
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft
File: 90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft (raw, json)
Hash identifier: gfGFaCIIKWVs6AsCMvM11odP7jNIUPAq7OWtHHqCrP8=
Subject key identifier: 6B:73:CF:8E:F3:0D:2A:5B:E7:6C:06:05:95:14:F0:ED:C7:88:F0:40
Authority key identifier: 90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16
Certificate issuer: /CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
Certificate serial: 5264AF6EBC7F5B8C85FCCE7E17A107BDB9E3467F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 15:55:27 +0000
Manifest this update: Tue 12 May 2026 15:50:27 +0000
Manifest next update: Wed 13 May 2026 18:19:27 +0000
Files and hashes: 1: 3130332e32342e31322e302f32332d3233203d3e20313332363434.roa (hash: XA49llIDJReIFYpde7BLF2WOb/sWo1hTC8oVNheJ18c=)
2: 3131362e3230342e3132392e302f32342d3234203d3e20313332363434.roa (hash: 97HEq762ggjb36ObJvOB+0O4UVTOw9S1KAUH3wNcpO4=)
3: 3130332e3235332e36382e302f32332d3233203d3e20313332363434.roa (hash: cdYCODbpzOPcSEGOyln69IWngFwXNw8457vXW43CyIQ=)
4: 34352e3132362e3133322e302f32322d3232203d3e20313332363434.roa (hash: LSiSWeahGCiGQr2oAGZdxTD7aS5l5Mx3rTY5xcHY1Cs=)
5: 90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl (hash: Sd2hj2FaeRXmTNI6lxuzbYlwTzNbHv8bjlTncsGaZDQ=)
6: 3131362e3230342e3133302e302f32342d3234203d3e20313332363434.roa (hash: ZplGjQm5AJToWkOfjaun30sMJtYUPIBMV0JqNXb3aqs=)
7: 3131362e3230342e3132382e302f32342d3234203d3e20313332363434.roa (hash: RBFdUHZpMD/gDIa6CRB91FevIsYdigIpmwwSIwzhi98=)
8: 3131362e3230342e3234382e302f32332d3233203d3e20313332363434.roa (hash: PViwWNE+NG9X47qSPjKfZGqholiuXSr1ZOEfMgtcqX0=)
9: 3131362e3230342e3235302e302f32332d3233203d3e20313332363434.roa (hash: 8AEGQtXK/Xs1e1cVuxnjNRKg/MkAzKUk0OckBlGEiL4=)
10: 3131362e3230342e3133312e302f32342d3234203d3e20313332363434.roa (hash: YrsTK2Y9639gKpZZNuXe3bw5wGTnhWGGPOil0c8e8wM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl
rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:64:af:6e:bc:7f:5b:8c:85:fc:ce:7e:17:a1:07:bd:b9:e3:46:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
Validity
Not Before: May 12 15:50:27 2026 GMT
Not After : May 13 18:19:27 2026 GMT
Subject: CN=6B73CF8EF30D2A5BE76C06059514F0EDC788F040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:cd:c4:56:1b:f6:d2:1e:6e:f0:94:d4:86:
d8:7f:c1:05:8b:ec:f3:01:e9:84:d4:45:a2:b6:85:
56:9b:15:11:eb:23:5a:da:60:de:ed:0a:f0:b4:e8:
58:b6:df:92:09:9e:91:8c:cf:28:bc:b1:33:d0:12:
ca:61:1a:40:7a:be:75:6d:f0:1b:1f:7a:a1:97:c0:
47:4e:6b:54:26:d4:ac:05:cf:db:59:8c:8a:bb:98:
20:cb:95:4c:d6:b8:52:23:8e:e8:d4:85:e2:47:29:
c8:ec:e7:89:29:ea:1f:52:be:39:ca:e4:4e:df:aa:
17:ca:8b:db:f2:02:e6:f6:d4:68:70:a3:1a:7e:03:
18:ec:f5:2a:68:10:92:cd:8b:12:ac:fc:d2:51:16:
91:02:17:39:33:91:9c:1e:2b:ab:53:1f:25:14:09:
bb:a7:84:8f:b1:af:52:af:e2:07:e7:b2:c9:41:0d:
ab:cf:42:1f:e5:06:27:44:1a:3e:05:95:e3:d9:fe:
9e:39:63:cf:4c:e0:4c:c2:a1:aa:3b:f4:d2:ae:81:
21:a4:dc:d5:29:c4:ff:c6:dc:bd:53:64:d1:d3:c4:
e4:f4:52:5c:39:f0:ea:b0:0e:18:f6:b5:c1:94:a2:
0d:0f:21:6f:31:65:11:e2:a3:43:dc:f6:29:48:9a:
94:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:73:CF:8E:F3:0D:2A:5B:E7:6C:06:05:95:14:F0:ED:C7:88:F0:40
X509v3 Authority Key Identifier:
keyid:90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:86:80:63:01:e6:c9:70:d8:f4:a0:0e:ae:72:42:24:7f:89:
cf:79:18:ea:6a:4f:77:e5:b4:15:e3:d0:67:dd:fa:5c:09:7a:
03:1b:e5:41:b9:84:19:5f:42:0d:26:3f:3c:0d:9f:9c:98:79:
b9:f5:3c:f1:05:02:24:55:dd:53:c5:7a:e7:8d:c5:b8:63:a6:
1b:5b:0e:65:6a:93:31:d5:4d:81:4f:c1:c0:5d:75:7e:fc:b1:
48:13:31:3f:1c:32:da:38:31:34:71:b3:2b:83:ef:83:12:4b:
79:2f:b0:e4:05:e0:42:d3:40:34:e0:8f:ad:8b:be:d3:59:8f:
35:6b:69:91:4e:ce:bd:29:cc:be:d8:67:b2:14:52:42:3c:5d:
23:f3:a1:0a:47:47:c2:ee:4d:62:ec:de:c6:88:41:c5:0b:56:
a1:99:93:aa:7c:8d:28:61:ba:0e:b1:ac:18:09:be:bd:1b:6b:
e8:38:2c:2d:93:f0:a9:55:d0:dc:b5:08:17:10:7e:de:81:38:
ae:8a:b3:8a:d6:e5:73:d6:8a:3d:b3:67:3f:9d:a9:ec:9b:43:
3c:1d:10:dc:1c:b2:6f:6e:1b:dc:1e:db:f2:33:94:a9:a8:7c:
29:0c:96:d6:79:43:fe:44:1a:df:a4:54:d2:a8:1c:9e:c2:65:
d1:7a:44:6d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUmSvbrx/W4yF/M5+F6EHvbnjRn8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBERkI1RjFBOUU1OEZFMUFDQjc3Q0RGMEI0RTc1MjM3
MDM0NjkxNjAeFw0yNjA1MTIxNTUwMjdaFw0yNjA1MTMxODE5MjdaMDMxMTAvBgNV
BAMTKDZCNzNDRjhFRjMwRDJBNUJFNzZDMDYwNTk1MTRGMEVEQzc4OEYwNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzts3EVhv20h5u8JTUhth/wQWL
7PMB6YTURaK2hVabFRHrI1raYN7tCvC06Fi235IJnpGMzyi8sTPQEsphGkB6vnVt
8BsfeqGXwEdOa1Qm1KwFz9tZjIq7mCDLlUzWuFIjjujUheJHKcjs54kp6h9SvjnK
5E7fqhfKi9vyAub21Ghwoxp+Axjs9SpoEJLNixKs/NJRFpECFzkzkZweK6tTHyUU
CbunhI+xr1Kv4gfnsslBDavPQh/lBidEGj4FlePZ/p45Y89M4EzCoao79NKugSGk
3NUpxP/G3L1TZNHTxOT0Ulw58OqwDhj2tcGUog0PIW8xZRHio0Pc9ilImpRfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUa3PPjvMNKlvnbAYFlRTw7ceI8EAwHwYDVR0j
BBgwFoAUkN+18anlj+Gst3zfC051I3A0aRYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTEzOWFjMWYtMzhlMi00NWFhLTk3ZGMtOTkyNzk2NDExY2MxLzAvOTBERkI1RjFB
OUU1OEZFMUFDQjc3Q0RGMEI0RTc1MjM3MDM0NjkxNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MERGQjVGMUE5RTU4RkUxQUNCNzdDREYwQjRFNzUyMzcwMzQ2
OTE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTEzOWFjMWYtMzhlMi00NWFhLTk3
ZGMtOTkyNzk2NDExY2MxLzAvOTBERkI1RjFBOUU1OEZFMUFDQjc3Q0RGMEI0RTc1
MjM3MDM0NjkxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB2GgGMB5slw2PSgDq5yQiR/ic95GOpqT3fl
tBXj0Gfd+lwJegMb5UG5hBlfQg0mPzwNn5yYebn1PPEFAiRV3VPFeueNxbhjphtb
DmVqkzHVTYFPwcBddX78sUgTMT8cMto4MTRxsyuD74MSS3kvsOQF4ELTQDTgj62L
vtNZjzVraZFOzr0pzL7YZ7IUUkI8XSPzoQpHR8LuTWLs3saIQcULVqGZk6p8jShh
ug6xrBgJvr0ba+g4LC2T8KlV0Ny1CBcQft6BOK6Ks4rW5XPWij2zZz+dqeybQzwd
ENwcsm9uG9we2/IzlKmofCkMltZ5Q/5EGt+kVNKoHJ7CZdF6RG0=
-----END CERTIFICATE-----
Generated at Wed May 13 05:25:15 2026 by rpki-client