$ rpki-client -vvf rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft File: 90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft (raw, json) Hash identifier: W3bG34xxpMFsLWS8kmel1jKwYcLOemtohQYas2o6Sas= Subject key identifier: F3:93:F4:AC:E3:7F:83:CB:9B:40:92:79:B7:A4:34:63:F5:EA:E1:CC Authority key identifier: 90:B0:BF:C1:8E:B9:04:96:C0:32:33:83:DC:DC:92:1D:9D:8E:62:C7 Certificate issuer: /CN=90B0BFC18EB90496C0323383DCDC921D9D8E62C7 Certificate serial: 54B98A78BF7AA3E9CED8EF10D821D083D5021687 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:09:46 +0000 Manifest this update: Tue 12 May 2026 15:04:46 +0000 Manifest next update: Wed 13 May 2026 18:15:46 +0000 Files and hashes: 1: 90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl (hash: zqGXtO+Rt2yY1ijuyyeasTI+wh76s7W+IIX7MGh09wk=) 2: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: f1xLE51GWOwQNLvRvEntiSu/P1tXHq8fAnPJwIPOL+s=) 3: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: fBi7KOxItMXmNwqCO9NrsVw12oG+iWETgMZG+hflMwY=) 4: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: 9wRrgktFn4gbGNfBo3IH1gpwK1hyiBcfUs4oIPcTOYQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:b9:8a:78:bf:7a:a3:e9:ce:d8:ef:10:d8:21:d0:83:d5:02:16:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90B0BFC18EB90496C0323383DCDC921D9D8E62C7 Validity Not Before: May 12 15:04:46 2026 GMT Not After : May 13 18:15:46 2026 GMT Subject: CN=F393F4ACE37F83CB9B409279B7A43463F5EAE1CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:21:6d:cb:c4:dd:d7:21:5a:d7:f6:f4:d2:8e: 1f:c9:a7:6e:b9:49:41:51:e2:28:59:86:14:4c:83: 98:ae:59:d5:53:1f:90:86:84:5e:22:30:7b:b9:63: 2f:be:ee:90:89:24:fd:d3:ec:55:0b:73:7a:4d:18: 00:d5:e3:a2:fb:54:15:35:47:53:26:e9:ad:67:f8: 10:2d:12:04:57:1b:2c:c9:c5:d8:e8:02:70:fc:2a: c8:a3:fc:b9:98:3f:df:f1:d7:be:c0:88:a1:d9:ce: 2e:84:00:a3:b9:f0:7e:35:fa:04:e5:6d:03:06:03: 67:eb:e6:bb:16:50:b8:0b:26:2b:38:1b:23:70:a6: b7:75:41:3c:5a:3f:44:7d:b7:b0:7d:04:30:2f:54: 6b:08:56:45:21:58:09:0b:22:0e:78:69:fd:fa:ab: 1c:22:77:68:5e:9f:8c:0e:10:83:98:9e:e5:d8:23: fd:7d:9d:10:2f:3f:08:32:88:bb:d1:29:0a:2e:b5: 5f:91:98:76:df:c3:26:72:e1:7e:32:37:a0:a0:e6: 68:54:05:02:df:8b:3a:6e:dc:d4:6c:2b:ee:ed:e9: 46:f6:ee:f5:52:94:9e:92:24:cf:52:b2:59:b6:cc: fa:52:3b:09:1d:1b:78:a8:3a:02:57:d6:9f:b1:76: 0a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:93:F4:AC:E3:7F:83:CB:9B:40:92:79:B7:A4:34:63:F5:EA:E1:CC X509v3 Authority Key Identifier: keyid:90:B0:BF:C1:8E:B9:04:96:C0:32:33:83:DC:DC:92:1D:9D:8E:62:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:1b:46:53:a9:34:67:11:2e:2e:15:aa:b7:52:11:4d:21:c8: ee:c6:20:08:67:ea:11:f6:d7:21:90:9f:b6:df:5e:15:7d:0b: 5a:84:9d:80:ac:75:5b:fe:fa:51:b3:cb:c4:9b:0d:bd:8c:8f: 3d:27:8e:cf:38:31:b2:d1:9a:fe:40:23:dd:79:44:7a:19:fd: 09:d2:dd:05:c6:ad:b7:e8:7f:b4:cc:55:61:39:cd:1b:64:0b: 14:b4:81:1e:6e:20:f6:c3:99:e0:09:69:fb:3e:5b:f6:9c:fd: 92:8f:92:38:17:ef:95:91:fa:9a:9a:cf:d0:1a:8b:96:4a:c8: 39:8f:e3:ca:d1:f9:49:2c:ba:4a:db:b9:42:02:9d:1e:a9:14: de:15:51:9c:fb:de:34:56:73:12:ed:17:41:a6:19:5b:c3:cf: ff:4a:ea:2d:32:dd:56:34:d6:36:bc:f5:5e:03:bf:cf:50:37: f9:69:5d:f5:40:71:23:7a:32:34:ad:05:be:64:10:4d:f6:dd: 52:e9:d1:e1:10:c2:55:d8:57:25:56:af:79:29:3b:16:94:30: 1d:83:1d:a7:c8:89:f3:c5:1a:bf:9b:3f:09:68:d4:92:c4:d9: a7:aa:87:f4:52:c9:e3:51:22:7b:70:d6:b2:13:89:3d:bf:b5: 05:36:78:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVLmKeL96o+nO2O8Q2CHQg9UCFocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBCMEJGQzE4RUI5MDQ5NkMwMzIzMzgzRENEQzkyMUQ5 RDhFNjJDNzAeFw0yNjA1MTIxNTA0NDZaFw0yNjA1MTMxODE1NDZaMDMxMTAvBgNV BAMTKEYzOTNGNEFDRTM3RjgzQ0I5QjQwOTI3OUI3QTQzNDYzRjVFQUUxQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsIW3LxN3XIVrX9vTSjh/Jp265 SUFR4ihZhhRMg5iuWdVTH5CGhF4iMHu5Yy++7pCJJP3T7FULc3pNGADV46L7VBU1 R1Mm6a1n+BAtEgRXGyzJxdjoAnD8Ksij/LmYP9/x177AiKHZzi6EAKO58H41+gTl bQMGA2fr5rsWULgLJis4GyNwprd1QTxaP0R9t7B9BDAvVGsIVkUhWAkLIg54af36 qxwid2hen4wOEIOYnuXYI/19nRAvPwgyiLvRKQoutV+RmHbfwyZy4X4yN6Cg5mhU BQLfizpu3NRsK+7t6Ub27vVSlJ6SJM9Sslm2zPpSOwkdG3ioOgJX1p+xdgo9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU85P0rON/g8ubQJJ5t6Q0Y/Xq4cwwHwYDVR0j BBgwFoAUkLC/wY65BJbAMjOD3NySHZ2OYscwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGQ0ZGNkZTMtNzU3Zi00M2Q0LWFkZTItZmYwODg3Y2MyNDg3LzAvOTBCMEJGQzE4 RUI5MDQ5NkMwMzIzMzgzRENEQzkyMUQ5RDhFNjJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEIwQkZDMThFQjkwNDk2QzAzMjMzODNEQ0RDOTIxRDlEOEU2 MkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvOTBCMEJGQzE4RUI5MDQ5NkMwMzIzMzgzRENEQzky MUQ5RDhFNjJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANIbRlOpNGcRLi4VqrdSEU0hyO7GIAhn6hH2 1yGQn7bfXhV9C1qEnYCsdVv++lGzy8SbDb2Mjz0njs84MbLRmv5AI915RHoZ/QnS 3QXGrbfof7TMVWE5zRtkCxS0gR5uIPbDmeAJafs+W/ac/ZKPkjgX75WR+pqaz9Aa i5ZKyDmP48rR+UksukrbuUICnR6pFN4VUZz73jRWcxLtF0GmGVvDz/9K6i0y3VY0 1ja89V4Dv89QN/lpXfVAcSN6MjStBb5kEE323VLp0eEQwlXYVyVWr3kpOxaUMB2D HafIifPFGr+bPwlo1JLE2aeqh/RSyeNRIntw1rITiT2/tQU2eIQ= -----END CERTIFICATE-----Generated at Tue May 12 22:49:54 2026 by rpki-client