$ rpki-client -vvf rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft File: 2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft (raw, json) Hash identifier: TRtYbjrh2BauPkrZgRxHAIc+AjWXi+WgFR8E8kXvSto= Subject key identifier: 4B:63:6D:E2:62:9A:09:64:90:75:48:13:71:FA:98:16:4D:E2:1B:AE Authority key identifier: 2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 Certificate issuer: /CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Certificate serial: 25408CC455E75FE0B201587B6E0618256431FA54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 10:03:02 +0000 Manifest this update: Wed 29 Jul 2026 09:58:02 +0000 Manifest next update: Thu 30 Jul 2026 10:20:02 +0000 Files and hashes: 1: 2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl (hash: Qv9jjmmAHXH/T2swYW3tep9obO+itU0FnHBnMFbb+yA=) 2: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: +Yvf7pOmzIGa62dYtF9IiIRwOM/GLeNEJw6+0hLCuFs=) 3: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: Sc3G90iBjlZbQp4eiRWZGBi7/nNefrAvOJorxw0BbBg=) 4: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: Zn0CgMhZBE1Ox5HRkdKzvhOJuMe+bbXdGHM8Z1fRLu4=) 5: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: mQrrkGIS8HoF4AiDSmw6SD2SG/T7/MXDAFnexE70y7o=) 6: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: YxIG5gE82yucA04IL0UOvUpSplXnSvbMztHXZbePQI4=) 7: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: o8ATK3bD9zxeJufeZWJNK7oFuttO5EJXj2X9FF47zyA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:40:8c:c4:55:e7:5f:e0:b2:01:58:7b:6e:06:18:25:64:31:fa:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Validity Not Before: Jul 29 09:58:02 2026 GMT Not After : Jul 30 10:20:02 2026 GMT Subject: CN=4B636DE2629A09649075481371FA98164DE21BAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d6:25:25:58:87:25:aa:ba:83:89:14:a8:70: d0:82:7e:27:cf:22:f5:9b:59:e4:60:bf:23:fb:8a: fc:f0:ae:5a:2f:2c:49:6a:0e:dc:ba:5e:66:05:f6: 82:a2:ed:1a:4e:02:01:ab:00:9a:ad:63:5b:50:27: d8:32:4c:39:a5:34:83:7c:b7:6a:26:03:14:de:1c: 70:1c:ee:3f:a4:f9:f9:0e:f4:f2:03:c3:49:03:71: 9f:5e:ad:d2:d5:5a:b3:23:6c:de:c3:b3:8f:eb:5d: 1c:7c:bf:5b:8d:af:23:9f:28:d0:f8:38:5e:61:a1: 00:d0:f1:bb:0c:ec:ac:b4:c7:0e:c7:c2:4b:28:2a: 79:2c:d6:7c:74:fa:45:d6:c8:c2:a0:d5:bc:57:18: 18:4b:28:aa:c3:5b:77:20:26:7b:26:c8:bb:a0:d8: d3:50:3f:d0:10:81:69:70:1d:d7:1e:56:ec:81:1c: c2:b4:72:06:03:a9:1f:6b:3c:8e:ea:d7:b2:e1:f6: 60:70:23:24:bb:76:2a:46:9c:c4:fe:e2:ba:d8:98: 1c:5b:5e:82:6f:04:ef:ce:b9:e6:44:24:5d:78:93: c2:e0:9f:dd:23:2a:6b:75:f1:1e:c9:67:b4:f1:f0: 37:dc:d3:0f:23:46:0e:65:ab:42:2f:ef:e8:9c:a9: c1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:63:6D:E2:62:9A:09:64:90:75:48:13:71:FA:98:16:4D:E2:1B:AE X509v3 Authority Key Identifier: keyid:2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d1:c8:37:d1:a8:f6:26:2d:6a:de:48:c3:91:ad:45:1e:1a: 26:54:a2:5f:4e:01:b0:87:07:c7:d1:93:51:c8:f3:e4:fa:0d: e7:36:16:77:e1:db:f1:70:58:95:37:13:d5:32:01:6c:ca:63: 2a:9b:bf:c6:33:f3:c9:b7:e6:9b:92:2f:98:2a:70:25:90:21: 0f:c3:5e:af:0a:ee:2a:bb:30:31:0c:d4:59:21:f3:ba:13:c0: 13:f0:09:7c:b3:56:e0:8d:8f:54:18:ee:2d:cb:bb:03:51:63: fd:4e:6c:b4:f3:da:22:ea:03:df:66:91:7f:6b:d2:2f:8e:78: 20:79:b5:99:c9:30:84:0c:a2:2b:4f:d7:e2:ab:4c:f5:89:64: f1:57:43:a7:6e:ef:f0:7f:d9:4f:49:d6:42:16:b6:4f:8c:26: 03:4d:d6:9f:eb:f6:01:ba:f6:2c:54:df:a5:9c:ef:b0:b2:08: 30:e6:ee:7a:56:5c:68:74:f0:13:d7:fa:7d:f4:02:0a:a4:0b: 15:61:7e:8f:ea:70:8f:ba:74:3e:ec:9c:14:30:f3:b0:98:f9: 3d:41:9b:6f:49:b8:8d:b9:8c:81:a9:48:32:eb:83:d3:ed:08: d3:26:ab:bc:de:44:f0:1a:3a:38:76:c7:04:7f:28:f4:8a:d0: f1:7b:9d:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJUCMxFXnX+CyAVh7bgYYJWQx+lQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlE MzBDNDYzNTAeFw0yNjA3MjkwOTU4MDJaFw0yNjA3MzAxMDIwMDJaMDMxMTAvBgNV BAMTKDRCNjM2REUyNjI5QTA5NjQ5MDc1NDgxMzcxRkE5ODE2NERFMjFCQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI1iUlWIclqrqDiRSocNCCfifP IvWbWeRgvyP7ivzwrlovLElqDty6XmYF9oKi7RpOAgGrAJqtY1tQJ9gyTDmlNIN8 t2omAxTeHHAc7j+k+fkO9PIDw0kDcZ9erdLVWrMjbN7Ds4/rXRx8v1uNryOfKND4 OF5hoQDQ8bsM7Ky0xw7HwksoKnks1nx0+kXWyMKg1bxXGBhLKKrDW3cgJnsmyLug 2NNQP9AQgWlwHdceVuyBHMK0cgYDqR9rPI7q17Lh9mBwIyS7dipGnMT+4rrYmBxb XoJvBO/OueZEJF14k8Lgn90jKmt18R7JZ7Tx8Dfc0w8jRg5lq0Iv7+icqcEHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS2Nt4mKaCWSQdUgTcfqYFk3iG64wHwYDVR0j BBgwFoAULpDHQn/huQJV3YVW28nMadMMRjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTAzNmUwN2MtODI4My00M2QzLTkxNjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3 RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlEMzBDNDYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTkwQzc0MjdGRTFCOTAyNTVERDg1NTZEQkM5Q0M2OUQzMEM0 NjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUND NjlEMzBDNDYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzRyDfRqPYmLWreSMORrUUeGiZUol9OAbCH B8fRk1HI8+T6Dec2Fnfh2/FwWJU3E9UyAWzKYyqbv8Yz88m35puSL5gqcCWQIQ/D Xq8K7iq7MDEM1Fkh87oTwBPwCXyzVuCNj1QY7i3LuwNRY/1ObLTz2iLqA99mkX9r 0i+OeCB5tZnJMIQMoitP1+KrTPWJZPFXQ6du7/B/2U9J1kIWtk+MJgNN1p/r9gG6 9ixU36Wc77CyCDDm7npWXGh08BPX+n30AgqkCxVhfo/qcI+6dD7snBQw87CY+T1B m29JuI25jIGpSDLrg9PtCNMmq7zeRPAaOjh2xwR/KPSK0PF7nRg= -----END CERTIFICATE-----Generated at Wed Jul 29 12:03:39 2026 by rpki-client