$ rpki-client -vvf rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft File: 90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft (raw, json) Hash identifier: 9Wq4SLtWwCCw42xZu/qxlgJHNEKst18yTx+we0lViSM= Subject key identifier: FF:D6:9B:E6:F2:E3:6B:2C:BE:3F:19:B2:2A:29:13:60:E2:BF:3C:54 Authority key identifier: 90:B0:BF:C1:8E:B9:04:96:C0:32:33:83:DC:DC:92:1D:9D:8E:62:C7 Certificate issuer: /CN=90B0BFC18EB90496C0323383DCDC921D9D8E62C7 Certificate serial: 0BA2F2F5A76DE162AB7F26EE9F9A3EAE32229358 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 05:09:11 +0000 Manifest this update: Wed 17 Jun 2026 05:04:11 +0000 Manifest next update: Thu 18 Jun 2026 05:29:11 +0000 Files and hashes: 1: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: fBi7KOxItMXmNwqCO9NrsVw12oG+iWETgMZG+hflMwY=) 2: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: 9wRrgktFn4gbGNfBo3IH1gpwK1hyiBcfUs4oIPcTOYQ=) 3: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: f1xLE51GWOwQNLvRvEntiSu/P1tXHq8fAnPJwIPOL+s=) 4: 90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl (hash: CRDEcnJ5MMFzPU7ytVpUkHO+Y80PtS5EV9mO2O8klDs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a2:f2:f5:a7:6d:e1:62:ab:7f:26:ee:9f:9a:3e:ae:32:22:93:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90B0BFC18EB90496C0323383DCDC921D9D8E62C7 Validity Not Before: Jun 17 05:04:11 2026 GMT Not After : Jun 18 05:29:11 2026 GMT Subject: CN=FFD69BE6F2E36B2CBE3F19B22A291360E2BF3C54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:67:94:c0:22:05:87:c5:42:a2:f0:54:e2:f6: 87:aa:44:c4:8a:94:cd:d5:05:4e:db:13:9a:6d:c0: b5:5f:03:4b:69:15:9b:bf:ee:e5:7e:5c:f9:9c:dc: 55:bd:d1:2d:57:5c:2e:59:e0:98:9b:9d:af:74:9a: 85:4d:9d:43:67:2b:7c:bf:70:c6:3a:cc:9b:da:df: ef:0e:19:f4:a0:16:49:5a:41:c4:5c:ff:de:1a:a8: 94:9f:8a:f3:cb:f3:a6:a8:ae:a0:7f:81:5d:d7:25: 98:05:13:27:f7:df:a0:6e:99:f4:cf:98:3b:f7:96: 44:3c:5d:f6:10:c9:48:4e:b1:32:61:ff:08:dc:d2: 9b:bb:a9:f7:29:8e:a9:b3:c9:48:c4:49:67:68:81: 2b:c4:d1:03:55:d6:37:51:d5:58:96:e9:c6:15:a6: 2b:16:de:6c:7a:da:25:be:57:dd:8e:6a:d7:1b:30: f2:ae:0e:4a:74:ef:d4:47:4c:30:8d:f8:46:db:32: 5d:4e:a5:63:64:bc:d9:f1:92:7f:d4:13:0d:3a:b8: 46:ac:a6:84:f7:df:8b:2c:d5:c3:6e:5e:89:dd:a2: db:29:7e:39:fe:ae:37:22:0c:b2:f6:fb:1b:49:5d: 5b:2d:df:61:7a:bb:12:f0:01:69:4c:89:8b:ce:a3: d1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D6:9B:E6:F2:E3:6B:2C:BE:3F:19:B2:2A:29:13:60:E2:BF:3C:54 X509v3 Authority Key Identifier: keyid:90:B0:BF:C1:8E:B9:04:96:C0:32:33:83:DC:DC:92:1D:9D:8E:62:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:1c:78:9d:9e:e1:c1:2b:ed:da:ae:72:e4:e0:cc:20:49:5e: fb:e8:fb:1c:01:40:3a:d9:14:2b:ab:6d:0f:e1:28:19:18:4d: 6a:7b:f5:32:df:ba:63:3e:19:c5:bf:44:98:ac:5b:f6:7e:60: f6:0d:de:fc:67:e1:c9:bf:64:f7:0a:c5:31:83:8d:3e:e8:14: 41:95:79:00:77:f8:df:18:15:80:b4:9e:11:c8:c6:f4:99:58: 1f:b9:ff:cb:ba:ef:73:0c:05:e8:a7:27:4c:24:c2:89:83:97: f9:a6:63:97:35:68:77:8e:c8:8a:0b:2b:fa:91:58:e7:c3:5f: d3:c7:d3:88:c0:42:6e:bc:d4:84:92:18:3b:8c:3c:c5:d6:c3: 06:dc:12:8c:b2:d4:33:dd:29:f7:45:23:66:ba:75:bb:93:06: f6:fc:21:b6:d6:1c:3b:a1:d7:cd:ab:a5:9c:7f:93:d9:2f:a9: 5b:81:29:40:c5:1e:fe:60:8a:86:c0:7f:6f:aa:88:97:32:cf: 13:40:3c:68:06:0b:43:b4:6d:25:a2:4e:d7:5b:63:e2:5e:ab: d7:1a:1b:72:27:f8:2a:9a:15:c6:8f:3d:79:50:bc:54:57:9f: ef:fc:f3:60:87:9e:38:6b:c5:d7:81:21:e3:c5:1b:11:c4:36: 9c:45:4b:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC6Ly9adt4WKrfybun5o+rjIik1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBCMEJGQzE4RUI5MDQ5NkMwMzIzMzgzRENEQzkyMUQ5 RDhFNjJDNzAeFw0yNjA2MTcwNTA0MTFaFw0yNjA2MTgwNTI5MTFaMDMxMTAvBgNV BAMTKEZGRDY5QkU2RjJFMzZCMkNCRTNGMTlCMjJBMjkxMzYwRTJCRjNDNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnZ5TAIgWHxUKi8FTi9oeqRMSK lM3VBU7bE5ptwLVfA0tpFZu/7uV+XPmc3FW90S1XXC5Z4Jibna90moVNnUNnK3y/ cMY6zJva3+8OGfSgFklaQcRc/94aqJSfivPL86aorqB/gV3XJZgFEyf336BumfTP mDv3lkQ8XfYQyUhOsTJh/wjc0pu7qfcpjqmzyUjESWdogSvE0QNV1jdR1ViW6cYV pisW3mx62iW+V92OatcbMPKuDkp079RHTDCN+EbbMl1OpWNkvNnxkn/UEw06uEas poT334ss1cNuXondotspfjn+rjciDLL2+xtJXVst32F6uxLwAWlMiYvOo9HXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/9ab5vLjayy+PxmyKikTYOK/PFQwHwYDVR0j BBgwFoAUkLC/wY65BJbAMjOD3NySHZ2OYscwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGQ0ZGNkZTMtNzU3Zi00M2Q0LWFkZTItZmYwODg3Y2MyNDg3LzAvOTBCMEJGQzE4 RUI5MDQ5NkMwMzIzMzgzRENEQzkyMUQ5RDhFNjJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEIwQkZDMThFQjkwNDk2QzAzMjMzODNEQ0RDOTIxRDlEOEU2 MkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvOTBCMEJGQzE4RUI5MDQ5NkMwMzIzMzgzRENEQzky MUQ5RDhFNjJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEceJ2e4cEr7dqucuTgzCBJXvvo+xwBQDrZ FCurbQ/hKBkYTWp79TLfumM+GcW/RJisW/Z+YPYN3vxn4cm/ZPcKxTGDjT7oFEGV eQB3+N8YFYC0nhHIxvSZWB+5/8u673MMBeinJ0wkwomDl/mmY5c1aHeOyIoLK/qR WOfDX9PH04jAQm681ISSGDuMPMXWwwbcEoyy1DPdKfdFI2a6dbuTBvb8IbbWHDuh 182rpZx/k9kvqVuBKUDFHv5giobAf2+qiJcyzxNAPGgGC0O0bSWiTtdbY+Jeq9ca G3In+CqaFcaPPXlQvFRXn+/882CHnjhrxdeBIePFGxHENpxFS1U= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:30 2026 by rpki-client