$ rpki-client -vvf repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft File: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft (raw, json) Hash identifier: rYIsCTP9dbvWc7/2PlipNaAF2LVFkckOuUgrx1Sc9I0= Subject key identifier: 70:82:84:C4:BF:A2:DC:1E:97:6B:2F:36:E8:12:FF:E2:5F:D6:DD:7E Authority key identifier: 90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 Certificate issuer: /CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Certificate serial: 2D3757AD930A0ACF89984BC896F05F344FD89A96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft Manifest number: 0215 Signing time: Wed 18 Mar 2026 01:41:30 +0000 Manifest this update: Wed 18 Mar 2026 01:36:30 +0000 Manifest next update: Sat 21 Mar 2026 09:57:30 +0000 Files and hashes: 1: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl (hash: goQXHZMQKYdqqVn96VoZRiFWXEQ6pi3USEWryH7AHgc=) 2: 3130332e3134352e35322e302f32342d3234203d3e20313339343535.roa (hash: MPra63E26ubEDDY2JzmWeIwcUBZxwSSUVSnEZHc8Cxs=) 3: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (hash: 3wrZ4aSA+t/PIX/VnbG950yKhlv7BEyHLtumjw5neEc=) 4: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (hash: 4TOSRtXxwoc1DClbkhe3iiOSNBbwLVpi+J6WdybY63c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 09:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:37:57:ad:93:0a:0a:cf:89:98:4b:c8:96:f0:5f:34:4f:d8:9a:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Validity Not Before: Mar 18 01:36:30 2026 GMT Not After : Mar 21 09:57:30 2026 GMT Subject: CN=708284C4BFA2DC1E976B2F36E812FFE25FD6DD7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fb:53:a6:59:db:60:c2:ee:cb:e5:b1:52:73: ee:ee:ed:3b:13:ce:6a:5e:1b:d7:19:01:92:59:4a: b8:c5:9c:d9:3a:6b:d4:2d:a0:58:17:34:a5:f1:a4: 26:30:48:e1:32:fc:ef:ca:d7:aa:45:e7:ac:44:e1: 54:3e:f7:8c:0f:0f:3c:15:4c:43:2e:25:7c:d3:c3: 50:e0:bb:92:2e:7e:f3:3f:99:ce:71:f8:5a:7d:d2: ad:a7:2e:17:68:be:39:ac:f7:9e:37:83:84:19:36: 98:d9:00:52:26:a8:e0:63:f0:06:71:7f:68:cb:54: 43:30:f7:f3:3f:6c:75:c5:aa:f8:ca:50:ed:02:44: cb:b0:ea:5e:bd:8d:bf:8e:6e:1f:54:13:86:4f:d4: c4:84:b3:f6:d5:2a:cd:3a:b2:d7:53:58:fe:5a:a5: 3c:eb:28:a8:06:97:46:49:92:05:66:9b:4b:e0:72: 55:63:4f:37:a9:48:c0:26:4b:99:4d:8f:18:b6:01: 3b:e2:68:ad:a0:1b:fb:72:38:9c:ee:b8:75:44:62: ca:da:7e:36:33:44:3e:9a:d9:3b:38:52:05:46:a5: 66:a2:3a:c4:c9:a0:82:08:8b:7d:20:82:ce:7b:fa: 2c:6f:0b:22:e4:6f:b3:9e:a2:b9:3b:56:3e:89:89: 85:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:82:84:C4:BF:A2:DC:1E:97:6B:2F:36:E8:12:FF:E2:5F:D6:DD:7E X509v3 Authority Key Identifier: keyid:90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:f9:b4:f6:a2:16:fc:ba:e3:f1:4a:2a:43:7b:6e:06:b8:9e: 26:27:92:5a:72:8f:db:84:a0:c0:fc:75:30:6d:94:c0:1d:83: 0f:12:ed:66:c5:eb:6b:bd:5a:ef:fa:7a:55:62:8a:05:d6:48: 21:c2:0f:fc:dc:6a:cb:4a:7c:88:5c:6f:d3:32:a6:19:54:9b: 64:e6:ca:82:60:ea:71:3b:28:6d:74:16:96:ea:3f:de:42:05: 3b:e6:f6:fd:9d:b1:04:db:a7:d3:5e:ed:de:f1:76:f8:20:fb: 6c:0c:3a:45:9f:17:7b:88:ee:97:0a:fb:5c:33:3d:35:eb:4b: 36:d3:b6:ac:51:97:9a:56:c2:0a:03:b8:4d:bc:2e:f1:e3:c8: 8c:ab:ff:2b:e5:2b:a6:2b:84:34:23:e3:4f:8c:0d:53:71:e8: cd:4b:31:21:3f:77:d3:e9:71:95:d4:9a:82:b8:c9:6a:8c:e2: 5d:a1:2c:a2:eb:3b:a7:a9:32:61:48:41:13:e1:28:55:f6:c7: 0c:3e:32:6d:2c:72:9c:02:6c:44:5e:0c:2d:8c:65:92:ae:cc: 03:27:9e:42:84:7b:44:f0:0f:53:3a:34:a2:1d:40:61:7b:b8: 97:06:0e:f8:6f:e7:2c:52:b4:08:46:7c:38:61:61:c2:e8:3f: bc:66:de:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULTdXrZMKCs+JmEvIlvBfNE/YmpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFF Q0VGODNBMzAeFw0yNjAzMTgwMTM2MzBaFw0yNjAzMjEwOTU3MzBaMDMxMTAvBgNV BAMTKDcwODI4NEM0QkZBMkRDMUU5NzZCMkYzNkU4MTJGRkUyNUZENkREN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9+1OmWdtgwu7L5bFSc+7u7TsT zmpeG9cZAZJZSrjFnNk6a9QtoFgXNKXxpCYwSOEy/O/K16pF56xE4VQ+94wPDzwV TEMuJXzTw1Dgu5IufvM/mc5x+Fp90q2nLhdovjms9543g4QZNpjZAFImqOBj8AZx f2jLVEMw9/M/bHXFqvjKUO0CRMuw6l69jb+Obh9UE4ZP1MSEs/bVKs06stdTWP5a pTzrKKgGl0ZJkgVmm0vgclVjTzepSMAmS5lNjxi2ATviaK2gG/tyOJzuuHVEYsra fjYzRD6a2Ts4UgVGpWaiOsTJoIIIi30ggs57+ixvCyLkb7Oeork7Vj6JiYW9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcIKExL+i3B6Xay826BL/4l/W3X4wHwYDVR0j BBgwFoAUkOLMrKMj6rIUX1S3z2XF+uzvg6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzdmZmUyYS0zMWU0LTQ4MDAtOTdkNC03ODc0YzEyMzE5MTEvMC85MEUyQ0NBQ0Ez MjNFQUIyMTQ1RjU0QjdDRjY1QzVGQUVDRUY4M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFFQ0VG ODNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc3ZmZlMmEtMzFlNC00ODAwLTk3 ZDQtNzg3NGMxMjMxOTExLzAvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1 RkFFQ0VGODNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKb5tPaiFvy64/FKKkN7bga4niYnklpyj9uE oMD8dTBtlMAdgw8S7WbF62u9Wu/6elViigXWSCHCD/zcastKfIhcb9MyphlUm2Tm yoJg6nE7KG10FpbqP95CBTvm9v2dsQTbp9Ne7d7xdvgg+2wMOkWfF3uI7pcK+1wz PTXrSzbTtqxRl5pWwgoDuE28LvHjyIyr/yvlK6YrhDQj40+MDVNx6M1LMSE/d9Pp cZXUmoK4yWqM4l2hLKLrO6epMmFIQRPhKFX2xww+Mm0scpwCbEReDC2MZZKuzAMn nkKEe0TwD1M6NKIdQGF7uJcGDvhv5yxStAhGfDhhYcLoP7xm3vQ= -----END CERTIFICATE-----Generated at Thu Mar 19 09:40:05 2026 by rpki-client