
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft
File: 90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft (raw, json)
Hash identifier: zYHMXsSQdoTzIaTdc4VPtaKPxGvpCX6OdTSGfUL385w=
Subject key identifier: 7F:B4:BE:A7:9F:E2:B0:AF:A0:4B:4E:C5:0C:E4:72:90:A0:C2:55:5A
Authority key identifier: 90:B0:BF:C1:8E:B9:04:96:C0:32:33:83:DC:DC:92:1D:9D:8E:62:C7
Certificate issuer: /CN=90B0BFC18EB90496C0323383DCDC921D9D8E62C7
Certificate serial: 69C806969DABCBF502D0245D492A9B065743E156
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft
Manifest number: BF
Signing time: Tue 22 Sep 2026 03:25:52 +0000
Manifest this update: Tue 22 Sep 2026 03:20:52 +0000
Manifest next update: Wed 23 Sep 2026 06:31:52 +0000
Files and hashes: 1: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: f1xLE51GWOwQNLvRvEntiSu/P1tXHq8fAnPJwIPOL+s=)
2: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: fBi7KOxItMXmNwqCO9NrsVw12oG+iWETgMZG+hflMwY=)
3: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: 9wRrgktFn4gbGNfBo3IH1gpwK1hyiBcfUs4oIPcTOYQ=)
4: 90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl (hash: h+ET8uzLtDUoNsP4vIVWr5QRux7aautxZh26OLc2Uqg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl
rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 06:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:c8:06:96:9d:ab:cb:f5:02:d0:24:5d:49:2a:9b:06:57:43:e1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90B0BFC18EB90496C0323383DCDC921D9D8E62C7
Validity
Not Before: Sep 22 03:20:52 2026 GMT
Not After : Sep 23 06:31:52 2026 GMT
Subject: CN=7FB4BEA79FE2B0AFA04B4EC50CE47290A0C2555A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9c:df:fc:5c:e7:96:1f:9f:22:49:50:2a:25:
4f:14:6c:fb:67:d5:75:53:ce:78:93:54:08:c4:92:
52:b2:17:08:2e:55:8c:c6:12:7e:67:e3:c8:52:4d:
82:ce:e0:9f:65:e8:6b:61:98:06:5f:68:a3:9d:1f:
56:39:5f:05:ac:7c:ee:d4:2d:90:e6:e7:fa:af:8e:
e4:7e:7f:c1:0f:54:7d:36:be:3d:40:57:49:ad:2d:
e4:b2:13:7f:36:00:4c:35:50:5b:d5:a2:eb:80:81:
75:3a:b6:27:a9:92:67:2c:82:6c:54:f9:6a:24:9a:
01:16:69:dd:ed:15:98:8f:d5:cc:b0:4b:d3:95:09:
67:26:8b:70:70:c3:d2:05:59:9e:be:17:8e:3a:fb:
d4:0f:13:69:c5:8b:0f:89:ab:1c:cb:5f:41:7a:16:
2c:7d:66:0c:b9:20:d3:c1:4c:c7:a3:2f:08:8a:b3:
4f:77:ba:45:9c:88:5e:ec:ff:d8:51:fd:02:d5:cc:
ac:bc:92:23:17:1b:95:4b:7c:d7:08:8a:f2:26:7c:
f8:eb:0f:e0:5c:a5:76:09:2c:5c:ac:95:cf:ac:08:
6e:3e:97:9d:5a:90:f9:31:8d:b2:31:dd:bc:a0:c8:
95:28:95:68:ba:d1:39:f8:e8:76:cb:5a:61:fe:89:
d9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B4:BE:A7:9F:E2:B0:AF:A0:4B:4E:C5:0C:E4:72:90:A0:C2:55:5A
X509v3 Authority Key Identifier:
keyid:90:B0:BF:C1:8E:B9:04:96:C0:32:33:83:DC:DC:92:1D:9D:8E:62:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:90:77:c0:65:f2:b4:97:0f:69:5c:06:c8:e4:b6:f4:fa:14:
35:b4:76:f9:5d:48:67:ba:47:0c:45:af:16:21:bb:6a:dd:0a:
1d:d4:97:0d:60:8f:94:8f:75:79:04:cb:0d:3b:f2:a8:50:08:
84:e3:4b:73:f2:bf:69:11:0c:fc:ed:ec:83:7c:f0:34:e4:d7:
af:68:50:9c:a8:c0:91:32:99:a9:32:28:fc:31:dd:e7:dc:f2:
7e:48:c0:3c:a1:ae:14:5f:ec:46:0b:a3:dc:95:29:a6:99:ce:
32:b2:5d:90:f8:2e:86:70:d0:c9:f8:06:d6:35:fe:9c:a3:00:
7c:61:cb:3a:76:97:f5:55:dd:6a:6c:6e:9f:32:61:1d:8d:c4:
76:9a:c4:ae:70:e3:7d:65:71:4e:26:b7:97:cb:a7:86:07:4e:
a5:1b:56:86:93:ae:2c:f2:15:69:39:25:55:45:eb:c1:d0:ee:
46:52:46:ef:f7:58:b3:df:29:7c:f0:69:79:ce:ee:8f:8d:b9:
e2:f5:a7:db:20:47:b6:fd:1e:ec:0a:9d:e4:fb:1c:23:9a:35:
10:f6:21:5d:c4:ac:39:63:a8:bd:34:40:1c:7c:c9:d6:9f:11:
dd:02:29:34:57:41:59:0d:6d:34:ea:84:1b:48:61:8b:f9:a9:
71:c4:4f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:54:28 2026 by rpki-client