$ rpki-client -vvf rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft File: C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft (raw, json) Hash identifier: AyWJQAW3+D5fNixAZFlLT4b8JwCle+hhI+TMeVIgvzQ= Subject key identifier: B7:D0:6E:8B:8E:9F:90:37:37:02:7A:8A:A3:0C:D8:B1:79:6F:3B:FB Authority key identifier: C9:04:68:D7:EB:B1:55:0C:7E:74:86:32:F6:8F:6F:E0:83:EB:BD:DD Certificate issuer: /CN=C90468D7EBB1550C7E748632F68F6FE083EBBDDD Certificate serial: 5B5FD575402160D10CCDA85FFAB4EF026413B890 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft Manifest number: 0E Signing time: Tue 12 May 2026 21:18:47 +0000 Manifest this update: Tue 12 May 2026 21:13:47 +0000 Manifest next update: Wed 13 May 2026 23:39:47 +0000 Files and hashes: 1: C90468D7EBB1550C7E748632F68F6FE083EBBDDD.crl (hash: ODZVlDwfN91V8Of2tnOIYzynrU0gb0fdntQwWZ/lClQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.crl rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5f:d5:75:40:21:60:d1:0c:cd:a8:5f:fa:b4:ef:02:64:13:b8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C90468D7EBB1550C7E748632F68F6FE083EBBDDD Validity Not Before: May 12 21:13:47 2026 GMT Not After : May 13 23:39:47 2026 GMT Subject: CN=B7D06E8B8E9F903737027A8AA30CD8B1796F3BFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e1:07:07:53:fe:9d:2d:de:88:0d:72:37:6d: e1:be:0e:ee:85:d9:e7:f2:9d:f0:56:83:29:3c:12: 71:7a:e0:68:13:30:1c:d4:b8:2f:e7:80:a3:de:9c: 71:6e:5f:ce:53:1a:90:42:ce:27:31:9a:9a:ae:76: 06:25:7a:14:2d:f4:1f:d0:11:7b:a3:7f:e4:38:0b: f1:02:bf:91:3d:86:77:fc:30:c9:80:ee:6a:7e:d4: c6:ed:a7:87:ba:2a:14:33:20:65:4f:bb:19:67:48: 96:86:c1:7a:06:90:aa:8e:a6:99:0f:04:b8:79:74: c7:ee:15:4d:61:fd:2e:69:5f:1f:94:c3:76:95:77: 1e:b8:ad:23:57:7c:e3:51:66:0b:d3:56:5a:2d:db: fe:6b:ff:30:3a:45:cc:c7:c2:99:7d:2e:1d:95:e8: 0c:b3:71:b2:a6:db:b8:3d:01:1b:da:1f:db:b7:d9: a0:9a:35:34:22:34:86:4f:fd:23:12:bf:2d:29:4b: 13:94:18:0a:ce:1f:72:4d:cb:37:29:8d:81:a7:53: cc:cf:c3:7e:79:d6:7e:7b:3e:81:ab:92:c1:cf:40: 4b:9a:db:93:5d:a8:6a:4e:f4:9a:47:ba:52:eb:b9: 1e:57:88:60:bc:36:3e:d4:75:8a:9a:dc:41:fb:07: d3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D0:6E:8B:8E:9F:90:37:37:02:7A:8A:A3:0C:D8:B1:79:6F:3B:FB X509v3 Authority Key Identifier: keyid:C9:04:68:D7:EB:B1:55:0C:7E:74:86:32:F6:8F:6F:E0:83:EB:BD:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f4:bc:6a:7a:e6:4e:f6:c5:32:eb:8c:69:c0:f7:b4:e8:74: 84:78:18:bd:44:52:37:22:02:b5:0c:83:b7:fb:c4:52:33:b9: 5a:04:ff:f8:31:84:36:eb:a7:82:7d:14:7e:08:4a:19:8c:5f: f5:58:c1:2d:10:c4:b9:e6:3e:32:34:9b:63:cf:ce:dc:54:0a: b3:14:e7:cb:88:2a:f2:ab:30:f1:9b:97:a1:1d:81:d4:3c:f1: e9:ab:d9:b9:21:08:48:d9:a0:53:2d:e8:99:1b:e7:35:12:53: e2:fb:b0:a7:db:32:b8:9a:ea:e7:bb:0e:93:53:8a:7e:10:97: 64:2f:55:1b:fd:94:b8:1a:ce:9a:70:ea:1a:35:75:da:e6:83: f0:d2:c9:ad:04:64:c0:ae:d1:c9:72:b3:2c:af:67:01:93:06: ff:a3:38:1b:dd:5f:25:91:3d:89:cb:a9:b9:d4:fc:ae:76:90: 88:02:8f:4b:01:31:20:53:48:2c:aa:8a:fd:09:ef:d0:55:74: af:55:c1:37:6b:7b:76:72:65:f3:b0:90:78:11:2c:55:de:4f: 75:f9:f5:b4:c7:8c:34:bc:71:24:52:74:f0:e7:97:01:75:c4: 38:20:5c:ab:4b:a7:9c:55:4f:7e:94:3b:54:a6:78:ce:0d:73: f6:bd:1d:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW1/VdUAhYNEMzahf+rTvAmQTuJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkwNDY4RDdFQkIxNTUwQzdFNzQ4NjMyRjY4RjZGRTA4 M0VCQkRERDAeFw0yNjA1MTIyMTEzNDdaFw0yNjA1MTMyMzM5NDdaMDMxMTAvBgNV BAMTKEI3RDA2RThCOEU5RjkwMzczNzAyN0E4QUEzMENEOEIxNzk2RjNCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW4QcHU/6dLd6IDXI3beG+Du6F 2efynfBWgyk8EnF64GgTMBzUuC/ngKPenHFuX85TGpBCzicxmpqudgYlehQt9B/Q EXujf+Q4C/ECv5E9hnf8MMmA7mp+1Mbtp4e6KhQzIGVPuxlnSJaGwXoGkKqOppkP BLh5dMfuFU1h/S5pXx+Uw3aVdx64rSNXfONRZgvTVlot2/5r/zA6RczHwpl9Lh2V 6AyzcbKm27g9ARvaH9u32aCaNTQiNIZP/SMSvy0pSxOUGArOH3JNyzcpjYGnU8zP w3551n57PoGrksHPQEua25NdqGpO9JpHulLruR5XiGC8Nj7UdYqa3EH7B9NHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt9Bui46fkDc3AnqKowzYsXlvO/swHwYDVR0j BBgwFoAUyQRo1+uxVQx+dIYy9o9v4IPrvd0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2NkMzIzYmUtODM3ZC00MjQ0LTg0NmMtN2QyMzkzYTlhMDA5LzAvQzkwNDY4RDdF QkIxNTUwQzdFNzQ4NjMyRjY4RjZGRTA4M0VCQkRERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTA0NjhEN0VCQjE1NTBDN0U3NDg2MzJGNjhGNkZFMDgzRUJC RERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2NkMzIzYmUtODM3ZC00MjQ0LTg0 NmMtN2QyMzkzYTlhMDA5LzAvQzkwNDY4RDdFQkIxNTUwQzdFNzQ4NjMyRjY4RjZG RTA4M0VCQkRERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAv0vGp65k72xTLrjGnA97TodIR4GL1EUjci ArUMg7f7xFIzuVoE//gxhDbrp4J9FH4IShmMX/VYwS0QxLnmPjI0m2PPztxUCrMU 58uIKvKrMPGbl6EdgdQ88emr2bkhCEjZoFMt6Jkb5zUSU+L7sKfbMria6ue7DpNT in4Ql2QvVRv9lLgazppw6ho1ddrmg/DSya0EZMCu0clysyyvZwGTBv+jOBvdXyWR PYnLqbnU/K52kIgCj0sBMSBTSCyqiv0J79BVdK9VwTdre3ZyZfOwkHgRLFXeT3X5 9bTHjDS8cSRSdPDnlwF1xDggXKtLp5xVT36UO1SmeM4Nc/a9HWs= -----END CERTIFICATE-----Generated at Wed May 13 02:47:21 2026 by rpki-client