$ rpki-client -vvf rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft File: 90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft (raw, json) Hash identifier: apggnJxfyuO+CCXMQKGIuwp7IlFLOYJtcivbwH60q5Q= Subject key identifier: 53:59:0A:D7:BC:B1:0D:03:96:48:44:6B:A9:F0:11:D4:1A:C1:CA:F8 Authority key identifier: 90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65 Certificate issuer: /CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365 Certificate serial: 1117886BCDC83ECA507597D303AB194659854441 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 15:23:47 +0000 Manifest this update: Thu 23 Jul 2026 15:18:47 +0000 Manifest next update: Fri 24 Jul 2026 15:28:47 +0000 Files and hashes: 1: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (hash: wgymwZqdd8aqR/u2B/QuqB1K7UuATC+6Ntbr9ldLDAY=) 2: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (hash: g6lAbZqkaksDk1xdjsRVZipSwUOrqirOYAGeG6k+1X4=) 3: 90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl (hash: N7ZCqm3hTIzYOJCW0idBwD13Ghn6mxGmWALrjdYhr1A=) 4: 3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (hash: GNjW7TFdO0BnW3XzHHL9jNymhW5z46NJgPPIaWaHEpI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:17:88:6b:cd:c8:3e:ca:50:75:97:d3:03:ab:19:46:59:85:44:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365 Validity Not Before: Jul 23 15:18:47 2026 GMT Not After : Jul 24 15:28:47 2026 GMT Subject: CN=53590AD7BCB10D039648446BA9F011D41AC1CAF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:00:33:8a:89:13:78:2a:3a:1c:84:6a:fe:4a: 0a:9a:53:5c:4e:9b:6a:dc:4c:42:61:d4:83:b4:74: 99:a1:ee:9e:18:fe:78:7f:61:6c:f5:7c:ab:b1:30: 6f:6e:18:f4:02:20:a2:70:ab:60:ae:6b:b7:cd:05: 16:26:96:65:93:9c:e7:a6:ef:6b:77:f6:e9:0a:ae: c0:58:d2:57:ca:52:3f:23:41:39:1d:eb:a0:ff:04: c2:6d:03:04:d3:e1:e2:e3:b0:79:f4:b3:29:de:62: 8e:2f:2d:d6:73:2b:e3:f2:dd:11:d5:1e:74:4c:ba: bf:ea:bc:be:62:e4:32:d7:cb:70:07:3e:bf:7d:13: 7a:ed:05:ae:08:05:c3:2e:48:ba:bd:69:9c:51:63: 04:8c:d9:06:b7:18:b8:0a:f2:d2:c9:02:bc:79:37: 46:5b:00:ac:fa:dc:fa:f9:72:f1:71:4a:63:7f:aa: 93:8d:a7:7f:fe:64:fb:68:1b:f9:f8:f3:4d:bf:bc: ab:fb:fe:d1:14:71:bc:cb:bb:7c:a6:4c:fe:bc:4b: c0:d0:9a:59:5e:65:2b:99:e1:03:86:a3:61:1d:52: 25:bf:3b:a2:ba:b4:c4:8d:01:fa:6d:27:2e:d3:d8: 19:62:97:10:a6:47:49:06:95:fe:14:59:96:d9:d4: 4f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:59:0A:D7:BC:B1:0D:03:96:48:44:6B:A9:F0:11:D4:1A:C1:CA:F8 X509v3 Authority Key Identifier: keyid:90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:a0:e7:c2:8e:96:1f:d9:34:27:4b:49:ee:29:f6:8d:b4:5e: 95:10:09:9a:9f:c5:32:81:f4:b8:7f:5e:98:4d:ad:87:18:dc: 17:c7:01:d3:70:8a:4f:8c:74:f6:8e:53:88:3f:db:01:50:14: 36:6e:79:f0:bd:78:af:cd:9e:b5:c0:2f:ec:3c:a7:ba:57:43: ad:14:15:91:c2:40:7e:d6:c1:82:83:4e:99:61:b2:fc:84:1a: e3:62:7e:32:f7:ce:cc:10:ce:fe:47:91:5e:d6:5b:90:f5:03: 1a:dd:70:2e:f9:ae:11:18:4a:01:3c:d2:81:1e:cb:47:cd:74: e8:09:d3:66:fe:67:2b:49:7a:a5:36:29:42:14:cf:38:62:e0: 59:76:50:1f:c3:fd:1f:a9:69:7e:b0:fd:91:45:b4:17:d1:23: 0f:25:41:30:48:64:9d:d4:44:20:ca:39:b6:17:8a:4a:2a:f9: a6:3a:be:0d:f0:4f:0f:42:fd:7d:44:a1:7e:6b:5d:e8:30:ed: 1c:9c:bc:d2:d4:93:67:15:1e:e5:d2:3f:4b:cc:2c:99:f0:da: 22:95:16:5e:09:b7:4f:da:c1:75:6e:e5:5c:4e:81:3d:93:c7: 01:49:03:ba:b4:44:85:4a:5f:e4:09:4e:3e:39:ae:40:bb:9f: 5c:59:42:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEReIa83IPspQdZfTA6sZRlmFREEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBDQzcyMDlDQUE4QTZDN0ZFRUMyMTlEQUU0OTdGN0FF RUY0MzM2NTAeFw0yNjA3MjMxNTE4NDdaFw0yNjA3MjQxNTI4NDdaMDMxMTAvBgNV BAMTKDUzNTkwQUQ3QkNCMTBEMDM5NjQ4NDQ2QkE5RjAxMUQ0MUFDMUNBRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmADOKiRN4KjochGr+SgqaU1xO m2rcTEJh1IO0dJmh7p4Y/nh/YWz1fKuxMG9uGPQCIKJwq2Cua7fNBRYmlmWTnOem 72t39ukKrsBY0lfKUj8jQTkd66D/BMJtAwTT4eLjsHn0syneYo4vLdZzK+Py3RHV HnRMur/qvL5i5DLXy3AHPr99E3rtBa4IBcMuSLq9aZxRYwSM2Qa3GLgK8tLJArx5 N0ZbAKz63Pr5cvFxSmN/qpONp3/+ZPtoG/n4802/vKv7/tEUcbzLu3ymTP68S8DQ mlleZSuZ4QOGo2EdUiW/O6K6tMSNAfptJy7T2BlilxCmR0kGlf4UWZbZ1E8LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU1kK17yxDQOWSERrqfAR1BrByvgwHwYDVR0j BBgwFoAUkMxyCcqopsf+7CGdrkl/eu70M2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjEyYzEzOGMtMmUyNC00OWY1LThhZGEtMDAyN2NiYTdmMTc4LzAvOTBDQzcyMDlD QUE4QTZDN0ZFRUMyMTlEQUU0OTdGN0FFRUY0MzM2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MENDNzIwOUNBQThBNkM3RkVFQzIxOURBRTQ5N0Y3QUVFRjQz MzY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjEyYzEzOGMtMmUyNC00OWY1LThh ZGEtMDAyN2NiYTdmMTc4LzAvOTBDQzcyMDlDQUE4QTZDN0ZFRUMyMTlEQUU0OTdG N0FFRUY0MzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABeg58KOlh/ZNCdLSe4p9o20XpUQCZqfxTKB 9Lh/XphNrYcY3BfHAdNwik+MdPaOU4g/2wFQFDZuefC9eK/NnrXAL+w8p7pXQ60U FZHCQH7WwYKDTplhsvyEGuNifjL3zswQzv5HkV7WW5D1AxrdcC75rhEYSgE80oEe y0fNdOgJ02b+ZytJeqU2KUIUzzhi4Fl2UB/D/R+paX6w/ZFFtBfRIw8lQTBIZJ3U RCDKObYXikoq+aY6vg3wTw9C/X1EoX5rXegw7RycvNLUk2cVHuXSP0vMLJnw2iKV Fl4Jt0/awXVu5VxOgT2TxwFJA7q0RIVKX+QJTj45rkC7n1xZQjs= -----END CERTIFICATE-----Generated at Fri Jul 24 08:17:44 2026 by rpki-client