
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft
File: 90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft (raw, json)
Hash identifier: ZGXjymVdnQUPg5SO3fZ+odOISmUATOl0CkF7vEUC5QY=
Subject key identifier: EC:DD:C5:5A:37:09:CD:C0:E0:D2:44:64:99:12:86:E6:A4:E8:5E:06
Authority key identifier: 90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D
Certificate issuer: /CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D
Certificate serial: 25B9047BC2CB459F453C89D02751C1CF0CC8ACA0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft
Manifest number: 6C
Signing time: Tue 21 Jul 2026 05:32:41 +0000
Manifest this update: Tue 21 Jul 2026 05:27:41 +0000
Manifest next update: Wed 22 Jul 2026 07:42:41 +0000
Files and hashes: 1: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: k5tpWx2NqoJhL6Gv4Q6AOH3uxzUVB7/CghrllRzLLUQ=)
2: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: BNrW0eQU53nT/ba5DR3gG5VeToq8WtIzwdZt0XrzHK8=)
3: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: uouUKGbUozmFnKgub/+5mqf8ILo68JfceNZ+JRrYL4g=)
4: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: ytetHbaOFcdooikcS2dP3RfK75XM1xqRpP+fXSjDKG0=)
5: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: dXDKfmvmczU9aYgLQYslTHLZ6G4+e/q+u9H8ndaerLU=)
6: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: FSyjqZtd8XDVrxqAKcbaFrMIwjpkZU6OHpA9ABCfhcY=)
7: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: KvOleZIfcn6EoZkKf6ZdFcLhmThnSWrW2/dXX/n7URA=)
8: 90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl (hash: ByL3hn+v2+7V9jit93p+Q8zENE+8t48+ec2j6jE7oEc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl
rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:b9:04:7b:c2:cb:45:9f:45:3c:89:d0:27:51:c1:cf:0c:c8:ac:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D
Validity
Not Before: Jul 21 05:27:41 2026 GMT
Not After : Jul 22 07:42:41 2026 GMT
Subject: CN=ECDDC55A3709CDC0E0D24464991286E6A4E85E06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:85:1c:df:a6:b0:ea:05:16:a5:9a:86:25:3b:
95:cd:5f:75:89:8b:22:dd:f8:80:7f:cc:b7:fb:c6:
a8:48:bd:9c:dd:14:ec:a5:2e:24:3c:47:ee:23:ab:
55:b0:29:52:8d:21:21:40:8b:6a:d1:11:60:4c:e5:
d1:4e:fa:9b:6f:27:fd:35:ee:11:fb:d7:1c:b4:7c:
44:31:75:10:b4:19:02:42:1d:80:67:6b:e7:e3:7f:
f8:72:a5:e0:84:2b:da:76:dc:9e:80:e2:88:3b:e1:
a2:4c:f6:49:bf:0b:0d:ba:da:c2:8a:8d:44:8e:c8:
f8:03:47:1f:19:b0:dd:15:4f:c5:11:b7:0c:ae:da:
21:88:0a:89:ef:7d:08:a1:bf:4c:80:50:e8:09:1a:
63:28:9a:60:dc:4f:ed:9d:70:8e:18:01:2d:61:a1:
cf:8c:8a:a4:f3:39:fd:9b:97:45:ce:ec:17:a3:93:
60:27:ef:47:b4:71:c6:6b:00:07:c8:3c:48:91:08:
fb:15:c8:f1:17:54:40:af:34:c5:5c:92:a9:65:4d:
21:59:df:b0:6d:1e:d7:14:82:1e:8c:96:64:3f:89:
35:f6:5c:61:a2:0a:9f:a1:c5:84:e3:0c:1e:76:96:
18:0c:2f:07:2e:43:76:0e:b6:b7:1a:c9:98:d5:7d:
b0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DD:C5:5A:37:09:CD:C0:E0:D2:44:64:99:12:86:E6:A4:E8:5E:06
X509v3 Authority Key Identifier:
keyid:90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0e:48:9f:81:b0:d1:3f:33:97:1d:0c:01:13:db:b7:43:f2:
fd:cf:56:cb:46:f3:59:8c:80:71:5e:fd:f2:5d:c7:49:ec:59:
7f:f0:9f:02:c7:02:26:88:13:15:0e:41:e8:c1:d7:77:77:98:
58:4a:95:2a:6f:2b:38:12:c6:d3:4c:30:37:be:f7:b4:a8:84:
61:67:a5:16:42:dd:23:2c:bf:6d:3d:ec:cc:7b:da:96:51:e3:
22:37:8f:ac:e5:f6:7f:f3:0d:5b:53:98:80:51:45:e0:42:b0:
56:66:2f:53:80:e6:d5:7a:85:2e:26:f3:e9:f2:60:0b:d0:9a:
23:59:e3:7f:54:a9:f7:f4:b0:2b:cc:30:4f:ea:80:87:53:e4:
82:df:10:5c:c4:70:b7:35:07:a6:36:d2:e8:77:0d:f4:e6:79:
73:48:04:88:00:39:07:3c:62:66:42:da:2f:63:77:db:b2:3d:
77:48:17:9d:56:9f:78:d3:59:d5:bc:ca:6a:29:f6:5e:30:72:
36:64:28:80:77:98:64:67:59:ea:40:8f:a3:1e:63:ea:be:5c:
bd:33:12:2f:41:34:5f:86:5c:ad:4b:4e:c7:c6:26:b6:e5:f8:
0c:15:cf:88:1f:ab:84:8e:73:99:b7:3c:dc:79:71:00:52:0e:
4f:be:eb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:43:07 2026 by rpki-client