$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft File: 90B9450AA39B9CD9586085EFA9EF7887EE613759.mft (raw, json) Hash identifier: l0ko0Q55LALTkRD84b1YXZX+iypMiWgEMBPmJie/VOw= Subject key identifier: 19:D9:34:3D:8E:44:95:60:AE:3F:8D:03:DD:73:4B:EF:DB:B5:FD:AA Authority key identifier: 90:B9:45:0A:A3:9B:9C:D9:58:60:85:EF:A9:EF:78:87:EE:61:37:59 Certificate issuer: /CN=90B9450AA39B9CD9586085EFA9EF7887EE613759 Certificate serial: 12796297D572EE92C1DF96083DE0A67515E8632C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 20:05:16 +0000 Manifest this update: Thu 24 Sep 2026 20:00:16 +0000 Manifest next update: Fri 25 Sep 2026 22:48:16 +0000 Files and hashes: 1: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: J0+iHCZ4UXpTu9FbQSO8iPWMu0E+Lc3DRVGjSSCxGxw=) 2: 3130332e3135332e38332e302f32342d3234203d3e20313439373034.roa (hash: i2oBSFPKpVqeh9es/WJHy0i/TdHRHJL5ycGj+adtwXc=) 3: 90B9450AA39B9CD9586085EFA9EF7887EE613759.crl (hash: hZ45xSFWdSdX0yzrVgeX68ll/+z4Gb1HgqcXPRVQDHc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.crl rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:79:62:97:d5:72:ee:92:c1:df:96:08:3d:e0:a6:75:15:e8:63:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90B9450AA39B9CD9586085EFA9EF7887EE613759 Validity Not Before: Sep 24 20:00:16 2026 GMT Not After : Sep 25 22:48:16 2026 GMT Subject: CN=19D9343D8E449560AE3F8D03DD734BEFDBB5FDAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:1b:64:5b:ed:b3:af:eb:51:f1:11:00:02: 03:2c:29:d4:40:ae:57:bf:a0:24:eb:a3:69:2b:6c: ee:ff:43:ed:16:d1:5a:3c:92:75:13:f8:ef:b2:df: af:b2:cf:4f:90:14:9a:e8:55:1b:c3:bc:f9:f0:b3: 64:1c:8c:e9:09:d0:69:4c:53:2c:d0:e6:f3:be:fe: 00:cc:cc:d9:ca:9e:63:34:62:9b:67:40:bd:c8:b0: 96:58:92:50:33:4c:7b:dd:a5:1f:60:35:a7:53:85: e7:fb:4f:f5:4b:59:22:05:22:c8:52:5e:23:1c:23: cb:d9:12:b0:e2:3a:cc:b1:42:b1:f5:8b:3c:7d:9a: 24:49:79:9a:3b:cc:df:a5:bf:16:c6:78:b4:96:24: b6:32:2d:cd:3d:03:97:20:a9:25:b2:ab:ca:8d:ff: bf:2f:74:97:27:7c:00:19:ca:cd:5d:69:98:43:85: 82:f0:69:80:56:9a:c3:63:3d:c1:50:63:59:03:3b: 51:39:6b:92:95:74:a4:08:be:d8:4b:16:a9:2e:59: 49:36:23:9b:81:2f:15:45:f0:b2:33:89:74:e9:36: f5:38:55:61:96:e1:fe:a7:59:14:cb:e1:b4:b6:5d: e7:80:fd:af:a7:a4:26:8d:34:a4:99:eb:10:b6:00: 2c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D9:34:3D:8E:44:95:60:AE:3F:8D:03:DD:73:4B:EF:DB:B5:FD:AA X509v3 Authority Key Identifier: keyid:90:B9:45:0A:A3:9B:9C:D9:58:60:85:EF:A9:EF:78:87:EE:61:37:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:86:3e:51:3d:6f:4e:9f:6f:03:7e:b3:38:77:77:50:1a:00: 45:3e:cb:87:8c:e6:17:b8:ad:11:79:f0:99:28:76:52:7b:30: d8:42:66:97:17:ee:c2:e3:6c:da:0c:32:9a:0a:76:b2:aa:a8: f8:07:da:f7:b0:62:3e:cb:82:ff:8e:5b:57:e6:35:e2:ed:65: 0a:cb:95:8f:e2:65:2f:81:1f:fe:f5:a9:5e:9e:93:9f:a4:45: 20:8a:e8:2f:5f:05:5f:c1:13:a7:a8:b1:04:c1:20:d7:90:81: 60:60:51:da:f5:f1:28:b1:1f:4a:22:86:ca:39:d0:2f:20:9c: ce:01:18:f9:ba:38:c6:e7:42:cb:7b:5c:7d:35:bd:ba:0d:9e: bc:7f:38:da:8c:54:fd:bd:8a:1a:16:78:8d:0b:57:d9:5f:66: 02:81:bb:d6:d7:92:15:d3:66:37:20:15:20:1d:a3:62:ef:bf: c4:d7:9c:53:80:66:42:22:44:e6:ca:94:bb:e6:e1:05:cc:8a: 94:35:02:bb:85:0d:95:7a:a9:ec:0d:a6:4c:04:b1:b3:08:55: a7:69:8d:23:a7:13:02:4c:74:c1:82:54:9f:97:d0:f7:e0:90: 88:2e:fc:5c:85:b3:bd:03:e7:6c:ff:aa:6b:30:8d:96:28:d0: ba:af:ca:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEnlil9Vy7pLB35YIPeCmdRXoYywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBCOTQ1MEFBMzlCOUNEOTU4NjA4NUVGQTlFRjc4ODdF RTYxMzc1OTAeFw0yNjA5MjQyMDAwMTZaFw0yNjA5MjUyMjQ4MTZaMDMxMTAvBgNV BAMTKDE5RDkzNDNEOEU0NDk1NjBBRTNGOEQwM0RENzM0QkVGREJCNUZEQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2IxtkW+2zr+tR8REAAgMsKdRA rle/oCTro2krbO7/Q+0W0Vo8knUT+O+y36+yz0+QFJroVRvDvPnws2QcjOkJ0GlM UyzQ5vO+/gDMzNnKnmM0YptnQL3IsJZYklAzTHvdpR9gNadThef7T/VLWSIFIshS XiMcI8vZErDiOsyxQrH1izx9miRJeZo7zN+lvxbGeLSWJLYyLc09A5cgqSWyq8qN /78vdJcnfAAZys1daZhDhYLwaYBWmsNjPcFQY1kDO1E5a5KVdKQIvthLFqkuWUk2 I5uBLxVF8LIziXTpNvU4VWGW4f6nWRTL4bS2XeeA/a+npCaNNKSZ6xC2ACz9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGdk0PY5ElWCuP40D3XNL79u1/aowHwYDVR0j BBgwFoAUkLlFCqObnNlYYIXvqe94h+5hN1kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U3NmRiMWUtYmY5YS00OWE4LWJmNzYtOWYzMTRlN2QxZDhlLzAvOTBCOTQ1MEFB MzlCOUNEOTU4NjA4NUVGQTlFRjc4ODdFRTYxMzc1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEI5NDUwQUEzOUI5Q0Q5NTg2MDg1RUZBOUVGNzg4N0VFNjEz NzU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U3NmRiMWUtYmY5YS00OWE4LWJm NzYtOWYzMTRlN2QxZDhlLzAvOTBCOTQ1MEFBMzlCOUNEOTU4NjA4NUVGQTlFRjc4 ODdFRTYxMzc1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOGPlE9b06fbwN+szh3d1AaAEU+y4eM5he4 rRF58JkodlJ7MNhCZpcX7sLjbNoMMpoKdrKqqPgH2vewYj7Lgv+OW1fmNeLtZQrL lY/iZS+BH/71qV6ek5+kRSCK6C9fBV/BE6eosQTBINeQgWBgUdr18SixH0oihso5 0C8gnM4BGPm6OMbnQst7XH01vboNnrx/ONqMVP29ihoWeI0LV9lfZgKBu9bXkhXT ZjcgFSAdo2Lvv8TXnFOAZkIiRObKlLvm4QXMipQ1AruFDZV6qewNpkwEsbMIVadp jSOnEwJMdMGCVJ+X0PfgkIgu/FyFs70D52z/qmswjZYo0Lqvytk= -----END CERTIFICATE-----Generated at Fri Sep 25 01:04:07 2026 by rpki-client