$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft File: 90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft (raw, json) Hash identifier: YlId+eCmQSk287hmm0xh9yaQ7l81vDEU7gjcG+RBwf0= Subject key identifier: F0:DF:30:AB:EA:65:92:ED:F1:2B:95:4A:25:38:04:02:C4:3D:20:4E Authority key identifier: 90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D Certificate issuer: /CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D Certificate serial: 5C88BFF7C68219754315B4267B76357371527E61 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 20:42:06 +0000 Manifest this update: Tue 22 Sep 2026 20:37:06 +0000 Manifest next update: Thu 24 Sep 2026 00:08:06 +0000 Files and hashes: 1: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: BNrW0eQU53nT/ba5DR3gG5VeToq8WtIzwdZt0XrzHK8=) 2: 90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl (hash: gp+GZexzAcpAhOCM6trSTJH7Dm4WB81pDOccpxhgnXA=) 3: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: KvOleZIfcn6EoZkKf6ZdFcLhmThnSWrW2/dXX/n7URA=) 4: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: dXDKfmvmczU9aYgLQYslTHLZ6G4+e/q+u9H8ndaerLU=) 5: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: k5tpWx2NqoJhL6Gv4Q6AOH3uxzUVB7/CghrllRzLLUQ=) 6: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: ytetHbaOFcdooikcS2dP3RfK75XM1xqRpP+fXSjDKG0=) 7: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: uouUKGbUozmFnKgub/+5mqf8ILo68JfceNZ+JRrYL4g=) 8: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: FSyjqZtd8XDVrxqAKcbaFrMIwjpkZU6OHpA9ABCfhcY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 17:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:88:bf:f7:c6:82:19:75:43:15:b4:26:7b:76:35:73:71:52:7e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D Validity Not Before: Sep 22 20:37:06 2026 GMT Not After : Sep 24 00:08:06 2026 GMT Subject: CN=F0DF30ABEA6592EDF12B954A25380402C43D204E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:fe:3f:8b:b0:5c:e4:b0:2f:79:6f:34:6b: 93:c3:f4:6e:a7:cd:1b:c4:46:7c:01:cf:bc:f5:a2: 86:fe:c2:90:05:2e:67:85:3c:a8:96:55:4f:79:66: 6f:3d:a9:10:9f:ca:bb:c4:22:1d:a5:95:a2:d2:d0: 6a:6b:44:47:ec:75:1b:6f:fa:d7:5b:4f:c8:ef:ce: ad:08:45:22:e4:92:fa:a3:9a:f8:ed:bd:e7:0d:8f: b8:a6:56:f3:80:31:78:2f:7f:1d:e6:1b:18:94:5a: 96:42:9b:be:1a:0b:cd:78:8b:d4:a2:86:af:76:d6: d7:30:85:00:23:2b:2a:ea:7e:ef:01:ea:7c:20:5d: fb:40:38:93:95:46:4a:d8:3c:20:28:40:20:03:60: e4:53:51:7d:34:a7:89:c9:9f:20:49:77:97:e3:9b: f0:b6:82:63:71:7d:66:a2:66:9a:52:70:bd:3a:9e: aa:ae:52:ef:dd:dd:10:8f:c7:49:82:d0:73:e5:26: 8e:92:9e:a5:24:03:81:3c:5e:b8:f4:fc:56:86:88: 8b:e5:0d:14:cf:cc:5e:60:be:66:51:20:0a:f5:6a: a4:96:19:93:ee:51:13:8f:4b:d3:a9:1e:62:d4:0b: e8:f9:fe:90:55:2f:55:eb:15:76:f9:ea:88:64:23: 03:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DF:30:AB:EA:65:92:ED:F1:2B:95:4A:25:38:04:02:C4:3D:20:4E X509v3 Authority Key Identifier: keyid:90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:30:f2:46:fa:8e:98:04:b9:82:b1:04:dd:17:18:ae:b4:3a: fb:85:66:da:0c:d6:b3:49:a5:df:5f:cd:58:3d:0b:78:78:34: 11:f7:51:cf:b1:0a:cf:02:4f:6a:5c:b0:1a:3e:8e:6a:00:d7: ff:e5:1c:6b:af:09:88:b9:a6:bd:3f:2e:d1:34:b5:81:12:d7: 01:f4:a6:4b:4a:70:fb:c8:89:2e:13:a2:aa:8f:a1:62:99:07: 52:48:c6:41:0a:a3:a4:9a:5f:a3:af:10:fb:a5:10:19:4e:f1: 45:71:f5:b1:e4:3f:d8:bc:8a:89:f4:28:8e:7a:de:2f:73:02: 79:6d:d8:cf:ac:96:ee:d8:8c:0c:ce:c0:73:92:b3:d8:8e:14: 56:d0:ba:e9:7a:07:68:f9:2c:08:b6:40:39:6c:af:e6:32:95: 8d:e4:58:34:20:a9:5f:ff:e3:15:62:b3:c1:a0:5d:0c:aa:62: a9:27:fd:85:d8:e7:f2:27:a3:0d:e4:9a:8a:96:05:7f:fd:19: 8a:33:40:9b:5e:1d:e2:4f:55:56:bf:b4:f5:7c:40:4f:17:b5: a3:c8:97:2b:9d:6c:68:27:f4:a1:a9:c8:57:0a:c7:76:0a:a0: f2:0c:73:f4:d7:a4:62:c8:c5:ee:fc:16:09:cc:5e:25:1a:8c: d5:55:6d:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXIi/98aCGXVDFbQme3Y1c3FSfmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBDM0JDNjZBQTc0NUM5RUE4REE5RDgxNUFEN0JGNEJG MkRFNUU1RDAeFw0yNjA5MjIyMDM3MDZaFw0yNjA5MjQwMDA4MDZaMDMxMTAvBgNV BAMTKEYwREYzMEFCRUE2NTkyRURGMTJCOTU0QTI1MzgwNDAyQzQzRDIwNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzL/4/i7Bc5LAveW80a5PD9G6n zRvERnwBz7z1oob+wpAFLmeFPKiWVU95Zm89qRCfyrvEIh2llaLS0GprREfsdRtv +tdbT8jvzq0IRSLkkvqjmvjtvecNj7imVvOAMXgvfx3mGxiUWpZCm74aC814i9Si hq921tcwhQAjKyrqfu8B6nwgXftAOJOVRkrYPCAoQCADYORTUX00p4nJnyBJd5fj m/C2gmNxfWaiZppScL06nqquUu/d3RCPx0mC0HPlJo6SnqUkA4E8Xrj0/FaGiIvl DRTPzF5gvmZRIAr1aqSWGZPuUROPS9OpHmLUC+j5/pBVL1XrFXb56ohkIwOHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8N8wq+plku3xK5VKJTgEAsQ9IE4wHwYDVR0j BBgwFoAUkMO8Zqp0XJ6o2p2BWte/S/LeXl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjZiNWFlMWUtYmU2Ni00YTMwLWE5NDgtN2Q0NzhjMjJlYTJiLzAvOTBDM0JDNjZB QTc0NUM5RUE4REE5RDgxNUFEN0JGNEJGMkRFNUU1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEMzQkM2NkFBNzQ1QzlFQThEQTlEODE1QUQ3QkY0QkYyREU1 RTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjZiNWFlMWUtYmU2Ni00YTMwLWE5 NDgtN2Q0NzhjMjJlYTJiLzAvOTBDM0JDNjZBQTc0NUM5RUE4REE5RDgxNUFEN0JG NEJGMkRFNUU1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQw8kb6jpgEuYKxBN0XGK60OvuFZtoM1rNJ pd9fzVg9C3h4NBH3Uc+xCs8CT2pcsBo+jmoA1//lHGuvCYi5pr0/LtE0tYES1wH0 pktKcPvIiS4ToqqPoWKZB1JIxkEKo6SaX6OvEPulEBlO8UVx9bHkP9i8ion0KI56 3i9zAnlt2M+slu7YjAzOwHOSs9iOFFbQuul6B2j5LAi2QDlsr+YylY3kWDQgqV// 4xVis8GgXQyqYqkn/YXY5/Inow3kmoqWBX/9GYozQJteHeJPVVa/tPV8QE8XtaPI lyudbGgn9KGpyFcKx3YKoPIMc/TXpGLIxe78FgnMXiUajNVVbUk= -----END CERTIFICATE-----Generated at Wed Sep 23 02:23:37 2026 by rpki-client