$ rpki-client -vvf repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft File: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft (raw, json) Hash identifier: CsthAcXdJ37JXiz2+aKnG3LW9y292weJtilsQBacB8I= Subject key identifier: E1:58:FA:57:93:AB:72:8E:4E:67:8F:2E:61:F4:6B:1D:FF:64:AA:E8 Authority key identifier: 90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 Certificate issuer: /CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Certificate serial: 6E5FFCDD0B0FED7C938081DF9A6B2CBF4DC9ABF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft Manifest number: 0218 Signing time: Wed 25 Mar 2026 02:01:30 +0000 Manifest this update: Wed 25 Mar 2026 01:56:30 +0000 Manifest next update: Sat 28 Mar 2026 09:02:30 +0000 Files and hashes: 1: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (hash: 4TOSRtXxwoc1DClbkhe3iiOSNBbwLVpi+J6WdybY63c=) 2: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl (hash: e2u2Ljn28yXCnXJ7WK7nzO/JSy3QrQI3lmNHgEbda0U=) 3: 3130332e3134352e35322e302f32342d3234203d3e20313339343535.roa (hash: MPra63E26ubEDDY2JzmWeIwcUBZxwSSUVSnEZHc8Cxs=) 4: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (hash: 3wrZ4aSA+t/PIX/VnbG950yKhlv7BEyHLtumjw5neEc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:5f:fc:dd:0b:0f:ed:7c:93:80:81:df:9a:6b:2c:bf:4d:c9:ab:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Validity Not Before: Mar 25 01:56:30 2026 GMT Not After : Mar 28 09:02:30 2026 GMT Subject: CN=E158FA5793AB728E4E678F2E61F46B1DFF64AAE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a4:14:f9:c7:f5:4e:8a:04:7d:37:e8:07:d0: 33:1a:a0:76:83:a6:73:cc:f3:bb:78:1d:57:01:9c: 65:38:e9:5a:11:db:f5:3d:d8:db:d8:74:50:6e:36: 87:82:27:92:80:0f:e0:e0:5b:2f:d3:cd:36:1e:b2: 67:2e:9d:ee:b2:a6:16:41:87:f8:a4:e3:9a:c7:4c: 6e:7a:59:f6:28:57:44:ec:4d:39:d1:ff:97:f2:35: 70:f9:63:b6:62:f7:4f:9f:b2:1a:8f:f6:4e:0b:58: 21:8b:fe:07:9e:2b:9a:91:d5:01:0d:1e:e4:24:35: 39:8d:62:6a:56:eb:ae:7a:d3:81:dd:93:3d:b8:48: 2e:c1:18:69:f6:3c:83:54:41:e7:45:1d:58:31:40: e2:fa:b9:c0:6a:a2:74:68:6c:4f:62:c7:d0:08:93: b8:30:b9:62:cd:68:2e:72:e2:4d:b0:fc:2a:b6:1a: c1:99:ee:41:d7:5b:74:af:a0:e4:5e:fb:3b:0d:96: 8a:a9:85:5e:c4:10:57:39:e3:43:d3:a4:e5:ce:8f: 01:27:2c:89:28:05:d2:f7:cc:35:3b:f0:3a:5e:01: 42:e0:36:54:bb:de:7f:60:c0:c7:08:32:2f:84:c5: 32:7b:bd:65:a5:11:0f:8b:af:09:35:8f:72:63:bb: b1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:58:FA:57:93:AB:72:8E:4E:67:8F:2E:61:F4:6B:1D:FF:64:AA:E8 X509v3 Authority Key Identifier: keyid:90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:67:39:4b:05:cd:94:e2:5f:8f:b1:04:dc:b4:fd:5b:85:47: 7c:7b:14:74:a1:b8:43:81:16:e7:57:a4:81:27:5c:e3:bd:58: 9c:65:0c:3b:6a:65:db:be:71:73:e8:89:46:32:5e:bb:bb:49: 49:55:44:24:4c:a1:18:1e:84:4e:19:bc:9c:ea:66:0a:ed:c1: e4:61:d4:cf:c3:69:96:9b:5e:f0:e4:be:ba:8b:fe:a3:7c:c9: a6:c6:c5:e9:a7:6a:a6:3b:44:92:4d:cf:74:ed:96:28:70:05: c7:9d:93:94:4d:e3:1b:40:25:99:92:97:88:2f:cc:e9:9c:7d: 55:19:d5:f8:ac:a4:2e:eb:3a:25:f1:2a:69:fd:c7:3d:b5:b0: 4d:b3:61:2e:fc:ac:90:d7:f7:bf:8d:8e:93:67:eb:d6:e6:b7: f9:ed:30:1a:b0:d4:80:f5:f6:94:34:17:45:18:be:54:59:12: 51:a2:d3:ae:af:e1:14:87:fb:aa:82:15:0e:9d:d5:fb:21:16: 50:07:95:fb:e2:4f:e0:53:b3:17:c9:ca:1c:dd:0c:e5:34:52: 44:1b:f8:cb:b1:b1:fe:56:7a:f7:de:3d:bd:23:c4:df:86:e2: e7:98:9e:59:31:c5:47:e8:67:1c:78:21:73:b1:fe:14:57:98: 10:82:f4:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbl/83QsP7XyTgIHfmmssv03Jq/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFF Q0VGODNBMzAeFw0yNjAzMjUwMTU2MzBaFw0yNjAzMjgwOTAyMzBaMDMxMTAvBgNV BAMTKEUxNThGQTU3OTNBQjcyOEU0RTY3OEYyRTYxRjQ2QjFERkY2NEFBRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVpBT5x/VOigR9N+gH0DMaoHaD pnPM87t4HVcBnGU46VoR2/U92NvYdFBuNoeCJ5KAD+DgWy/TzTYesmcune6yphZB h/ik45rHTG56WfYoV0TsTTnR/5fyNXD5Y7Zi90+fshqP9k4LWCGL/geeK5qR1QEN HuQkNTmNYmpW665604Hdkz24SC7BGGn2PINUQedFHVgxQOL6ucBqonRobE9ix9AI k7gwuWLNaC5y4k2w/Cq2GsGZ7kHXW3SvoORe+zsNloqphV7EEFc540PTpOXOjwEn LIkoBdL3zDU78DpeAULgNlS73n9gwMcIMi+ExTJ7vWWlEQ+Lrwk1j3Jju7H7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Vj6V5Orco5OZ48uYfRrHf9kqugwHwYDVR0j BBgwFoAUkOLMrKMj6rIUX1S3z2XF+uzvg6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzdmZmUyYS0zMWU0LTQ4MDAtOTdkNC03ODc0YzEyMzE5MTEvMC85MEUyQ0NBQ0Ez MjNFQUIyMTQ1RjU0QjdDRjY1QzVGQUVDRUY4M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFFQ0VG ODNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc3ZmZlMmEtMzFlNC00ODAwLTk3 ZDQtNzg3NGMxMjMxOTExLzAvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1 RkFFQ0VGODNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdnOUsFzZTiX4+xBNy0/VuFR3x7FHShuEOB FudXpIEnXOO9WJxlDDtqZdu+cXPoiUYyXru7SUlVRCRMoRgehE4ZvJzqZgrtweRh 1M/DaZabXvDkvrqL/qN8yabGxemnaqY7RJJNz3TtlihwBcedk5RN4xtAJZmSl4gv zOmcfVUZ1fispC7rOiXxKmn9xz21sE2zYS78rJDX97+NjpNn69bmt/ntMBqw1ID1 9pQ0F0UYvlRZElGi066v4RSH+6qCFQ6d1fshFlAHlfviT+BTsxfJyhzdDOU0UkQb +Muxsf5WevfePb0jxN+G4ueYnlkxxUfoZxx4IXOx/hRXmBCC9HQ= -----END CERTIFICATE-----Generated at Thu Mar 26 16:01:44 2026 by rpki-client