$ rpki-client -vvf repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft File: 90508FF980097E19CEF65ED72A856616A6F690AB.mft (raw, json) Hash identifier: VqU1J801NkeKEcn4uxUlImgO1fRctk5i7BL2Q7N1heY= Subject key identifier: C9:7D:C2:25:30:5E:19:1A:5F:E6:96:E9:83:FF:07:D3:FB:19:64:4D Authority key identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB Certificate issuer: /CN=90508FF980097E19CEF65ED72A856616A6F690AB Certificate serial: 1EA744B73066AEA162256D6092EB5BE6EB4BFD9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft Manifest number: 055F Signing time: Wed 25 Mar 2026 17:22:17 +0000 Manifest this update: Wed 25 Mar 2026 17:17:17 +0000 Manifest next update: Sun 29 Mar 2026 02:31:17 +0000 Files and hashes: 1: 3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (hash: 7pdp3iomZV1Sl4nuURLGWWHMiPLMkvx/Ece8HW9MQqg=) 2: 90508FF980097E19CEF65ED72A856616A6F690AB.crl (hash: zz2MF+u8ECIwT4Rgz6Emm66JW0i2KPYB309Ghj2Al+o=) 3: 3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (hash: NUlokuFe9GARtT8KTw9qoKUuu+MeiOKu86jOn++3TJ0=) 4: 3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (hash: JNjDlAZZhJPbXz9QnoPN2kXEdVorueRNiZ3y4BzRO+s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a7:44:b7:30:66:ae:a1:62:25:6d:60:92:eb:5b:e6:eb:4b:fd:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90508FF980097E19CEF65ED72A856616A6F690AB Validity Not Before: Mar 25 17:17:17 2026 GMT Not After : Mar 29 02:31:17 2026 GMT Subject: CN=C97DC225305E191A5FE696E983FF07D3FB19644D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5e:2a:ce:f7:0b:c1:4f:97:94:42:e2:0c:70: 90:d2:dc:07:03:65:fa:8a:de:21:94:06:55:4e:5f: 39:b8:c7:71:61:96:18:27:57:e4:ef:5e:33:39:63: 8b:f1:bc:11:fa:70:c1:0b:aa:df:73:18:9e:78:d6: 14:0d:6c:57:87:5e:7a:c7:fe:02:32:54:31:f7:75: 6a:b0:ee:bd:74:a2:b3:fe:00:e0:47:e3:c9:b4:52: 3d:35:a2:b7:26:91:79:72:7b:88:4a:27:ee:8d:29: 96:52:c5:5e:1a:66:eb:19:d6:80:b8:f3:aa:1a:94: 6f:1b:17:ee:1b:1d:11:9f:3a:96:9b:45:91:84:82: 0d:74:32:e9:85:ea:65:31:92:e9:c7:a0:9d:11:32: a3:30:71:a4:8f:8b:be:16:e6:52:57:9f:e1:37:f4: 10:d4:aa:de:b9:a2:67:7b:59:d4:63:87:f7:94:1a: 89:e7:b4:e1:de:61:58:da:3b:98:a2:bc:7f:33:88: 1f:80:f9:92:02:41:ad:89:01:a2:60:f7:eb:82:ce: 58:0d:55:0f:ac:8d:97:ed:69:5c:1b:d7:9c:9b:8c: 0f:11:54:47:7a:fd:6d:cd:33:0b:af:00:27:48:a8: c0:12:5f:5e:c6:72:5d:d3:75:87:e2:28:0a:ef:f5: ac:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7D:C2:25:30:5E:19:1A:5F:E6:96:E9:83:FF:07:D3:FB:19:64:4D X509v3 Authority Key Identifier: keyid:90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:cf:d1:9b:af:59:8d:30:1e:9f:f6:c3:0d:f7:ec:ec:50:47: 85:71:9d:89:c1:ec:30:86:52:24:d3:32:7d:b9:67:1a:03:08: d6:85:83:77:a9:6e:5a:8e:8e:4b:2d:e4:59:e2:40:99:95:47: e5:96:aa:4d:22:36:84:78:ac:ee:fa:6e:47:7a:3d:f1:6a:a6: b4:d4:dc:dd:b7:5e:21:44:93:c8:87:4f:f6:a8:07:3e:a7:67: 51:05:56:74:22:a0:fd:1f:d7:de:61:6a:2f:98:d7:0b:d8:5c: b3:59:d2:be:e0:d5:fe:c0:eb:d4:9b:30:4f:62:0e:8b:e5:69: 63:91:5d:52:d1:3b:79:44:68:b6:a3:12:5f:ea:5c:67:b8:3c: 26:a9:f7:93:06:79:c9:8b:6c:65:90:82:f2:ab:d2:5c:ef:57: 07:1d:3c:7f:48:eb:b8:c1:6a:b4:3a:35:eb:c1:07:72:1f:d4: c6:38:9a:41:96:b0:e3:98:4b:16:6b:c9:0c:fb:3f:70:51:d5: 0e:31:8e:89:6d:3e:b4:96:9f:c9:00:ff:17:db:36:9d:8c:a9: ed:8c:62:96:bf:5d:03:15:50:59:24:28:fa:57:49:59:cc:de: 8c:21:25:a0:35:50:08:b4:9b:74:55:97:77:11:0c:9d:3b:3c: 4d:40:11:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHqdEtzBmrqFiJW1gkutb5utL/Z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZB NkY2OTBBQjAeFw0yNjAzMjUxNzE3MTdaFw0yNjAzMjkwMjMxMTdaMDMxMTAvBgNV BAMTKEM5N0RDMjI1MzA1RTE5MUE1RkU2OTZFOTgzRkYwN0QzRkIxOTY0NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6XirO9wvBT5eUQuIMcJDS3AcD ZfqK3iGUBlVOXzm4x3FhlhgnV+TvXjM5Y4vxvBH6cMELqt9zGJ541hQNbFeHXnrH /gIyVDH3dWqw7r10orP+AOBH48m0Uj01orcmkXlye4hKJ+6NKZZSxV4aZusZ1oC4 86oalG8bF+4bHRGfOpabRZGEgg10MumF6mUxkunHoJ0RMqMwcaSPi74W5lJXn+E3 9BDUqt65omd7WdRjh/eUGonntOHeYVjaO5iivH8ziB+A+ZICQa2JAaJg9+uCzlgN VQ+sjZftaVwb15ybjA8RVEd6/W3NMwuvACdIqMASX17Gcl3TdYfiKArv9azzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyX3CJTBeGRpf5pbpg/8H0/sZZE0wHwYDVR0j BBgwFoAUkFCP+YAJfhnO9l7XKoVmFqb2kKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODgzZTNiZS01N2UyLTQxMjUtYTBjNS05YTllYTUwMWJmMDUvMC85MDUwOEZGOTgw MDk3RTE5Q0VGNjVFRDcyQTg1NjYxNkE2RjY5MEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZBNkY2 OTBBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg4M2UzYmUtNTdlMi00MTI1LWEw YzUtOWE5ZWE1MDFiZjA1LzAvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2 MTZBNkY2OTBBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjP0ZuvWY0wHp/2ww337OxQR4VxnYnB7DCG UiTTMn25ZxoDCNaFg3epblqOjkst5FniQJmVR+WWqk0iNoR4rO76bkd6PfFqprTU 3N23XiFEk8iHT/aoBz6nZ1EFVnQioP0f195hai+Y1wvYXLNZ0r7g1f7A69SbME9i DovlaWORXVLRO3lEaLajEl/qXGe4PCap95MGecmLbGWQgvKr0lzvVwcdPH9I67jB arQ6NevBB3If1MY4mkGWsOOYSxZryQz7P3BR1Q4xjoltPrSWn8kA/xfbNp2Mqe2M Ypa/XQMVUFkkKPpXSVnM3owhJaA1UAi0m3RVl3cRDJ07PE1AEV4= -----END CERTIFICATE-----Generated at Thu Mar 26 14:31:30 2026 by rpki-client