
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft
File: 90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft (raw, json)
Hash identifier: eNNfTS6ehzqK/+76GWKYSWSoCE+yOqxt+WyL41N9/UY=
Subject key identifier: 55:92:9A:9E:63:5C:B8:43:AB:C2:45:97:7E:C9:6B:5C:91:19:3C:7A
Authority key identifier: 90:B0:BF:C1:8E:B9:04:96:C0:32:33:83:DC:DC:92:1D:9D:8E:62:C7
Certificate issuer: /CN=90B0BFC18EB90496C0323383DCDC921D9D8E62C7
Certificate serial: 744B7B0D1DD2D8D0897DDCFD6467FE5E56F70CE6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 02:08:21 +0000
Manifest this update: Tue 21 Jul 2026 02:03:21 +0000
Manifest next update: Wed 22 Jul 2026 05:04:21 +0000
Files and hashes: 1: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: f1xLE51GWOwQNLvRvEntiSu/P1tXHq8fAnPJwIPOL+s=)
2: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: fBi7KOxItMXmNwqCO9NrsVw12oG+iWETgMZG+hflMwY=)
3: 90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl (hash: 6R5L5bHU0TOWgz0B7XpP0v2f3GWgW4/WyJXscydT24o=)
4: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: 9wRrgktFn4gbGNfBo3IH1gpwK1hyiBcfUs4oIPcTOYQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl
rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:4b:7b:0d:1d:d2:d8:d0:89:7d:dc:fd:64:67:fe:5e:56:f7:0c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90B0BFC18EB90496C0323383DCDC921D9D8E62C7
Validity
Not Before: Jul 21 02:03:21 2026 GMT
Not After : Jul 22 05:04:21 2026 GMT
Subject: CN=55929A9E635CB843ABC245977EC96B5C91193C7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:6d:d5:9a:75:98:5d:9f:39:e9:27:47:e3:
c1:b7:64:ef:81:d6:a5:df:c0:36:d4:7d:e2:76:f9:
89:08:b3:7a:ec:6f:4d:a4:b7:49:b7:2e:22:e0:e4:
ef:86:e6:1b:a0:76:97:91:9b:8c:c5:8e:11:a1:92:
1e:b7:e0:f5:fe:f7:99:7b:23:7d:36:47:db:08:f1:
84:d1:70:2a:13:7e:59:bf:15:eb:cd:10:40:98:eb:
5e:ff:fb:02:e0:f6:3b:19:40:c5:ec:34:d6:bb:fd:
ba:fb:13:22:c3:e1:cf:89:95:c0:b3:0b:c7:95:77:
9d:7d:41:3d:c2:ae:1f:2c:b1:95:12:02:b9:51:74:
4f:35:06:e4:c4:99:37:5c:40:fa:58:81:c5:da:d5:
3d:03:b2:fe:97:2f:ea:7b:85:00:77:f2:69:e9:73:
a1:26:28:bf:01:41:94:d4:92:c7:05:2c:f2:e9:b0:
fb:1d:73:9f:66:0e:56:b2:a3:13:ed:1c:62:af:75:
d8:6f:3a:d2:55:bb:9c:77:91:18:03:65:39:84:ba:
58:f7:3d:f9:5a:ed:92:62:d1:43:76:49:79:68:f6:
f5:79:6f:c4:a4:96:1d:39:4c:74:4c:03:ed:f6:e6:
91:0f:52:2e:a5:51:a4:32:2a:89:74:a2:b3:3e:f3:
b1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:92:9A:9E:63:5C:B8:43:AB:C2:45:97:7E:C9:6B:5C:91:19:3C:7A
X509v3 Authority Key Identifier:
keyid:90:B0:BF:C1:8E:B9:04:96:C0:32:33:83:DC:DC:92:1D:9D:8E:62:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:89:60:e1:09:bf:7e:6e:2a:19:bb:b4:e6:1a:ee:75:68:50:
0b:f5:f3:1f:69:6c:1f:57:3e:d3:e1:8b:4d:64:e5:48:bf:6f:
09:75:e4:8a:7d:d9:11:57:61:43:87:1b:20:c1:e3:24:f5:43:
eb:61:07:b3:e2:62:e2:74:49:8d:16:c3:d2:c1:d2:2e:87:4d:
89:0c:08:bc:72:88:f8:1c:d4:da:78:bc:4e:1d:32:d7:92:ba:
86:a7:e5:80:a6:e8:d9:d1:fd:4c:4d:de:7a:41:b7:54:33:da:
de:fc:1f:9f:3c:87:b4:a3:49:3a:44:a6:9d:3d:00:b0:a5:0c:
78:bb:84:e0:ba:b8:02:9e:f7:56:9c:30:f8:23:ad:e7:e8:e0:
b4:bd:55:89:62:af:e4:84:69:e3:a6:ee:24:69:6e:53:9f:66:
9c:98:e1:7c:8b:f4:19:08:d0:d4:59:82:a2:72:c7:45:0d:c2:
20:a3:a2:89:bc:8e:67:56:ff:d2:a9:d3:0d:72:d7:2b:98:db:
0e:a1:3b:4b:02:c6:78:9e:a5:82:c1:81:aa:db:f3:a9:fc:6b:
15:0c:6d:ff:95:27:e7:ba:88:7d:5d:d9:36:7f:9b:ae:61:09:
41:64:2e:48:6e:ad:bd:ae:0b:cd:2e:76:97:ae:ce:7f:f7:98:
f3:d0:de:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:22:57 2026 by rpki-client