$ rpki-client -vvf repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft File: 2B90BB17E78B62C15179029C6583E42BD7E18277.mft (raw, json) Hash identifier: Reg3UBPdTqAVIxXwVltsy5wVeyB2Go1Nb8JdH5kVgjY= Subject key identifier: 5C:3B:DD:0F:09:78:DD:FF:F4:05:25:E1:34:F4:A5:DE:B3:5C:BB:39 Authority key identifier: 2B:90:BB:17:E7:8B:62:C1:51:79:02:9C:65:83:E4:2B:D7:E1:82:77 Certificate issuer: /CN=2B90BB17E78B62C15179029C6583E42BD7E18277 Certificate serial: 3955C6E7D58F28446FEAEF73E15EA67352CC6284 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft Manifest number: E3 Signing time: Wed 15 Apr 2026 20:00:45 +0000 Manifest this update: Wed 15 Apr 2026 19:55:45 +0000 Manifest next update: Sun 19 Apr 2026 06:11:45 +0000 Files and hashes: 1: 3130332e38302e3231352e302f32342d3234203d3e20313533303932.roa (hash: E4Gvpo5D/NeUbbz+zUDpV78niTppp2APH+i1gYLD2PM=) 2: 2B90BB17E78B62C15179029C6583E42BD7E18277.crl (hash: A7fPNoX8yuuKqoRuFJjQt8MAWUhXeO8kVobeOgrpkLY=) 3: 3130332e38302e3231342e302f32342d3234203d3e20313533303932.roa (hash: E7LmVcTtrOc0QLca3OKgAjrGPUq24WcKvpibpJhqwMo=) 4: 3130332e38302e3231342e302f32332d3233203d3e20313533303932.roa (hash: /bOtG6Hq4cCxQBrZ1Nbmvs+Hrm8cpxmM7Q2j13q5aYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.crl rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 06:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:55:c6:e7:d5:8f:28:44:6f:ea:ef:73:e1:5e:a6:73:52:cc:62:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B90BB17E78B62C15179029C6583E42BD7E18277 Validity Not Before: Apr 15 19:55:45 2026 GMT Not After : Apr 19 06:11:45 2026 GMT Subject: CN=5C3BDD0F0978DDFFF40525E134F4A5DEB35CBB39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:25:99:2f:82:c4:0a:a2:2c:e9:52:ca:0a:15: ca:26:28:67:e4:e2:f2:ea:e7:73:de:b6:02:90:d9: 5f:22:56:09:04:53:7a:9a:65:2d:93:1e:16:b4:0f: 6c:fd:82:cd:d3:c4:bd:b9:d1:3a:16:af:48:2b:44: cb:40:a5:c6:2b:58:f4:7d:f7:1a:4e:62:d7:a4:8e: 98:50:a0:e0:e6:7e:d5:c0:e6:48:9e:0e:4a:22:73: a1:d3:df:4a:ac:1d:c7:1f:62:4d:4b:d5:19:29:cf: c4:c2:38:2d:4c:32:99:f4:ee:ba:59:5c:0a:1e:2e: 46:87:53:2c:1e:39:e8:5f:33:70:ec:22:c1:c4:07: 25:87:48:a1:35:2f:ec:2d:2e:50:48:92:f3:85:4a: 3e:01:3a:a8:42:5f:25:32:49:43:9b:87:0f:4d:56: 7c:17:bf:a9:7c:94:3e:65:aa:b6:16:ab:40:f6:99: 88:88:40:c6:00:bd:83:c8:a0:21:a1:6d:60:15:fc: bc:c9:e0:7a:a5:96:4e:3c:1f:e4:f2:a6:4e:0f:b5: bc:9c:06:3e:1c:60:43:f7:c6:29:a2:75:1f:c9:3a: 79:ae:b3:c2:a1:01:f5:e0:3b:51:1d:05:20:89:ea: e0:a0:94:53:38:35:05:bb:53:1f:50:4a:23:fb:1a: 45:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3B:DD:0F:09:78:DD:FF:F4:05:25:E1:34:F4:A5:DE:B3:5C:BB:39 X509v3 Authority Key Identifier: keyid:2B:90:BB:17:E7:8B:62:C1:51:79:02:9C:65:83:E4:2B:D7:E1:82:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:58:50:7a:55:cb:23:48:76:ce:c0:0d:97:26:6c:2c:ed:2f: b6:bb:46:7e:21:b1:9a:1f:2f:6a:f0:ad:ae:97:db:c6:00:47: de:a3:95:ff:af:f8:c4:cd:ac:e2:f5:28:a2:a4:63:01:e6:03: 95:8c:c3:02:a6:29:37:da:72:7d:31:c0:ca:8d:cc:50:2d:b4: a3:ba:98:03:ed:59:2b:41:8a:f5:ec:76:73:de:c5:b4:d8:0a: ad:b5:e4:70:dc:5a:68:89:27:a1:d1:42:25:85:95:2f:ed:6f: 17:f0:c4:0e:b7:ae:a5:6e:ef:d0:26:40:83:0c:d6:5c:8f:7a: 7f:da:31:a7:07:49:12:60:1b:9a:53:8c:12:3d:3a:fe:a6:6a: 4e:67:9e:b8:75:35:ec:9a:b6:bc:f4:7f:57:21:7a:76:c9:ab: 1c:6f:47:f1:68:e4:57:ad:12:a9:1d:b1:5b:a2:75:a8:34:3e: 77:e0:9c:8b:b5:7b:4d:18:36:77:9c:ef:ad:42:a2:da:14:fd: 13:b4:3f:49:b8:bd:81:6a:1a:31:76:f8:6f:86:f0:55:4e:67: bc:7d:16:03:da:0f:ae:44:7b:46:dd:ed:3c:26:a9:e5:f6:97: 64:08:0d:74:1d:0f:df:87:ae:74:c3:c7:82:cd:5e:c3:c3:59: c2:2d:6a:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOVXG59WPKERv6u9z4V6mc1LMYoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI5MEJCMTdFNzhCNjJDMTUxNzkwMjlDNjU4M0U0MkJE N0UxODI3NzAeFw0yNjA0MTUxOTU1NDVaFw0yNjA0MTkwNjExNDVaMDMxMTAvBgNV BAMTKDVDM0JERDBGMDk3OERERkZGNDA1MjVFMTM0RjRBNURFQjM1Q0JCMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpJZkvgsQKoizpUsoKFcomKGfk 4vLq53PetgKQ2V8iVgkEU3qaZS2THha0D2z9gs3TxL250ToWr0grRMtApcYrWPR9 9xpOYtekjphQoODmftXA5kieDkoic6HT30qsHccfYk1L1Rkpz8TCOC1MMpn07rpZ XAoeLkaHUyweOehfM3DsIsHEByWHSKE1L+wtLlBIkvOFSj4BOqhCXyUySUObhw9N VnwXv6l8lD5lqrYWq0D2mYiIQMYAvYPIoCGhbWAV/LzJ4Hqllk48H+Typk4Ptbyc Bj4cYEP3ximidR/JOnmus8KhAfXgO1EdBSCJ6uCglFM4NQW7Ux9QSiP7GkUxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXDvdDwl43f/0BSXhNPSl3rNcuzkwHwYDVR0j BBgwFoAUK5C7F+eLYsFReQKcZYPkK9fhgncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTVhNWU2ZC05MWVlLTQ0OTctYjQxNy04ZDMyZjY1M2U0YjAvMC8yQjkwQkIxN0U3 OEI2MkMxNTE3OTAyOUM2NTgzRTQyQkQ3RTE4Mjc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkI5MEJCMTdFNzhCNjJDMTUxNzkwMjlDNjU4M0U0MkJEN0Ux ODI3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU1YTVlNmQtOTFlZS00NDk3LWI0 MTctOGQzMmY2NTNlNGIwLzAvMkI5MEJCMTdFNzhCNjJDMTUxNzkwMjlDNjU4M0U0 MkJEN0UxODI3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxYUHpVyyNIds7ADZcmbCztL7a7Rn4hsZof L2rwra6X28YAR96jlf+v+MTNrOL1KKKkYwHmA5WMwwKmKTfacn0xwMqNzFAttKO6 mAPtWStBivXsdnPexbTYCq215HDcWmiJJ6HRQiWFlS/tbxfwxA63rqVu79AmQIMM 1lyPen/aMacHSRJgG5pTjBI9Ov6mak5nnrh1Neyatrz0f1chenbJqxxvR/Fo5Fet EqkdsVuidag0PnfgnIu1e00YNnec761CotoU/RO0P0m4vYFqGjF2+G+G8FVOZ7x9 FgPaD65Ee0bd7TwmqeX2l2QIDXQdD9+HrnTDx4LNXsPDWcItaqQ= -----END CERTIFICATE-----Generated at Fri Apr 17 20:36:28 2026 by rpki-client