$ rpki-client -vvf repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft File: 90173425DBB7D1DBD164BBA26F4657B17A266A97.mft (raw, json) Hash identifier: Xxul6Xf55yMmhZaq5tgtnkcbH8YH5Y6oNWEcEVIs4Ss= Subject key identifier: 8D:1A:56:89:F5:D9:44:5B:2D:3C:BC:3A:ED:52:08:64:3C:AC:75:94 Authority key identifier: 90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 Certificate issuer: /CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Certificate serial: 22D1764CB3C9BF8CFD62DAEF79D57271A5F55BE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft Manifest number: 0560 Signing time: Wed 25 Mar 2026 23:41:31 +0000 Manifest this update: Wed 25 Mar 2026 23:36:31 +0000 Manifest next update: Sun 29 Mar 2026 03:33:31 +0000 Files and hashes: 1: 90173425DBB7D1DBD164BBA26F4657B17A266A97.crl (hash: Tu8Mf42y2k+AkPBFfUQ9SVductuV9hkUpct8TINwvms=) 2: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: JVL+81yV9zQDwPcNgvThrCD77NCHFX7cSVK21vFtKao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d1:76:4c:b3:c9:bf:8c:fd:62:da:ef:79:d5:72:71:a5:f5:5b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Validity Not Before: Mar 25 23:36:31 2026 GMT Not After : Mar 29 03:33:31 2026 GMT Subject: CN=8D1A5689F5D9445B2D3CBC3AED5208643CAC7594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8f:02:0b:6c:b2:a1:99:e6:58:0b:bd:ce:9f: 59:75:69:da:57:5a:57:a0:49:7f:a5:b9:90:a9:23: c7:a4:56:21:94:8c:22:2c:6f:e6:e9:86:ce:cd:4b: f4:2e:4c:d7:5d:f5:2a:9b:e2:1a:be:dc:07:d9:2d: 88:38:42:df:a3:9a:4e:84:1e:55:3f:dd:1b:11:57: b1:b6:68:45:18:01:5d:08:1e:60:d0:9a:75:8d:e8: 26:03:70:f1:aa:ba:e6:db:6d:7a:37:c2:66:e9:b7: 1a:f6:06:ef:f3:e4:8e:3d:5b:96:b5:f3:f2:69:df: 53:ac:40:2a:e0:0a:f3:f6:1b:84:77:e9:b0:2d:d7: f1:32:04:9b:12:12:bd:1d:49:65:00:ad:ff:d1:33: 1a:6b:e3:ae:1f:68:4e:f5:0f:23:9e:84:85:4b:18: 72:df:75:b6:92:24:c8:ae:a2:85:1e:c5:51:ca:08: 8d:9a:f2:9b:d0:8a:a9:22:84:2b:bf:f1:10:7e:6e: d1:a0:7e:bf:99:fc:fc:3b:b8:c8:96:43:0a:31:38: ea:2d:ee:ea:70:07:d0:be:48:55:df:4f:ba:28:cd: 06:d5:6f:a0:d5:7a:7f:42:5f:94:0b:4c:f2:eb:94: d6:14:28:e9:9c:52:31:6a:56:a4:58:62:d0:94:0f: 68:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1A:56:89:F5:D9:44:5B:2D:3C:BC:3A:ED:52:08:64:3C:AC:75:94 X509v3 Authority Key Identifier: keyid:90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:83:84:62:05:73:19:2f:fe:81:b4:e7:7c:90:aa:b3:fe:b5: 93:1c:ad:78:fa:b4:a4:67:d0:dd:6e:36:8e:0e:85:6f:fd:2f: 2c:cf:92:6e:f6:d6:b6:33:f4:59:6b:5d:93:3f:70:93:f2:e6: 5d:f1:cd:47:44:e9:2b:52:b0:c1:84:8b:f9:d3:7d:ee:fc:d1: 7d:92:d4:3f:8a:16:ed:74:b0:ee:37:a2:44:45:80:8e:b3:aa: 8a:84:85:26:7f:95:7e:58:66:01:7a:15:ca:c2:35:20:8d:e5: 34:3f:5d:e5:f6:d0:72:12:32:91:b6:70:44:9c:a3:50:d0:30: 89:19:c0:23:fa:6c:27:f6:85:e8:5c:41:21:50:c9:ab:72:e1: c2:ba:ba:93:51:27:22:45:83:b1:24:8a:59:9d:06:2c:16:df: b6:c7:2b:ea:42:8d:91:48:8e:e0:b1:61:b0:55:6f:c5:d5:76: e0:5f:29:79:cb:f5:d0:0c:87:fa:42:0d:6c:b4:ff:be:23:cb: 59:aa:d2:6e:00:0f:48:68:3c:53:0b:3d:0f:15:75:94:8b:e7: 64:2c:8f:c7:a0:0a:d2:3d:73:61:25:a2:6d:e2:7b:3d:a1:bc: 22:d3:e6:e7:be:45:05:31:4a:a9:17:ab:c5:dc:c0:72:8a:c9: 4d:b2:96:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUItF2TLPJv4z9YtrvedVycaX1W+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3 QTI2NkE5NzAeFw0yNjAzMjUyMzM2MzFaFw0yNjAzMjkwMzMzMzFaMDMxMTAvBgNV BAMTKDhEMUE1Njg5RjVEOTQ0NUIyRDNDQkMzQUVENTIwODY0M0NBQzc1OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRjwILbLKhmeZYC73On1l1adpX WlegSX+luZCpI8ekViGUjCIsb+bphs7NS/QuTNdd9Sqb4hq+3AfZLYg4Qt+jmk6E HlU/3RsRV7G2aEUYAV0IHmDQmnWN6CYDcPGquubbbXo3wmbptxr2Bu/z5I49W5a1 8/Jp31OsQCrgCvP2G4R36bAt1/EyBJsSEr0dSWUArf/RMxpr464faE71DyOehIVL GHLfdbaSJMiuooUexVHKCI2a8pvQiqkihCu/8RB+btGgfr+Z/Pw7uMiWQwoxOOot 7upwB9C+SFXfT7oozQbVb6DVen9CX5QLTPLrlNYUKOmcUjFqVqRYYtCUD2gzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjRpWifXZRFstPLw67VIIZDysdZQwHwYDVR0j BBgwFoAUkBc0Jdu30dvRZLuib0ZXsXomapcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmQ0MzQwYi0yMWM0LTRmYzctYTI1OS1lMjM1NGM1M2ZkZDIvMC85MDE3MzQyNURC QjdEMURCRDE2NEJCQTI2RjQ2NTdCMTdBMjY2QTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3QTI2 NkE5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJkNDM0MGItMjFjNC00ZmM3LWEy NTktZTIzNTRjNTNmZGQyLzAvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3 QjE3QTI2NkE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmDhGIFcxkv/oG053yQqrP+tZMcrXj6tKRn 0N1uNo4OhW/9LyzPkm721rYz9FlrXZM/cJPy5l3xzUdE6StSsMGEi/nTfe780X2S 1D+KFu10sO43okRFgI6zqoqEhSZ/lX5YZgF6FcrCNSCN5TQ/XeX20HISMpG2cESc o1DQMIkZwCP6bCf2hehcQSFQyaty4cK6upNRJyJFg7EkilmdBiwW37bHK+pCjZFI juCxYbBVb8XVduBfKXnL9dAMh/pCDWy0/74jy1mq0m4AD0hoPFMLPQ8VdZSL52Qs j8egCtI9c2Elom3iez2hvCLT5ue+RQUxSqkXq8XcwHKKyU2ylog= -----END CERTIFICATE-----Generated at Thu Mar 26 08:48:28 2026 by rpki-client