
$ rpki-client -vvf rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft
File: 90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft (raw, json)
Hash identifier: 4USAJ6Ni6vs9zWlcZr/U6l6r7mw9I7QF+LJTLDwcEQ8=
Subject key identifier: D9:49:18:55:E4:98:21:3C:D7:B7:8A:C9:DB:B6:21:33:4A:9A:0F:18
Authority key identifier: 90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65
Certificate issuer: /CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365
Certificate serial: 546186323D9D97B1C1B8C1041D83C820CFE34D63
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 07:43:16 +0000
Manifest this update: Sat 13 Jun 2026 07:38:16 +0000
Manifest next update: Sun 14 Jun 2026 08:33:16 +0000
Files and hashes: 1: 3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (hash: GNjW7TFdO0BnW3XzHHL9jNymhW5z46NJgPPIaWaHEpI=)
2: 90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl (hash: fnHJSGvsm8VymtiPaIqJOoz0YaoX2bvYmw4axDHsxxE=)
3: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (hash: g6lAbZqkaksDk1xdjsRVZipSwUOrqirOYAGeG6k+1X4=)
4: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (hash: wgymwZqdd8aqR/u2B/QuqB1K7UuATC+6Ntbr9ldLDAY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl
rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 08:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:61:86:32:3d:9d:97:b1:c1:b8:c1:04:1d:83:c8:20:cf:e3:4d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365
Validity
Not Before: Jun 13 07:38:16 2026 GMT
Not After : Jun 14 08:33:16 2026 GMT
Subject: CN=D9491855E498213CD7B78AC9DBB621334A9A0F18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:df:16:c5:a8:1b:1a:b7:de:77:db:63:4f:c5:
d0:d8:53:61:e5:ae:6a:85:b4:36:47:c9:b7:d0:f5:
33:9e:7c:b1:a9:e1:52:f9:35:6a:0d:70:82:4f:0f:
01:ba:61:c5:f8:0e:91:a7:c8:8b:2e:05:6b:61:7b:
53:18:be:a5:6e:f5:81:90:0b:63:6d:60:b6:33:6e:
f8:f3:5d:7a:b3:9c:32:55:84:fe:7e:11:31:36:89:
49:b0:3a:76:cb:cb:f9:3d:5c:2d:28:41:7d:38:fb:
c5:a6:b5:94:dc:4c:e5:28:a6:13:aa:b6:a9:84:2f:
e5:00:c5:c0:a3:f0:a7:65:2a:c1:e2:b6:6d:62:a7:
90:1b:5d:de:91:e6:b7:8a:4b:bd:d1:18:09:92:da:
ad:9d:97:45:d8:7d:22:b2:4d:e0:7f:b7:07:e4:7b:
13:36:dd:7b:46:6f:b8:f6:ae:30:0c:96:8c:62:31:
ba:0f:26:fc:a6:ac:e3:23:de:73:ac:43:0f:2f:98:
0d:83:0c:f0:a3:97:9d:8c:92:cd:6d:cf:b3:3e:56:
88:c1:91:49:db:89:ec:bc:b8:c7:ee:df:1a:6f:9b:
5c:5d:05:5a:f4:81:85:ef:13:de:95:e4:88:66:12:
7e:31:dc:02:44:4e:9f:c4:87:97:25:2d:ac:3e:a1:
95:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:49:18:55:E4:98:21:3C:D7:B7:8A:C9:DB:B6:21:33:4A:9A:0F:18
X509v3 Authority Key Identifier:
keyid:90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:52:0d:a0:f6:f3:c8:9d:bf:fe:2d:54:d1:50:cd:fb:04:6f:
14:0a:40:f4:f0:21:63:28:72:b0:61:a1:3c:96:d1:0a:60:ed:
ec:52:04:c0:83:33:25:49:a2:92:d0:96:62:54:44:43:cc:78:
fa:13:d9:7e:08:03:8a:93:8f:d8:8e:4f:bb:c5:5a:4a:5e:0f:
2a:fe:56:0c:4e:90:74:4d:db:61:02:77:ee:cd:63:37:a5:51:
b0:ef:b9:a8:f0:58:fb:6f:b7:78:df:e5:9a:d3:1d:3d:8f:03:
de:d2:73:e5:f9:40:54:4d:69:aa:15:64:cb:af:16:53:85:21:
3d:6d:de:ba:97:43:da:79:f0:85:25:77:7f:32:7c:c4:f6:01:
91:82:c4:9d:71:6e:29:0a:c2:a4:fd:ca:dd:7c:a8:79:d7:1b:
3a:b5:2c:68:7c:5f:90:96:e9:9e:65:67:de:d8:0b:31:93:4a:
ba:58:ae:49:30:b3:e3:52:16:d5:0c:62:ca:4c:1a:f1:aa:6c:
9d:ca:b7:c3:1c:22:04:87:41:37:d6:d3:c0:ce:21:7f:1c:b4:
d1:0e:ed:0a:c2:6f:c5:4b:cc:4a:ee:73:2a:36:b6:f4:2e:04:
dd:20:09:08:e7:59:f5:2a:1a:63:41:66:0c:30:18:4e:9c:09:
f8:14:fa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:50:53 2026 by rpki-client