
$ rpki-client -vvf repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft
File: 90508FF980097E19CEF65ED72A856616A6F690AB.mft (raw, json)
Hash identifier: 8C73jsXUwMyOslrPABFNUpObCuFseY9EinhuHaV+zM0=
Subject key identifier: 18:9B:50:B7:CA:F5:02:E9:FC:BC:69:76:76:6D:BB:A9:3A:DF:22:12
Authority key identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB
Certificate issuer: /CN=90508FF980097E19CEF65ED72A856616A6F690AB
Certificate serial: 48C009DE61E058458580818FC9B6FF1505A232B1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft
Manifest number: 0554
Signing time: Sat 28 Feb 2026 17:42:18 +0000
Manifest this update: Sat 28 Feb 2026 17:37:18 +0000
Manifest next update: Tue 03 Mar 2026 19:53:18 +0000
Files and hashes: 1: 90508FF980097E19CEF65ED72A856616A6F690AB.crl (hash: 6bMWwptOqWZuwDbsPtz75kxdDhVVo7tNRmQb3JA2EFE=)
2: 3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (hash: 7pdp3iomZV1Sl4nuURLGWWHMiPLMkvx/Ece8HW9MQqg=)
3: 3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (hash: NUlokuFe9GARtT8KTw9qoKUuu+MeiOKu86jOn++3TJ0=)
4: 3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (hash: JNjDlAZZhJPbXz9QnoPN2kXEdVorueRNiZ3y4BzRO+s=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl
rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 19:53:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c0:09:de:61:e0:58:45:85:80:81:8f:c9:b6:ff:15:05:a2:32:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90508FF980097E19CEF65ED72A856616A6F690AB
Validity
Not Before: Feb 28 17:37:18 2026 GMT
Not After : Mar 3 19:53:18 2026 GMT
Subject: CN=189B50B7CAF502E9FCBC6976766DBBA93ADF2212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ed:f5:6a:f7:a8:43:b6:dc:32:c6:f7:28:05:
e4:28:e2:c8:3c:0c:56:82:d8:63:db:81:82:48:fe:
07:d0:69:b5:4d:9b:83:42:cb:f8:56:86:0f:af:50:
69:10:ca:80:88:a8:c7:65:92:f5:7e:eb:7a:99:d1:
46:af:8d:2f:88:cf:79:2e:67:e8:c5:11:f7:1b:a5:
4b:be:92:c1:79:09:84:52:45:c0:b7:ee:79:21:ee:
c2:47:35:f5:34:d6:b2:9b:17:f2:1b:5e:ed:e7:2a:
0a:23:98:a8:de:8a:52:b9:30:42:bc:05:cd:ca:07:
e0:12:93:6b:15:1c:41:10:e0:47:c8:08:0f:74:ac:
dd:69:b4:bc:60:c1:b5:4f:27:26:7b:20:dc:f7:d0:
b5:b4:b5:c8:30:2c:10:7e:02:c6:68:cb:ca:37:5f:
bb:94:c6:93:d0:7a:b8:3b:1b:9f:8f:b4:f4:34:17:
0d:87:a0:cf:a9:3c:6c:a1:67:e5:3e:07:c1:2f:f6:
ad:0e:2f:13:63:ec:90:60:98:33:6a:c8:72:d0:dd:
bd:5d:b6:4c:e9:b1:00:54:d6:ad:a9:0a:3d:8c:a7:
e8:b6:0c:4b:94:dc:87:c2:3c:bf:c6:ca:f2:b7:04:
30:ce:34:6b:18:05:ae:39:83:e4:e2:24:95:0d:70:
df:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9B:50:B7:CA:F5:02:E9:FC:BC:69:76:76:6D:BB:A9:3A:DF:22:12
X509v3 Authority Key Identifier:
keyid:90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:24:87:19:d5:ae:b2:92:11:d8:2d:f6:76:fc:b9:30:d6:66:
40:81:5b:9c:f7:95:17:2e:da:f0:05:52:32:aa:f6:70:25:21:
6a:46:8c:49:55:fa:21:4d:ca:99:3c:f7:fb:ac:fc:da:6e:f4:
6a:1d:91:a2:a9:37:16:b4:80:dc:9b:55:09:6c:c7:23:d2:37:
cf:cf:bc:66:71:78:52:b8:96:1c:5e:6f:43:1e:40:16:09:6a:
b7:91:9f:6c:f8:24:5c:f8:6c:a2:39:52:a9:bd:72:6a:01:5a:
e4:5b:30:e2:81:fd:d7:27:8d:01:fa:44:bb:a0:f9:ca:90:5b:
19:cf:02:35:dd:58:80:19:3c:ca:a7:15:5c:9d:3b:8d:0d:b2:
7d:07:37:a6:3d:dc:42:37:2e:76:23:42:4d:4b:63:22:6f:16:
96:50:a3:22:f1:3a:76:24:63:5d:bd:8a:4a:cf:b4:ba:d7:00:
39:85:a2:dc:f2:15:27:62:09:6f:6d:a6:4f:0b:3e:c7:df:45:
48:a3:92:22:0d:65:74:7c:f7:4b:4b:30:7b:05:a6:9e:9a:71:
49:56:36:db:ca:d3:0a:bc:fd:26:83:7d:a4:32:c1:c3:f4:69:
52:3b:e0:f5:35:88:3d:24:7e:e7:60:9d:5d:f7:29:88:50:fe:
94:f2:a4:b3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSMAJ3mHgWEWFgIGPybb/FQWiMrEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZB
NkY2OTBBQjAeFw0yNjAyMjgxNzM3MThaFw0yNjAzMDMxOTUzMThaMDMxMTAvBgNV
BAMTKDE4OUI1MEI3Q0FGNTAyRTlGQ0JDNjk3Njc2NkRCQkE5M0FERjIyMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO7fVq96hDttwyxvcoBeQo4sg8
DFaC2GPbgYJI/gfQabVNm4NCy/hWhg+vUGkQyoCIqMdlkvV+63qZ0UavjS+Iz3ku
Z+jFEfcbpUu+ksF5CYRSRcC37nkh7sJHNfU01rKbF/IbXu3nKgojmKjeilK5MEK8
Bc3KB+ASk2sVHEEQ4EfICA90rN1ptLxgwbVPJyZ7INz30LW0tcgwLBB+AsZoy8o3
X7uUxpPQerg7G5+PtPQ0Fw2HoM+pPGyhZ+U+B8Ev9q0OLxNj7JBgmDNqyHLQ3b1d
tkzpsQBU1q2pCj2Mp+i2DEuU3IfCPL/GyvK3BDDONGsYBa45g+TiJJUNcN+rAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGJtQt8r1Aun8vGl2dm27qTrfIhIwHwYDVR0j
BBgwFoAUkFCP+YAJfhnO9l7XKoVmFqb2kKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ODgzZTNiZS01N2UyLTQxMjUtYTBjNS05YTllYTUwMWJmMDUvMC85MDUwOEZGOTgw
MDk3RTE5Q0VGNjVFRDcyQTg1NjYxNkE2RjY5MEFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZBNkY2
OTBBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg4M2UzYmUtNTdlMi00MTI1LWEw
YzUtOWE5ZWE1MDFiZjA1LzAvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2
MTZBNkY2OTBBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKUkhxnVrrKSEdgt9nb8uTDWZkCBW5z3lRcu
2vAFUjKq9nAlIWpGjElV+iFNypk89/us/Npu9GodkaKpNxa0gNybVQlsxyPSN8/P
vGZxeFK4lhxeb0MeQBYJareRn2z4JFz4bKI5Uqm9cmoBWuRbMOKB/dcnjQH6RLug
+cqQWxnPAjXdWIAZPMqnFVydO40Nsn0HN6Y93EI3LnYjQk1LYyJvFpZQoyLxOnYk
Y129ikrPtLrXADmFotzyFSdiCW9tpk8LPsffRUijkiINZXR890tLMHsFpp6acUlW
NtvK0wq8/SaDfaQywcP0aVI74PU1iD0kfudgnV33KYhQ/pTypLM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:39:08 2026 by rpki-client