$ rpki-client -vvf rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft File: C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft (raw, json) Hash identifier: a0hy96mrjL1SQIczrQOCeqZfkni8q8vRzulbrmL18ak= Subject key identifier: 92:DB:3B:9D:32:55:FC:56:AD:92:B1:59:B2:56:CA:84:2E:FA:76:0A Authority key identifier: C9:04:68:D7:EB:B1:55:0C:7E:74:86:32:F6:8F:6F:E0:83:EB:BD:DD Certificate issuer: /CN=C90468D7EBB1550C7E748632F68F6FE083EBBDDD Certificate serial: 09E5FF0CDBD5695B9D18E8126C2951D7F1B5A69C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 23:22:21 +0000 Manifest this update: Tue 16 Jun 2026 23:17:21 +0000 Manifest next update: Wed 17 Jun 2026 23:29:21 +0000 Files and hashes: 1: C90468D7EBB1550C7E748632F68F6FE083EBBDDD.crl (hash: ZiPduRv8+jlFUOO2HplQOvcOuaPc3TIf95AGxyRqofw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.crl rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e5:ff:0c:db:d5:69:5b:9d:18:e8:12:6c:29:51:d7:f1:b5:a6:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C90468D7EBB1550C7E748632F68F6FE083EBBDDD Validity Not Before: Jun 16 23:17:21 2026 GMT Not After : Jun 17 23:29:21 2026 GMT Subject: CN=92DB3B9D3255FC56AD92B159B256CA842EFA760A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7c:f4:01:e3:cc:a5:09:14:82:74:3a:ca:60: 22:5c:7e:8e:ec:0b:19:82:e0:24:6b:97:a9:00:c5: 44:70:7c:89:50:ce:3c:d8:66:b8:dc:c9:67:93:c6: 27:e4:c8:22:3b:a9:ab:ca:b1:65:f7:56:b6:a6:2a: da:92:f8:aa:6a:0f:5d:ea:cf:1c:95:45:67:c7:3a: 86:eb:12:59:4c:40:b7:43:56:19:4d:8b:ec:b4:c5: 36:e6:9b:fc:fc:84:6c:11:11:f1:df:66:cf:a9:d0: 37:81:6d:00:58:51:7f:df:ff:e7:57:ae:cb:f7:d0: 62:86:a3:ca:d6:44:4a:f5:b1:54:d4:5b:f7:22:15: a3:f6:f3:44:32:08:a3:ca:c0:42:fc:35:47:73:45: 58:40:64:bc:2f:58:2e:c7:32:84:4c:ab:cd:f7:14: 0a:cf:de:52:d5:6a:f0:e7:15:47:62:50:6c:a0:a7: 5b:05:f4:2e:bb:ce:1d:5d:81:56:05:ce:64:84:ea: 58:b3:97:f1:56:38:f7:bb:23:6c:e1:d9:a4:b3:2b: 58:43:ed:8e:9c:90:2f:b4:62:2b:12:fe:22:f8:87: f1:ca:66:94:6a:63:cc:17:79:0f:4a:d4:1f:a3:71: e1:30:c5:c5:2d:7f:1e:9a:5b:e2:8b:b0:02:d7:98: a4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DB:3B:9D:32:55:FC:56:AD:92:B1:59:B2:56:CA:84:2E:FA:76:0A X509v3 Authority Key Identifier: keyid:C9:04:68:D7:EB:B1:55:0C:7E:74:86:32:F6:8F:6F:E0:83:EB:BD:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:44:78:37:fe:0d:04:b2:3a:35:dc:af:f5:3c:48:3b:79:60: 5f:8c:71:23:fa:ac:de:89:b7:3c:6a:fc:52:e9:fa:ba:3e:aa: 7e:a8:22:48:66:d3:76:2d:4a:cc:40:92:4b:5d:ed:f3:b6:73: 73:6c:a8:32:75:9d:af:cc:f7:c6:63:89:fd:ac:10:aa:09:df: 0e:65:84:c2:65:5c:09:ce:f0:85:9c:8c:d6:8c:38:e5:40:13: c5:15:fb:53:b1:09:db:ef:3e:d7:5c:eb:bc:66:26:5d:1f:a9: ec:8f:80:82:6c:54:c0:fd:c6:53:9c:39:0a:7b:42:51:3e:1e: d0:99:1c:8d:f0:09:85:0f:d5:f4:89:bb:67:68:19:ad:5b:74: 6d:6a:7d:f0:f8:ad:61:57:da:9c:3d:f1:cb:d9:fd:76:21:d4: 94:b0:d2:40:03:d1:6c:89:3e:74:3a:e7:31:ac:d7:15:a5:48: f8:1a:f9:41:f1:99:b1:0d:0e:64:53:f9:93:d0:bb:9f:81:70: a0:ba:9d:39:26:47:80:50:53:f4:26:29:67:30:a2:58:76:b2: 0e:ac:c0:1f:74:2f:e6:5c:21:b4:c7:cd:52:76:07:9d:88:12: b1:eb:0a:5f:36:0f:6d:e6:5b:ae:cf:02:00:ae:4a:7c:96:1d: 9c:47:6d:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCeX/DNvVaVudGOgSbClR1/G1ppwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkwNDY4RDdFQkIxNTUwQzdFNzQ4NjMyRjY4RjZGRTA4 M0VCQkRERDAeFw0yNjA2MTYyMzE3MjFaFw0yNjA2MTcyMzI5MjFaMDMxMTAvBgNV BAMTKDkyREIzQjlEMzI1NUZDNTZBRDkyQjE1OUIyNTZDQTg0MkVGQTc2MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBfPQB48ylCRSCdDrKYCJcfo7s CxmC4CRrl6kAxURwfIlQzjzYZrjcyWeTxifkyCI7qavKsWX3VramKtqS+KpqD13q zxyVRWfHOobrEllMQLdDVhlNi+y0xTbmm/z8hGwREfHfZs+p0DeBbQBYUX/f/+dX rsv30GKGo8rWREr1sVTUW/ciFaP280QyCKPKwEL8NUdzRVhAZLwvWC7HMoRMq833 FArP3lLVavDnFUdiUGygp1sF9C67zh1dgVYFzmSE6lizl/FWOPe7I2zh2aSzK1hD 7Y6ckC+0YisS/iL4h/HKZpRqY8wXeQ9K1B+jceEwxcUtfx6aW+KLsALXmKQVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkts7nTJV/FatkrFZslbKhC76dgowHwYDVR0j BBgwFoAUyQRo1+uxVQx+dIYy9o9v4IPrvd0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2NkMzIzYmUtODM3ZC00MjQ0LTg0NmMtN2QyMzkzYTlhMDA5LzAvQzkwNDY4RDdF QkIxNTUwQzdFNzQ4NjMyRjY4RjZGRTA4M0VCQkRERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTA0NjhEN0VCQjE1NTBDN0U3NDg2MzJGNjhGNkZFMDgzRUJC RERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2NkMzIzYmUtODM3ZC00MjQ0LTg0 NmMtN2QyMzkzYTlhMDA5LzAvQzkwNDY4RDdFQkIxNTUwQzdFNzQ4NjMyRjY4RjZG RTA4M0VCQkRERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdEeDf+DQSyOjXcr/U8SDt5YF+McSP6rN6J tzxq/FLp+ro+qn6oIkhm03YtSsxAkktd7fO2c3NsqDJ1na/M98Zjif2sEKoJ3w5l hMJlXAnO8IWcjNaMOOVAE8UV+1OxCdvvPtdc67xmJl0fqeyPgIJsVMD9xlOcOQp7 QlE+HtCZHI3wCYUP1fSJu2doGa1bdG1qffD4rWFX2pw98cvZ/XYh1JSw0kAD0WyJ PnQ65zGs1xWlSPga+UHxmbENDmRT+ZPQu5+BcKC6nTkmR4BQU/QmKWcwolh2sg6s wB90L+ZcIbTHzVJ2B52IErHrCl82D23mW67PAgCuSnyWHZxHbSE= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:04 2026 by rpki-client