$ rpki-client -vvvf rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft File: 90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft (raw, json) Hash identifier: NCD3Do01Kn1sLmG81rDR7+BdAkTUL4spN4gHr+tZCRU= Subject key identifier: 03:A8:55:97:F4:D7:D3:D0:A6:19:C2:C8:E9:44:45:74:D6:FA:C1:0D Authority key identifier: 90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65 Certificate issuer: /CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365 Certificate serial: 61FB6845A988DFA2684E34FA537E77B52A341882 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft Manifest number: BE Signing time: Sun 20 Sep 2026 22:24:37 +0000 Manifest this update: Sun 20 Sep 2026 22:19:37 +0000 Manifest next update: Tue 22 Sep 2026 01:57:37 +0000 Files and hashes: 1: 3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (hash: GNjW7TFdO0BnW3XzHHL9jNymhW5z46NJgPPIaWaHEpI=) 2: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (hash: g6lAbZqkaksDk1xdjsRVZipSwUOrqirOYAGeG6k+1X4=) 3: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (hash: wgymwZqdd8aqR/u2B/QuqB1K7UuATC+6Ntbr9ldLDAY=) 4: 90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl (hash: 33FiNBdQD0VZbIWWWaPSZFO4o3w0iJWWnwPjvl7iWsg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 01:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:fb:68:45:a9:88:df:a2:68:4e:34:fa:53:7e:77:b5:2a:34:18:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365 Validity Not Before: Sep 20 22:19:37 2026 GMT Not After : Sep 22 01:57:37 2026 GMT Subject: CN=03A85597F4D7D3D0A619C2C8E9444574D6FAC10D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:96:85:c4:9d:cc:61:79:23:2b:13:c0:2f:fb: 45:8f:32:b0:48:35:75:94:76:5a:54:d5:df:47:29: 87:31:80:a4:17:81:a6:6d:83:84:40:7b:d3:4d:66: b7:a4:42:6c:16:75:12:3c:cb:55:23:59:e7:3b:34: 80:d8:58:5e:4d:8e:00:5c:89:86:fa:8e:9f:a1:76: af:79:e7:6d:a0:f6:1a:09:7f:7e:0a:6a:2d:c6:a6: 79:d8:ff:d1:70:5c:1d:0a:0e:11:c9:e8:c6:44:11: 17:0e:81:6d:ac:2f:bb:ed:85:b1:51:73:0c:cb:c7: e3:23:d8:89:c4:ca:83:04:91:95:e5:35:47:cf:60: 1c:d6:35:29:b0:6f:5c:c7:84:0b:f3:dd:cb:0a:b7: 48:82:74:18:59:50:72:8b:23:ef:95:ef:bc:80:95: 0b:dc:d8:e2:d4:07:d4:09:56:19:dd:90:99:8f:7f: 81:a0:20:69:64:8a:f5:45:79:d0:5a:e0:bb:aa:06: e6:fa:dd:3d:68:4b:c4:3d:e4:25:ce:22:ea:66:40: 9a:c6:99:2f:b7:a0:bd:9c:7e:71:e4:f9:f7:30:98: a5:ba:c4:a0:f8:c9:cd:2c:5c:73:b3:0f:73:6d:0a: 24:c4:e3:bb:26:08:0e:59:b6:54:43:6e:87:8b:c9: 07:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A8:55:97:F4:D7:D3:D0:A6:19:C2:C8:E9:44:45:74:D6:FA:C1:0D X509v3 Authority Key Identifier: keyid:90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:f2:a0:27:e3:39:d0:f7:36:fe:1f:12:92:99:7e:38:59:9a: ad:a9:74:5f:93:90:f8:b5:bf:2f:02:98:5e:23:b9:09:b3:54: dd:28:a6:e7:69:f8:0c:a2:85:74:b2:c8:44:ae:28:4f:ae:29: 55:87:1f:45:27:7e:51:29:02:73:31:f7:20:c4:46:85:3f:af: d2:72:8f:0b:db:1b:ff:21:e9:c3:06:3f:bb:b5:10:2b:9a:8e: 9e:b3:48:6b:8c:0c:76:e0:13:8d:d6:90:a8:c3:1b:69:23:00: eb:ae:d4:d2:92:ad:29:24:46:52:40:b6:a8:fa:6c:9d:f5:03: c0:6b:b0:71:79:83:2b:da:3f:ae:07:5d:da:37:a5:07:5d:e6: 8a:23:59:15:af:96:9f:83:2f:53:e4:4c:ba:a7:32:23:06:c0: 85:ef:83:01:bd:70:33:da:c8:59:31:48:7d:e6:3c:81:c6:e7: da:48:4c:f4:50:01:96:b2:8c:36:48:0a:7c:ba:48:c4:c3:60: 46:b2:7b:f1:db:f8:12:29:d7:cd:ed:36:cc:79:b8:8d:1b:96: 91:6c:12:87:0c:b3:44:a9:8a:dc:e0:b7:50:44:fb:8e:f9:4b: dc:a9:93:41:90:08:4c:f7:6a:b9:d0:64:af:41:62:9d:13:01: 5a:18:01:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYftoRamI36JoTjT6U353tSo0GIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBDQzcyMDlDQUE4QTZDN0ZFRUMyMTlEQUU0OTdGN0FF RUY0MzM2NTAeFw0yNjA5MjAyMjE5MzdaFw0yNjA5MjIwMTU3MzdaMDMxMTAvBgNV BAMTKDAzQTg1NTk3RjREN0QzRDBBNjE5QzJDOEU5NDQ0NTc0RDZGQUMxMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6loXEncxheSMrE8Av+0WPMrBI NXWUdlpU1d9HKYcxgKQXgaZtg4RAe9NNZrekQmwWdRI8y1UjWec7NIDYWF5NjgBc iYb6jp+hdq95522g9hoJf34Kai3GpnnY/9FwXB0KDhHJ6MZEERcOgW2sL7vthbFR cwzLx+Mj2InEyoMEkZXlNUfPYBzWNSmwb1zHhAvz3csKt0iCdBhZUHKLI++V77yA lQvc2OLUB9QJVhndkJmPf4GgIGlkivVFedBa4LuqBub63T1oS8Q95CXOIupmQJrG mS+3oL2cfnHk+fcwmKW6xKD4yc0sXHOzD3NtCiTE47smCA5ZtlRDboeLyQd9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA6hVl/TX09CmGcLI6URFdNb6wQ0wHwYDVR0j BBgwFoAUkMxyCcqopsf+7CGdrkl/eu70M2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjEyYzEzOGMtMmUyNC00OWY1LThhZGEtMDAyN2NiYTdmMTc4LzAvOTBDQzcyMDlD QUE4QTZDN0ZFRUMyMTlEQUU0OTdGN0FFRUY0MzM2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MENDNzIwOUNBQThBNkM3RkVFQzIxOURBRTQ5N0Y3QUVFRjQz MzY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjEyYzEzOGMtMmUyNC00OWY1LThh ZGEtMDAyN2NiYTdmMTc4LzAvOTBDQzcyMDlDQUE4QTZDN0ZFRUMyMTlEQUU0OTdG N0FFRUY0MzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnyoCfjOdD3Nv4fEpKZfjhZmq2pdF+TkPi1 vy8CmF4juQmzVN0opudp+AyihXSyyESuKE+uKVWHH0UnflEpAnMx9yDERoU/r9Jy jwvbG/8h6cMGP7u1ECuajp6zSGuMDHbgE43WkKjDG2kjAOuu1NKSrSkkRlJAtqj6 bJ31A8BrsHF5gyvaP64HXdo3pQdd5oojWRWvlp+DL1PkTLqnMiMGwIXvgwG9cDPa yFkxSH3mPIHG59pITPRQAZayjDZICny6SMTDYEaye/Hb+BIp183tNsx5uI0blpFs EocMs0Spitzgt1BE+475S9ypk0GQCEz3arnQZK9BYp0TAVoYAWM= -----END CERTIFICATE-----Generated at Mon Sep 21 20:01:25 2026 by rpki-client