$ rpki-client -vvf rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft File: 2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft (raw, json) Hash identifier: 5+cO/Ohx0DzqSHqmJWMs/+bEaII2XN8fxh+Uu6yfN3U= Subject key identifier: DC:69:FD:17:CA:83:C8:96:5C:42:5B:7F:3A:09:4C:99:18:8B:93:F6 Authority key identifier: 2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 Certificate issuer: /CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Certificate serial: 144177572E25749EE501CC5E89F113CF8AE015A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 09:26:31 +0000 Manifest this update: Thu 23 Jul 2026 09:21:31 +0000 Manifest next update: Fri 24 Jul 2026 12:27:31 +0000 Files and hashes: 1: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: mQrrkGIS8HoF4AiDSmw6SD2SG/T7/MXDAFnexE70y7o=) 2: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: +Yvf7pOmzIGa62dYtF9IiIRwOM/GLeNEJw6+0hLCuFs=) 3: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: Zn0CgMhZBE1Ox5HRkdKzvhOJuMe+bbXdGHM8Z1fRLu4=) 4: 2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl (hash: cbMXIrRF6kPxBO/gcegcfx43VXKwIv/u0z9ckGE16+c=) 5: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: Sc3G90iBjlZbQp4eiRWZGBi7/nNefrAvOJorxw0BbBg=) 6: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: o8ATK3bD9zxeJufeZWJNK7oFuttO5EJXj2X9FF47zyA=) 7: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: YxIG5gE82yucA04IL0UOvUpSplXnSvbMztHXZbePQI4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:41:77:57:2e:25:74:9e:e5:01:cc:5e:89:f1:13:cf:8a:e0:15:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Validity Not Before: Jul 23 09:21:31 2026 GMT Not After : Jul 24 12:27:31 2026 GMT Subject: CN=DC69FD17CA83C8965C425B7F3A094C99188B93F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:94:6b:53:1e:a9:a9:52:b6:a9:77:e2:a8:de: 4b:7e:40:64:e0:6a:49:17:3d:2b:db:d8:2e:cf:59: b8:8f:02:0a:00:cf:fa:76:41:60:9e:f2:7f:b0:89: d5:ac:53:55:32:37:b6:99:c0:d9:0d:c5:a9:b5:10: b5:f8:2c:bc:f3:55:78:1e:1b:b3:06:be:64:2d:9c: f2:80:cf:ad:aa:6b:d6:0a:7f:3e:74:59:c1:1f:e0: 55:96:93:fd:64:d4:ad:36:e9:75:75:98:c4:b6:68: 79:f8:dd:73:02:f4:b4:91:b9:34:44:15:0c:b7:28: 53:74:57:cf:d2:07:01:cd:11:ad:29:1e:b9:b9:8f: 6f:b7:49:7a:69:fb:13:38:ec:b2:bb:bc:74:42:8b: 0d:6c:26:fd:16:06:10:b0:9b:33:23:ba:d9:1a:24: 37:1f:87:b8:e0:8c:63:b0:7b:d9:f0:17:9b:16:fc: 48:40:6f:4e:3b:75:83:aa:80:30:b8:63:59:00:09: 91:76:f5:9c:23:66:54:cd:31:94:ae:32:62:69:e7: d5:34:81:e0:bf:9d:9e:fb:ee:36:b8:f4:ac:50:e0: 89:c4:5b:43:b6:f7:08:bf:68:00:f4:d4:c9:d9:fe: 67:cd:c6:65:73:02:29:70:9a:41:73:bb:33:de:34: 3d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:69:FD:17:CA:83:C8:96:5C:42:5B:7F:3A:09:4C:99:18:8B:93:F6 X509v3 Authority Key Identifier: keyid:2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:b7:c4:1b:c6:2a:28:80:8b:2e:61:fd:21:34:38:dc:ba:8b: 96:78:94:24:77:92:f8:37:95:fe:d2:a7:7c:93:65:37:fc:9b: e8:a5:64:9a:83:06:8f:3a:71:b8:56:bc:12:68:e8:51:1b:80: a4:05:13:c9:40:6c:84:52:c7:ab:20:45:9e:d0:2c:c3:46:a0: 4b:0a:42:1c:76:0b:a5:20:74:54:00:ae:95:1c:44:64:26:2c: 1a:2f:c3:3f:c6:0a:c0:03:f0:e2:b4:fc:9a:27:bf:f0:5f:65: 29:0c:33:cb:19:50:51:27:1a:ea:2f:a5:87:a0:b9:48:d1:69: 01:08:54:b0:7b:a0:c1:72:12:ba:de:ef:73:dd:d1:0e:62:89: d1:b4:3a:64:39:ba:f0:86:9d:7c:64:a0:8c:b5:6a:43:d8:90: 62:8b:9c:ea:ea:bc:3a:61:02:5c:c7:4b:83:5c:1c:c1:c7:ad: a7:f5:7a:49:4a:3b:ff:9f:6d:0e:c9:05:30:5c:8c:07:42:be: 55:10:15:e2:df:29:92:4c:2d:1c:43:fd:48:02:ae:a4:c8:3c: 53:49:9c:56:90:d7:fb:24:e9:2a:03:a3:01:dd:2e:e1:7d:0e: dd:23:66:d6:94:7e:06:fd:fe:4c:54:29:18:ba:c5:78:3d:3a: 7d:db:e5:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFEF3Vy4ldJ7lAcxeifETz4rgFaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlE MzBDNDYzNTAeFw0yNjA3MjMwOTIxMzFaFw0yNjA3MjQxMjI3MzFaMDMxMTAvBgNV BAMTKERDNjlGRDE3Q0E4M0M4OTY1QzQyNUI3RjNBMDk0Qzk5MTg4QjkzRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDblGtTHqmpUrapd+Ko3kt+QGTg akkXPSvb2C7PWbiPAgoAz/p2QWCe8n+widWsU1UyN7aZwNkNxam1ELX4LLzzVXge G7MGvmQtnPKAz62qa9YKfz50WcEf4FWWk/1k1K026XV1mMS2aHn43XMC9LSRuTRE FQy3KFN0V8/SBwHNEa0pHrm5j2+3SXpp+xM47LK7vHRCiw1sJv0WBhCwmzMjutka JDcfh7jgjGOwe9nwF5sW/EhAb047dYOqgDC4Y1kACZF29ZwjZlTNMZSuMmJp59U0 geC/nZ777ja49KxQ4InEW0O29wi/aAD01MnZ/mfNxmVzAilwmkFzuzPeND3tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Gn9F8qDyJZcQlt/OglMmRiLk/YwHwYDVR0j BBgwFoAULpDHQn/huQJV3YVW28nMadMMRjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTAzNmUwN2MtODI4My00M2QzLTkxNjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3 RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlEMzBDNDYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTkwQzc0MjdGRTFCOTAyNTVERDg1NTZEQkM5Q0M2OUQzMEM0 NjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUND NjlEMzBDNDYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACe3xBvGKiiAiy5h/SE0ONy6i5Z4lCR3kvg3 lf7Sp3yTZTf8m+ilZJqDBo86cbhWvBJo6FEbgKQFE8lAbIRSx6sgRZ7QLMNGoEsK Qhx2C6UgdFQArpUcRGQmLBovwz/GCsAD8OK0/Jonv/BfZSkMM8sZUFEnGuovpYeg uUjRaQEIVLB7oMFyErre73Pd0Q5iidG0OmQ5uvCGnXxkoIy1akPYkGKLnOrqvDph AlzHS4NcHMHHraf1eklKO/+fbQ7JBTBcjAdCvlUQFeLfKZJMLRxD/UgCrqTIPFNJ nFaQ1/sk6SoDowHdLuF9Dt0jZtaUfgb9/kxUKRi6xXg9On3b5Xs= -----END CERTIFICATE-----Generated at Fri Jul 24 01:28:26 2026 by rpki-client