$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft File: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft (raw, json) Hash identifier: UrWJp9/LyNO6xYH9uKfaoEdYEF2O/DxD//j5E9MNigc= Subject key identifier: 61:59:28:B9:19:35:0A:30:1F:25:F1:82:38:81:71:EC:09:50:3D:84 Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA Certificate issuer: /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Certificate serial: 6221B161E9EBECC887BB99427658A6C6E67DA424 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft Manifest number: 0107 Signing time: Tue 24 Mar 2026 02:20:05 +0000 Manifest this update: Tue 24 Mar 2026 02:15:05 +0000 Manifest next update: Fri 27 Mar 2026 13:09:05 +0000 Files and hashes: 1: 3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (hash: eDVLkqfk43S08o9qz9LRiZEdW7qlzbDriZ0upji6wSE=) 2: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl (hash: ynLJsVThrT4hg6EjtT98W0yCgqna5T8e+yBOcmUaw5o=) 3: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (hash: 1HxtFIC2mDpdIVeFSCE5SBjVAm1XOnzukjpVGUq9Opw=) 4: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (hash: Ys/Ac2N5+uLGmk3R0LquRKwlaYjjmhHi3Oz1JgWuapk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:21:b1:61:e9:eb:ec:c8:87:bb:99:42:76:58:a6:c6:e6:7d:a4:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Validity Not Before: Mar 24 02:15:05 2026 GMT Not After : Mar 27 13:09:05 2026 GMT Subject: CN=615928B919350A301F25F182388171EC09503D84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:4e:87:ee:48:13:fa:4e:f1:bf:ca:f4:3f: b6:48:c7:47:28:e7:eb:90:d2:f6:ef:48:17:1f:7f: 87:76:fb:14:53:ce:c0:6f:a5:d9:97:7d:45:5a:a7: 0a:88:fa:6d:f9:42:f1:06:74:78:af:06:95:21:4a: 41:82:f5:66:f3:46:a3:18:a6:b3:ba:1b:3e:fa:a4: c4:08:63:4a:ad:b6:42:e6:19:66:9c:6e:9b:74:b2: 49:1d:5f:34:67:50:c4:de:34:07:a3:d0:6b:72:98: 64:17:f2:d5:a2:ff:99:90:11:64:7a:23:98:fd:ec: 57:ef:d6:89:a3:d3:07:98:c1:17:1d:29:4a:c6:9f: 54:eb:c0:60:05:e4:5f:ac:65:07:0e:7c:b2:b9:a7: 82:3a:f2:57:a4:76:e8:df:43:20:9f:cb:91:1c:e2: c5:04:8f:d9:2b:15:36:fb:33:fd:cd:3a:8f:85:e7: d2:13:d2:15:3c:86:4d:5b:5b:99:b8:4c:e9:38:f7: 20:ab:66:0f:11:95:d4:2e:37:ba:81:44:73:a2:94: d0:15:bb:03:d5:ff:6d:f8:05:1b:32:d5:af:6a:22: ec:c0:7a:45:bf:b9:af:62:bc:36:fd:e7:22:f0:a6: 32:18:72:aa:79:44:6e:28:64:84:03:d4:31:61:06: f3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:59:28:B9:19:35:0A:30:1F:25:F1:82:38:81:71:EC:09:50:3D:84 X509v3 Authority Key Identifier: keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:18:28:45:c9:f9:d4:63:c7:df:36:41:97:d1:0b:fd:22:c9: 5e:65:e3:f7:90:93:03:a1:ec:7d:c4:7b:45:fb:bd:c6:11:88: ed:c9:61:e8:d2:10:5e:39:74:1b:2c:08:8e:82:e5:98:a8:d1: bf:b2:93:1b:95:53:06:e9:e2:b2:cd:1a:14:66:a7:e8:6c:5e: 9d:ca:97:47:96:34:43:0a:69:52:00:4b:72:4c:bb:3d:c1:c3: 44:e6:01:b6:3d:ac:62:5f:7e:60:cd:26:b3:b7:a2:e8:d1:25: e3:ea:17:f2:31:e0:66:73:40:13:ea:07:6d:d2:c0:2a:39:fe: f0:d8:1f:a5:81:fe:5a:0e:cd:23:90:05:1f:c7:77:03:c4:88: 19:46:8c:2e:16:f4:0c:22:e4:20:2d:27:dc:fd:e6:e1:ba:45: 87:72:54:0f:d8:d5:b7:3f:7b:ef:ff:c2:79:7e:42:5d:df:55: 81:ae:1b:67:e7:f9:2b:e2:a7:74:d0:18:a4:9f:40:d6:54:df: 74:d6:55:a3:c5:ff:8d:0f:5f:e3:5e:de:51:70:d7:50:5b:88: 78:ae:93:92:43:26:a6:f8:d9:d7:a5:a0:66:0d:a9:44:ca:c7: 8a:64:fb:c6:c9:4c:50:15:cb:37:92:3e:d5:59:e4:a7:a5:8d: 24:9f:b7:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYiGxYenr7MiHu5lCdlimxuZ9pCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2 MEY3OEZDQTAeFw0yNjAzMjQwMjE1MDVaFw0yNjAzMjcxMzA5MDVaMDMxMTAvBgNV BAMTKDYxNTkyOEI5MTkzNTBBMzAxRjI1RjE4MjM4ODE3MUVDMDk1MDNEODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6c06H7kgT+k7xv8r0P7ZIx0co 5+uQ0vbvSBcff4d2+xRTzsBvpdmXfUVapwqI+m35QvEGdHivBpUhSkGC9WbzRqMY prO6Gz76pMQIY0qttkLmGWacbpt0skkdXzRnUMTeNAej0GtymGQX8tWi/5mQEWR6 I5j97Ffv1omj0weYwRcdKUrGn1TrwGAF5F+sZQcOfLK5p4I68lekdujfQyCfy5Ec 4sUEj9krFTb7M/3NOo+F59IT0hU8hk1bW5m4TOk49yCrZg8RldQuN7qBRHOilNAV uwPV/234BRsy1a9qIuzAekW/ua9ivDb95yLwpjIYcqp5RG4oZIQD1DFhBvNBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYVkouRk1CjAfJfGCOIFx7AlQPYQwHwYDVR0j BBgwFoAUkDF+Jp/+n3E/IM+6zmQqb2D3j8owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2I4NThmNi1kZTIwLTQxMjEtYmNlYS05MDc2ZWRjY2MwOTcvMC85MDMxN0UyNjlG RkU5RjcxM0YyMENGQkFDRTY0MkE2RjYwRjc4RkNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2MEY3 OEZDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiODU4ZjYtZGUyMC00MTIxLWJj ZWEtOTA3NmVkY2NjMDk3LzAvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJB NkY2MEY3OEZDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIoYKEXJ+dRjx982QZfRC/0iyV5l4/eQkwOh 7H3Ee0X7vcYRiO3JYejSEF45dBssCI6C5Zio0b+ykxuVUwbp4rLNGhRmp+hsXp3K l0eWNEMKaVIAS3JMuz3Bw0TmAbY9rGJffmDNJrO3oujRJePqF/Ix4GZzQBPqB23S wCo5/vDYH6WB/loOzSOQBR/HdwPEiBlGjC4W9Awi5CAtJ9z95uG6RYdyVA/Y1bc/ e+//wnl+Ql3fVYGuG2fn+Svip3TQGKSfQNZU33TWVaPF/40PX+Ne3lFw11BbiHiu k5JDJqb42deloGYNqUTKx4pk+8bJTFAVyzeSPtVZ5KeljSSft9Q= -----END CERTIFICATE-----Generated at Thu Mar 26 16:04:17 2026 by rpki-client