$ rpki-client -vvf rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft File: 2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft (raw, json) Hash identifier: bMfZp7me4HcM/3Az9djvvzNn3ZnHsYQ/8cU231VxPTs= Subject key identifier: E4:FC:7A:52:26:46:8C:CF:C9:FD:76:77:F0:CD:20:87:86:E3:3E:BE Authority key identifier: 2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 Certificate issuer: /CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Certificate serial: 2D7786860E126092B4D19122DB7C536A3B0CBD9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 15:25:57 +0000 Manifest this update: Sun 19 Jul 2026 15:20:57 +0000 Manifest next update: Mon 20 Jul 2026 18:38:57 +0000 Files and hashes: 1: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: +Yvf7pOmzIGa62dYtF9IiIRwOM/GLeNEJw6+0hLCuFs=) 2: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: o8ATK3bD9zxeJufeZWJNK7oFuttO5EJXj2X9FF47zyA=) 3: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: mQrrkGIS8HoF4AiDSmw6SD2SG/T7/MXDAFnexE70y7o=) 4: 2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl (hash: 1iWwMMr5dMjxCrexidxwib+uLRQj4llWUXy4KPZ3c/E=) 5: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: Zn0CgMhZBE1Ox5HRkdKzvhOJuMe+bbXdGHM8Z1fRLu4=) 6: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: Sc3G90iBjlZbQp4eiRWZGBi7/nNefrAvOJorxw0BbBg=) 7: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: YxIG5gE82yucA04IL0UOvUpSplXnSvbMztHXZbePQI4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:77:86:86:0e:12:60:92:b4:d1:91:22:db:7c:53:6a:3b:0c:bd:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Validity Not Before: Jul 19 15:20:57 2026 GMT Not After : Jul 20 18:38:57 2026 GMT Subject: CN=E4FC7A5226468CCFC9FD7677F0CD208786E33EBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a2:8b:81:25:01:91:2c:32:9d:eb:75:b8:a6: 9d:9d:6c:cd:a0:e7:df:ed:03:63:ca:85:87:3a:7a: a2:38:fa:2c:3f:f0:e4:09:bf:a6:93:d6:0c:59:d1: 54:ef:ff:30:f6:b3:97:d9:46:dd:9d:32:9d:2c:b9: 2b:87:7d:e2:fb:5a:a1:7e:67:62:d6:98:f3:97:79: e4:ae:23:c4:08:51:34:70:54:e7:a3:60:95:c1:60: 82:ca:59:e5:d9:d0:af:50:3a:89:d5:0a:db:21:88: 07:bc:6d:95:00:c4:40:2b:11:b1:3d:1e:1c:49:7c: bd:e6:45:81:c1:21:81:3d:c7:91:6c:c5:60:f0:7f: f2:74:19:69:49:ff:f7:45:7d:cb:21:55:a2:19:27: ef:2d:f3:ce:ef:f9:4e:81:83:71:89:09:9a:77:c7: 7e:ad:35:c9:b3:89:15:e5:dd:14:c5:41:58:25:71: 01:eb:01:6a:a7:c4:1a:cf:39:4b:53:e6:5a:28:c4: 5d:91:d8:3b:09:8a:7f:bf:82:2c:6a:ee:ae:fd:49: 00:39:65:83:1f:80:77:a9:62:fe:ae:7d:48:66:6c: 53:92:46:0c:4d:d0:3c:48:92:90:08:08:b4:9e:7a: 13:77:15:a7:7f:76:d4:c2:b7:01:61:59:66:16:ca: 48:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FC:7A:52:26:46:8C:CF:C9:FD:76:77:F0:CD:20:87:86:E3:3E:BE X509v3 Authority Key Identifier: keyid:2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:46:c5:f0:b1:31:40:8c:dc:95:85:1b:b1:94:e0:0a:ed:bd: 88:40:3b:2d:84:5d:0c:3f:06:1b:5d:fb:4f:9e:47:7f:47:3a: 78:08:da:06:46:d1:60:c1:ce:6c:02:ed:81:b3:28:dd:50:bb: 45:a2:85:ef:68:66:0e:aa:40:1b:fa:6c:ef:10:ca:a0:dc:69: 07:9e:cf:5b:dc:2a:1b:aa:65:27:9f:12:08:20:1f:d4:ac:7f: 8a:bb:d1:66:58:cf:3c:33:00:c4:d7:18:bf:50:05:e3:6a:88: 4b:f1:26:0a:c3:5c:e0:2a:f2:ba:17:bb:49:c7:57:52:31:c1: cd:41:0b:fc:6c:8c:7f:4b:17:c7:61:54:00:81:f2:17:45:68: 8d:2b:9c:c0:79:34:37:bb:53:9e:2e:2f:63:68:c1:9e:d4:8f: b3:de:4e:1b:6a:38:f2:e1:c5:45:ed:3a:07:e7:a5:d4:58:d7: c2:5f:83:21:4b:c8:83:c1:6a:db:06:6a:54:d1:32:29:4f:9a: c4:13:be:13:2e:c4:1f:73:cc:29:d8:3d:04:3a:c2:a3:20:58: be:76:74:08:9e:54:f9:3d:95:ad:38:20:9f:47:da:e2:fb:71: 3d:51:09:37:ad:a6:2a:73:20:62:ca:29:93:15:7e:58:07:7c: e7:90:8f:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULXeGhg4SYJK00ZEi23xTajsMvZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlE MzBDNDYzNTAeFw0yNjA3MTkxNTIwNTdaFw0yNjA3MjAxODM4NTdaMDMxMTAvBgNV BAMTKEU0RkM3QTUyMjY0NjhDQ0ZDOUZENzY3N0YwQ0QyMDg3ODZFMzNFQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjoouBJQGRLDKd63W4pp2dbM2g 59/tA2PKhYc6eqI4+iw/8OQJv6aT1gxZ0VTv/zD2s5fZRt2dMp0suSuHfeL7WqF+ Z2LWmPOXeeSuI8QIUTRwVOejYJXBYILKWeXZ0K9QOonVCtshiAe8bZUAxEArEbE9 HhxJfL3mRYHBIYE9x5FsxWDwf/J0GWlJ//dFfcshVaIZJ+8t887v+U6Bg3GJCZp3 x36tNcmziRXl3RTFQVglcQHrAWqnxBrPOUtT5looxF2R2DsJin+/gixq7q79SQA5 ZYMfgHepYv6ufUhmbFOSRgxN0DxIkpAICLSeehN3Fad/dtTCtwFhWWYWykjPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Px6UiZGjM/J/XZ38M0gh4bjPr4wHwYDVR0j BBgwFoAULpDHQn/huQJV3YVW28nMadMMRjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTAzNmUwN2MtODI4My00M2QzLTkxNjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3 RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlEMzBDNDYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTkwQzc0MjdGRTFCOTAyNTVERDg1NTZEQkM5Q0M2OUQzMEM0 NjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUND NjlEMzBDNDYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdGxfCxMUCM3JWFG7GU4ArtvYhAOy2EXQw/ Bhtd+0+eR39HOngI2gZG0WDBzmwC7YGzKN1Qu0Wihe9oZg6qQBv6bO8QyqDcaQee z1vcKhuqZSefEgggH9Ssf4q70WZYzzwzAMTXGL9QBeNqiEvxJgrDXOAq8roXu0nH V1Ixwc1BC/xsjH9LF8dhVACB8hdFaI0rnMB5NDe7U54uL2NowZ7Uj7PeThtqOPLh xUXtOgfnpdRY18JfgyFLyIPBatsGalTRMilPmsQTvhMuxB9zzCnYPQQ6wqMgWL52 dAieVPk9la04IJ9H2uL7cT1RCTetpipzIGLKKZMVflgHfOeQjxs= -----END CERTIFICATE-----Generated at Sun Jul 19 23:01:49 2026 by rpki-client