$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft File: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft (raw, json) Hash identifier: 9PJ39WM+0QCz51tLT/glWi5S+pgp7vjt8Yo+7V48zBY= Subject key identifier: 57:1C:08:0B:F5:3B:0D:20:C1:C6:D5:2D:CA:5C:04:9A:8B:E4:EF:58 Authority key identifier: D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B Certificate issuer: /CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B Certificate serial: 313F9A59C72C34EBBFED2A3BB4453822F33BA42A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft Manifest number: 0146 Signing time: Wed 25 Mar 2026 16:42:36 +0000 Manifest this update: Wed 25 Mar 2026 16:37:36 +0000 Manifest next update: Sat 28 Mar 2026 23:26:36 +0000 Files and hashes: 1: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl (hash: DOGX8CDGuTwNHO8FCirEWu5dDIo2roS+J4vvr8KgvH0=) 2: 3135372e36362e372e302f32342d3234203d3e20313338383239.roa (hash: uWa3eBa3m0ZjHO1KSjQNzgzw8RBx0gUrmzXHFx4FbVs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:3f:9a:59:c7:2c:34:eb:bf:ed:2a:3b:b4:45:38:22:f3:3b:a4:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B Validity Not Before: Mar 25 16:37:36 2026 GMT Not After : Mar 28 23:26:36 2026 GMT Subject: CN=571C080BF53B0D20C1C6D52DCA5C049A8BE4EF58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2b:0b:2c:fe:91:70:aa:6c:ca:ba:a8:2f:97: f2:40:f0:b0:b9:bb:2e:a6:e1:d2:9e:d6:84:7b:c6: fd:a9:4d:3b:34:a9:73:dd:12:9a:52:6a:bb:0e:64: a5:b5:cd:78:dd:12:b4:c1:b7:09:52:3b:d6:61:86: 2a:a2:ec:ba:4e:45:1e:3c:6c:15:0e:c5:4c:3d:19: 54:cc:a2:fc:d2:da:a1:89:c2:8d:9b:22:66:dd:84: ac:b1:cf:4e:35:1b:f1:0b:6c:85:71:8d:c4:80:b4: 3c:a3:60:fb:fd:7f:2c:1f:ed:63:59:96:b2:a3:75: 3f:c2:01:31:56:31:80:eb:30:b2:ef:3b:e3:42:86: c3:4d:73:e8:e5:42:15:6e:99:31:f7:3f:a7:b7:d1: f1:db:79:69:fa:0e:b5:63:f3:41:1a:23:54:62:36: 7e:8a:3a:bf:94:1b:97:2f:67:cf:9c:2b:3e:33:e8: 9b:cb:61:1f:ba:bd:9e:41:10:6d:97:17:cd:4a:74: f2:2d:10:fe:d6:fb:0f:45:be:a1:38:66:7e:59:25: 9b:46:24:21:dc:73:f6:29:a9:d1:f5:57:4e:8b:e3: db:7f:d3:ac:1f:8a:bd:6e:43:9f:3b:ba:f9:d1:fd: 46:29:ee:ba:51:4f:b0:9f:39:f9:8d:8c:e0:b9:18: 60:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1C:08:0B:F5:3B:0D:20:C1:C6:D5:2D:CA:5C:04:9A:8B:E4:EF:58 X509v3 Authority Key Identifier: keyid:D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:51:11:87:a4:3f:b4:ba:7d:f0:2b:3f:93:7e:fd:ea:45:c4: 36:ec:86:31:72:a4:f6:28:6a:8c:e9:c0:24:1d:c1:61:01:81: 88:ab:aa:74:f0:20:9f:1e:0b:b6:db:ca:64:4b:4f:32:81:1e: 8e:cf:44:d0:0e:2f:d1:1b:25:51:a3:ef:e2:e3:f5:e9:bf:db: a4:ae:64:e0:9d:b6:87:a1:b7:94:39:45:2f:cf:e5:3d:c9:67: fb:ee:d6:90:cf:81:56:cf:78:7a:65:fe:3c:f2:36:6f:dc:23: 3c:32:b0:4b:86:69:9f:a9:a1:e2:f7:98:f2:70:ac:07:d8:98: a5:1b:36:39:6c:84:05:fa:e7:09:a9:01:41:4a:f7:d1:60:37: 01:8e:05:1a:a9:53:08:a8:9f:00:94:ae:b0:3d:24:a8:92:58: e3:36:1f:cf:ee:0c:31:de:df:f9:a0:10:5c:3d:6a:38:d7:85: 05:8f:c5:7a:6b:a1:5a:f9:d7:b2:c4:69:e8:c3:8e:77:26:fa: ec:9d:d7:07:1f:8e:0e:de:47:b8:be:36:00:2b:ee:a7:a4:7c: 22:57:f5:d1:aa:a0:5a:e9:35:16:45:31:b4:19:d8:fe:d9:e9: 42:7c:db:41:7b:35:f3:7b:ef:11:27:a3:81:43:c3:9c:3d:14: b1:c6:7f:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMT+aWccsNOu/7So7tEU4IvM7pCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0Q0Ey MTBEODg2QjAeFw0yNjAzMjUxNjM3MzZaFw0yNjAzMjgyMzI2MzZaMDMxMTAvBgNV BAMTKDU3MUMwODBCRjUzQjBEMjBDMUM2RDUyRENBNUMwNDlBOEJFNEVGNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoKwss/pFwqmzKuqgvl/JA8LC5 uy6m4dKe1oR7xv2pTTs0qXPdEppSarsOZKW1zXjdErTBtwlSO9Zhhiqi7LpORR48 bBUOxUw9GVTMovzS2qGJwo2bImbdhKyxz041G/ELbIVxjcSAtDyjYPv9fywf7WNZ lrKjdT/CATFWMYDrMLLvO+NChsNNc+jlQhVumTH3P6e30fHbeWn6DrVj80EaI1Ri Nn6KOr+UG5cvZ8+cKz4z6JvLYR+6vZ5BEG2XF81KdPItEP7W+w9FvqE4Zn5ZJZtG JCHcc/YpqdH1V06L49t/06wfir1uQ587uvnR/UYp7rpRT7CfOfmNjOC5GGCxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVxwIC/U7DSDBxtUtylwEmovk71gwHwYDVR0j BBgwFoAU2QxwQrXcGDQdzHfKXPj0yiENiGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE2ZmVhYS02YjRmLTQ3Y2YtOWUzYy0wMGFlYWM2N2EzMmEvMC9EOTBDNzA0MkI1 REMxODM0MURDQzc3Q0E1Q0Y4RjRDQTIxMEQ4ODZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0Q0EyMTBE ODg2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzAvRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0 Q0EyMTBEODg2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVREYekP7S6ffArP5N+/epFxDbshjFypPYo aozpwCQdwWEBgYirqnTwIJ8eC7bbymRLTzKBHo7PRNAOL9EbJVGj7+Lj9em/26Su ZOCdtoeht5Q5RS/P5T3JZ/vu1pDPgVbPeHpl/jzyNm/cIzwysEuGaZ+poeL3mPJw rAfYmKUbNjlshAX65wmpAUFK99FgNwGOBRqpUwionwCUrrA9JKiSWOM2H8/uDDHe 3/mgEFw9ajjXhQWPxXproVr517LEaejDjncm+uyd1wcfjg7eR7i+NgAr7qekfCJX 9dGqoFrpNRZFMbQZ2P7Z6UJ820F7NfN77xEno4FDw5w9FLHGf4Y= -----END CERTIFICATE-----Generated at Thu Mar 26 13:59:43 2026 by rpki-client