$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft File: 90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft (raw, json) Hash identifier: zYHMXsSQdoTzIaTdc4VPtaKPxGvpCX6OdTSGfUL385w= Subject key identifier: 7F:B4:BE:A7:9F:E2:B0:AF:A0:4B:4E:C5:0C:E4:72:90:A0:C2:55:5A Authority key identifier: 90:B0:BF:C1:8E:B9:04:96:C0:32:33:83:DC:DC:92:1D:9D:8E:62:C7 Certificate issuer: /CN=90B0BFC18EB90496C0323383DCDC921D9D8E62C7 Certificate serial: 69C806969DABCBF502D0245D492A9B065743E156 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft Manifest number: BF Signing time: Tue 22 Sep 2026 03:25:52 +0000 Manifest this update: Tue 22 Sep 2026 03:20:52 +0000 Manifest next update: Wed 23 Sep 2026 06:31:52 +0000 Files and hashes: 1: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: f1xLE51GWOwQNLvRvEntiSu/P1tXHq8fAnPJwIPOL+s=) 2: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: fBi7KOxItMXmNwqCO9NrsVw12oG+iWETgMZG+hflMwY=) 3: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: 9wRrgktFn4gbGNfBo3IH1gpwK1hyiBcfUs4oIPcTOYQ=) 4: 90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl (hash: h+ET8uzLtDUoNsP4vIVWr5QRux7aautxZh26OLc2Uqg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 06:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c8:06:96:9d:ab:cb:f5:02:d0:24:5d:49:2a:9b:06:57:43:e1:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90B0BFC18EB90496C0323383DCDC921D9D8E62C7 Validity Not Before: Sep 22 03:20:52 2026 GMT Not After : Sep 23 06:31:52 2026 GMT Subject: CN=7FB4BEA79FE2B0AFA04B4EC50CE47290A0C2555A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9c:df:fc:5c:e7:96:1f:9f:22:49:50:2a:25: 4f:14:6c:fb:67:d5:75:53:ce:78:93:54:08:c4:92: 52:b2:17:08:2e:55:8c:c6:12:7e:67:e3:c8:52:4d: 82:ce:e0:9f:65:e8:6b:61:98:06:5f:68:a3:9d:1f: 56:39:5f:05:ac:7c:ee:d4:2d:90:e6:e7:fa:af:8e: e4:7e:7f:c1:0f:54:7d:36:be:3d:40:57:49:ad:2d: e4:b2:13:7f:36:00:4c:35:50:5b:d5:a2:eb:80:81: 75:3a:b6:27:a9:92:67:2c:82:6c:54:f9:6a:24:9a: 01:16:69:dd:ed:15:98:8f:d5:cc:b0:4b:d3:95:09: 67:26:8b:70:70:c3:d2:05:59:9e:be:17:8e:3a:fb: d4:0f:13:69:c5:8b:0f:89:ab:1c:cb:5f:41:7a:16: 2c:7d:66:0c:b9:20:d3:c1:4c:c7:a3:2f:08:8a:b3: 4f:77:ba:45:9c:88:5e:ec:ff:d8:51:fd:02:d5:cc: ac:bc:92:23:17:1b:95:4b:7c:d7:08:8a:f2:26:7c: f8:eb:0f:e0:5c:a5:76:09:2c:5c:ac:95:cf:ac:08: 6e:3e:97:9d:5a:90:f9:31:8d:b2:31:dd:bc:a0:c8: 95:28:95:68:ba:d1:39:f8:e8:76:cb:5a:61:fe:89: d9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B4:BE:A7:9F:E2:B0:AF:A0:4B:4E:C5:0C:E4:72:90:A0:C2:55:5A X509v3 Authority Key Identifier: keyid:90:B0:BF:C1:8E:B9:04:96:C0:32:33:83:DC:DC:92:1D:9D:8E:62:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:90:77:c0:65:f2:b4:97:0f:69:5c:06:c8:e4:b6:f4:fa:14: 35:b4:76:f9:5d:48:67:ba:47:0c:45:af:16:21:bb:6a:dd:0a: 1d:d4:97:0d:60:8f:94:8f:75:79:04:cb:0d:3b:f2:a8:50:08: 84:e3:4b:73:f2:bf:69:11:0c:fc:ed:ec:83:7c:f0:34:e4:d7: af:68:50:9c:a8:c0:91:32:99:a9:32:28:fc:31:dd:e7:dc:f2: 7e:48:c0:3c:a1:ae:14:5f:ec:46:0b:a3:dc:95:29:a6:99:ce: 32:b2:5d:90:f8:2e:86:70:d0:c9:f8:06:d6:35:fe:9c:a3:00: 7c:61:cb:3a:76:97:f5:55:dd:6a:6c:6e:9f:32:61:1d:8d:c4: 76:9a:c4:ae:70:e3:7d:65:71:4e:26:b7:97:cb:a7:86:07:4e: a5:1b:56:86:93:ae:2c:f2:15:69:39:25:55:45:eb:c1:d0:ee: 46:52:46:ef:f7:58:b3:df:29:7c:f0:69:79:ce:ee:8f:8d:b9: e2:f5:a7:db:20:47:b6:fd:1e:ec:0a:9d:e4:fb:1c:23:9a:35: 10:f6:21:5d:c4:ac:39:63:a8:bd:34:40:1c:7c:c9:d6:9f:11: dd:02:29:34:57:41:59:0d:6d:34:ea:84:1b:48:61:8b:f9:a9: 71:c4:4f:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUacgGlp2ry/UC0CRdSSqbBldD4VYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBCMEJGQzE4RUI5MDQ5NkMwMzIzMzgzRENEQzkyMUQ5 RDhFNjJDNzAeFw0yNjA5MjIwMzIwNTJaFw0yNjA5MjMwNjMxNTJaMDMxMTAvBgNV BAMTKDdGQjRCRUE3OUZFMkIwQUZBMDRCNEVDNTBDRTQ3MjkwQTBDMjU1NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLnN/8XOeWH58iSVAqJU8UbPtn 1XVTzniTVAjEklKyFwguVYzGEn5n48hSTYLO4J9l6GthmAZfaKOdH1Y5XwWsfO7U LZDm5/qvjuR+f8EPVH02vj1AV0mtLeSyE382AEw1UFvVouuAgXU6tiepkmcsgmxU +WokmgEWad3tFZiP1cywS9OVCWcmi3Bww9IFWZ6+F446+9QPE2nFiw+JqxzLX0F6 Fix9Zgy5INPBTMejLwiKs093ukWciF7s/9hR/QLVzKy8kiMXG5VLfNcIivImfPjr D+BcpXYJLFyslc+sCG4+l51akPkxjbIx3bygyJUolWi60Tn46HbLWmH+idmrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf7S+p5/isK+gS07FDORykKDCVVowHwYDVR0j BBgwFoAUkLC/wY65BJbAMjOD3NySHZ2OYscwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGQ0ZGNkZTMtNzU3Zi00M2Q0LWFkZTItZmYwODg3Y2MyNDg3LzAvOTBCMEJGQzE4 RUI5MDQ5NkMwMzIzMzgzRENEQzkyMUQ5RDhFNjJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEIwQkZDMThFQjkwNDk2QzAzMjMzODNEQ0RDOTIxRDlEOEU2 MkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvOTBCMEJGQzE4RUI5MDQ5NkMwMzIzMzgzRENEQzky MUQ5RDhFNjJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuQd8Bl8rSXD2lcBsjktvT6FDW0dvldSGe6 RwxFrxYhu2rdCh3Ulw1gj5SPdXkEyw078qhQCITjS3Pyv2kRDPzt7IN88DTk169o UJyowJEymakyKPwx3efc8n5IwDyhrhRf7EYLo9yVKaaZzjKyXZD4LoZw0Mn4BtY1 /pyjAHxhyzp2l/VV3Wpsbp8yYR2NxHaaxK5w431lcU4mt5fLp4YHTqUbVoaTrizy FWk5JVVF68HQ7kZSRu/3WLPfKXzwaXnO7o+NueL1p9sgR7b9HuwKneT7HCOaNRD2 IV3ErDljqL00QBx8ydafEd0CKTRXQVkNbTTqhBtIYYv5qXHET14= -----END CERTIFICATE-----Generated at Wed Sep 23 00:54:28 2026 by rpki-client