$ rpki-client -vvf repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft File: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft (raw, json) Hash identifier: Z0qEB29D7FiSvpKYSKXBZl0MX39vPmZcth+Eb9qa5ho= Subject key identifier: 45:6C:2E:4A:A3:CA:C5:13:A0:0E:4F:29:17:8C:41:23:60:47:91:F1 Authority key identifier: 90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 Certificate issuer: /CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Certificate serial: 604DFD92996267695E9C0ADD0276BA61E869BB9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft Manifest number: 020D Signing time: Sat 28 Feb 2026 19:42:01 +0000 Manifest this update: Sat 28 Feb 2026 19:37:01 +0000 Manifest next update: Wed 04 Mar 2026 05:57:01 +0000 Files and hashes: 1: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl (hash: fx2iSTVpseKXvCMt0vehQ298YY71+E9iOHZTgA7MpbA=) 2: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (hash: t0f8hH0p5YUalqHFkiu1kyX28Ot7aEHcWn8PNYVXvq0=) 3: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (hash: 3wrZ4aSA+t/PIX/VnbG950yKhlv7BEyHLtumjw5neEc=) 4: 3130332e3134352e35322e302f32342d3234203d3e20313339343535.roa (hash: AnirtwiQcqhih7uqF14RHtBvHcWSRInmlpBmELQD3Bc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 05:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:4d:fd:92:99:62:67:69:5e:9c:0a:dd:02:76:ba:61:e8:69:bb:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Validity Not Before: Feb 28 19:37:01 2026 GMT Not After : Mar 4 05:57:01 2026 GMT Subject: CN=456C2E4AA3CAC513A00E4F29178C4123604791F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a4:16:18:10:39:5c:df:b1:ba:de:85:29:e4: a2:5d:7f:50:8b:6b:44:ca:f9:83:44:ab:bb:2d:60: 6a:29:55:0e:1f:b6:52:b9:9b:a4:5b:16:11:2d:ad: 6b:e4:2f:e0:65:bd:78:d2:75:63:96:dd:2c:7a:5e: c4:6d:2f:27:f8:5f:3e:a5:f5:da:81:90:35:7b:91: 55:f4:3d:1a:79:a8:1b:68:b5:22:0d:89:b1:c5:d3: f4:c1:e1:c6:b2:df:dd:f3:a2:81:6f:69:9e:8c:fa: b5:50:cf:95:38:13:37:18:94:0c:f1:5d:40:d7:b5: 4c:6a:4c:df:3b:8f:1d:d2:8d:97:b0:8b:0d:7b:3c: 48:e3:b4:30:9c:cd:3c:84:c9:8f:eb:0a:9c:fd:b1: 9c:a7:81:ac:b6:76:87:93:15:ab:5e:f5:81:c1:df: 86:8d:8f:87:d9:62:4f:02:1f:80:bc:ee:96:2d:9b: fd:0a:53:ae:92:fa:07:0e:7d:ec:fa:d4:80:86:bd: 56:db:67:64:3f:b2:5b:a4:fe:e8:a9:9f:e9:1d:47: dd:c4:ca:1c:7a:47:81:53:46:55:dc:a1:03:0a:6a: dd:f4:83:df:f0:25:61:40:88:09:54:bc:2b:c6:6f: 57:05:12:3c:5f:3b:1c:ed:15:e8:54:6b:52:1a:ca: e7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6C:2E:4A:A3:CA:C5:13:A0:0E:4F:29:17:8C:41:23:60:47:91:F1 X509v3 Authority Key Identifier: keyid:90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:cf:8d:7a:1d:8b:39:c1:89:f3:16:f9:1f:7f:2a:29:70:6c: bd:3a:6f:3c:c9:25:eb:43:3d:48:6e:38:4a:1c:05:7f:32:23: a0:a3:b4:49:9c:a1:e2:45:8f:71:5d:8a:97:1d:df:10:92:f5: 3e:56:63:95:fb:a8:06:51:60:de:a1:96:54:d1:b4:2e:69:45: 4d:02:de:18:6b:47:be:e2:0c:01:bd:15:eb:fe:84:c0:47:be: 1e:77:43:5c:f8:a1:8b:f0:d1:d7:19:91:e4:d3:8e:4b:e5:e7: 42:66:d3:94:e2:ee:0b:29:28:ef:4f:c8:8d:10:ff:2d:0a:27: 6e:37:88:54:48:9e:b7:8a:c4:49:d7:cb:b8:3c:46:21:13:bc: 49:05:81:0e:96:4b:a6:96:92:f0:eb:29:09:68:c8:54:5d:04: 69:f2:09:0f:86:b2:38:be:7e:73:57:fa:ce:38:52:22:64:cc: cd:29:de:c4:fa:a7:ad:77:bc:e1:bb:d2:a2:c8:08:88:8c:ac: db:58:c1:17:b1:37:81:87:b0:31:16:af:26:15:8b:21:5e:fb: ed:6d:0e:d3:c6:a3:ec:73:12:25:cc:ba:c6:72:66:8f:76:cd: 18:a8:09:f6:ff:3c:ca:e9:c9:af:84:c8:c3:61:34:c3:05:1e: 26:a3:a3:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYE39kpliZ2lenArdAna6Yehpu58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFF Q0VGODNBMzAeFw0yNjAyMjgxOTM3MDFaFw0yNjAzMDQwNTU3MDFaMDMxMTAvBgNV BAMTKDQ1NkMyRTRBQTNDQUM1MTNBMDBFNEYyOTE3OEM0MTIzNjA0NzkxRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCypBYYEDlc37G63oUp5KJdf1CL a0TK+YNEq7stYGopVQ4ftlK5m6RbFhEtrWvkL+BlvXjSdWOW3Sx6XsRtLyf4Xz6l 9dqBkDV7kVX0PRp5qBtotSINibHF0/TB4cay393zooFvaZ6M+rVQz5U4EzcYlAzx XUDXtUxqTN87jx3SjZewiw17PEjjtDCczTyEyY/rCpz9sZyngay2doeTFate9YHB 34aNj4fZYk8CH4C87pYtm/0KU66S+gcOfez61ICGvVbbZ2Q/sluk/uipn+kdR93E yhx6R4FTRlXcoQMKat30g9/wJWFAiAlUvCvGb1cFEjxfOxztFehUa1IayuetAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURWwuSqPKxROgDk8pF4xBI2BHkfEwHwYDVR0j BBgwFoAUkOLMrKMj6rIUX1S3z2XF+uzvg6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzdmZmUyYS0zMWU0LTQ4MDAtOTdkNC03ODc0YzEyMzE5MTEvMC85MEUyQ0NBQ0Ez MjNFQUIyMTQ1RjU0QjdDRjY1QzVGQUVDRUY4M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFFQ0VG ODNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc3ZmZlMmEtMzFlNC00ODAwLTk3 ZDQtNzg3NGMxMjMxOTExLzAvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1 RkFFQ0VGODNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL7PjXodiznBifMW+R9/KilwbL06bzzJJetD PUhuOEocBX8yI6CjtEmcoeJFj3Fdipcd3xCS9T5WY5X7qAZRYN6hllTRtC5pRU0C 3hhrR77iDAG9Fev+hMBHvh53Q1z4oYvw0dcZkeTTjkvl50Jm05Ti7gspKO9PyI0Q /y0KJ243iFRInreKxEnXy7g8RiETvEkFgQ6WS6aWkvDrKQloyFRdBGnyCQ+Gsji+ fnNX+s44UiJkzM0p3sT6p613vOG70qLICIiMrNtYwRexN4GHsDEWryYViyFe++1t DtPGo+xzEiXMusZyZo92zRioCfb/PMrpya+EyMNhNMMFHiajoz0= -----END CERTIFICATE-----Generated at Mon Mar 2 02:26:45 2026 by rpki-client