$ rpki-client -vvf repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft File: 90EF20986B3061451D9F1178EB4D439522186281.mft (raw, json) Hash identifier: XBeNustwcfQjlBH72eizO5lyp4I7q0tYuDbjHfJGVsg= Subject key identifier: 0C:23:71:EF:DA:BD:5D:BB:16:12:60:E6:02:DF:B8:78:22:34:B5:14 Authority key identifier: 90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81 Certificate issuer: /CN=90EF20986B3061451D9F1178EB4D439522186281 Certificate serial: 39AAEA36F7FDE11DAE5BB534A7F253DFB6735F61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft Manifest number: 02E9 Signing time: Wed 25 Mar 2026 03:12:10 +0000 Manifest this update: Wed 25 Mar 2026 03:07:10 +0000 Manifest next update: Sat 28 Mar 2026 06:39:10 +0000 Files and hashes: 1: 3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa (hash: juxqVk4Pjv7HWg3rc7qy+poTuVXup5lljxn80d82VOs=) 2: 3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa (hash: /g+5nQoioDTt8teej8QvN1daXZtQyJ0RCEnJEqM8tz8=) 3: 90EF20986B3061451D9F1178EB4D439522186281.crl (hash: M2CJR6fHqQ2WT6Ys2M8jA2+ifQ6ilJdkk10m/xdVpeM=) 4: 3130332e3137382e32312e302f32342d3234203d3e20313439333139.roa (hash: n2eHTuRPz7VRKqIm4y6ERY38jrtnwA1mKjZRAuLNji8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:aa:ea:36:f7:fd:e1:1d:ae:5b:b5:34:a7:f2:53:df:b6:73:5f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90EF20986B3061451D9F1178EB4D439522186281 Validity Not Before: Mar 25 03:07:10 2026 GMT Not After : Mar 28 06:39:10 2026 GMT Subject: CN=0C2371EFDABD5DBB161260E602DFB8782234B514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:26:6e:f0:d5:db:f9:60:62:57:b8:00:f3:ea: 42:6f:0e:40:e8:e0:b6:c1:f7:a8:e8:33:59:3b:21: 48:2b:bf:e2:23:c6:d2:75:b6:23:e4:5c:82:b6:65: 65:95:cc:19:a6:5d:2a:01:67:10:b6:a4:70:86:05: 34:f7:d5:a0:b5:a2:a3:a9:8f:65:d5:65:17:c9:e3: 0b:b6:d4:89:3e:0b:35:2a:31:e8:5a:f7:f6:45:70: 3d:be:a3:9f:ed:f9:2a:82:a9:98:7a:7d:bb:f8:4c: 56:78:90:5c:e1:6e:45:8a:53:3e:b3:8e:5d:47:50: f7:71:51:0d:e0:64:0e:fc:6a:35:d2:c3:dd:61:90: e3:a2:58:af:bf:9a:ff:1c:74:23:54:18:e7:0c:4f: 9c:3c:27:93:ff:96:a8:53:10:b9:d6:4f:27:82:75: f6:c1:c1:00:ba:6e:fe:1a:7e:b6:7c:34:46:d8:5d: 54:38:4f:cc:06:20:be:b7:14:5a:0b:52:0e:b5:11: 0f:44:62:8e:9e:b1:98:74:f2:92:6f:ad:0e:69:8d: 2d:e7:fb:be:4e:9d:36:4f:89:59:d9:72:fe:c2:88: 7c:47:87:f5:b9:28:8c:a3:d7:26:22:65:89:8c:d7: 75:0e:f2:96:08:73:13:b2:c2:2c:69:5b:8f:2c:7f: 26:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:23:71:EF:DA:BD:5D:BB:16:12:60:E6:02:DF:B8:78:22:34:B5:14 X509v3 Authority Key Identifier: keyid:90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:07:a8:7c:62:b0:b7:ac:89:c9:68:23:85:a6:c9:a5:ec:d0: b6:65:22:81:bb:fd:c2:b8:b2:82:ed:1e:0f:d6:d5:b5:52:87: c2:8c:ba:15:c3:61:83:44:ec:65:e6:df:3d:ea:ba:8f:ff:1f: 4c:b1:61:30:73:c2:ca:fd:75:97:cf:0c:48:53:bb:4c:1c:44: 43:6a:a6:ac:17:c9:a0:56:13:e0:39:10:0f:fb:44:61:e1:f2: 02:b5:79:50:c1:04:11:0a:dd:b8:a4:6f:fb:c3:ce:45:c7:1f: 73:90:af:cb:89:5a:b4:91:6b:72:db:df:01:10:91:99:fc:46: 9a:0b:a8:0a:a5:2c:bd:fc:da:7b:77:f4:e3:04:73:8f:2e:c4: 3f:ae:0a:42:1c:0a:a0:d1:db:53:18:23:0a:cc:34:42:a8:fb: 4c:f5:8e:d9:16:50:f5:f6:cb:d0:04:80:98:7e:95:67:a1:65: 2f:3d:76:d2:ef:73:66:c3:88:d0:c5:8a:f3:49:ee:48:19:f2: 67:0e:50:ca:6a:5f:9c:0c:96:9d:77:e2:f5:2e:8e:11:84:47: de:86:a2:7e:c1:f5:7b:c8:99:f1:e0:40:5a:2c:4d:93:bc:fc: d2:cf:35:18:f8:af:01:3e:0a:31:cd:5a:12:15:13:bc:f4:80: 1f:93:8d:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOarqNvf94R2uW7U0p/JT37ZzX2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQzOTUy MjE4NjI4MTAeFw0yNjAzMjUwMzA3MTBaFw0yNjAzMjgwNjM5MTBaMDMxMTAvBgNV BAMTKDBDMjM3MUVGREFCRDVEQkIxNjEyNjBFNjAyREZCODc4MjIzNEI1MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJm7w1dv5YGJXuADz6kJvDkDo 4LbB96joM1k7IUgrv+IjxtJ1tiPkXIK2ZWWVzBmmXSoBZxC2pHCGBTT31aC1oqOp j2XVZRfJ4wu21Ik+CzUqMeha9/ZFcD2+o5/t+SqCqZh6fbv4TFZ4kFzhbkWKUz6z jl1HUPdxUQ3gZA78ajXSw91hkOOiWK+/mv8cdCNUGOcMT5w8J5P/lqhTELnWTyeC dfbBwQC6bv4afrZ8NEbYXVQ4T8wGIL63FFoLUg61EQ9EYo6esZh08pJvrQ5pjS3n +75OnTZPiVnZcv7CiHxHh/W5KIyj1yYiZYmM13UO8pYIcxOywixpW48sfyb5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDCNx79q9XbsWEmDmAt+4eCI0tRQwHwYDVR0j BBgwFoAUkO8gmGswYUUdnxF4601DlSIYYoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmZkOWE1OC1hOTA2LTQwMjktOTJlMi1hZGNiNTZhZTE4YmQvMC85MEVGMjA5ODZC MzA2MTQ1MUQ5RjExNzhFQjRENDM5NTIyMTg2MjgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQzOTUyMjE4 NjI4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZmZDlhNTgtYTkwNi00MDI5LTky ZTItYWRjYjU2YWUxOGJkLzAvOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQz OTUyMjE4NjI4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEHqHxisLesicloI4WmyaXs0LZlIoG7/cK4 soLtHg/W1bVSh8KMuhXDYYNE7GXm3z3quo//H0yxYTBzwsr9dZfPDEhTu0wcRENq pqwXyaBWE+A5EA/7RGHh8gK1eVDBBBEK3bikb/vDzkXHH3OQr8uJWrSRa3Lb3wEQ kZn8RpoLqAqlLL382nt39OMEc48uxD+uCkIcCqDR21MYIwrMNEKo+0z1jtkWUPX2 y9AEgJh+lWehZS89dtLvc2bDiNDFivNJ7kgZ8mcOUMpqX5wMlp134vUujhGER96G on7B9XvImfHgQFosTZO8/NLPNRj4rwE+CjHNWhIVE7z0gB+TjR8= -----END CERTIFICATE-----Generated at Thu Mar 26 17:24:36 2026 by rpki-client