:e1:67:0d:88:2c:e1:5d:28:50:7b:a3: 15:25:cb:2e:b3:d7:30:04:6a:e8:f0:8c:51:ee:2b: e7:84:be:89:5e:3e:e9:d5:0e:49:44:ca:db:a6:91: 78:a2:67:e8:4b:15:bf:38:39:74:99:95:d3:1e:9a: 87:9c:48:5a:a1:e7:5d:1d:d6:d1:0e:fd:12:db:2f: 31:1d:ec:f5:1e:bf:79:42:43:6b:68:c3:bf:ff:c3: d0:7b:1e:79:3c:73:73:dd:95:8e:65:64:5b:da:2d: a0:35:9c:3f:97:8f:10:c7:af:12:35:bd:20:8a:14: 1d:28:47:73:c9:50:1b:01:e4:c3:d3:e6:db:3e:57: e3:a7:f3:d6:ef:79:43:b0:30:d5:5a:e3:a6:63:83: f8:6f:20:07:d7:31:b6:dd:42:d2:25:a1:9c:64:d6: 3f:c2:9a:9a:43:fa:47:c0:89:d4:e0:5c:d9:d4:17: 0a:30:a0:73:95:f5:51:7d:0a:2c:cf:14:52:d3:71: 81:4a:1c:f3:d3:b3:79:4f:e8:e8:b3:cb:f6:65:c9: af:89:95:34:e1:13:b2:13:95:2d:07:49:f5:b1:c0: 5a:fb:1e:c6:71:20:bf:11:9d:26:71:e4:ea:12:11: 1c:f1:08:69:23:c3:42:f5:47:2a:9e:54:54:8f:0b: df:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CE:3D:E4:A3:68:ED:18:BF:7B:4E:B6:FC:D5:B2:53:B5:B2:21:D5 X509v3 Authority Key Identifier: keyid:90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:31:b7:b2:0c:b7:53:06:e6:4c:e4:d5:e1:7b:11:f2:ae:9c: 95:4a:5e:db:b4:28:88:ea:16:ba:a3:17:89:b5:f2:0b:2e:51: 0b:b6:fd:e0:bc:9f:aa:04:b1:46:0f:cb:f9:2b:63:2f:4e:16: 99:a2:3c:9b:29:91:16:61:80:83:a9:5a:fa:db:57:16:f6:f3: 4b:03:29:ca:ec:3c:44:f5:61:f2:0b:c5:e4:4c:3b:29:53:6d: cc:a5:01:20:ed:f2:f8:da:fe:76:fb:40:a5:9c:8b:c1:29:61: 16:86:d2:5b:94:4b:86:e0:c0:4f:c6:cc:80:9b:88:e1:66:15: 30:ce:83:27:c1:93:b0:4a:4c:5b:be:ed:6c:14:f2:fc:42:2d: 5b:a9:37:99:f5:fd:52:7d:8a:3f:f4:92:de:24:de:37:12:cb: c3:5b:10:ba:f7:e2:c6:34:e8:ff:e7:8c:92:17:bd:a3:e1:d3: 84:04:90:02:be:6d:3e:a8:83:b6:01:49:fd:fd:73:4d:fe:10: 63:d0:c9:f1:13:01:d0:25:74:80:2d:36:5f:27:7e:2a:20:a2: 06:36:f1:66:5b:e4:04:a5:d0:34:c3:7c:87:84:a2:4f:ab:5b: 71:cf:ff:95:72:04:97:f3:de:16:6d:e6:2d:ff:fa:98:29:36: 31:59:34:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc3+Y5Ot7US5PyIlDmPypk9x4/RowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3 QTI2NkE5NzAeFw0yNjA0MTUwMzE2MzFaFw0yNjA0MTgxMjI3MzFaMDMxMTAvBgNV BAMTKENCQ0UzREU0QTM2OEVEMThCRjdCNEVCNkZDRDVCMjUzQjVCMjIxRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyTS/hZw2ILOFdKFB7oxUlyy6z 1zAEaujwjFHuK+eEvolePunVDklEytumkXiiZ+hLFb84OXSZldMemoecSFqh510d 1tEO/RLbLzEd7PUev3lCQ2tow7//w9B7Hnk8c3PdlY5lZFvaLaA1nD+XjxDHrxI1 vSCKFB0oR3PJUBsB5MPT5ts+V+On89bveUOwMNVa46Zjg/hvIAfXMbbdQtIloZxk 1j/CmppD+kfAidTgXNnUFwowoHOV9VF9CizPFFLTcYFKHPPTs3lP6Oizy/Zlya+J lTThE7ITlS0HSfWxwFr7HsZxIL8RnSZx5OoSERzxCGkjw0L1RyqeVFSPC9+7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy8495KNo7Ri/e062/NWyU7WyIdUwHwYDVR0j BBgwFoAUkBc0Jdu30dvRZLuib0ZXsXomapcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmQ0MzQwYi0yMWM0LTRmYzctYTI1OS1lMjM1NGM1M2ZkZDIvMC85MDE3MzQyNURC QjdEMURCRDE2NEJCQTI2RjQ2NTdCMTdBMjY2QTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3QTI2 NkE5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJkNDM0MGItMjFjNC00ZmM3LWEy NTktZTIzNTRjNTNmZGQyLzAvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3 QjE3QTI2NkE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFExt7IMt1MG5kzk1eF7EfKunJVKXtu0KIjq FrqjF4m18gsuUQu2/eC8n6oEsUYPy/krYy9OFpmiPJspkRZhgIOpWvrbVxb280sD KcrsPET1YfILxeRMOylTbcylASDt8vja/nb7QKWci8EpYRaG0luUS4bgwE/GzICb iOFmFTDOgyfBk7BKTFu+7WwU8vxCLVupN5n1/VJ9ij/0kt4k3jcSy8NbELr34sY0 6P/njJIXvaPh04QEkAK+bT6og7YBSf39c03+EGPQyfETAdAldIAtNl8nfiogogY2 8WZb5ASl0DTDfIeEok+rW3HP/5VyBJfz3hZt5i3/+pgpNjFZNJw= -----END CERTIFICATE-----Generated at Fri Apr 17 10:58:48 2026 by rpki-client