$ rpki-client -vvvf rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft File: 90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft (raw, json) Hash identifier: fIQ0ZVBKYMllXyA8GEnba80IlLIPmYjuCO+luks/PNQ= Subject key identifier: A5:44:CF:20:12:A9:62:1F:C4:C0:BE:FC:4B:5E:85:CC:A1:7C:18:A9 Authority key identifier: 90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65 Certificate issuer: /CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365 Certificate serial: 4E65C42B1256BF9B524A4765A257EB8E41343B9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft Manifest number: E4 Signing time: Mon 19 Oct 2026 19:54:07 +0000 Manifest this update: Mon 19 Oct 2026 19:49:07 +0000 Manifest next update: Tue 20 Oct 2026 20:26:07 +0000 Files and hashes: 1: 3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (hash: GNjW7TFdO0BnW3XzHHL9jNymhW5z46NJgPPIaWaHEpI=) 2: 90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl (hash: 5/KCRq7lc7/B98OI5NkAsao/Fb0VjZ5wtOpxVhxAr98=) 3: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (hash: g6lAbZqkaksDk1xdjsRVZipSwUOrqirOYAGeG6k+1X4=) 4: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (hash: wgymwZqdd8aqR/u2B/QuqB1K7UuATC+6Ntbr9ldLDAY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 12:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:65:c4:2b:12:56:bf:9b:52:4a:47:65:a2:57:eb:8e:41:34:3b:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365 Validity Not Before: Oct 19 19:49:07 2026 GMT Not After : Oct 20 20:26:07 2026 GMT Subject: CN=A544CF2012A9621FC4C0BEFC4B5E85CCA17C18A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:38:cc:58:7d:60:3f:57:02:da:8b:2d:b1:b9: 62:cb:52:bd:c2:1a:db:69:51:fe:9d:41:a3:0d:77: 0f:74:14:9d:fa:44:be:18:56:48:de:0d:42:43:c7: e5:1a:1d:eb:29:c2:cb:1f:ec:fa:07:41:d8:1f:7d: a5:08:b0:72:34:5f:e1:8f:d6:17:a0:d5:3b:8a:0a: 0a:b3:00:31:01:43:29:ac:40:76:62:50:86:c3:8f: 08:5c:96:ad:40:2b:4b:10:a2:cb:b1:9a:c9:43:4c: 0f:a2:55:d9:db:0c:47:82:81:fd:12:b9:fb:63:c5: 6c:4a:e1:c8:ca:f8:d0:c6:38:d2:1b:1b:09:e3:c0: b4:ba:38:84:2d:f1:5e:63:a4:a8:ac:ef:0f:8f:fb: a7:e0:98:a4:94:1b:e2:67:b2:6d:3d:c3:d0:c1:05: 5e:b5:ee:3b:0a:29:96:19:7a:6b:00:14:b0:a3:43: e4:49:52:c2:db:43:7d:c3:29:48:86:c5:ab:a6:19: ee:53:e6:34:12:f3:ea:f1:49:23:72:34:4c:4a:a2: 7b:66:c9:56:36:cd:50:0e:7c:e1:44:ff:66:e0:f4: 3f:5d:d8:2c:02:0a:3c:ac:81:d9:94:19:1b:ec:be: 96:2e:54:1a:e2:bd:8c:b5:91:f3:d0:16:47:90:26: 2c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:44:CF:20:12:A9:62:1F:C4:C0:BE:FC:4B:5E:85:CC:A1:7C:18:A9 X509v3 Authority Key Identifier: keyid:90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:db:19:c9:27:b7:7b:45:28:86:ba:ef:ad:97:f4:ad:f8:b8: 33:19:cf:73:b4:60:fe:60:58:bc:67:17:6c:3a:43:57:ea:ec: a2:3a:98:33:e9:6a:23:1d:7e:28:45:fd:ee:c3:d0:ff:09:57: b9:4d:65:d5:17:bc:2a:bb:97:be:f2:48:6e:1f:f5:8a:3f:52: f0:21:b3:43:24:e0:61:e2:19:d2:1b:e7:5b:0a:59:6c:c0:30: 9b:25:3c:1d:3c:b8:ec:9a:97:a5:b5:d8:3e:cb:50:5c:bc:c5: 73:42:3c:2e:78:08:cb:7f:76:78:01:9a:d7:a4:75:e6:1e:b3: 1d:ea:67:9b:13:e2:80:54:fe:1f:7b:a9:bd:f8:b2:f9:5d:20: bb:e5:73:d7:05:ae:0c:6b:02:eb:98:b0:bd:1c:73:90:2a:6b: 40:a0:0f:82:87:1b:4a:62:54:d8:4f:b4:15:17:5b:d8:fa:11: e0:95:66:0d:97:ba:cb:a4:1c:8c:98:08:bb:a3:d7:c2:ae:50: d0:a0:a7:a8:cc:72:1c:c6:db:8f:72:25:a7:38:ab:45:85:23: f9:73:a6:85:91:8a:75:0f:29:de:cb:dd:10:36:71:90:bf:27: 04:72:4c:b5:66:a2:a9:ec:9a:bb:3f:c4:e6:1a:b1:93:2a:8a: 79:d1:29:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTmXEKxJWv5tSSkdlolfrjkE0O58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBDQzcyMDlDQUE4QTZDN0ZFRUMyMTlEQUU0OTdGN0FF RUY0MzM2NTAeFw0yNjEwMTkxOTQ5MDdaFw0yNjEwMjAyMDI2MDdaMDMxMTAvBgNV BAMTKEE1NDRDRjIwMTJBOTYyMUZDNEMwQkVGQzRCNUU4NUNDQTE3QzE4QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbOMxYfWA/VwLaiy2xuWLLUr3C GttpUf6dQaMNdw90FJ36RL4YVkjeDUJDx+UaHespwssf7PoHQdgffaUIsHI0X+GP 1heg1TuKCgqzADEBQymsQHZiUIbDjwhclq1AK0sQosuxmslDTA+iVdnbDEeCgf0S uftjxWxK4cjK+NDGONIbGwnjwLS6OIQt8V5jpKis7w+P+6fgmKSUG+Jnsm09w9DB BV617jsKKZYZemsAFLCjQ+RJUsLbQ33DKUiGxaumGe5T5jQS8+rxSSNyNExKontm yVY2zVAOfOFE/2bg9D9d2CwCCjysgdmUGRvsvpYuVBrivYy1kfPQFkeQJizjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpUTPIBKpYh/EwL78S16FzKF8GKkwHwYDVR0j BBgwFoAUkMxyCcqopsf+7CGdrkl/eu70M2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjEyYzEzOGMtMmUyNC00OWY1LThhZGEtMDAyN2NiYTdmMTc4LzAvOTBDQzcyMDlD QUE4QTZDN0ZFRUMyMTlEQUU0OTdGN0FFRUY0MzM2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MENDNzIwOUNBQThBNkM3RkVFQzIxOURBRTQ5N0Y3QUVFRjQz MzY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjEyYzEzOGMtMmUyNC00OWY1LThh ZGEtMDAyN2NiYTdmMTc4LzAvOTBDQzcyMDlDQUE4QTZDN0ZFRUMyMTlEQUU0OTdG N0FFRUY0MzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfbGcknt3tFKIa6762X9K34uDMZz3O0YP5g WLxnF2w6Q1fq7KI6mDPpaiMdfihF/e7D0P8JV7lNZdUXvCq7l77ySG4f9Yo/UvAh s0Mk4GHiGdIb51sKWWzAMJslPB08uOyal6W12D7LUFy8xXNCPC54CMt/dngBmtek deYesx3qZ5sT4oBU/h97qb34svldILvlc9cFrgxrAuuYsL0cc5Aqa0CgD4KHG0pi VNhPtBUXW9j6EeCVZg2XusukHIyYCLuj18KuUNCgp6jMchzG249yJac4q0WFI/lz poWRinUPKd7L3RA2cZC/JwRyTLVmoqnsmrs/xOYasZMqinnRKZs= -----END CERTIFICATE-----Generated at Tue Oct 20 01:09:42 2026 by rpki-client