$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft File: 2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft (raw, json) Hash identifier: 5D+iDlQiAw0yjGZfULRfRGKQEi206eVUyipISg6jzuA= Subject key identifier: 93:22:6A:28:47:70:C8:95:03:C5:E5:82:B4:91:B7:0D:36:A0:90:82 Authority key identifier: 2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 Certificate issuer: /CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Certificate serial: 16DE482D8C380D2C348478230231DF2FD4DC82D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 21:24:09 +0000 Manifest this update: Wed 02 Sep 2026 21:19:09 +0000 Manifest next update: Thu 03 Sep 2026 21:54:09 +0000 Files and hashes: 1: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: o8ATK3bD9zxeJufeZWJNK7oFuttO5EJXj2X9FF47zyA=) 2: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: YxIG5gE82yucA04IL0UOvUpSplXnSvbMztHXZbePQI4=) 3: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: +Yvf7pOmzIGa62dYtF9IiIRwOM/GLeNEJw6+0hLCuFs=) 4: 2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl (hash: 19XFY+gGgU4W1QwdU9d6j5IWDQCIh7YAar2MqwpcFxs=) 5: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: mQrrkGIS8HoF4AiDSmw6SD2SG/T7/MXDAFnexE70y7o=) 6: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: Sc3G90iBjlZbQp4eiRWZGBi7/nNefrAvOJorxw0BbBg=) 7: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: Zn0CgMhZBE1Ox5HRkdKzvhOJuMe+bbXdGHM8Z1fRLu4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:de:48:2d:8c:38:0d:2c:34:84:78:23:02:31:df:2f:d4:dc:82:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Validity Not Before: Sep 2 21:19:09 2026 GMT Not After : Sep 3 21:54:09 2026 GMT Subject: CN=93226A284770C89503C5E582B491B70D36A09082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b1:cb:fd:bf:41:5e:8d:9f:15:02:c7:16:2a: 53:9d:3d:58:5d:14:c2:cd:1a:fa:cf:8c:39:d1:ad: 68:a8:aa:9b:35:5e:21:90:fa:ab:0d:42:54:2f:e5: 05:b9:60:c6:7e:b8:db:03:47:2c:58:0c:f1:29:56: d2:2e:d0:cd:bb:7b:5c:25:b3:e4:70:2b:e2:6d:11: 9b:22:04:c8:dd:62:97:c5:fa:20:5f:c8:ed:fd:b7: d7:83:33:98:fe:92:12:7c:63:60:46:a1:a8:d8:81: 34:37:03:80:40:d9:e7:c7:d7:de:6b:78:f6:d4:07: fd:f7:a7:20:3e:f6:b5:6e:39:f7:99:fa:d2:a4:e3: c5:88:1b:3f:e7:36:9d:74:79:40:ec:d8:59:94:94: 3a:b3:fb:94:52:66:4a:7f:3d:5d:6f:7c:e5:03:ae: cd:19:ca:85:98:ab:71:a2:7a:cf:d6:fa:11:9f:bd: 6a:0f:dc:ac:77:0c:46:31:3d:fa:cc:4f:44:ae:31: aa:e0:7c:43:cf:80:90:6a:c3:32:c4:ec:db:3f:ea: 94:08:9d:98:9d:90:39:b1:1f:3f:27:bf:ae:e1:24: e9:0e:68:9d:23:5f:b0:26:ef:2f:89:1b:e8:db:bd: b9:4e:36:88:65:d1:a3:ee:6f:4b:19:05:bd:ad:20: d2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:22:6A:28:47:70:C8:95:03:C5:E5:82:B4:91:B7:0D:36:A0:90:82 X509v3 Authority Key Identifier: keyid:2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:8d:8b:08:4f:ae:7d:21:d5:4a:26:f4:e3:4a:7c:0f:d7:24: 33:d2:9b:09:5f:3b:6c:e8:0b:31:d4:10:58:e2:12:ad:f6:4e: 54:00:6b:b5:71:82:5f:2b:41:4a:5f:87:b2:52:54:67:24:11: ce:d8:e7:3b:ae:05:5e:df:01:7f:e0:cc:fc:0d:eb:e9:3e:84: 56:28:6b:de:37:27:6a:45:d2:be:33:1c:09:23:3c:38:c7:21: 72:9f:58:47:37:9f:aa:b4:e9:07:4e:97:b2:a0:a8:eb:a7:d2: 14:3c:8b:f5:be:7e:97:05:82:c4:ac:4d:b8:63:06:f9:89:f5: b0:ec:19:ba:70:cf:cf:7b:0e:38:8b:d6:da:62:2a:8f:10:de: 3f:cc:03:db:92:63:29:12:1b:19:73:83:75:3b:47:2a:9f:73: 88:ab:c5:18:18:1c:00:f9:46:56:1a:cf:b7:93:e5:3a:ca:ce: a3:3e:e0:02:f6:06:e8:16:8a:5d:36:58:93:81:62:43:ee:79: 42:76:9a:5d:05:90:be:49:c9:ba:e5:20:4a:de:8a:7e:fd:1e: 87:c5:1e:fb:42:33:13:5b:c4:c6:b3:72:83:06:4c:db:ce:72: f2:78:90:c8:ed:24:23:db:1d:1f:d4:5b:7a:25:19:a8:fc:d2: 25:44:53:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFt5ILYw4DSw0hHgjAjHfL9TcgtAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlE MzBDNDYzNTAeFw0yNjA5MDIyMTE5MDlaFw0yNjA5MDMyMTU0MDlaMDMxMTAvBgNV BAMTKDkzMjI2QTI4NDc3MEM4OTUwM0M1RTU4MkI0OTFCNzBEMzZBMDkwODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdscv9v0FejZ8VAscWKlOdPVhd FMLNGvrPjDnRrWioqps1XiGQ+qsNQlQv5QW5YMZ+uNsDRyxYDPEpVtIu0M27e1wl s+RwK+JtEZsiBMjdYpfF+iBfyO39t9eDM5j+khJ8Y2BGoajYgTQ3A4BA2efH195r ePbUB/33pyA+9rVuOfeZ+tKk48WIGz/nNp10eUDs2FmUlDqz+5RSZkp/PV1vfOUD rs0ZyoWYq3Gies/W+hGfvWoP3Kx3DEYxPfrMT0SuMargfEPPgJBqwzLE7Ns/6pQI nZidkDmxHz8nv67hJOkOaJ0jX7Am7y+JG+jbvblONohl0aPub0sZBb2tINKfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkyJqKEdwyJUDxeWCtJG3DTagkIIwHwYDVR0j BBgwFoAULpDHQn/huQJV3YVW28nMadMMRjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTAzNmUwN2MtODI4My00M2QzLTkxNjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3 RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlEMzBDNDYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTkwQzc0MjdGRTFCOTAyNTVERDg1NTZEQkM5Q0M2OUQzMEM0 NjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUND NjlEMzBDNDYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyNiwhPrn0h1Uom9ONKfA/XJDPSmwlfO2zo CzHUEFjiEq32TlQAa7Vxgl8rQUpfh7JSVGckEc7Y5zuuBV7fAX/gzPwN6+k+hFYo a943J2pF0r4zHAkjPDjHIXKfWEc3n6q06QdOl7KgqOun0hQ8i/W+fpcFgsSsTbhj BvmJ9bDsGbpwz897DjiL1tpiKo8Q3j/MA9uSYykSGxlzg3U7Ryqfc4irxRgYHAD5 RlYaz7eT5TrKzqM+4AL2BugWil02WJOBYkPueUJ2ml0FkL5JybrlIErein79HofF HvtCMxNbxMazcoMGTNvOcvJ4kMjtJCPbHR/UW3olGaj80iVEU9U= -----END CERTIFICATE-----Generated at Thu Sep 3 05:57:18 2026 by rpki-client