$ rpki-client -vvf rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft File: 90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft (raw, json) Hash identifier: QNpUO/qLJwxn7Aw6oQPwHmb3Ep2Hhaz72oWsDfJKXmk= Subject key identifier: 9C:E7:1E:4C:8F:F6:5D:4C:70:F9:00:63:1D:DC:15:97:D9:79:2F:FF Authority key identifier: 90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D Certificate issuer: /CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D Certificate serial: 4AF17E5A3E4592F73E31D98F5525A8ED2FAC8DA7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:28:49 +0000 Manifest this update: Tue 12 May 2026 18:23:49 +0000 Manifest next update: Wed 13 May 2026 21:20:49 +0000 Files and hashes: 1: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: k5tpWx2NqoJhL6Gv4Q6AOH3uxzUVB7/CghrllRzLLUQ=) 2: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: dXDKfmvmczU9aYgLQYslTHLZ6G4+e/q+u9H8ndaerLU=) 3: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: BNrW0eQU53nT/ba5DR3gG5VeToq8WtIzwdZt0XrzHK8=) 4: 90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl (hash: 2nKQAr2bufaUV5GjkcOXaUyicwdm/plP1WcDqoQTGWA=) 5: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: KvOleZIfcn6EoZkKf6ZdFcLhmThnSWrW2/dXX/n7URA=) 6: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: FSyjqZtd8XDVrxqAKcbaFrMIwjpkZU6OHpA9ABCfhcY=) 7: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: uouUKGbUozmFnKgub/+5mqf8ILo68JfceNZ+JRrYL4g=) 8: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: ytetHbaOFcdooikcS2dP3RfK75XM1xqRpP+fXSjDKG0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f1:7e:5a:3e:45:92:f7:3e:31:d9:8f:55:25:a8:ed:2f:ac:8d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D Validity Not Before: May 12 18:23:49 2026 GMT Not After : May 13 21:20:49 2026 GMT Subject: CN=9CE71E4C8FF65D4C70F900631DDC1597D9792FFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1b:bd:90:05:64:0f:77:e2:bd:d5:c1:8f:17: 46:c3:b7:8d:c7:3a:8a:bf:43:33:68:1b:e1:14:aa: cb:9c:34:ee:3a:f6:b5:ee:e1:5a:30:55:ea:b2:83: 96:f4:29:dc:fd:01:dd:94:30:33:e0:e8:27:b0:59: 26:aa:ab:52:75:3e:f7:6a:51:79:1d:14:f0:9b:33: bd:eb:9c:9f:d4:95:3e:07:fa:69:54:a6:af:fc:6a: 0d:0a:65:02:96:43:6e:5d:43:24:b4:b2:92:9f:77: f0:7a:1a:3c:f8:ca:0c:68:8f:a4:45:70:f7:14:96: 17:69:53:78:04:9b:d6:6e:ff:10:56:a1:77:b0:d6: 26:9b:03:d9:ba:4e:d3:01:fc:5e:c2:21:82:94:b0: 48:b5:f8:67:b1:ea:46:00:cb:1a:46:7c:c9:bd:a0: 9a:dd:f9:98:6b:61:60:64:77:6e:28:fb:e7:c6:3f: 7c:b3:17:33:92:9c:0e:d8:88:17:75:20:07:5e:d9: da:a2:86:e9:ac:5a:17:75:e1:90:33:1c:e6:d4:71: c3:81:1f:e5:d6:49:60:0f:51:3e:1b:b4:d1:54:38: e1:67:8f:bb:f1:a2:f3:9b:d3:f8:7a:93:54:7b:5e: 2c:f1:ec:d6:05:fa:e5:48:d0:7c:90:f9:6a:d2:cc: 31:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E7:1E:4C:8F:F6:5D:4C:70:F9:00:63:1D:DC:15:97:D9:79:2F:FF X509v3 Authority Key Identifier: keyid:90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:67:0a:c3:33:7d:f4:bb:a8:96:eb:32:8e:dc:d9:bb:9d:69: f8:66:6e:eb:41:65:32:29:af:3d:c2:f3:87:7d:45:90:a8:63: 84:d4:c0:bf:58:7d:b4:4c:97:2a:c0:81:ce:34:1c:bf:fc:b5: 25:bd:ef:58:19:03:a0:7c:93:c7:13:f1:f7:d1:49:52:d2:3c: cd:32:a2:73:1c:b9:81:bc:58:d0:14:c2:9f:20:e7:87:e9:b2: e0:1c:58:98:9e:20:81:54:8c:55:38:a7:05:e1:79:ca:de:e5: f0:f8:0b:81:26:54:6b:5d:ad:71:e6:28:03:41:5d:85:8a:bd: f5:4c:07:8e:80:4d:27:45:63:88:1f:64:20:87:e2:a7:ed:f7: 93:11:c9:05:06:32:f8:bb:62:e4:1a:c8:df:ba:7f:45:70:20: fe:18:8c:36:31:89:54:70:fa:19:ec:32:d4:ca:f5:33:d4:04: 34:fe:88:3c:22:d0:e5:f0:53:4b:0c:7b:a3:77:88:70:4d:44: 10:c1:1d:26:02:f3:3b:70:43:bc:6a:ce:77:8e:8c:f6:d0:36: 22:ed:63:6f:48:e9:7a:3c:e3:de:fd:a8:13:75:b2:1b:f2:ef: aa:fb:95:e3:45:ef:c9:58:93:cd:91:ff:87:a5:63:95:11:a3: 1c:12:70:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSvF+Wj5Fkvc+MdmPVSWo7S+sjacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBDM0JDNjZBQTc0NUM5RUE4REE5RDgxNUFEN0JGNEJG MkRFNUU1RDAeFw0yNjA1MTIxODIzNDlaFw0yNjA1MTMyMTIwNDlaMDMxMTAvBgNV BAMTKDlDRTcxRTRDOEZGNjVENEM3MEY5MDA2MzFEREMxNTk3RDk3OTJGRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSG72QBWQPd+K91cGPF0bDt43H Ooq/QzNoG+EUqsucNO469rXu4VowVeqyg5b0Kdz9Ad2UMDPg6CewWSaqq1J1Pvdq UXkdFPCbM73rnJ/UlT4H+mlUpq/8ag0KZQKWQ25dQyS0spKfd/B6Gjz4ygxoj6RF cPcUlhdpU3gEm9Zu/xBWoXew1iabA9m6TtMB/F7CIYKUsEi1+Gex6kYAyxpGfMm9 oJrd+ZhrYWBkd24o++fGP3yzFzOSnA7YiBd1IAde2dqihumsWhd14ZAzHObUccOB H+XWSWAPUT4btNFUOOFnj7vxovOb0/h6k1R7Xizx7NYF+uVI0HyQ+WrSzDE5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnOceTI/2XUxw+QBjHdwVl9l5L/8wHwYDVR0j BBgwFoAUkMO8Zqp0XJ6o2p2BWte/S/LeXl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjZiNWFlMWUtYmU2Ni00YTMwLWE5NDgtN2Q0NzhjMjJlYTJiLzAvOTBDM0JDNjZB QTc0NUM5RUE4REE5RDgxNUFEN0JGNEJGMkRFNUU1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEMzQkM2NkFBNzQ1QzlFQThEQTlEODE1QUQ3QkY0QkYyREU1 RTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjZiNWFlMWUtYmU2Ni00YTMwLWE5 NDgtN2Q0NzhjMjJlYTJiLzAvOTBDM0JDNjZBQTc0NUM5RUE4REE5RDgxNUFEN0JG NEJGMkRFNUU1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANZnCsMzffS7qJbrMo7c2budafhmbutBZTIp rz3C84d9RZCoY4TUwL9YfbRMlyrAgc40HL/8tSW971gZA6B8k8cT8ffRSVLSPM0y onMcuYG8WNAUwp8g54fpsuAcWJieIIFUjFU4pwXhecre5fD4C4EmVGtdrXHmKANB XYWKvfVMB46ATSdFY4gfZCCH4qft95MRyQUGMvi7YuQayN+6f0VwIP4YjDYxiVRw +hnsMtTK9TPUBDT+iDwi0OXwU0sMe6N3iHBNRBDBHSYC8ztwQ7xqzneOjPbQNiLt Y29I6Xo84979qBN1shvy76r7leNF78lYk82R/4elY5URoxwScGI= -----END CERTIFICATE-----Generated at Wed May 13 01:45:15 2026 by rpki-client