$ rpki-client -vvf rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft File: 90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft (raw, json) Hash identifier: 3MIOQN2A1nDZDeJcWNkuHeQjHIQkrb1MmyWR5L/Tmjw= Subject key identifier: 3C:0B:FC:F5:9C:61:07:44:38:D3:EA:50:88:43:1C:72:49:92:18:00 Authority key identifier: 90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65 Certificate issuer: /CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365 Certificate serial: 3BFEF01D8AF569CFE80BFD558BEC60E3D6B8FD97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:37:42 +0000 Manifest this update: Tue 12 May 2026 20:32:42 +0000 Manifest next update: Wed 13 May 2026 21:57:42 +0000 Files and hashes: 1: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (hash: g6lAbZqkaksDk1xdjsRVZipSwUOrqirOYAGeG6k+1X4=) 2: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (hash: wgymwZqdd8aqR/u2B/QuqB1K7UuATC+6Ntbr9ldLDAY=) 3: 90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl (hash: DWho+/RY/HWm04H1UANOOENO0NiR2f72ceRpW7/wn6k=) 4: 3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (hash: GNjW7TFdO0BnW3XzHHL9jNymhW5z46NJgPPIaWaHEpI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:fe:f0:1d:8a:f5:69:cf:e8:0b:fd:55:8b:ec:60:e3:d6:b8:fd:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365 Validity Not Before: May 12 20:32:42 2026 GMT Not After : May 13 21:57:42 2026 GMT Subject: CN=3C0BFCF59C61074438D3EA5088431C7249921800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:88:49:6f:30:b8:54:27:9b:8d:d8:82:aa:1d: 38:a4:60:e1:4c:dc:4a:47:e6:78:ba:e5:d7:c5:30: 1a:b9:db:85:02:b2:5a:6d:d1:ee:d7:ef:90:1e:c8: 4f:6c:53:29:48:c6:ff:a9:24:ec:26:fb:c1:77:cc: bb:2c:98:cd:ea:86:65:be:a4:c2:f0:d3:84:02:a0: 9a:fe:ba:ef:0f:ce:4f:a3:53:5d:95:ed:ad:22:19: 4c:8c:e8:fa:38:b3:65:56:63:3f:2f:01:4e:49:0b: 6f:0c:68:40:58:13:92:62:6b:b7:80:e6:ec:5c:63: cb:78:b3:36:9b:7a:d5:e9:29:86:cd:5e:24:49:2a: cb:ab:7f:b0:75:1a:6d:b1:bc:ad:5a:5f:6f:db:c7: 1e:71:51:5d:d1:85:29:09:81:dc:22:f4:d0:2b:03: 0a:8a:71:81:d7:82:57:84:1b:67:c3:73:54:8d:75: c4:84:a6:34:9e:c7:66:c5:ec:18:50:b0:8e:08:b9: 52:70:74:7c:85:48:a2:b9:52:ca:51:99:c8:7f:11: 3c:63:62:e4:0b:ef:01:17:7d:45:f6:e2:61:21:32: f7:f3:93:ff:b9:36:12:b8:93:70:82:4e:db:7e:8c: ee:8f:a0:cd:e5:19:95:f2:fb:18:47:e0:8e:9d:9c: 51:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0B:FC:F5:9C:61:07:44:38:D3:EA:50:88:43:1C:72:49:92:18:00 X509v3 Authority Key Identifier: keyid:90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:15:f3:e6:92:74:9c:0a:41:19:39:8b:55:54:aa:72:1d:af: 40:74:0e:5c:6e:40:de:ec:69:83:7e:38:94:24:08:23:a2:0b: 17:61:6f:cf:46:e7:55:ae:4e:e8:98:da:01:62:03:33:21:36: 8b:5f:c2:a1:84:0f:8e:9f:2d:b5:1e:00:0a:0e:4a:a9:fe:e8: 65:b1:38:63:f3:fd:a0:0e:66:e9:76:df:0d:5a:c5:03:82:46: 9f:7d:c7:e6:9a:80:1a:f3:e5:41:24:95:bd:cf:cd:bb:48:12: ca:27:d1:77:d8:06:d0:f5:00:18:9b:03:03:96:c3:86:34:64: f0:b6:d3:33:2f:a9:e8:39:17:e2:d1:36:0f:2b:69:2e:92:ed: e5:f0:33:fc:da:d7:46:58:39:5e:23:c0:d3:10:45:06:27:61: ef:d0:a4:c8:f9:c4:f8:a0:fb:c7:30:3b:9a:e7:36:bc:f5:da: 58:02:22:d2:fa:34:e7:6b:ab:85:81:be:42:07:ca:4e:7c:61: d2:3e:c6:8c:fe:46:6c:4e:ac:89:10:90:b8:b4:61:46:cb:7f: 9e:d3:a5:bc:b5:ff:b1:f2:11:a6:3a:d9:f2:ab:8f:bc:e0:22: 56:38:4c:83:40:3b:49:b9:d7:79:d5:4c:5d:03:3c:93:33:7b: 21:e4:63:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/7wHYr1ac/oC/1Vi+xg49a4/ZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBDQzcyMDlDQUE4QTZDN0ZFRUMyMTlEQUU0OTdGN0FF RUY0MzM2NTAeFw0yNjA1MTIyMDMyNDJaFw0yNjA1MTMyMTU3NDJaMDMxMTAvBgNV BAMTKDNDMEJGQ0Y1OUM2MTA3NDQzOEQzRUE1MDg4NDMxQzcyNDk5MjE4MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5iElvMLhUJ5uN2IKqHTikYOFM 3EpH5ni65dfFMBq524UCslpt0e7X75AeyE9sUylIxv+pJOwm+8F3zLssmM3qhmW+ pMLw04QCoJr+uu8Pzk+jU12V7a0iGUyM6Po4s2VWYz8vAU5JC28MaEBYE5Jia7eA 5uxcY8t4szabetXpKYbNXiRJKsurf7B1Gm2xvK1aX2/bxx5xUV3RhSkJgdwi9NAr AwqKcYHXgleEG2fDc1SNdcSEpjSex2bF7BhQsI4IuVJwdHyFSKK5UspRmch/ETxj YuQL7wEXfUX24mEhMvfzk/+5NhK4k3CCTtt+jO6PoM3lGZXy+xhH4I6dnFETAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPAv89ZxhB0Q40+pQiEMcckmSGAAwHwYDVR0j BBgwFoAUkMxyCcqopsf+7CGdrkl/eu70M2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjEyYzEzOGMtMmUyNC00OWY1LThhZGEtMDAyN2NiYTdmMTc4LzAvOTBDQzcyMDlD QUE4QTZDN0ZFRUMyMTlEQUU0OTdGN0FFRUY0MzM2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MENDNzIwOUNBQThBNkM3RkVFQzIxOURBRTQ5N0Y3QUVFRjQz MzY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjEyYzEzOGMtMmUyNC00OWY1LThh ZGEtMDAyN2NiYTdmMTc4LzAvOTBDQzcyMDlDQUE4QTZDN0ZFRUMyMTlEQUU0OTdG N0FFRUY0MzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgV8+aSdJwKQRk5i1VUqnIdr0B0DlxuQN7s aYN+OJQkCCOiCxdhb89G51WuTuiY2gFiAzMhNotfwqGED46fLbUeAAoOSqn+6GWx OGPz/aAOZul23w1axQOCRp99x+aagBrz5UEklb3PzbtIEson0XfYBtD1ABibAwOW w4Y0ZPC20zMvqeg5F+LRNg8raS6S7eXwM/za10ZYOV4jwNMQRQYnYe/QpMj5xPig +8cwO5rnNrz12lgCItL6NOdrq4WBvkIHyk58YdI+xoz+RmxOrIkQkLi0YUbLf57T pby1/7HyEaY62fKrj7zgIlY4TINAO0m513nVTF0DPJMzeyHkY2I= -----END CERTIFICATE-----Generated at Wed May 13 00:45:18 2026 by rpki-client