$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft File: 90B9450AA39B9CD9586085EFA9EF7887EE613759.mft (raw, json) Hash identifier: Lm92EVaSIB7c5hLHhwlcQZXkBHrGussL+vdOFJbJ3To= Subject key identifier: 4E:4E:50:28:47:83:ED:6E:45:32:8E:35:FD:9A:2D:6E:02:90:06:E1 Authority key identifier: 90:B9:45:0A:A3:9B:9C:D9:58:60:85:EF:A9:EF:78:87:EE:61:37:59 Certificate issuer: /CN=90B9450AA39B9CD9586085EFA9EF7887EE613759 Certificate serial: 55CDBCC95A0E322E9F0AD5AE9A0348073EF0ED9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:03:01 +0000 Manifest this update: Tue 12 May 2026 17:58:01 +0000 Manifest next update: Wed 13 May 2026 20:11:01 +0000 Files and hashes: 1: 90B9450AA39B9CD9586085EFA9EF7887EE613759.crl (hash: eAly93hh/dbJGsRNKHyJyULeJVnOlpk+VNHx2aFYhrw=) 2: 3130332e3135332e38332e302f32342d3234203d3e20313439373034.roa (hash: i2oBSFPKpVqeh9es/WJHy0i/TdHRHJL5ycGj+adtwXc=) 3: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: J0+iHCZ4UXpTu9FbQSO8iPWMu0E+Lc3DRVGjSSCxGxw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.crl rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:cd:bc:c9:5a:0e:32:2e:9f:0a:d5:ae:9a:03:48:07:3e:f0:ed:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90B9450AA39B9CD9586085EFA9EF7887EE613759 Validity Not Before: May 12 17:58:01 2026 GMT Not After : May 13 20:11:01 2026 GMT Subject: CN=4E4E50284783ED6E45328E35FD9A2D6E029006E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ab:03:da:82:2d:cb:2c:9b:1c:5d:46:96:6d: 09:b1:ae:c6:fb:de:ad:07:d8:37:c5:58:8a:c5:3f: 1a:f7:94:6f:96:82:b6:77:7a:99:87:8c:f9:80:e7: a3:2e:dd:c6:8c:c7:27:03:61:66:d9:d7:6c:7c:67: 7e:92:4b:d9:45:c2:84:8d:6d:a0:87:3f:2c:4e:79: 44:fa:37:3f:4e:1e:9b:08:02:52:93:2d:a8:72:d1: ef:36:44:23:28:a8:b5:e0:2e:42:27:f3:5b:be:80: fb:e6:c9:93:35:ee:59:fb:0e:37:8a:30:e4:56:e0: 51:ea:cc:b2:2a:84:5e:a1:c7:ca:78:79:e5:dd:2d: 81:6a:80:71:76:c1:95:63:5c:25:20:94:bc:00:5b: bb:a6:c7:fd:a2:bd:67:59:cb:ea:91:ef:e2:4d:66: d1:9f:6c:6d:22:58:66:48:b1:31:20:58:85:07:45: ce:6d:64:3f:18:62:de:4f:85:a5:0c:a7:a2:35:5a: 9f:d7:79:13:d5:2d:e6:5c:45:1c:a3:f5:da:b9:fa: 35:28:5a:7d:73:42:ef:2d:83:3a:39:e4:2f:19:54: a4:1b:56:6e:44:92:05:9f:a6:be:16:6f:ab:12:7e: a1:33:cb:f3:09:a8:bb:b8:4e:d2:0e:4c:57:3b:63: 55:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4E:50:28:47:83:ED:6E:45:32:8E:35:FD:9A:2D:6E:02:90:06:E1 X509v3 Authority Key Identifier: keyid:90:B9:45:0A:A3:9B:9C:D9:58:60:85:EF:A9:EF:78:87:EE:61:37:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:b2:01:41:ec:55:e5:65:1d:0f:93:b4:7a:96:88:ed:4a:38: 8f:1d:17:0c:bc:f9:b4:fb:73:5f:a1:43:c3:79:48:ca:5c:60: b2:c7:c5:8b:b9:d9:07:ba:3b:47:83:59:25:10:c5:87:2a:e7: b0:09:27:84:f1:9a:61:84:cf:55:ed:a7:ad:89:1c:d8:c9:a6: e4:b4:c6:59:85:54:fb:c4:ff:0e:9f:e5:8f:9b:74:7d:d4:b5: 83:4e:cc:c9:89:dd:a8:51:02:dc:07:bd:cc:bc:71:d9:98:58: 6d:29:56:d9:f2:e3:74:27:d0:4f:44:4c:ca:ea:d9:dc:16:90: 47:b3:41:ab:1f:cf:3e:bd:d0:dc:83:e1:03:02:74:88:e4:70: 69:e5:76:b0:01:20:57:cf:db:b6:75:9c:81:cb:3a:cf:22:8d: 9e:6a:d8:a3:53:92:42:91:d7:8b:32:18:56:7c:91:1c:b2:73: af:24:fe:47:99:76:8d:aa:c0:e0:24:d9:36:d0:cf:7c:c4:0b: a0:f0:91:6e:a7:2b:5f:75:96:0f:d9:aa:f7:39:81:44:ba:72: 5f:11:f0:e6:97:eb:8c:a2:79:cb:bf:5d:6d:07:e7:2a:8f:8a: 08:a5:ca:f7:f6:3f:2a:ae:2b:33:12:9a:d2:7b:af:fa:b0:39: b4:3b:2b:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVc28yVoOMi6fCtWumgNIBz7w7Z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBCOTQ1MEFBMzlCOUNEOTU4NjA4NUVGQTlFRjc4ODdF RTYxMzc1OTAeFw0yNjA1MTIxNzU4MDFaFw0yNjA1MTMyMDExMDFaMDMxMTAvBgNV BAMTKDRFNEU1MDI4NDc4M0VENkU0NTMyOEUzNUZEOUEyRDZFMDI5MDA2RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjqwPagi3LLJscXUaWbQmxrsb7 3q0H2DfFWIrFPxr3lG+WgrZ3epmHjPmA56Mu3caMxycDYWbZ12x8Z36SS9lFwoSN baCHPyxOeUT6Nz9OHpsIAlKTLahy0e82RCMoqLXgLkIn81u+gPvmyZM17ln7DjeK MORW4FHqzLIqhF6hx8p4eeXdLYFqgHF2wZVjXCUglLwAW7umx/2ivWdZy+qR7+JN ZtGfbG0iWGZIsTEgWIUHRc5tZD8YYt5PhaUMp6I1Wp/XeRPVLeZcRRyj9dq5+jUo Wn1zQu8tgzo55C8ZVKQbVm5EkgWfpr4Wb6sSfqEzy/MJqLu4TtIOTFc7Y1VRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTk5QKEeD7W5FMo41/ZotbgKQBuEwHwYDVR0j BBgwFoAUkLlFCqObnNlYYIXvqe94h+5hN1kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U3NmRiMWUtYmY5YS00OWE4LWJmNzYtOWYzMTRlN2QxZDhlLzAvOTBCOTQ1MEFB MzlCOUNEOTU4NjA4NUVGQTlFRjc4ODdFRTYxMzc1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEI5NDUwQUEzOUI5Q0Q5NTg2MDg1RUZBOUVGNzg4N0VFNjEz NzU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U3NmRiMWUtYmY5YS00OWE4LWJm NzYtOWYzMTRlN2QxZDhlLzAvOTBCOTQ1MEFBMzlCOUNEOTU4NjA4NUVGQTlFRjc4 ODdFRTYxMzc1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACeyAUHsVeVlHQ+TtHqWiO1KOI8dFwy8+bT7 c1+hQ8N5SMpcYLLHxYu52Qe6O0eDWSUQxYcq57AJJ4TxmmGEz1Xtp62JHNjJpuS0 xlmFVPvE/w6f5Y+bdH3UtYNOzMmJ3ahRAtwHvcy8cdmYWG0pVtny43Qn0E9ETMrq 2dwWkEezQasfzz690NyD4QMCdIjkcGnldrABIFfP27Z1nIHLOs8ijZ5q2KNTkkKR 14syGFZ8kRyyc68k/keZdo2qwOAk2TbQz3zEC6DwkW6nK191lg/Zqvc5gUS6cl8R 8OaX64yiecu/XW0H5yqPigilyvf2PyquKzMSmtJ7r/qwObQ7K8Q= -----END CERTIFICATE-----Generated at Tue May 12 23:20:57 2026 by rpki-client