$ rpki-client -vvvf rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft File: 90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft (raw, json) Hash identifier: UIXFKVPVlA/D8Uz74vRcrs4ja+BSYDL6SqZ1OXPB/GU= Subject key identifier: BC:96:A2:9D:C7:52:95:30:A8:EC:39:ED:9A:FE:38:10:2A:E9:0E:FC Authority key identifier: 90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65 Certificate issuer: /CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365 Certificate serial: 6D6CCF1EECB25818632C2D8FA30EB96271F97C27 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 07:56:09 +0000 Manifest this update: Wed 23 Sep 2026 07:51:09 +0000 Manifest next update: Thu 24 Sep 2026 10:17:09 +0000 Files and hashes: 1: 90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl (hash: KQmGGkUsxbLVEMifWwwUTYmgtU/JevM0dfzAw6J2spg=) 2: 3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (hash: GNjW7TFdO0BnW3XzHHL9jNymhW5z46NJgPPIaWaHEpI=) 3: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (hash: g6lAbZqkaksDk1xdjsRVZipSwUOrqirOYAGeG6k+1X4=) 4: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (hash: wgymwZqdd8aqR/u2B/QuqB1K7UuATC+6Ntbr9ldLDAY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6c:cf:1e:ec:b2:58:18:63:2c:2d:8f:a3:0e:b9:62:71:f9:7c:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365 Validity Not Before: Sep 23 07:51:09 2026 GMT Not After : Sep 24 10:17:09 2026 GMT Subject: CN=BC96A29DC7529530A8EC39ED9AFE38102AE90EFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cf:5f:d0:ad:3c:d8:14:63:f0:16:d1:89:21: b8:56:8b:3f:9f:8b:36:c8:fd:ec:b7:d3:48:f3:28: 76:02:e0:65:3f:cf:95:c4:a5:55:ee:a9:14:c2:f2: c3:cc:dd:c3:46:6c:53:16:00:33:e4:9a:a3:93:cf: f9:78:74:84:8d:96:73:68:c9:2a:40:a3:3b:d0:35: 00:19:37:0b:6c:0f:f6:49:98:32:cc:fc:2f:92:84: 73:0b:a5:86:aa:89:31:cf:bc:aa:1a:45:84:88:99: 50:2e:67:25:00:f8:c1:2b:77:81:ec:e2:a3:62:66: a6:9e:4f:ff:77:ad:7e:85:70:27:7f:e4:4f:ac:e9: bb:02:b8:25:76:32:92:a9:bd:6e:73:d0:d2:74:69: 76:26:cb:26:77:07:fb:17:03:ec:1a:6b:a8:c5:87: ef:58:5a:b6:d6:f8:56:6c:b1:69:db:a0:bc:31:9e: 88:57:96:f4:60:8d:0c:97:be:08:b4:fe:47:d0:78: b2:27:95:4f:a1:64:37:ff:d0:3b:70:4f:25:3b:11: 68:b5:08:7c:12:33:81:d5:9b:6c:ff:37:b0:ef:ad: f2:e3:2e:41:1a:d9:b0:eb:5d:f8:96:02:3b:50:6d: 67:64:7c:36:ab:d9:6e:9a:c8:dd:6e:23:99:0c:00: 40:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:96:A2:9D:C7:52:95:30:A8:EC:39:ED:9A:FE:38:10:2A:E9:0E:FC X509v3 Authority Key Identifier: keyid:90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:97:c2:1e:f5:64:cc:32:90:e8:41:43:d9:74:a0:6c:c4:61: 3a:04:94:da:9e:ca:f6:18:60:9d:e2:eb:a0:f2:10:11:e8:9a: 5d:74:8f:d7:81:9c:97:4d:ec:9c:0d:5f:fb:b4:d5:0d:72:03: ff:7a:8c:80:23:69:24:6a:de:a8:b1:68:5f:f7:65:55:ee:1b: 8f:a7:67:05:85:66:df:55:37:c8:65:fe:d2:56:78:53:2e:05: 7a:7b:92:19:3a:4d:1e:a9:27:70:9d:45:86:82:3d:b1:3d:08: ec:e8:f4:6e:31:c3:75:b2:11:74:d9:63:ac:17:6a:73:90:53: d0:6c:35:c4:a7:f4:9d:21:83:71:72:62:0b:e7:0a:ad:52:f5: a3:e6:57:4e:bb:01:3a:f2:08:79:3e:c8:d6:0c:4c:85:69:83: ad:ae:5b:2f:5d:a5:77:68:d5:e2:c4:aa:0c:7e:9b:ee:c2:28: 0e:86:65:02:7b:48:1b:79:88:3e:48:30:08:16:e4:b9:4d:fd: 29:46:6e:cb:8e:02:86:40:4c:6f:b1:49:d1:b4:9a:02:72:af: 65:2e:51:27:3a:cd:0a:a9:23:30:79:21:c6:2c:f1:da:90:94: 7e:b9:bb:b1:ad:12:5e:b9:50:e9:c3:ed:7a:c2:84:26:e3:e5: 05:21:78:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbWzPHuyyWBhjLC2Pow65YnH5fCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBDQzcyMDlDQUE4QTZDN0ZFRUMyMTlEQUU0OTdGN0FF RUY0MzM2NTAeFw0yNjA5MjMwNzUxMDlaFw0yNjA5MjQxMDE3MDlaMDMxMTAvBgNV BAMTKEJDOTZBMjlEQzc1Mjk1MzBBOEVDMzlFRDlBRkUzODEwMkFFOTBFRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyz1/QrTzYFGPwFtGJIbhWiz+f izbI/ey300jzKHYC4GU/z5XEpVXuqRTC8sPM3cNGbFMWADPkmqOTz/l4dISNlnNo ySpAozvQNQAZNwtsD/ZJmDLM/C+ShHMLpYaqiTHPvKoaRYSImVAuZyUA+MErd4Hs 4qNiZqaeT/93rX6FcCd/5E+s6bsCuCV2MpKpvW5z0NJ0aXYmyyZ3B/sXA+waa6jF h+9YWrbW+FZssWnboLwxnohXlvRgjQyXvgi0/kfQeLInlU+hZDf/0DtwTyU7EWi1 CHwSM4HVm2z/N7DvrfLjLkEa2bDrXfiWAjtQbWdkfDar2W6ayN1uI5kMAEAnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvJaincdSlTCo7Dntmv44ECrpDvwwHwYDVR0j BBgwFoAUkMxyCcqopsf+7CGdrkl/eu70M2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjEyYzEzOGMtMmUyNC00OWY1LThhZGEtMDAyN2NiYTdmMTc4LzAvOTBDQzcyMDlD QUE4QTZDN0ZFRUMyMTlEQUU0OTdGN0FFRUY0MzM2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MENDNzIwOUNBQThBNkM3RkVFQzIxOURBRTQ5N0Y3QUVFRjQz MzY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjEyYzEzOGMtMmUyNC00OWY1LThh ZGEtMDAyN2NiYTdmMTc4LzAvOTBDQzcyMDlDQUE4QTZDN0ZFRUMyMTlEQUU0OTdG N0FFRUY0MzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuXwh71ZMwykOhBQ9l0oGzEYToElNqeyvYY YJ3i66DyEBHoml10j9eBnJdN7JwNX/u01Q1yA/96jIAjaSRq3qixaF/3ZVXuG4+n ZwWFZt9VN8hl/tJWeFMuBXp7khk6TR6pJ3CdRYaCPbE9COzo9G4xw3WyEXTZY6wX anOQU9BsNcSn9J0hg3FyYgvnCq1S9aPmV067ATryCHk+yNYMTIVpg62uWy9dpXdo 1eLEqgx+m+7CKA6GZQJ7SBt5iD5IMAgW5LlN/SlGbsuOAoZATG+xSdG0mgJyr2Uu USc6zQqpIzB5IcYs8dqQlH65u7GtEl65UOnD7XrChCbj5QUheKY= -----END CERTIFICATE-----Generated at Wed Sep 23 21:02:18 2026 by rpki-client