$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft File: 2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft (raw, json) Hash identifier: xfVn4TNMS6wcy03vwO2Rb3HLDlQIbQhnWVywvSqr2gg= Subject key identifier: F8:7C:5D:DA:AA:B8:7E:31:C0:F7:61:61:9F:6A:90:A4:5A:14:E7:D6 Authority key identifier: 2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 Certificate issuer: /CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Certificate serial: 7271889C715CE948B3DD9997D9261B9802BBA94D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft Manifest number: BE Signing time: Mon 21 Sep 2026 14:14:11 +0000 Manifest this update: Mon 21 Sep 2026 14:09:11 +0000 Manifest next update: Tue 22 Sep 2026 15:19:11 +0000 Files and hashes: 1: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: o8ATK3bD9zxeJufeZWJNK7oFuttO5EJXj2X9FF47zyA=) 2: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: YxIG5gE82yucA04IL0UOvUpSplXnSvbMztHXZbePQI4=) 3: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: Zn0CgMhZBE1Ox5HRkdKzvhOJuMe+bbXdGHM8Z1fRLu4=) 4: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: Sc3G90iBjlZbQp4eiRWZGBi7/nNefrAvOJorxw0BbBg=) 5: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: +Yvf7pOmzIGa62dYtF9IiIRwOM/GLeNEJw6+0hLCuFs=) 6: 2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl (hash: MLOV1rB3vz6CZzjGt7uDqvLNG2d8JeaVTDHUJLLQOFI=) 7: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: mQrrkGIS8HoF4AiDSmw6SD2SG/T7/MXDAFnexE70y7o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:71:88:9c:71:5c:e9:48:b3:dd:99:97:d9:26:1b:98:02:bb:a9:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Validity Not Before: Sep 21 14:09:11 2026 GMT Not After : Sep 22 15:19:11 2026 GMT Subject: CN=F87C5DDAAAB87E31C0F761619F6A90A45A14E7D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2c:d7:71:ff:1f:af:77:a5:f0:5f:96:87:3e: 59:91:16:41:00:fa:b8:36:1c:a1:98:f9:b6:cf:34: 15:d5:c5:61:26:eb:d3:55:6d:22:24:f0:4e:dd:e0: 56:de:6e:ca:58:fd:19:d8:52:35:a1:61:9f:1b:0a: 9e:2b:d6:90:38:93:a9:95:cf:9d:77:04:42:52:e2: 16:96:41:e2:7a:f3:c1:ae:9e:26:2c:03:52:08:93: fb:b3:b2:e2:44:86:cb:7a:a0:f9:ef:8a:ed:21:c9: 78:c0:1b:a4:ce:70:c8:64:7a:dc:0f:3d:82:a9:ca: 5c:5a:d9:64:84:81:2c:b8:2e:40:31:b0:d2:f3:b9: f8:50:7a:9b:c8:b5:a5:46:60:db:45:b2:1f:8d:fb: 43:63:86:31:d7:9b:3e:7d:fe:d6:1e:2f:63:9d:3e: 57:4b:ff:1c:e6:a2:32:da:4c:9f:f2:2f:22:ac:41: 87:4e:39:9e:d3:2a:ef:ed:ec:11:dc:10:64:d6:ff: 3a:4c:35:23:a3:a4:c6:e5:15:dd:19:16:3e:a1:ab: 78:05:f0:2b:fa:a9:4a:5f:db:c4:e6:50:99:b1:19: c1:82:e6:ca:74:8d:fc:87:d3:28:01:f8:d6:ae:02: 23:97:8b:e8:8b:a2:a6:2b:de:46:53:10:7c:67:d2: 8b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7C:5D:DA:AA:B8:7E:31:C0:F7:61:61:9F:6A:90:A4:5A:14:E7:D6 X509v3 Authority Key Identifier: keyid:2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:ed:4c:34:85:94:f1:d5:87:e7:4e:be:74:a6:0e:6c:3d:07: 11:44:ae:46:bc:8e:b0:05:2d:2c:7b:4a:b4:b8:8d:2c:cb:8f: 04:7c:72:b7:a0:97:5e:0b:b1:54:63:c2:c3:2c:08:73:1a:13: c1:36:aa:4c:6f:cf:33:88:3c:dc:f1:f8:e3:00:91:16:c0:df: f1:b3:19:92:bd:2a:f9:0b:e6:f9:d1:20:d6:8d:45:c3:5b:08: b2:26:a5:6a:16:77:3f:a8:be:dc:15:09:6e:e0:ce:31:2e:d3: e6:b5:be:96:69:93:01:c5:d5:a1:76:9e:f4:74:4d:1a:a9:78: 44:90:5d:d3:2a:0d:35:10:13:19:72:f2:62:90:a1:6e:2b:b7: 7f:96:80:9d:91:bf:e2:ce:e8:8d:92:64:d8:a6:27:9b:0a:04: 71:b0:59:9e:cf:ca:2c:d7:6c:53:eb:8a:ad:05:9b:fb:b2:3c: b5:f9:08:84:c3:d5:b5:c6:20:da:08:b1:5d:8e:00:22:c1:dd: a7:ce:f8:e9:27:9f:ab:45:a7:d3:e2:27:72:aa:b3:66:f3:e2: 57:c1:2f:eb:fb:a5:7e:a4:c0:a4:2f:8a:02:81:63:7c:9b:85: 76:0e:6b:d1:db:2c:65:b5:88:5d:26:21:d9:50:be:20:71:5e: 29:37:02:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcnGInHFc6Uiz3ZmX2SYbmAK7qU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlE MzBDNDYzNTAeFw0yNjA5MjExNDA5MTFaFw0yNjA5MjIxNTE5MTFaMDMxMTAvBgNV BAMTKEY4N0M1RERBQUFCODdFMzFDMEY3NjE2MTlGNkE5MEE0NUExNEU3RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLNdx/x+vd6XwX5aHPlmRFkEA +rg2HKGY+bbPNBXVxWEm69NVbSIk8E7d4FbebspY/RnYUjWhYZ8bCp4r1pA4k6mV z513BEJS4haWQeJ688GuniYsA1IIk/uzsuJEhst6oPnviu0hyXjAG6TOcMhketwP PYKpylxa2WSEgSy4LkAxsNLzufhQepvItaVGYNtFsh+N+0NjhjHXmz59/tYeL2Od PldL/xzmojLaTJ/yLyKsQYdOOZ7TKu/t7BHcEGTW/zpMNSOjpMblFd0ZFj6hq3gF 8Cv6qUpf28TmUJmxGcGC5sp0jfyH0ygB+NauAiOXi+iLoqYr3kZTEHxn0ouPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Hxd2qq4fjHA92Fhn2qQpFoU59YwHwYDVR0j BBgwFoAULpDHQn/huQJV3YVW28nMadMMRjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTAzNmUwN2MtODI4My00M2QzLTkxNjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3 RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlEMzBDNDYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTkwQzc0MjdGRTFCOTAyNTVERDg1NTZEQkM5Q0M2OUQzMEM0 NjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUND NjlEMzBDNDYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDtTDSFlPHVh+dOvnSmDmw9BxFErka8jrAF LSx7SrS4jSzLjwR8cregl14LsVRjwsMsCHMaE8E2qkxvzzOIPNzx+OMAkRbA3/Gz GZK9KvkL5vnRINaNRcNbCLImpWoWdz+ovtwVCW7gzjEu0+a1vpZpkwHF1aF2nvR0 TRqpeESQXdMqDTUQExly8mKQoW4rt3+WgJ2Rv+LO6I2SZNimJ5sKBHGwWZ7PyizX bFPriq0Fm/uyPLX5CITD1bXGINoIsV2OACLB3afO+Oknn6tFp9PiJ3Kqs2bz4lfB L+v7pX6kwKQvigKBY3ybhXYOa9HbLGW1iF0mIdlQviBxXik3Ap0= -----END CERTIFICATE-----Generated at Mon Sep 21 19:03:13 2026 by rpki-client