
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft
File: 90B9450AA39B9CD9586085EFA9EF7887EE613759.mft (raw, json)
Hash identifier: T5mhFoaigLkNlBM8qAYFvemtgUrK9eTLm+CoxnHf5/I=
Subject key identifier: 35:70:CC:33:80:EF:00:4B:3E:5F:2C:BD:93:48:C4:41:16:58:6D:79
Authority key identifier: 90:B9:45:0A:A3:9B:9C:D9:58:60:85:EF:A9:EF:78:87:EE:61:37:59
Certificate issuer: /CN=90B9450AA39B9CD9586085EFA9EF7887EE613759
Certificate serial: 025DAACD704E0D36E18AC90AE4D0CDCD22F88299
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 03:47:23 +0000
Manifest this update: Wed 17 Jun 2026 03:42:23 +0000
Manifest next update: Thu 18 Jun 2026 07:27:23 +0000
Files and hashes: 1: 3130332e3135332e38332e302f32342d3234203d3e20313439373034.roa (hash: i2oBSFPKpVqeh9es/WJHy0i/TdHRHJL5ycGj+adtwXc=)
2: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: J0+iHCZ4UXpTu9FbQSO8iPWMu0E+Lc3DRVGjSSCxGxw=)
3: 90B9450AA39B9CD9586085EFA9EF7887EE613759.crl (hash: 55uD2K/Oj4IJMDTeqhkPYaogfm2514dd+2fCijiOh3U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.crl
rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:5d:aa:cd:70:4e:0d:36:e1:8a:c9:0a:e4:d0:cd:cd:22:f8:82:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90B9450AA39B9CD9586085EFA9EF7887EE613759
Validity
Not Before: Jun 17 03:42:23 2026 GMT
Not After : Jun 18 07:27:23 2026 GMT
Subject: CN=3570CC3380EF004B3E5F2CBD9348C44116586D79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:90:ed:29:7e:79:6b:7b:59:52:13:e1:8f:
e5:3a:03:60:91:c9:80:e0:20:95:7a:bf:ff:df:6e:
13:d7:8c:c7:c8:d1:7a:f8:22:d0:6b:53:2e:c1:b7:
e3:e9:c8:61:b6:ff:32:55:92:78:88:9e:70:bb:9c:
76:ae:57:df:c6:ad:fb:c8:e6:30:47:c9:fb:93:59:
9f:d1:89:07:dd:29:96:68:aa:89:b5:12:01:a5:54:
f3:1b:fb:04:ad:aa:1b:60:77:e1:40:aa:73:7a:6e:
ed:a0:34:4f:aa:c8:e7:ac:83:b7:5e:d3:12:f5:7e:
32:ee:70:5b:35:ab:42:95:cb:51:cb:93:0b:97:2c:
1d:6e:c5:59:8c:74:98:7e:91:2f:eb:7a:13:61:ee:
9d:4f:bc:85:a7:8f:ae:0f:97:34:c7:b9:d8:e0:cc:
c4:c2:71:10:21:ec:5d:2d:4c:6b:74:2d:82:77:1a:
f1:4e:12:f4:4c:5d:0d:e2:05:34:38:71:69:3c:f0:
e1:d1:48:8e:8b:0a:cc:41:67:bf:fc:29:ee:5b:c3:
81:eb:91:a8:b9:6b:2c:ec:b4:2b:60:bb:e7:24:b5:
f2:f9:9a:8e:53:ab:7b:68:48:a1:81:5a:5b:bc:4a:
8d:ae:d2:fb:88:18:51:32:30:59:b0:d4:91:7d:52:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:70:CC:33:80:EF:00:4B:3E:5F:2C:BD:93:48:C4:41:16:58:6D:79
X509v3 Authority Key Identifier:
keyid:90:B9:45:0A:A3:9B:9C:D9:58:60:85:EF:A9:EF:78:87:EE:61:37:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0f:4c:75:b1:71:1b:38:80:06:24:e6:14:de:b7:12:e6:d4:
12:79:f3:52:27:2b:c9:3a:10:18:c4:85:bf:45:97:b8:48:73:
ba:8a:40:20:41:66:f7:60:42:f8:55:93:44:23:bf:d1:64:04:
2b:b5:2f:8e:80:52:d1:2a:e2:6c:21:aa:8f:67:49:8d:1f:f9:
ff:d3:54:57:45:70:33:15:c1:19:e8:38:c4:e2:bf:e9:9f:14:
96:eb:5c:74:5b:54:74:db:1b:b7:21:e1:67:56:9c:41:cf:23:
fa:e8:84:3c:19:c0:da:87:e2:93:b2:ce:77:dc:8c:90:45:50:
f8:a2:a0:00:54:8f:fb:0d:3d:8a:a0:4b:16:f5:97:36:37:a1:
97:c5:7d:bd:f2:3e:65:85:25:1f:1b:f9:62:f8:6e:59:98:39:
77:d2:a5:47:ac:c9:8e:26:8d:03:2a:01:86:c9:9e:57:d0:ce:
e1:b8:a5:8b:d9:49:3d:c1:6c:bc:f3:23:d1:52:11:2d:93:f4:
13:c8:ce:e8:df:89:83:dd:f8:f2:d8:fc:d8:cd:56:83:2e:ec:
58:3c:fc:0a:f8:4e:71:6b:05:be:52:a3:a9:0f:78:1d:dc:42:
6b:21:b5:14:4c:f2:63:cd:dd:53:bc:22:1e:94:0e:4b:0a:bb:
72:2f:0e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:24 2026 by rpki-client