$ rpki-client -vvf rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft File: 90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft (raw, json) Hash identifier: Ex3U6pyGBHvjI2AL+qPsWChr4tfKpVC+Lue64kZBm4U= Subject key identifier: A8:DF:1C:1F:DA:24:EC:24:D6:8C:A8:FA:13:52:9F:3F:C1:96:8C:41 Authority key identifier: 90:B0:BF:C1:8E:B9:04:96:C0:32:33:83:DC:DC:92:1D:9D:8E:62:C7 Certificate issuer: /CN=90B0BFC18EB90496C0323383DCDC921D9D8E62C7 Certificate serial: 51BB08AB1A5C33A2016E097EEC9903BC16D65041 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:28:31 +0000 Manifest this update: Fri 24 Jul 2026 03:23:31 +0000 Manifest next update: Sat 25 Jul 2026 05:52:31 +0000 Files and hashes: 1: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: f1xLE51GWOwQNLvRvEntiSu/P1tXHq8fAnPJwIPOL+s=) 2: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: 9wRrgktFn4gbGNfBo3IH1gpwK1hyiBcfUs4oIPcTOYQ=) 3: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: fBi7KOxItMXmNwqCO9NrsVw12oG+iWETgMZG+hflMwY=) 4: 90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl (hash: uRkERsLODUSjhDosrqIaFO2Da2qE3krm/TEfXacpzRI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 05:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:bb:08:ab:1a:5c:33:a2:01:6e:09:7e:ec:99:03:bc:16:d6:50:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90B0BFC18EB90496C0323383DCDC921D9D8E62C7 Validity Not Before: Jul 24 03:23:31 2026 GMT Not After : Jul 25 05:52:31 2026 GMT Subject: CN=A8DF1C1FDA24EC24D68CA8FA13529F3FC1968C41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8e:77:07:18:54:92:3a:86:33:ba:98:c0:93: 26:fe:ca:b2:39:29:fe:da:36:74:d3:91:7c:3a:fd: 17:a3:ff:f9:db:36:61:5a:61:d8:27:6f:43:9a:9f: 33:9a:ea:38:12:c6:3f:11:d5:e0:d6:33:9c:7e:f3: b4:4d:73:45:c2:2f:67:4d:b5:37:bc:d1:66:01:c5: 3f:18:07:ae:e6:a8:1a:c3:dc:da:36:0f:34:25:e8: 8d:87:40:54:54:86:f2:85:96:9b:97:d7:fd:ef:87: 9c:af:d2:25:76:e1:ed:50:89:96:7e:d5:32:c3:a6: 26:91:65:f7:e0:78:4d:b4:38:a6:70:fc:ac:20:46: 53:1d:9c:be:bd:d2:7a:0a:b8:bb:1f:09:a9:1a:59: f1:70:5c:31:5b:84:27:e2:9b:be:d0:7e:75:a8:b0: c2:5b:05:53:82:13:45:62:3f:33:23:d9:79:cc:2d: f4:d7:c1:bd:d0:a8:6c:98:2b:91:a8:9a:a0:fc:9f: 44:2f:94:a5:42:6e:1e:e2:02:41:2d:c7:af:27:35: e8:c3:6e:1a:95:fe:6d:06:7f:01:7a:5b:c8:f5:e1: 4c:ae:e3:69:cf:5b:24:4c:db:73:15:54:f8:58:78: c7:d0:c0:07:8c:2c:4d:22:8c:2c:42:98:67:82:d6: a7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DF:1C:1F:DA:24:EC:24:D6:8C:A8:FA:13:52:9F:3F:C1:96:8C:41 X509v3 Authority Key Identifier: keyid:90:B0:BF:C1:8E:B9:04:96:C0:32:33:83:DC:DC:92:1D:9D:8E:62:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:80:f0:13:2d:54:2b:de:b6:42:7f:f9:ab:f2:2e:c7:a8:88: 1b:6a:a8:37:56:b6:a7:96:aa:fa:bd:89:9d:fe:7b:c7:7f:08: 9a:5d:20:58:aa:90:19:5f:81:de:cc:32:a7:07:46:79:0f:5d: a3:11:08:c6:6a:3c:01:ee:8c:48:84:c9:6d:71:06:05:dd:f6: 7d:1b:77:dc:5e:7b:70:5f:dc:2d:8d:6b:2f:d7:dc:a6:2c:a8: a6:14:b2:46:34:8b:90:d8:ad:1f:14:88:49:e8:6e:6a:1f:66: fb:c1:19:42:2e:43:36:52:12:a5:4a:16:af:e6:29:e0:18:f3: 48:78:6a:a3:2a:98:8f:7b:ef:2e:d5:70:a4:46:b9:ea:70:64: ad:90:b3:09:d1:f8:d4:82:16:cc:20:52:b7:30:b9:de:65:f1: bb:fb:df:42:3d:a3:1b:9d:29:57:bf:e4:32:34:cd:c4:70:96: c2:08:df:54:81:3b:8c:0a:c6:9a:5c:4d:3e:a3:e9:bd:6c:13: 0e:7a:0e:9f:f3:e4:12:c2:66:de:41:55:9d:e6:70:87:75:ee: a9:ab:dd:8c:62:f4:ed:7c:b1:fa:03:8b:c9:58:4e:45:df:0f: da:b3:b6:60:4c:d2:64:5b:5d:8b:e3:26:57:6c:30:25:e7:16: 5b:2e:e7:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUbsIqxpcM6IBbgl+7JkDvBbWUEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBCMEJGQzE4RUI5MDQ5NkMwMzIzMzgzRENEQzkyMUQ5 RDhFNjJDNzAeFw0yNjA3MjQwMzIzMzFaFw0yNjA3MjUwNTUyMzFaMDMxMTAvBgNV BAMTKEE4REYxQzFGREEyNEVDMjRENjhDQThGQTEzNTI5RjNGQzE5NjhDNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcjncHGFSSOoYzupjAkyb+yrI5 Kf7aNnTTkXw6/Rej//nbNmFaYdgnb0OanzOa6jgSxj8R1eDWM5x+87RNc0XCL2dN tTe80WYBxT8YB67mqBrD3No2DzQl6I2HQFRUhvKFlpuX1/3vh5yv0iV24e1QiZZ+ 1TLDpiaRZffgeE20OKZw/KwgRlMdnL690noKuLsfCakaWfFwXDFbhCfim77QfnWo sMJbBVOCE0ViPzMj2XnMLfTXwb3QqGyYK5GomqD8n0QvlKVCbh7iAkEtx68nNejD bhqV/m0GfwF6W8j14Uyu42nPWyRM23MVVPhYeMfQwAeMLE0ijCxCmGeC1qe5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqN8cH9ok7CTWjKj6E1KfP8GWjEEwHwYDVR0j BBgwFoAUkLC/wY65BJbAMjOD3NySHZ2OYscwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGQ0ZGNkZTMtNzU3Zi00M2Q0LWFkZTItZmYwODg3Y2MyNDg3LzAvOTBCMEJGQzE4 RUI5MDQ5NkMwMzIzMzgzRENEQzkyMUQ5RDhFNjJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEIwQkZDMThFQjkwNDk2QzAzMjMzODNEQ0RDOTIxRDlEOEU2 MkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvOTBCMEJGQzE4RUI5MDQ5NkMwMzIzMzgzRENEQzky MUQ5RDhFNjJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2A8BMtVCvetkJ/+avyLseoiBtqqDdWtqeW qvq9iZ3+e8d/CJpdIFiqkBlfgd7MMqcHRnkPXaMRCMZqPAHujEiEyW1xBgXd9n0b d9xee3Bf3C2Nay/X3KYsqKYUskY0i5DYrR8UiEnobmofZvvBGUIuQzZSEqVKFq/m KeAY80h4aqMqmI977y7VcKRGuepwZK2QswnR+NSCFswgUrcwud5l8bv730I9oxud KVe/5DI0zcRwlsII31SBO4wKxppcTT6j6b1sEw56Dp/z5BLCZt5BVZ3mcId17qmr 3Yxi9O18sfoDi8lYTkXfD9qztmBM0mRbXYvjJldsMCXnFlsu5xc= -----END CERTIFICATE-----Generated at Fri Jul 24 11:16:19 2026 by rpki-client