$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft File: 90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft (raw, json) Hash identifier: /v8ELcvj5xE/ElGX26c0Mas188s7HZxiCTCainp3lR0= Subject key identifier: 52:9E:46:37:6E:D4:02:BC:AE:9C:17:52:8A:6E:8A:0B:63:0D:B5:25 Authority key identifier: 90:B0:BF:C1:8E:B9:04:96:C0:32:33:83:DC:DC:92:1D:9D:8E:62:C7 Certificate issuer: /CN=90B0BFC18EB90496C0323383DCDC921D9D8E62C7 Certificate serial: 107678BCAEE236EDC47E816EC5137DE55B99D2E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 22:34:26 +0000 Manifest this update: Tue 22 Sep 2026 22:29:26 +0000 Manifest next update: Thu 24 Sep 2026 02:22:26 +0000 Files and hashes: 1: 90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl (hash: NwzaH79Xj0Vj4UQlHcgF1Mbei3tT9uPWRqi3Sq/rfr4=) 2: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: f1xLE51GWOwQNLvRvEntiSu/P1tXHq8fAnPJwIPOL+s=) 3: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: 9wRrgktFn4gbGNfBo3IH1gpwK1hyiBcfUs4oIPcTOYQ=) 4: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: fBi7KOxItMXmNwqCO9NrsVw12oG+iWETgMZG+hflMwY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 02:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:76:78:bc:ae:e2:36:ed:c4:7e:81:6e:c5:13:7d:e5:5b:99:d2:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90B0BFC18EB90496C0323383DCDC921D9D8E62C7 Validity Not Before: Sep 22 22:29:26 2026 GMT Not After : Sep 24 02:22:26 2026 GMT Subject: CN=529E46376ED402BCAE9C17528A6E8A0B630DB525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5d:80:ab:0e:2b:40:aa:c7:a3:9b:ad:e3:07: 4a:66:fd:73:a4:a9:2c:3e:f1:2e:09:35:82:75:e9: 54:f8:99:05:27:ae:fb:cd:07:da:61:9a:eb:2a:22: 2e:4e:65:ae:a8:d9:7f:25:45:ad:b5:00:10:45:b2: 55:8d:1a:17:c1:be:34:02:39:58:a9:b4:9c:ba:95: 32:5f:e0:d6:27:b6:45:5e:72:a9:41:f2:b8:6f:59: 85:76:a4:ff:68:74:58:0c:6f:8b:05:e3:f9:32:96: ef:f1:cc:73:42:01:d0:25:e1:5b:21:eb:6e:bd:ee: 41:e1:6f:42:d6:af:cf:03:89:08:d1:42:98:08:d0: 21:8f:0e:a0:d1:c2:f9:e3:9e:26:b1:9e:8e:b7:d2: 41:1b:9b:02:5b:8d:c0:c8:03:ca:80:86:ba:e9:bf: e4:5a:b1:a4:2e:d5:4b:e3:f6:0c:7d:4c:13:6e:5c: c8:2e:f0:fe:d0:02:f9:87:b9:01:3c:d5:8a:b6:0f: 6a:3e:9d:4f:98:0c:c3:6a:bb:65:7d:e7:c9:ca:23: 59:f7:31:e3:b4:bf:be:67:84:b0:b4:30:82:67:ad: ef:76:f5:ef:e3:71:87:0f:38:79:d5:66:98:8e:d4: 7e:0c:60:30:9e:c1:ae:dc:af:79:a0:a6:41:a7:a4: 33:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9E:46:37:6E:D4:02:BC:AE:9C:17:52:8A:6E:8A:0B:63:0D:B5:25 X509v3 Authority Key Identifier: keyid:90:B0:BF:C1:8E:B9:04:96:C0:32:33:83:DC:DC:92:1D:9D:8E:62:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:0c:7f:d5:70:b0:78:5f:fa:83:16:56:eb:06:77:59:5a:03: b7:eb:e4:35:50:6f:63:86:92:5b:51:c0:a2:e4:23:66:6b:3f: c1:bd:c5:bf:cb:13:f4:95:4e:17:90:34:93:48:8a:fc:74:70: d0:f6:eb:9c:c7:9d:38:37:d3:2e:56:40:55:0c:83:1c:67:fc: 27:32:29:3e:fa:1c:01:80:68:19:4b:12:9a:28:e0:12:47:f3: 71:16:32:55:61:7b:17:8c:c1:f9:f4:3c:11:6f:04:96:c9:c3: 46:ec:35:80:da:6b:d8:88:db:a4:1a:4c:3e:d0:c3:c0:47:5f: 96:ad:6f:e8:70:f0:4b:d0:a3:6b:87:d0:70:d8:8c:94:b4:ce: e4:3f:6f:7b:c7:f6:16:fb:e3:e2:93:35:57:3d:d5:d2:73:50: 73:97:14:90:1e:80:39:32:1a:5b:d2:c7:40:4b:e8:db:df:95: fa:98:05:fb:5f:1b:90:5e:5e:c5:9e:be:a6:0d:81:d4:ad:78: 87:c4:ec:52:61:2a:5b:06:67:fb:5a:5e:f9:f4:20:b3:3c:45: 55:33:19:9b:bb:b2:13:fc:2f:63:e6:b8:e8:b4:c5:34:54:80: 25:96:78:1f:fe:4b:9f:e2:b0:61:9e:9a:91:50:05:13:9a:60: 02:bd:38:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEHZ4vK7iNu3EfoFuxRN95VuZ0uUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBCMEJGQzE4RUI5MDQ5NkMwMzIzMzgzRENEQzkyMUQ5 RDhFNjJDNzAeFw0yNjA5MjIyMjI5MjZaFw0yNjA5MjQwMjIyMjZaMDMxMTAvBgNV BAMTKDUyOUU0NjM3NkVENDAyQkNBRTlDMTc1MjhBNkU4QTBCNjMwREI1MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIXYCrDitAqsejm63jB0pm/XOk qSw+8S4JNYJ16VT4mQUnrvvNB9phmusqIi5OZa6o2X8lRa21ABBFslWNGhfBvjQC OViptJy6lTJf4NYntkVecqlB8rhvWYV2pP9odFgMb4sF4/kylu/xzHNCAdAl4Vsh 62697kHhb0LWr88DiQjRQpgI0CGPDqDRwvnjniaxno630kEbmwJbjcDIA8qAhrrp v+RasaQu1Uvj9gx9TBNuXMgu8P7QAvmHuQE81Yq2D2o+nU+YDMNqu2V958nKI1n3 MeO0v75nhLC0MIJnre929e/jcYcPOHnVZpiO1H4MYDCewa7cr3mgpkGnpDPfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUp5GN27UAryunBdSim6KC2MNtSUwHwYDVR0j BBgwFoAUkLC/wY65BJbAMjOD3NySHZ2OYscwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGQ0ZGNkZTMtNzU3Zi00M2Q0LWFkZTItZmYwODg3Y2MyNDg3LzAvOTBCMEJGQzE4 RUI5MDQ5NkMwMzIzMzgzRENEQzkyMUQ5RDhFNjJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEIwQkZDMThFQjkwNDk2QzAzMjMzODNEQ0RDOTIxRDlEOEU2 MkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvOTBCMEJGQzE4RUI5MDQ5NkMwMzIzMzgzRENEQzky MUQ5RDhFNjJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4Mf9VwsHhf+oMWVusGd1laA7fr5DVQb2OG kltRwKLkI2ZrP8G9xb/LE/SVTheQNJNIivx0cND265zHnTg30y5WQFUMgxxn/Ccy KT76HAGAaBlLEpoo4BJH83EWMlVhexeMwfn0PBFvBJbJw0bsNYDaa9iI26QaTD7Q w8BHX5atb+hw8EvQo2uH0HDYjJS0zuQ/b3vH9hb74+KTNVc91dJzUHOXFJAegDky GlvSx0BL6NvflfqYBftfG5BeXsWevqYNgdSteIfE7FJhKlsGZ/taXvn0ILM8RVUz GZu7shP8L2PmuOi0xTRUgCWWeB/+S5/isGGempFQBROaYAK9OJE= -----END CERTIFICATE-----Generated at Wed Sep 23 10:17:51 2026 by rpki-client