$ rpki-client -vvf repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft File: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft (raw, json) Hash identifier: ObExCBkrl0xMljMjZQhWbRDIc9PiBNT4BXwNTIe5o58= Subject key identifier: 93:7A:C3:D7:03:B6:15:A9:BA:C5:28:25:66:0C:9A:EA:E6:B5:A6:41 Authority key identifier: 90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 Certificate issuer: /CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Certificate serial: 2D9666F60CC17F914D8970640F8966C7A4E690DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft Manifest number: 0223 Signing time: Sat 18 Apr 2026 17:41:30 +0000 Manifest this update: Sat 18 Apr 2026 17:36:30 +0000 Manifest next update: Tue 21 Apr 2026 17:48:30 +0000 Files and hashes: 1: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (hash: 4TOSRtXxwoc1DClbkhe3iiOSNBbwLVpi+J6WdybY63c=) 2: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl (hash: kNB6cMeOD1EfGU+QP9R1mFWYOjk7WNLa5rTWgeFxOR8=) 3: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (hash: 3wrZ4aSA+t/PIX/VnbG950yKhlv7BEyHLtumjw5neEc=) 4: 3130332e3134352e35322e302f32342d3234203d3e20313339343535.roa (hash: MPra63E26ubEDDY2JzmWeIwcUBZxwSSUVSnEZHc8Cxs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 17:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:96:66:f6:0c:c1:7f:91:4d:89:70:64:0f:89:66:c7:a4:e6:90:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Validity Not Before: Apr 18 17:36:30 2026 GMT Not After : Apr 21 17:48:30 2026 GMT Subject: CN=937AC3D703B615A9BAC52825660C9AEAE6B5A641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7f:53:06:4d:7b:6f:20:6d:f2:af:67:30:17: 29:03:c8:f7:06:8e:7d:12:19:6e:b5:e1:43:c2:5e: 63:ed:b7:30:71:de:f1:be:ea:57:10:63:3a:7b:78: a6:cd:f8:b0:77:f9:6f:3a:7c:10:a8:04:ee:a1:f9: 13:02:20:11:32:57:48:34:e4:03:98:bf:8b:35:91: a3:aa:90:30:2b:c0:59:f5:e1:91:85:0c:c4:a8:15: aa:20:48:4b:a8:60:ad:86:c2:ac:9c:38:5b:a1:bc: bc:33:13:3b:93:69:56:d5:85:41:32:e1:65:f5:f6: 25:35:68:8c:10:14:76:c6:c4:5b:c9:cb:04:46:23: 82:6d:5a:c3:b2:24:df:94:97:bf:9a:32:cd:29:18: 22:ae:ee:a0:68:f4:59:bb:43:7a:6d:07:23:05:db: 0c:f7:ba:0b:b5:86:91:21:76:f8:3b:49:42:32:d2: 8e:be:71:0e:98:40:59:62:74:67:61:ca:32:b9:18: cd:61:cb:67:1c:a1:5d:6d:66:ad:18:34:68:2e:ad: 2a:47:4e:f7:98:46:06:11:ff:e1:a2:75:62:ab:e9: 90:34:8e:c2:fd:98:c5:6e:78:f6:dc:fe:f9:ff:0e: 5f:0f:83:38:4a:0f:35:8d:54:1f:9b:51:3b:ee:d5: f0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7A:C3:D7:03:B6:15:A9:BA:C5:28:25:66:0C:9A:EA:E6:B5:A6:41 X509v3 Authority Key Identifier: keyid:90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4b:36:0c:c4:b1:2b:1e:02:6e:f7:81:ce:8b:23:36:85:18: be:6f:ee:57:72:bb:ad:80:f0:36:81:8c:13:47:26:e2:e1:0f: 56:e8:dc:1e:45:f2:4a:90:66:76:76:b5:1d:19:e5:a1:d3:ce: 35:b5:03:1a:a5:93:e7:2e:3f:6f:b2:73:6b:bc:44:5b:d0:26: cc:05:e4:71:77:1b:9e:1a:82:ab:09:14:ce:f4:91:d9:d3:72: c4:32:ef:45:0e:5d:2c:80:78:fb:d1:39:d5:24:b9:f5:50:08: 37:b7:9f:78:46:8e:11:4a:6e:ff:b8:df:cd:6a:60:a1:93:e9: d6:36:13:d1:f6:fe:f8:fb:88:a6:ad:19:10:a0:e0:ac:a8:97: c5:3f:54:95:85:46:be:d4:c7:6d:6b:c6:67:23:25:e0:ec:81: 08:a3:6a:9e:db:c0:09:21:6c:a6:68:69:d0:ab:d0:17:00:5d: 3b:4a:30:13:1b:54:d3:28:ce:bf:db:74:a9:a0:48:d1:cd:68: 8a:ba:ee:7b:b6:5c:0b:10:b0:3a:a0:75:48:12:ca:4a:ed:b8: b4:b6:c2:39:a6:b3:d5:04:ce:c8:dd:7f:c1:71:66:d2:12:9e: 38:4a:af:fd:85:f9:2c:93:5a:30:75:3c:12:4e:59:54:ef:03: b3:fc:c4:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZZm9gzBf5FNiXBkD4lmx6TmkNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFF Q0VGODNBMzAeFw0yNjA0MTgxNzM2MzBaFw0yNjA0MjExNzQ4MzBaMDMxMTAvBgNV BAMTKDkzN0FDM0Q3MDNCNjE1QTlCQUM1MjgyNTY2MEM5QUVBRTZCNUE2NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvf1MGTXtvIG3yr2cwFykDyPcG jn0SGW614UPCXmPttzBx3vG+6lcQYzp7eKbN+LB3+W86fBCoBO6h+RMCIBEyV0g0 5AOYv4s1kaOqkDArwFn14ZGFDMSoFaogSEuoYK2GwqycOFuhvLwzEzuTaVbVhUEy 4WX19iU1aIwQFHbGxFvJywRGI4JtWsOyJN+Ul7+aMs0pGCKu7qBo9Fm7Q3ptByMF 2wz3ugu1hpEhdvg7SUIy0o6+cQ6YQFlidGdhyjK5GM1hy2ccoV1tZq0YNGgurSpH TveYRgYR/+GidWKr6ZA0jsL9mMVuePbc/vn/Dl8PgzhKDzWNVB+bUTvu1fATAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk3rD1wO2Fam6xSglZgya6ua1pkEwHwYDVR0j BBgwFoAUkOLMrKMj6rIUX1S3z2XF+uzvg6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzdmZmUyYS0zMWU0LTQ4MDAtOTdkNC03ODc0YzEyMzE5MTEvMC85MEUyQ0NBQ0Ez MjNFQUIyMTQ1RjU0QjdDRjY1QzVGQUVDRUY4M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFFQ0VG ODNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc3ZmZlMmEtMzFlNC00ODAwLTk3 ZDQtNzg3NGMxMjMxOTExLzAvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1 RkFFQ0VGODNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpLNgzEsSseAm73gc6LIzaFGL5v7ldyu62A 8DaBjBNHJuLhD1bo3B5F8kqQZnZ2tR0Z5aHTzjW1Axqlk+cuP2+yc2u8RFvQJswF 5HF3G54agqsJFM70kdnTcsQy70UOXSyAePvROdUkufVQCDe3n3hGjhFKbv+4381q YKGT6dY2E9H2/vj7iKatGRCg4Kyol8U/VJWFRr7Ux21rxmcjJeDsgQijap7bwAkh bKZoadCr0BcAXTtKMBMbVNMozr/bdKmgSNHNaIq67nu2XAsQsDqgdUgSykrtuLS2 wjmms9UEzsjdf8FxZtISnjhKr/2F+SyTWjB1PBJOWVTvA7P8xIg= -----END CERTIFICATE-----Generated at Sun Apr 19 14:13:37 2026 by rpki-client