$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft File: 90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft (raw, json) Hash identifier: ccM6obrQ39iKnaLdFWJhX3jau+f1b71mzXVXZBmlgXo= Subject key identifier: 8A:5D:D0:10:22:7E:14:38:8E:CD:B4:E4:6B:61:DB:3D:97:69:23:8B Authority key identifier: 90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D Certificate issuer: /CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D Certificate serial: 0976DDC493919BC5D4267F11D984BB9D3EE626E6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 16:11:04 +0000 Manifest this update: Wed 23 Sep 2026 16:06:04 +0000 Manifest next update: Thu 24 Sep 2026 19:52:04 +0000 Files and hashes: 1: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: dXDKfmvmczU9aYgLQYslTHLZ6G4+e/q+u9H8ndaerLU=) 2: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: k5tpWx2NqoJhL6Gv4Q6AOH3uxzUVB7/CghrllRzLLUQ=) 3: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: ytetHbaOFcdooikcS2dP3RfK75XM1xqRpP+fXSjDKG0=) 4: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: BNrW0eQU53nT/ba5DR3gG5VeToq8WtIzwdZt0XrzHK8=) 5: 90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl (hash: SrpjfjsY688VmrCQ35ffy3FYK7oOFVWKtWT7mtd0q2U=) 6: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: uouUKGbUozmFnKgub/+5mqf8ILo68JfceNZ+JRrYL4g=) 7: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: FSyjqZtd8XDVrxqAKcbaFrMIwjpkZU6OHpA9ABCfhcY=) 8: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: KvOleZIfcn6EoZkKf6ZdFcLhmThnSWrW2/dXX/n7URA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:76:dd:c4:93:91:9b:c5:d4:26:7f:11:d9:84:bb:9d:3e:e6:26:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D Validity Not Before: Sep 23 16:06:04 2026 GMT Not After : Sep 24 19:52:04 2026 GMT Subject: CN=8A5DD010227E14388ECDB4E46B61DB3D9769238B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:33:0e:b9:96:c0:5d:29:49:fc:6d:93:95:ac: eb:c8:d6:92:ed:87:13:64:de:e1:2e:d9:3e:48:19: 3c:09:4e:10:22:6d:e1:46:bd:89:8c:17:fd:3d:d3: 89:87:0f:3b:0e:4c:19:d2:a7:57:63:85:25:45:d3: 28:32:eb:c1:1a:ca:c9:cb:b1:46:f7:5b:ba:64:a1: 01:74:42:3c:ed:0b:98:61:57:24:02:d0:a1:6d:54: ec:74:f0:ee:d4:01:3a:1b:1e:36:c6:e3:e1:d2:9e: 19:c5:73:2b:55:c1:60:da:cf:1c:c4:93:75:d4:ee: ea:d6:0d:13:77:cb:6f:84:11:bb:61:86:78:00:33: f4:28:6e:89:7c:f6:91:80:ae:62:cb:28:c7:96:8b: 18:91:d5:58:af:53:67:b4:65:28:3b:4a:a1:c9:b1: 89:6c:4d:41:a8:f1:f5:f4:fa:02:5c:bd:3a:7d:3a: 4b:3d:65:c1:c3:59:30:d1:0b:59:16:6f:a6:61:43: 76:93:1a:c2:19:82:26:ba:16:4d:4c:ad:de:bd:31: 05:aa:66:89:d2:d3:dc:2c:ab:af:71:5e:91:c8:c0: c3:45:ae:78:92:41:ac:65:31:c0:5d:d7:c9:49:a0: 4c:d9:97:7a:21:fd:3b:f2:3c:19:f8:a0:20:1b:99: d1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5D:D0:10:22:7E:14:38:8E:CD:B4:E4:6B:61:DB:3D:97:69:23:8B X509v3 Authority Key Identifier: keyid:90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:fa:2c:65:fb:2a:27:b7:af:0f:4a:56:15:e0:7e:6c:a1:87: 28:9a:be:9b:5d:2c:4e:d3:02:06:5a:88:05:64:bb:ca:34:7c: 04:5a:62:57:bb:f1:ed:ae:6f:bf:88:58:0a:d5:52:01:13:5d: 7d:86:05:31:da:de:74:9b:b2:6a:d4:22:bb:8e:c1:ea:f4:43: 6a:8c:d2:b1:14:1a:4d:15:b5:6b:d9:70:8c:eb:69:d4:e5:d8: 09:93:64:8a:2e:3f:15:1b:03:7a:05:8f:55:b5:b0:37:ff:ae: 22:a4:4e:9d:0f:0e:2e:b8:91:14:4d:08:c7:f8:d4:26:90:67: a8:4f:23:88:50:ca:e7:9a:be:80:75:d5:b7:e3:33:c1:19:1c: 80:24:08:3d:9e:fe:13:fe:40:eb:e0:b4:45:f1:d5:ec:08:3c: 91:20:62:33:d2:31:05:96:2b:49:d2:23:cd:61:ac:fb:92:70: fe:50:e6:d1:90:5f:88:20:c3:a1:70:08:a4:da:ec:f2:12:66: 01:ca:22:8c:c1:56:f1:2f:42:98:59:d1:18:e3:16:2a:5b:46: 4e:6d:d3:cc:a1:24:6d:6f:d4:ec:a9:c3:e5:4a:07:92:4d:1a: 66:c5:13:4c:59:cc:66:70:d5:2d:1b:28:11:36:d0:e5:ff:0e: 2c:53:ff:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCXbdxJORm8XUJn8R2YS7nT7mJuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBDM0JDNjZBQTc0NUM5RUE4REE5RDgxNUFEN0JGNEJG MkRFNUU1RDAeFw0yNjA5MjMxNjA2MDRaFw0yNjA5MjQxOTUyMDRaMDMxMTAvBgNV BAMTKDhBNUREMDEwMjI3RTE0Mzg4RUNEQjRFNDZCNjFEQjNEOTc2OTIzOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNMw65lsBdKUn8bZOVrOvI1pLt hxNk3uEu2T5IGTwJThAibeFGvYmMF/0904mHDzsOTBnSp1djhSVF0ygy68EaysnL sUb3W7pkoQF0QjztC5hhVyQC0KFtVOx08O7UATobHjbG4+HSnhnFcytVwWDazxzE k3XU7urWDRN3y2+EEbthhngAM/Qobol89pGArmLLKMeWixiR1VivU2e0ZSg7SqHJ sYlsTUGo8fX0+gJcvTp9Oks9ZcHDWTDRC1kWb6ZhQ3aTGsIZgia6Fk1Mrd69MQWq ZonS09wsq69xXpHIwMNFrniSQaxlMcBd18lJoEzZl3oh/TvyPBn4oCAbmdFLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUil3QECJ+FDiOzbTka2HbPZdpI4swHwYDVR0j BBgwFoAUkMO8Zqp0XJ6o2p2BWte/S/LeXl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjZiNWFlMWUtYmU2Ni00YTMwLWE5NDgtN2Q0NzhjMjJlYTJiLzAvOTBDM0JDNjZB QTc0NUM5RUE4REE5RDgxNUFEN0JGNEJGMkRFNUU1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEMzQkM2NkFBNzQ1QzlFQThEQTlEODE1QUQ3QkY0QkYyREU1 RTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjZiNWFlMWUtYmU2Ni00YTMwLWE5 NDgtN2Q0NzhjMjJlYTJiLzAvOTBDM0JDNjZBQTc0NUM5RUE4REE5RDgxNUFEN0JG NEJGMkRFNUU1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMX6LGX7Kie3rw9KVhXgfmyhhyiavptdLE7T AgZaiAVku8o0fARaYle78e2ub7+IWArVUgETXX2GBTHa3nSbsmrUIruOwer0Q2qM 0rEUGk0VtWvZcIzradTl2AmTZIouPxUbA3oFj1W1sDf/riKkTp0PDi64kRRNCMf4 1CaQZ6hPI4hQyueavoB11bfjM8EZHIAkCD2e/hP+QOvgtEXx1ewIPJEgYjPSMQWW K0nSI81hrPuScP5Q5tGQX4ggw6FwCKTa7PISZgHKIozBVvEvQphZ0RjjFipbRk5t 08yhJG1v1Oypw+VKB5JNGmbFE0xZzGZw1S0bKBE20OX/DixT/3c= -----END CERTIFICATE-----Generated at Wed Sep 23 21:23:19 2026 by rpki-client