
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft
File: 90B9450AA39B9CD9586085EFA9EF7887EE613759.mft (raw, json)
Hash identifier: NKMQcGwOAQJ+zYW3cBCmb+FgUaWw+fmgZmk+HExlIUg=
Subject key identifier: 99:E4:AF:58:80:28:F4:F8:B2:FC:43:06:A5:6C:72:60:B5:73:BD:9F
Authority key identifier: 90:B9:45:0A:A3:9B:9C:D9:58:60:85:EF:A9:EF:78:87:EE:61:37:59
Certificate issuer: /CN=90B9450AA39B9CD9586085EFA9EF7887EE613759
Certificate serial: 147727CA8A3F18A9CFD0E393D956E7748AAF7E95
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 04:02:43 +0000
Manifest this update: Thu 03 Sep 2026 03:57:43 +0000
Manifest next update: Fri 04 Sep 2026 07:28:43 +0000
Files and hashes: 1: 3130332e3135332e38332e302f32342d3234203d3e20313439373034.roa (hash: i2oBSFPKpVqeh9es/WJHy0i/TdHRHJL5ycGj+adtwXc=)
2: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: J0+iHCZ4UXpTu9FbQSO8iPWMu0E+Lc3DRVGjSSCxGxw=)
3: 90B9450AA39B9CD9586085EFA9EF7887EE613759.crl (hash: Cb6PDEnpABqu0hJsuz+6ZodFOYIP25Xx5vxdWB7eLc4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.crl
rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 07:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:77:27:ca:8a:3f:18:a9:cf:d0:e3:93:d9:56:e7:74:8a:af:7e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90B9450AA39B9CD9586085EFA9EF7887EE613759
Validity
Not Before: Sep 3 03:57:43 2026 GMT
Not After : Sep 4 07:28:43 2026 GMT
Subject: CN=99E4AF588028F4F8B2FC4306A56C7260B573BD9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:f7:e4:3c:c8:58:c3:d5:5d:d1:ac:18:da:
ec:dc:f0:a2:0b:3f:62:43:83:ca:d6:de:0e:fc:88:
ba:f9:00:93:2e:e5:bd:51:c9:06:89:9c:da:78:c3:
46:11:9b:6e:e3:98:a3:79:e9:6e:28:48:98:31:c2:
0d:cf:14:90:46:bf:ed:6b:50:18:5f:83:d4:04:5e:
fa:02:46:ad:e8:48:81:12:99:2e:8a:38:8e:a8:72:
27:21:c8:85:9e:61:7e:66:81:b9:2f:d2:b4:e0:0b:
a1:6b:e1:a7:c8:60:88:8a:02:fa:e0:8c:8a:b7:30:
22:37:4e:08:7f:f2:b8:52:39:85:01:10:63:a8:0f:
a9:1a:04:a4:95:7f:cb:91:00:b2:f0:7d:e9:81:fd:
e9:b7:a8:14:d2:e0:97:48:3b:c9:27:fa:13:c9:9b:
43:50:ed:e6:73:d3:5c:e7:e9:3d:04:53:d8:fd:74:
a7:cb:77:54:cc:d2:87:1c:ea:4b:ea:ca:a6:03:ef:
eb:e0:26:2e:d2:4a:a2:0e:17:17:11:67:ba:a5:67:
91:01:8a:2a:0c:fa:42:10:bc:e8:b6:5c:49:d6:06:
b8:26:51:21:57:f1:62:b7:27:a1:74:d8:b9:49:9e:
08:4a:0e:19:e4:12:37:f8:a3:f6:a5:8a:af:03:98:
11:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E4:AF:58:80:28:F4:F8:B2:FC:43:06:A5:6C:72:60:B5:73:BD:9F
X509v3 Authority Key Identifier:
keyid:90:B9:45:0A:A3:9B:9C:D9:58:60:85:EF:A9:EF:78:87:EE:61:37:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b3:3c:cb:5d:c0:30:62:a0:0d:b3:d1:0e:e8:25:fc:67:98:
bf:98:5d:01:76:33:98:9c:8e:20:38:9a:08:6b:47:b7:96:37:
89:09:dd:18:71:f6:ee:24:89:25:70:a3:fd:97:a7:eb:09:52:
b2:0c:7e:b4:70:36:e7:8a:f5:f7:c6:cc:f0:ae:6b:f0:48:d1:
22:c6:f3:6d:12:54:2b:26:e5:8f:4a:f7:ea:78:1d:97:c4:9f:
03:3c:3b:50:32:f0:20:8e:b5:85:3b:77:db:19:43:ab:e2:37:
0c:81:c7:fe:dc:61:8a:7d:12:9d:ad:30:59:db:8a:b8:08:9b:
c1:c1:73:30:23:61:51:63:4d:a9:fb:7c:26:b5:c7:39:a8:db:
21:63:45:85:5c:3d:77:a7:d1:a7:6c:42:09:b2:ca:85:ec:45:
22:dc:a8:4c:3e:91:aa:bf:16:6e:b7:3e:b0:d7:3b:9b:1e:17:
11:ba:ae:7b:cb:80:2b:5a:72:cb:35:b5:b3:3d:4f:43:77:53:
21:c0:86:c2:8b:8e:78:1d:14:2a:0d:93:7c:5d:79:82:de:98:
48:ef:00:0a:85:0a:dd:57:e5:49:4b:72:e6:68:c7:12:6e:29:
29:0b:ac:0c:f8:87:7c:d5:87:14:b9:64:3f:8b:69:48:a0:04:
c8:94:34:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 16:21:26 2026 by rpki-client