$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft File: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft (raw, json) Hash identifier: tpvgXgD3Is8gU+iT+JHg+2EFYFj2PpbcFiFwu1xgMSc= Subject key identifier: BE:4C:4C:50:99:A0:39:42:17:93:85:B1:28:D5:E4:CB:88:D5:F4:49 Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA Certificate issuer: /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Certificate serial: 70091924CBD391CF0CE24B6BED9F75C16BB1901E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft Manifest number: 0108 Signing time: Thu 26 Mar 2026 13:10:05 +0000 Manifest this update: Thu 26 Mar 2026 13:05:05 +0000 Manifest next update: Sun 29 Mar 2026 14:06:05 +0000 Files and hashes: 1: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (hash: 1HxtFIC2mDpdIVeFSCE5SBjVAm1XOnzukjpVGUq9Opw=) 2: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (hash: Ys/Ac2N5+uLGmk3R0LquRKwlaYjjmhHi3Oz1JgWuapk=) 3: 3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (hash: eDVLkqfk43S08o9qz9LRiZEdW7qlzbDriZ0upji6wSE=) 4: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl (hash: Qq8YoWwpOqnFVFHEdu99Bfpo6HQU+6C1fGCuEA0fC1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:09:19:24:cb:d3:91:cf:0c:e2:4b:6b:ed:9f:75:c1:6b:b1:90:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Validity Not Before: Mar 26 13:05:05 2026 GMT Not After : Mar 29 14:06:05 2026 GMT Subject: CN=BE4C4C5099A03942179385B128D5E4CB88D5F449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:57:8b:37:6f:f5:71:eb:a6:ed:8e:22:26:e5: 32:bb:7a:68:fd:72:a0:d3:4d:b0:ae:1c:89:84:dd: 5b:a1:19:40:84:60:72:81:5b:32:7a:49:d1:41:a7: 1d:4d:bf:24:b3:b1:cf:c1:48:6a:11:29:7f:e7:ec: 35:0e:6a:75:f4:d2:9c:3b:e3:3d:ff:47:67:d1:9f: dd:bb:05:65:ef:d3:49:32:c5:3c:53:bc:4a:98:3c: 57:78:f3:cb:82:78:1c:16:0c:f8:20:f0:e7:f2:7a: bf:4d:a4:96:5b:e3:2a:e3:e7:61:0a:b5:d0:53:a6: 97:ad:70:3a:bb:b4:90:77:ec:61:11:2e:0e:49:a9: ed:00:8b:ee:d2:ef:ab:3f:2b:3e:fc:25:21:57:a6: 50:b8:ea:0e:5e:14:f5:02:19:cd:19:3a:e7:f6:00: fc:71:c8:9b:4d:26:34:e2:e0:2e:6a:bf:c4:be:c8: 26:17:6f:9f:0e:dc:82:20:ec:28:5e:1f:da:0f:59: b8:ad:23:39:2a:b7:8c:36:26:fb:06:93:6c:03:c9: 89:67:7b:6e:38:20:08:bb:c0:84:04:a1:c2:9e:78: 2e:3b:c6:ff:7d:77:e8:4d:7e:df:ec:3f:ae:06:57: 96:c5:a0:0e:01:47:b2:45:84:98:12:b1:95:4f:1e: 64:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4C:4C:50:99:A0:39:42:17:93:85:B1:28:D5:E4:CB:88:D5:F4:49 X509v3 Authority Key Identifier: keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:49:e8:b1:9a:51:7b:0c:2b:1c:4a:f0:16:78:3e:5e:5b:f2: 50:49:9e:a8:c5:ae:87:83:83:c0:8f:d4:fd:79:44:2c:5c:39: 2f:d7:cb:ce:b4:80:d8:59:32:0e:8c:e1:bf:0e:48:71:4e:6f: 34:75:26:a7:13:18:b5:b5:03:aa:f3:69:53:98:3b:8a:54:a7: 48:0f:e5:65:96:43:6d:9d:3c:8f:5b:3e:ac:ec:a2:4f:9c:20: 6c:64:37:79:a6:bb:2a:3a:e7:22:59:63:c2:15:45:ad:ad:18: 36:14:4c:3b:10:b1:7c:c3:74:8d:5c:c1:98:27:d9:31:35:33: 01:71:e2:46:08:20:c5:21:1d:a9:3d:2f:85:3a:9c:e6:6c:bf: 7c:96:ec:52:63:a1:97:51:38:a3:37:f3:fc:f4:e7:af:b4:f8: 26:2b:db:e6:56:4b:e1:57:d3:b6:af:63:3b:24:23:8c:20:22: 9d:78:52:7a:a9:e1:90:c0:62:e3:0e:de:52:1f:d8:cd:47:d6: 9f:a0:d5:bc:d8:3c:e1:c4:7c:2c:58:b6:fc:41:f1:c3:14:44: 7a:25:77:69:ac:ac:1b:30:a9:5e:1c:3e:1f:4c:f6:ff:70:2c: f2:ab:7a:62:e1:2a:c1:f0:e9:1d:e0:03:70:da:cb:cb:7a:a5: ca:8f:c8:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcAkZJMvTkc8M4ktr7Z91wWuxkB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2 MEY3OEZDQTAeFw0yNjAzMjYxMzA1MDVaFw0yNjAzMjkxNDA2MDVaMDMxMTAvBgNV BAMTKEJFNEM0QzUwOTlBMDM5NDIxNzkzODVCMTI4RDVFNENCODhENUY0NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKV4s3b/Vx66btjiIm5TK7emj9 cqDTTbCuHImE3VuhGUCEYHKBWzJ6SdFBpx1NvySzsc/BSGoRKX/n7DUOanX00pw7 4z3/R2fRn927BWXv00kyxTxTvEqYPFd488uCeBwWDPgg8Ofyer9NpJZb4yrj52EK tdBTppetcDq7tJB37GERLg5Jqe0Ai+7S76s/Kz78JSFXplC46g5eFPUCGc0ZOuf2 APxxyJtNJjTi4C5qv8S+yCYXb58O3IIg7CheH9oPWbitIzkqt4w2JvsGk2wDyYln e244IAi7wIQEocKeeC47xv99d+hNft/sP64GV5bFoA4BR7JFhJgSsZVPHmQZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvkxMUJmgOUIXk4WxKNXky4jV9EkwHwYDVR0j BBgwFoAUkDF+Jp/+n3E/IM+6zmQqb2D3j8owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2I4NThmNi1kZTIwLTQxMjEtYmNlYS05MDc2ZWRjY2MwOTcvMC85MDMxN0UyNjlG RkU5RjcxM0YyMENGQkFDRTY0MkE2RjYwRjc4RkNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2MEY3 OEZDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiODU4ZjYtZGUyMC00MTIxLWJj ZWEtOTA3NmVkY2NjMDk3LzAvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJB NkY2MEY3OEZDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9J6LGaUXsMKxxK8BZ4Pl5b8lBJnqjFroeD g8CP1P15RCxcOS/Xy860gNhZMg6M4b8OSHFObzR1JqcTGLW1A6rzaVOYO4pUp0gP 5WWWQ22dPI9bPqzsok+cIGxkN3mmuyo65yJZY8IVRa2tGDYUTDsQsXzDdI1cwZgn 2TE1MwFx4kYIIMUhHak9L4U6nOZsv3yW7FJjoZdROKM38/z056+0+CYr2+ZWS+FX 07avYzskI4wgIp14Unqp4ZDAYuMO3lIf2M1H1p+g1bzYPOHEfCxYtvxB8cMURHol d2msrBswqV4cPh9M9v9wLPKremLhKsHw6R3gA3Day8t6pcqPyK0= -----END CERTIFICATE-----Generated at Thu Mar 26 16:46:46 2026 by rpki-client