$ rpki-client -vvf rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft File: 90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft (raw, json) Hash identifier: knVwQvRu6qGzXoReMZkVfcek5Z9d08wU8kCpDQEpXnc= Subject key identifier: D1:09:CD:7E:B1:98:D8:61:60:9E:CE:7A:53:5F:44:97:0C:14:61:F2 Authority key identifier: 90:B0:BF:C1:8E:B9:04:96:C0:32:33:83:DC:DC:92:1D:9D:8E:62:C7 Certificate issuer: /CN=90B0BFC18EB90496C0323383DCDC921D9D8E62C7 Certificate serial: 5EF7AF65712F2D445DC1963942A2D700CBB5EC6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:47:43 +0000 Manifest this update: Tue 02 Jun 2026 18:42:43 +0000 Manifest next update: Wed 03 Jun 2026 18:49:43 +0000 Files and hashes: 1: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: f1xLE51GWOwQNLvRvEntiSu/P1tXHq8fAnPJwIPOL+s=) 2: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: fBi7KOxItMXmNwqCO9NrsVw12oG+iWETgMZG+hflMwY=) 3: 90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl (hash: se0PHhoe8wRQUYsRT3fJB1syEhhiI+GSuQJ6EvTbTu8=) 4: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: 9wRrgktFn4gbGNfBo3IH1gpwK1hyiBcfUs4oIPcTOYQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 18:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f7:af:65:71:2f:2d:44:5d:c1:96:39:42:a2:d7:00:cb:b5:ec:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90B0BFC18EB90496C0323383DCDC921D9D8E62C7 Validity Not Before: Jun 2 18:42:43 2026 GMT Not After : Jun 3 18:49:43 2026 GMT Subject: CN=D109CD7EB198D861609ECE7A535F44970C1461F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:44:05:e4:78:56:e9:39:46:9e:57:ca:eb:5c: 5e:70:91:24:ec:c2:81:a5:73:2e:a0:0a:c0:0f:36: ce:fd:6f:11:2e:3f:87:49:f5:85:31:e5:10:65:40: 52:fa:37:70:24:e5:b4:a4:56:a7:88:4d:9f:9d:01: d9:a2:d0:c7:49:b6:67:af:98:07:6a:fd:11:f1:25: 52:d1:35:90:9e:59:63:e6:1a:bb:47:a8:0f:0e:86: 7e:df:3a:21:e5:73:86:24:82:90:6d:42:f2:04:be: f5:51:36:52:91:36:e1:ec:13:50:ef:66:8b:7b:30: 9c:03:1e:5a:68:cb:9a:cd:0c:6d:d7:0a:ec:8d:97: 8c:2f:95:b7:73:aa:40:a8:b1:5e:42:30:ce:98:57: c1:c6:16:63:2e:3d:57:cc:b2:9f:94:9e:dc:a9:60: 9f:b4:14:5e:66:46:33:71:df:d1:6b:1f:75:49:39: f2:de:d2:1e:38:4e:68:89:31:9f:c7:16:b5:51:e8: 94:ca:15:c3:19:9e:a3:b9:5c:71:6f:31:69:50:45: 03:45:69:cc:e5:ac:4a:90:59:85:07:18:32:52:ac: 8b:50:08:79:bc:90:d6:f6:f4:a2:ec:9e:2a:db:76: 70:c5:a9:3e:30:d7:d0:f2:08:e7:e7:f8:bc:03:8b: 26:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:09:CD:7E:B1:98:D8:61:60:9E:CE:7A:53:5F:44:97:0C:14:61:F2 X509v3 Authority Key Identifier: keyid:90:B0:BF:C1:8E:B9:04:96:C0:32:33:83:DC:DC:92:1D:9D:8E:62:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:cc:21:12:fc:ea:50:10:51:79:f8:7f:94:1c:86:90:af:6e: a7:fd:27:87:e2:a8:99:31:77:43:3f:c9:ce:66:de:c2:9a:46: d4:35:72:13:ce:49:b7:d0:63:e4:97:83:da:56:1e:bf:84:07: d0:81:01:11:d5:3d:c5:4d:86:f5:47:fc:fb:c3:e5:4f:ed:e3: 4d:1b:4b:38:66:37:79:46:58:24:e8:c1:1d:69:8e:fa:bf:e3: a6:0f:f3:8b:56:d7:21:cc:9a:86:4f:9a:3f:66:69:af:39:a6: a6:ba:f6:97:e2:4a:fb:2d:bf:ce:ef:49:3e:13:47:b8:ba:1d: 73:71:c0:d9:2c:ed:dd:04:31:ba:90:0e:b3:6d:b8:96:c9:50: db:f3:a6:17:c9:84:e6:e7:2c:f6:72:c9:aa:20:da:fc:f1:20: f2:20:99:d7:b5:f7:8d:2f:13:c6:af:8b:1e:7d:44:64:5a:f3: 39:98:ae:59:a1:7e:7c:98:1c:ad:72:6c:3a:2e:07:94:32:f0: cd:3a:de:97:06:ac:c9:48:3c:56:f1:4f:6d:62:b6:5c:2e:c7: 0b:9e:a6:09:5b:fd:18:79:b9:25:c8:49:63:61:f6:85:41:03: e9:3d:54:f1:d6:e1:9f:42:49:e7:ff:d2:6b:65:19:d2:04:97: 88:79:92:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXvevZXEvLURdwZY5QqLXAMu17G0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBCMEJGQzE4RUI5MDQ5NkMwMzIzMzgzRENEQzkyMUQ5 RDhFNjJDNzAeFw0yNjA2MDIxODQyNDNaFw0yNjA2MDMxODQ5NDNaMDMxMTAvBgNV BAMTKEQxMDlDRDdFQjE5OEQ4NjE2MDlFQ0U3QTUzNUY0NDk3MEMxNDYxRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvRAXkeFbpOUaeV8rrXF5wkSTs woGlcy6gCsAPNs79bxEuP4dJ9YUx5RBlQFL6N3Ak5bSkVqeITZ+dAdmi0MdJtmev mAdq/RHxJVLRNZCeWWPmGrtHqA8Ohn7fOiHlc4YkgpBtQvIEvvVRNlKRNuHsE1Dv Zot7MJwDHlpoy5rNDG3XCuyNl4wvlbdzqkCosV5CMM6YV8HGFmMuPVfMsp+Untyp YJ+0FF5mRjNx39FrH3VJOfLe0h44TmiJMZ/HFrVR6JTKFcMZnqO5XHFvMWlQRQNF aczlrEqQWYUHGDJSrItQCHm8kNb29KLsnirbdnDFqT4w19DyCOfn+LwDiyYNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0QnNfrGY2GFgns56U19ElwwUYfIwHwYDVR0j BBgwFoAUkLC/wY65BJbAMjOD3NySHZ2OYscwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGQ0ZGNkZTMtNzU3Zi00M2Q0LWFkZTItZmYwODg3Y2MyNDg3LzAvOTBCMEJGQzE4 RUI5MDQ5NkMwMzIzMzgzRENEQzkyMUQ5RDhFNjJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEIwQkZDMThFQjkwNDk2QzAzMjMzODNEQ0RDOTIxRDlEOEU2 MkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvOTBCMEJGQzE4RUI5MDQ5NkMwMzIzMzgzRENEQzky MUQ5RDhFNjJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHMIRL86lAQUXn4f5QchpCvbqf9J4fiqJkx d0M/yc5m3sKaRtQ1chPOSbfQY+SXg9pWHr+EB9CBARHVPcVNhvVH/PvD5U/t400b SzhmN3lGWCTowR1pjvq/46YP84tW1yHMmoZPmj9maa85pqa69pfiSvstv87vST4T R7i6HXNxwNks7d0EMbqQDrNtuJbJUNvzphfJhObnLPZyyaog2vzxIPIgmde1940v E8avix59RGRa8zmYrlmhfnyYHK1ybDouB5Qy8M063pcGrMlIPFbxT21itlwuxwue pglb/Rh5uSXISWNh9oVBA+k9VPHW4Z9CSef/0mtlGdIEl4h5ksw= -----END CERTIFICATE-----Generated at Wed Jun 3 04:22:37 2026 by rpki-client