$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft File: 90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft (raw, json) Hash identifier: wV2aCNuFo1cpHDA6gk/43f7ZAD9RLRbjQlrwc4gu4Y8= Subject key identifier: 5F:92:05:CF:AF:B1:3B:55:6B:F9:61:DD:B5:34:62:B9:F0:99:C9:69 Authority key identifier: 90:B0:BF:C1:8E:B9:04:96:C0:32:33:83:DC:DC:92:1D:9D:8E:62:C7 Certificate issuer: /CN=90B0BFC18EB90496C0323383DCDC921D9D8E62C7 Certificate serial: 4BE43023010C643C71EE0F9B29C4B1D958E93DFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 18:23:45 +0000 Manifest this update: Wed 23 Sep 2026 18:18:45 +0000 Manifest next update: Thu 24 Sep 2026 20:11:45 +0000 Files and hashes: 1: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: 9wRrgktFn4gbGNfBo3IH1gpwK1hyiBcfUs4oIPcTOYQ=) 2: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: f1xLE51GWOwQNLvRvEntiSu/P1tXHq8fAnPJwIPOL+s=) 3: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: fBi7KOxItMXmNwqCO9NrsVw12oG+iWETgMZG+hflMwY=) 4: 90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl (hash: B7ysfVnhu4V/Mpig7eji81abQ/pSp8MpVxPcf+8ja8s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e4:30:23:01:0c:64:3c:71:ee:0f:9b:29:c4:b1:d9:58:e9:3d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90B0BFC18EB90496C0323383DCDC921D9D8E62C7 Validity Not Before: Sep 23 18:18:45 2026 GMT Not After : Sep 24 20:11:45 2026 GMT Subject: CN=5F9205CFAFB13B556BF961DDB53462B9F099C969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:51:5a:10:60:0c:21:cd:bd:cd:37:30:c6:d1: 28:7e:53:e2:6d:c9:37:89:78:82:1f:83:94:ff:1d: 35:dc:3e:f9:67:92:9d:67:eb:61:71:60:94:1a:f6: 93:e1:b6:3f:c0:e1:e0:b4:65:25:12:eb:00:75:d4: c2:59:17:0e:d0:a5:ac:b1:d2:d3:55:57:fd:93:2b: 0f:7c:d0:37:1c:d7:34:f7:29:9c:0b:28:7e:4d:4e: 8c:d9:53:52:38:6b:a8:ac:9c:82:96:2f:e9:73:db: 2f:fd:26:80:42:d8:e7:66:08:21:af:73:0a:fd:90: 85:d6:c3:d7:be:61:92:3b:30:d8:64:83:58:2e:fb: 2c:fe:4b:c3:1f:ea:aa:fe:d4:30:b8:94:51:4a:2e: 57:9e:b2:a9:bd:fb:f8:4b:3b:25:c7:96:bf:e7:58: 63:26:a6:22:85:85:5e:28:5a:8b:f3:93:9d:f4:9d: d7:43:99:f6:c2:75:cd:a6:01:fa:5d:5f:c6:9f:16: 8c:b2:29:17:a4:3d:ef:a5:e0:66:31:f3:14:79:d8: ea:5d:e7:28:7d:c1:52:30:48:3e:f0:7d:8b:2d:bf: 76:5e:5e:0d:9f:bd:a9:35:e6:d1:4a:74:62:57:fd: 1d:e0:f3:49:67:ce:d5:04:f7:2a:c1:7d:f8:40:76: 6f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:92:05:CF:AF:B1:3B:55:6B:F9:61:DD:B5:34:62:B9:F0:99:C9:69 X509v3 Authority Key Identifier: keyid:90:B0:BF:C1:8E:B9:04:96:C0:32:33:83:DC:DC:92:1D:9D:8E:62:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:fb:af:92:e4:54:3b:4f:d4:52:f8:04:20:2d:d4:b0:1d:01: 65:1c:1c:99:e5:49:9c:2c:11:c8:b2:d0:92:60:6b:d2:01:95: 55:b6:25:a9:66:b2:aa:d6:5c:68:20:3f:4c:35:9b:68:43:bc: b6:92:8f:a9:5d:44:5e:1f:8a:63:ca:71:67:28:e7:ae:f8:99: c3:05:de:01:02:d0:43:3d:88:51:7c:46:c7:fa:3d:98:92:50: 88:7f:0d:d8:50:19:91:f1:1c:9a:03:79:8b:9c:c9:09:bf:b3: a3:b0:17:43:48:19:e1:a5:06:cc:5d:bb:ce:fe:35:89:63:86: 06:36:da:af:a5:f7:e7:98:61:3d:ce:86:ef:57:85:85:ea:ec: 5f:f5:5c:3a:3e:be:b2:4b:f5:00:cc:88:99:55:26:3e:58:0e: e9:29:cd:0c:d9:b7:f0:91:bd:f8:60:a4:d7:5c:d2:55:c3:82: 35:6f:42:cc:be:6c:44:1a:f1:48:fb:ec:af:06:cc:ea:62:cb: 8c:dd:1a:ff:b4:67:a6:08:ff:50:a5:e9:e7:ea:00:5e:4f:ab: 3d:eb:b5:60:25:c4:27:2d:dc:ce:70:d8:fa:02:0a:25:5a:49: c6:7a:60:fe:36:96:4f:7d:1c:ec:10:c6:d2:8c:bd:82:4d:56: 9e:26:69:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS+QwIwEMZDxx7g+bKcSx2VjpPfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBCMEJGQzE4RUI5MDQ5NkMwMzIzMzgzRENEQzkyMUQ5 RDhFNjJDNzAeFw0yNjA5MjMxODE4NDVaFw0yNjA5MjQyMDExNDVaMDMxMTAvBgNV BAMTKDVGOTIwNUNGQUZCMTNCNTU2QkY5NjFEREI1MzQ2MkI5RjA5OUM5NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTUVoQYAwhzb3NNzDG0Sh+U+Jt yTeJeIIfg5T/HTXcPvlnkp1n62FxYJQa9pPhtj/A4eC0ZSUS6wB11MJZFw7Qpayx 0tNVV/2TKw980Dcc1zT3KZwLKH5NTozZU1I4a6isnIKWL+lz2y/9JoBC2OdmCCGv cwr9kIXWw9e+YZI7MNhkg1gu+yz+S8Mf6qr+1DC4lFFKLleesqm9+/hLOyXHlr/n WGMmpiKFhV4oWovzk530nddDmfbCdc2mAfpdX8afFoyyKRekPe+l4GYx8xR52Opd 5yh9wVIwSD7wfYstv3ZeXg2fvak15tFKdGJX/R3g80lnztUE9yrBffhAdm/rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX5IFz6+xO1Vr+WHdtTRiufCZyWkwHwYDVR0j BBgwFoAUkLC/wY65BJbAMjOD3NySHZ2OYscwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGQ0ZGNkZTMtNzU3Zi00M2Q0LWFkZTItZmYwODg3Y2MyNDg3LzAvOTBCMEJGQzE4 RUI5MDQ5NkMwMzIzMzgzRENEQzkyMUQ5RDhFNjJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEIwQkZDMThFQjkwNDk2QzAzMjMzODNEQ0RDOTIxRDlEOEU2 MkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvOTBCMEJGQzE4RUI5MDQ5NkMwMzIzMzgzRENEQzky MUQ5RDhFNjJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACj7r5LkVDtP1FL4BCAt1LAdAWUcHJnlSZws Eciy0JJga9IBlVW2JalmsqrWXGggP0w1m2hDvLaSj6ldRF4fimPKcWco5674mcMF 3gEC0EM9iFF8Rsf6PZiSUIh/DdhQGZHxHJoDeYucyQm/s6OwF0NIGeGlBsxdu87+ NYljhgY22q+l9+eYYT3Ohu9XhYXq7F/1XDo+vrJL9QDMiJlVJj5YDukpzQzZt/CR vfhgpNdc0lXDgjVvQsy+bEQa8Uj77K8GzOpiy4zdGv+0Z6YI/1Cl6efqAF5Pqz3r tWAlxCct3M5w2PoCCiVaScZ6YP42lk99HOwQxtKMvYJNVp4maSw= -----END CERTIFICATE-----Generated at Thu Sep 24 00:52:45 2026 by rpki-client