$ rpki-client -vvf rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft File: 90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft (raw, json) Hash identifier: xW0wT3VfWRNrZSKt9mO+L0mgSJN/FzxW2sLtoaDQMyk= Subject key identifier: 84:69:A7:43:AB:04:80:58:2B:90:DB:80:06:10:E7:3D:52:19:A0:73 Authority key identifier: 90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D Certificate issuer: /CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D Certificate serial: 3FBE9BF65D3B8D4177B94C818FC5B0E755E9FA36 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 07:59:52 +0000 Manifest this update: Tue 02 Jun 2026 07:54:52 +0000 Manifest next update: Wed 03 Jun 2026 09:39:52 +0000 Files and hashes: 1: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: dXDKfmvmczU9aYgLQYslTHLZ6G4+e/q+u9H8ndaerLU=) 2: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: BNrW0eQU53nT/ba5DR3gG5VeToq8WtIzwdZt0XrzHK8=) 3: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: ytetHbaOFcdooikcS2dP3RfK75XM1xqRpP+fXSjDKG0=) 4: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: uouUKGbUozmFnKgub/+5mqf8ILo68JfceNZ+JRrYL4g=) 5: 90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl (hash: Wz7bFRs05TK2oXapqLzcDCe0UjQYcC3jKsQn93pYmfo=) 6: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: FSyjqZtd8XDVrxqAKcbaFrMIwjpkZU6OHpA9ABCfhcY=) 7: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: k5tpWx2NqoJhL6Gv4Q6AOH3uxzUVB7/CghrllRzLLUQ=) 8: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: KvOleZIfcn6EoZkKf6ZdFcLhmThnSWrW2/dXX/n7URA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 09:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:be:9b:f6:5d:3b:8d:41:77:b9:4c:81:8f:c5:b0:e7:55:e9:fa:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D Validity Not Before: Jun 2 07:54:52 2026 GMT Not After : Jun 3 09:39:52 2026 GMT Subject: CN=8469A743AB0480582B90DB800610E73D5219A073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f8:13:8b:4d:10:6c:d0:14:67:66:78:e4:c5: 62:3e:a1:0e:f4:9c:d2:e4:81:6b:3f:34:20:9e:b8: e4:5b:a5:cf:9e:8d:0e:f2:06:7a:9b:cf:b7:66:61: 7e:03:65:a7:4e:7e:6f:12:d2:19:06:04:d1:c4:0e: 58:07:d3:17:dd:d7:d0:62:c8:2c:71:e9:0f:7d:a0: 20:8a:1c:0c:2c:57:c0:d5:27:5f:e1:f3:97:2e:20: ca:f6:76:9b:99:b7:99:d7:22:99:09:9e:fd:d3:fe: 82:72:ba:32:3c:1b:30:0e:80:7b:aa:4b:7f:27:15: a0:ad:43:02:74:21:15:76:98:3d:71:0a:44:2d:81: d6:a1:43:d4:7e:29:66:d4:30:cf:3b:1e:6c:83:d7: ad:d9:4d:d3:b5:11:7d:64:29:58:a5:91:31:e5:8c: 58:bf:7f:c4:c5:05:ea:71:44:bb:9c:f8:41:8b:05: 9b:c8:93:83:87:d7:1b:c0:f4:eb:b9:47:64:61:3c: 7c:38:40:65:ef:48:a4:c3:cf:77:1c:03:65:f6:5e: 69:53:ff:6b:ac:b6:c4:02:24:56:a8:b1:5d:62:1f: b5:b5:b1:68:51:6d:ae:6c:7f:e1:da:bf:0e:3c:72: 91:53:c2:12:ae:03:1d:3e:31:20:47:83:d5:94:a8: f7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:69:A7:43:AB:04:80:58:2B:90:DB:80:06:10:E7:3D:52:19:A0:73 X509v3 Authority Key Identifier: keyid:90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:f5:a4:19:a2:bf:c3:a3:0e:ba:45:81:14:54:27:28:7e:ba: dd:33:f2:24:ef:81:87:f5:0e:9a:5e:ae:59:b4:c7:ee:19:c2: fb:a8:77:9b:55:da:8f:6e:b0:f0:57:ab:99:8c:99:84:92:4b: a3:24:1b:c6:76:4b:5d:f4:81:57:0f:bc:f5:4b:e1:a8:14:30: ad:8c:6f:0d:c0:02:9e:29:c9:c0:bb:20:4c:09:a9:5f:b8:24: ab:d1:85:5c:0b:e3:24:e1:c8:ad:6a:51:61:d6:45:a9:55:de: f6:4e:d3:75:5f:8d:74:dc:d2:a4:8f:ea:9e:a9:d7:cd:72:45: a6:3a:68:21:b2:fd:08:28:3c:70:c0:ac:7e:83:3c:2d:20:f2: 98:33:7d:eb:d4:65:2d:e5:63:cf:5e:03:ed:5b:79:30:f2:7a: 05:7c:bf:8d:f9:5e:60:63:af:cd:6f:9a:bb:84:d9:cd:ad:e3: 04:10:ad:de:44:f2:b3:55:1c:a3:72:7a:ef:29:3e:72:75:ab: 81:4d:bd:e8:b1:61:0c:d0:ad:63:48:12:ff:32:ae:e6:fd:8d: fa:bd:1c:e0:63:aa:e6:9b:c4:df:e0:e6:f4:6d:00:3c:31:33: 41:0a:83:b0:da:32:db:20:2d:d1:ba:38:d2:2d:ce:6d:1a:7d: 17:9a:2a:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP76b9l07jUF3uUyBj8Ww51Xp+jYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBDM0JDNjZBQTc0NUM5RUE4REE5RDgxNUFEN0JGNEJG MkRFNUU1RDAeFw0yNjA2MDIwNzU0NTJaFw0yNjA2MDMwOTM5NTJaMDMxMTAvBgNV BAMTKDg0NjlBNzQzQUIwNDgwNTgyQjkwREI4MDA2MTBFNzNENTIxOUEwNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb+BOLTRBs0BRnZnjkxWI+oQ70 nNLkgWs/NCCeuORbpc+ejQ7yBnqbz7dmYX4DZadOfm8S0hkGBNHEDlgH0xfd19Bi yCxx6Q99oCCKHAwsV8DVJ1/h85cuIMr2dpuZt5nXIpkJnv3T/oJyujI8GzAOgHuq S38nFaCtQwJ0IRV2mD1xCkQtgdahQ9R+KWbUMM87HmyD163ZTdO1EX1kKVilkTHl jFi/f8TFBepxRLuc+EGLBZvIk4OH1xvA9Ou5R2RhPHw4QGXvSKTDz3ccA2X2XmlT /2ustsQCJFaosV1iH7W1sWhRba5sf+Havw48cpFTwhKuAx0+MSBHg9WUqPe3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhGmnQ6sEgFgrkNuABhDnPVIZoHMwHwYDVR0j BBgwFoAUkMO8Zqp0XJ6o2p2BWte/S/LeXl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjZiNWFlMWUtYmU2Ni00YTMwLWE5NDgtN2Q0NzhjMjJlYTJiLzAvOTBDM0JDNjZB QTc0NUM5RUE4REE5RDgxNUFEN0JGNEJGMkRFNUU1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEMzQkM2NkFBNzQ1QzlFQThEQTlEODE1QUQ3QkY0QkYyREU1 RTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjZiNWFlMWUtYmU2Ni00YTMwLWE5 NDgtN2Q0NzhjMjJlYTJiLzAvOTBDM0JDNjZBQTc0NUM5RUE4REE5RDgxNUFEN0JG NEJGMkRFNUU1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADX1pBmiv8OjDrpFgRRUJyh+ut0z8iTvgYf1 Dpperlm0x+4Zwvuod5tV2o9usPBXq5mMmYSSS6MkG8Z2S130gVcPvPVL4agUMK2M bw3AAp4pycC7IEwJqV+4JKvRhVwL4yThyK1qUWHWRalV3vZO03VfjXTc0qSP6p6p 181yRaY6aCGy/QgoPHDArH6DPC0g8pgzfevUZS3lY89eA+1beTDyegV8v435XmBj r81vmruE2c2t4wQQrd5E8rNVHKNyeu8pPnJ1q4FNveixYQzQrWNIEv8yrub9jfq9 HOBjquabxN/g5vRtADwxM0EKg7DaMtsgLdG6ONItzm0afReaKsg= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:05 2026 by rpki-client