$ rpki-client -vvf rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft File: 90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft (raw, json) Hash identifier: QeMCEawZPU7rV+ElJpsePskoPOKidsYnCaPAFrR+vyU= Subject key identifier: 60:88:54:EC:7F:BC:C9:25:EA:16:6C:56:D2:A1:64:BC:31:8A:83:8E Authority key identifier: 90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D Certificate issuer: /CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D Certificate serial: 6ED9E98DBAE86832B401DEDCEBD759674DAF7264 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:15:25 +0000 Manifest this update: Wed 17 Jun 2026 06:10:25 +0000 Manifest next update: Thu 18 Jun 2026 09:58:25 +0000 Files and hashes: 1: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: uouUKGbUozmFnKgub/+5mqf8ILo68JfceNZ+JRrYL4g=) 2: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: BNrW0eQU53nT/ba5DR3gG5VeToq8WtIzwdZt0XrzHK8=) 3: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: FSyjqZtd8XDVrxqAKcbaFrMIwjpkZU6OHpA9ABCfhcY=) 4: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: KvOleZIfcn6EoZkKf6ZdFcLhmThnSWrW2/dXX/n7URA=) 5: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: k5tpWx2NqoJhL6Gv4Q6AOH3uxzUVB7/CghrllRzLLUQ=) 6: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: dXDKfmvmczU9aYgLQYslTHLZ6G4+e/q+u9H8ndaerLU=) 7: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: ytetHbaOFcdooikcS2dP3RfK75XM1xqRpP+fXSjDKG0=) 8: 90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl (hash: yA0VQMQ0j4nuS04Opz654Gg5U1W5fRfdBQxvOvzMffE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d9:e9:8d:ba:e8:68:32:b4:01:de:dc:eb:d7:59:67:4d:af:72:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D Validity Not Before: Jun 17 06:10:25 2026 GMT Not After : Jun 18 09:58:25 2026 GMT Subject: CN=608854EC7FBCC925EA166C56D2A164BC318A838E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:61:88:c8:ac:18:8b:3d:73:a0:8a:60:34:55: e4:37:5f:2e:bd:76:a1:71:45:1a:3c:38:c9:70:09: ac:29:12:66:30:84:87:95:73:41:b5:64:7a:cd:cb: 64:18:d3:b6:f9:91:89:8d:62:f5:47:f2:f4:74:56: e2:a5:b1:a3:03:2c:c5:d0:81:b6:ae:92:ff:56:45: 58:dd:3a:31:f8:75:a1:b0:17:d9:9a:47:a7:82:89: bd:4c:17:b1:76:90:f4:0c:b2:3a:1b:43:b8:5e:75: e7:f0:bf:aa:ce:e9:7d:3a:4a:ae:dd:e9:86:48:18: a8:3a:41:d1:d4:57:12:22:47:b5:9b:92:89:97:b1: 26:d0:6f:26:04:96:75:3e:44:9f:4b:f4:f8:d2:e8: 60:cf:04:32:6a:19:ce:1d:ba:f4:b7:01:13:c7:11: 0d:51:a9:6a:49:4b:14:46:b8:fd:8e:8e:c6:7d:68: b0:ea:37:d1:db:4c:5a:27:65:3f:30:fa:d6:1b:a7: 33:76:4c:66:f7:31:01:81:e6:7a:0a:45:8f:52:f6: 82:6a:3a:ea:ba:dd:a0:84:a1:a1:ec:46:cf:14:43: dd:39:a0:5e:7a:e3:c2:41:df:09:98:19:a6:09:11: e8:46:d0:5b:fe:58:c2:30:34:38:88:ce:10:51:52: 0d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:88:54:EC:7F:BC:C9:25:EA:16:6C:56:D2:A1:64:BC:31:8A:83:8E X509v3 Authority Key Identifier: keyid:90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:cb:9a:c0:d5:9d:62:16:c5:a1:08:1d:de:e1:b7:42:99:6f: 8f:66:51:1a:60:31:b8:f4:08:56:74:77:9c:12:88:1d:b9:ab: a9:dc:55:87:ee:53:79:36:80:f3:5e:5e:82:22:cd:13:76:7d: e8:c0:03:d7:74:cd:8e:c8:3e:e1:8e:b3:29:5a:fa:05:ab:58: 66:74:9e:94:cd:0d:f8:f8:d6:90:e8:1d:db:8f:48:20:8e:9e: ad:87:3a:e9:b1:22:d0:e1:d1:b9:15:ce:7f:b1:5d:29:f7:1a: af:6c:38:c7:27:b4:fa:61:88:90:ed:12:71:70:3c:e2:33:5d: a0:fa:dc:bf:9a:71:3a:64:72:f5:87:a9:50:ca:97:78:36:23: c2:4e:15:d1:7d:49:3d:4b:45:46:bc:4f:e2:6c:7d:26:55:55: d7:6c:98:e2:24:9d:d9:b8:19:72:02:c9:a0:ac:37:db:ab:91: 3f:1e:5b:63:10:3a:5e:e3:0f:b9:d1:36:6f:85:b9:5b:02:1e: dd:f8:e3:0f:1e:d5:8a:c4:3f:a4:27:85:35:2c:60:d4:42:3a: 29:51:b7:93:24:49:1a:49:f6:3e:5f:77:74:49:1f:44:4f:95: e0:02:c1:e2:25:71:59:68:65:8e:a6:de:26:51:f3:93:af:1e: fb:c5:ce:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbtnpjbroaDK0Ad7c69dZZ02vcmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBDM0JDNjZBQTc0NUM5RUE4REE5RDgxNUFEN0JGNEJG MkRFNUU1RDAeFw0yNjA2MTcwNjEwMjVaFw0yNjA2MTgwOTU4MjVaMDMxMTAvBgNV BAMTKDYwODg1NEVDN0ZCQ0M5MjVFQTE2NkM1NkQyQTE2NEJDMzE4QTgzOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUYYjIrBiLPXOgimA0VeQ3Xy69 dqFxRRo8OMlwCawpEmYwhIeVc0G1ZHrNy2QY07b5kYmNYvVH8vR0VuKlsaMDLMXQ gbaukv9WRVjdOjH4daGwF9maR6eCib1MF7F2kPQMsjobQ7hedefwv6rO6X06Sq7d 6YZIGKg6QdHUVxIiR7WbkomXsSbQbyYElnU+RJ9L9PjS6GDPBDJqGc4duvS3ARPH EQ1RqWpJSxRGuP2OjsZ9aLDqN9HbTFonZT8w+tYbpzN2TGb3MQGB5noKRY9S9oJq Ouq63aCEoaHsRs8UQ905oF5648JB3wmYGaYJEehG0Fv+WMIwNDiIzhBRUg23AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYIhU7H+8ySXqFmxW0qFkvDGKg44wHwYDVR0j BBgwFoAUkMO8Zqp0XJ6o2p2BWte/S/LeXl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjZiNWFlMWUtYmU2Ni00YTMwLWE5NDgtN2Q0NzhjMjJlYTJiLzAvOTBDM0JDNjZB QTc0NUM5RUE4REE5RDgxNUFEN0JGNEJGMkRFNUU1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEMzQkM2NkFBNzQ1QzlFQThEQTlEODE1QUQ3QkY0QkYyREU1 RTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjZiNWFlMWUtYmU2Ni00YTMwLWE5 NDgtN2Q0NzhjMjJlYTJiLzAvOTBDM0JDNjZBQTc0NUM5RUE4REE5RDgxNUFEN0JG NEJGMkRFNUU1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrLmsDVnWIWxaEIHd7ht0KZb49mURpgMbj0 CFZ0d5wSiB25q6ncVYfuU3k2gPNeXoIizRN2fejAA9d0zY7IPuGOsyla+gWrWGZ0 npTNDfj41pDoHduPSCCOnq2HOumxItDh0bkVzn+xXSn3Gq9sOMcntPphiJDtEnFw POIzXaD63L+acTpkcvWHqVDKl3g2I8JOFdF9ST1LRUa8T+JsfSZVVddsmOIkndm4 GXICyaCsN9urkT8eW2MQOl7jD7nRNm+FuVsCHt344w8e1YrEP6QnhTUsYNRCOilR t5MkSRpJ9j5fd3RJH0RPleACweIlcVloZY6m3iZR85OvHvvFzu4= -----END CERTIFICATE-----Generated at Wed Jun 17 10:31:37 2026 by rpki-client