$ rpki-client -vvf repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft File: B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft (raw, json) Hash identifier: licVAtFpozMm+mr/y/jcvgwLaG/80tw7Gj8dvo72UkA= Subject key identifier: CC:A2:E7:FF:BA:46:C5:D6:2B:DF:DE:2C:AB:72:2B:FA:F1:53:4F:3E Authority key identifier: B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5 Certificate issuer: /CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5 Certificate serial: 685D819E4FC3ECD44EB42E8078B9D45A1117C162 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft Manifest number: 02CE Signing time: Tue 24 Mar 2026 16:51:39 +0000 Manifest this update: Tue 24 Mar 2026 16:46:39 +0000 Manifest next update: Sat 28 Mar 2026 04:18:39 +0000 Files and hashes: 1: 3130332e3137302e33322e302f32332d3234203d3e20313432333631.roa (hash: 3ZtCwnCQD5p9GJGLBXeZADVLlPJnY+bs7SHq9opzmnQ=) 2: B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl (hash: bk32p0LTYAVut5j9HaWG8k2s7gQYt4PQQyYn3salXT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:5d:81:9e:4f:c3:ec:d4:4e:b4:2e:80:78:b9:d4:5a:11:17:c1:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5 Validity Not Before: Mar 24 16:46:39 2026 GMT Not After : Mar 28 04:18:39 2026 GMT Subject: CN=CCA2E7FFBA46C5D62BDFDE2CAB722BFAF1534F3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:be:8d:e8:81:56:90:de:33:9b:0d:46:4c:4f: a3:48:a7:13:98:ff:c0:03:85:9f:0d:6f:f5:8c:0c: 46:d2:d0:b0:c3:32:72:41:b7:93:a9:db:3e:46:3a: 50:88:a4:76:a9:ca:0e:b4:93:c9:1e:18:91:e7:85: 45:7f:c6:31:29:32:99:1b:46:0d:55:07:ba:8f:b0: 02:c3:df:d8:f7:97:19:c7:e8:89:4d:b2:26:14:68: 11:ea:a2:ba:0d:8e:5e:90:ad:3c:25:0d:53:a5:76: cf:b1:29:03:dd:5f:53:3e:94:23:f9:8b:3c:7a:8f: 57:7c:78:23:e7:46:e0:f1:97:ef:51:04:10:95:00: cd:d2:51:ae:22:32:79:fc:db:5c:e8:a1:b6:f6:92: 2b:56:34:02:ee:fe:67:0d:76:56:76:b1:72:43:e4: 50:3c:0f:0e:3f:0f:2c:81:52:d3:43:f4:7b:06:5c: 3b:0a:dd:d8:ca:c6:de:5f:ff:30:90:00:6d:ec:2a: 9e:4c:94:e1:a1:af:67:f4:ac:3d:1f:55:62:49:7d: 4d:54:fe:c5:ab:c6:61:81:5d:42:48:7d:c5:92:8f: 83:05:68:c1:50:88:d5:f9:74:c8:10:7a:46:03:92: 06:0d:e1:04:61:31:54:e8:1b:c6:d4:11:d6:21:3c: 2b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A2:E7:FF:BA:46:C5:D6:2B:DF:DE:2C:AB:72:2B:FA:F1:53:4F:3E X509v3 Authority Key Identifier: keyid:B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:08:1a:98:e3:21:bc:2d:fd:1d:fd:06:a7:22:26:2d:92:3f: 65:49:26:f4:f9:4b:6a:c7:74:1c:4d:6a:94:54:f3:ee:86:e8: 24:a0:9c:3f:8a:e2:55:35:e3:f7:57:8d:f6:2b:5f:ce:9a:dd: d7:d2:6b:23:d4:4c:ee:fe:f4:90:6e:76:fe:8f:f1:e5:d1:a9: c3:4c:ca:2a:ad:df:da:30:63:91:18:23:9e:85:76:84:b1:a5: 17:86:d3:e2:0b:6d:07:2b:af:6b:fc:f4:f3:3e:6e:3a:1d:08: 76:90:4b:c6:ba:a1:96:5f:0a:51:cb:c0:f3:ac:8c:73:c7:70: 54:38:b6:c1:02:7e:8e:57:1a:d8:16:95:d4:65:57:07:a5:10: ce:44:0b:5e:35:04:90:05:f7:b1:d3:5c:c7:f3:40:83:7f:48: ef:c9:4f:2d:ec:71:68:d5:96:4c:c0:10:43:ce:3f:bc:b7:62: 6d:9f:17:14:24:ab:24:c1:9e:8e:04:b7:89:15:ee:5a:55:83: f3:8c:5d:c0:4e:be:45:f0:79:ab:05:74:29:8d:08:a0:90:91: e5:85:a2:82:5e:b7:9b:42:f7:80:1e:c5:73:fe:65:05:58:da: 02:69:c3:0f:7a:4f:83:b3:ca:76:2f:f0:74:84:be:13:18:b9: 78:99:e7:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaF2Bnk/D7NROtC6AeLnUWhEXwWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURFMjk5 NjY0N0NENTAeFw0yNjAzMjQxNjQ2MzlaFw0yNjAzMjgwNDE4MzlaMDMxMTAvBgNV BAMTKENDQTJFN0ZGQkE0NkM1RDYyQkRGREUyQ0FCNzIyQkZBRjE1MzRGM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmvo3ogVaQ3jObDUZMT6NIpxOY /8ADhZ8Nb/WMDEbS0LDDMnJBt5Op2z5GOlCIpHapyg60k8keGJHnhUV/xjEpMpkb Rg1VB7qPsALD39j3lxnH6IlNsiYUaBHqoroNjl6QrTwlDVOlds+xKQPdX1M+lCP5 izx6j1d8eCPnRuDxl+9RBBCVAM3SUa4iMnn821zoobb2kitWNALu/mcNdlZ2sXJD 5FA8Dw4/DyyBUtND9HsGXDsK3djKxt5f/zCQAG3sKp5MlOGhr2f0rD0fVWJJfU1U /sWrxmGBXUJIfcWSj4MFaMFQiNX5dMgQekYDkgYN4QRhMVToG8bUEdYhPCtNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzKLn/7pGxdYr394sq3Ir+vFTTz4wHwYDVR0j BBgwFoAUuQsK7Yfs18hwZkUKtWreKZZkfNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWU2Mzc5ZS1iODg2LTQzNmUtYjBlZC0zYWFmZjljMDg1MDEvMC9COTBCMEFFRDg3 RUNEN0M4NzA2NjQ1MEFCNTZBREUyOTk2NjQ3Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURFMjk5NjY0 N0NENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFlNjM3OWUtYjg4Ni00MzZlLWIw ZWQtM2FhZmY5YzA4NTAxLzAvQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURF Mjk5NjY0N0NENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHsIGpjjIbwt/R39BqciJi2SP2VJJvT5S2rH dBxNapRU8+6G6CSgnD+K4lU14/dXjfYrX86a3dfSayPUTO7+9JBudv6P8eXRqcNM yiqt39owY5EYI56FdoSxpReG0+ILbQcrr2v89PM+bjodCHaQS8a6oZZfClHLwPOs jHPHcFQ4tsECfo5XGtgWldRlVwelEM5EC141BJAF97HTXMfzQIN/SO/JTy3scWjV lkzAEEPOP7y3Ym2fFxQkqyTBno4Et4kV7lpVg/OMXcBOvkXweasFdCmNCKCQkeWF ooJet5tC94AexXP+ZQVY2gJpww96T4OzynYv8HSEvhMYuXiZ57o= -----END CERTIFICATE-----Generated at Thu Mar 26 10:15:27 2026 by rpki-client