$ rpki-client -vvf repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft File: 90508FF980097E19CEF65ED72A856616A6F690AB.mft (raw, json) Hash identifier: JchXwJLvc93zJB2XjtR82coZRBnOsz5u0Nn8qGAYTO4= Subject key identifier: 09:EA:8E:24:2F:FC:2C:E0:6F:26:3C:D2:CA:83:62:FD:EC:77:02:C1 Authority key identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB Certificate issuer: /CN=90508FF980097E19CEF65ED72A856616A6F690AB Certificate serial: 54E6AFB73323260F8F7C8F22F5D1ABBF7E9660A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft Manifest number: 0553 Signing time: Thu 26 Feb 2026 13:52:12 +0000 Manifest this update: Thu 26 Feb 2026 13:47:12 +0000 Manifest next update: Sun 01 Mar 2026 17:41:12 +0000 Files and hashes: 1: 3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (hash: JNjDlAZZhJPbXz9QnoPN2kXEdVorueRNiZ3y4BzRO+s=) 2: 3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (hash: NUlokuFe9GARtT8KTw9qoKUuu+MeiOKu86jOn++3TJ0=) 3: 3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (hash: 7pdp3iomZV1Sl4nuURLGWWHMiPLMkvx/Ece8HW9MQqg=) 4: 90508FF980097E19CEF65ED72A856616A6F690AB.crl (hash: Pag9LHA3yEjX7A0oIGEEnmfJovtPcDIMex4nY+41/eM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Mar 2026 11:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e6:af:b7:33:23:26:0f:8f:7c:8f:22:f5:d1:ab:bf:7e:96:60:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90508FF980097E19CEF65ED72A856616A6F690AB Validity Not Before: Feb 26 13:47:12 2026 GMT Not After : Mar 1 17:41:12 2026 GMT Subject: CN=09EA8E242FFC2CE06F263CD2CA8362FDEC7702C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1f:92:ee:1e:62:32:10:a8:32:0c:26:80:94: 0a:31:fe:9c:25:92:ed:1e:af:72:93:e6:45:3e:aa: 5b:10:65:a9:4f:ac:70:24:ac:ff:fe:bc:c7:7d:23: b7:58:0b:1b:e1:cc:4a:86:b2:97:72:de:57:75:92: a5:13:89:8a:07:22:11:37:e9:7f:c2:2a:dc:7e:6f: 5f:8d:dd:74:93:be:2a:60:47:95:0a:eb:59:4c:68: 0e:21:91:43:7b:95:8d:01:41:94:6e:fd:bf:a6:be: 20:27:e2:05:0f:51:f1:8f:40:80:d1:03:76:dc:16: 2b:61:d9:4e:bf:0f:08:5f:de:e8:d7:cb:3e:69:9f: a7:ab:2f:5e:c6:90:a5:66:d6:f5:15:30:16:2e:72: 44:a6:d8:4e:ce:2a:d6:82:9d:34:ef:04:69:0a:0d: 87:46:fb:3c:b0:23:ee:28:88:e5:e9:f0:57:e3:14: 48:8f:43:44:fa:0a:1c:11:27:9f:ab:0c:3d:d7:82: 62:56:9a:cd:f2:3d:57:a3:6c:a6:1e:7a:fd:47:5a: 03:2c:41:6b:ff:e8:9f:74:cd:34:e7:46:ae:a9:ac: 66:21:00:dd:a3:94:a8:0b:3c:92:98:4b:28:83:22: e8:94:37:e2:44:15:7e:11:c8:86:23:08:ca:5e:79: 06:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EA:8E:24:2F:FC:2C:E0:6F:26:3C:D2:CA:83:62:FD:EC:77:02:C1 X509v3 Authority Key Identifier: keyid:90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:2e:4f:76:3b:ef:49:e9:e6:43:61:50:d0:4b:00:55:26:3e: bd:e5:e0:6d:12:af:c5:a1:78:96:b3:8a:60:96:1f:c5:20:d4: b4:21:dd:33:23:2d:ae:c8:f1:56:40:58:fb:b4:0c:df:4e:10: 31:49:fb:f0:14:13:fa:c0:44:57:d0:93:c4:c3:92:ed:a7:06: 71:24:f7:45:36:e6:e0:6b:c5:06:f5:38:f3:f2:09:a4:83:77: 04:1c:14:91:6b:c1:a8:87:48:81:b3:5d:6f:19:4a:16:45:ff: 7d:51:9d:e5:00:c4:a3:ef:49:ed:90:43:bf:0c:92:99:1b:9e: 97:63:45:0d:05:53:9d:d3:38:3e:ee:ca:0a:52:31:53:39:32: 6e:64:f1:29:0e:f0:ce:8d:88:2e:ec:dc:9f:96:ba:40:14:8f: 51:e0:cb:30:cb:f9:52:ee:99:70:4b:bb:17:9a:28:4c:05:cd: 8a:31:00:7b:6c:01:16:89:a1:fb:40:d6:b7:f3:44:3e:da:3f: 81:e8:d4:24:03:65:ec:9c:e7:5c:d5:e3:dd:6c:82:c5:80:24: 41:3e:b2:07:42:5c:d9:26:66:cb:cb:f6:d4:f7:40:b9:4d:e5: ab:1d:a1:ca:43:50:19:f3:d9:35:de:82:ac:8d:22:cc:28:7c: fd:ae:7e:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVOavtzMjJg+PfI8i9dGrv36WYKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZB NkY2OTBBQjAeFw0yNjAyMjYxMzQ3MTJaFw0yNjAzMDExNzQxMTJaMDMxMTAvBgNV BAMTKDA5RUE4RTI0MkZGQzJDRTA2RjI2M0NEMkNBODM2MkZERUM3NzAyQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBH5LuHmIyEKgyDCaAlAox/pwl ku0er3KT5kU+qlsQZalPrHAkrP/+vMd9I7dYCxvhzEqGspdy3ld1kqUTiYoHIhE3 6X/CKtx+b1+N3XSTvipgR5UK61lMaA4hkUN7lY0BQZRu/b+mviAn4gUPUfGPQIDR A3bcFith2U6/Dwhf3ujXyz5pn6erL17GkKVm1vUVMBYuckSm2E7OKtaCnTTvBGkK DYdG+zywI+4oiOXp8FfjFEiPQ0T6ChwRJ5+rDD3XgmJWms3yPVejbKYeev1HWgMs QWv/6J90zTTnRq6prGYhAN2jlKgLPJKYSyiDIuiUN+JEFX4RyIYjCMpeeQalAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCeqOJC/8LOBvJjzSyoNi/ex3AsEwHwYDVR0j BBgwFoAUkFCP+YAJfhnO9l7XKoVmFqb2kKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODgzZTNiZS01N2UyLTQxMjUtYTBjNS05YTllYTUwMWJmMDUvMC85MDUwOEZGOTgw MDk3RTE5Q0VGNjVFRDcyQTg1NjYxNkE2RjY5MEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZBNkY2 OTBBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg4M2UzYmUtNTdlMi00MTI1LWEw YzUtOWE5ZWE1MDFiZjA1LzAvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2 MTZBNkY2OTBBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMuT3Y770np5kNhUNBLAFUmPr3l4G0Sr8Wh eJazimCWH8Ug1LQh3TMjLa7I8VZAWPu0DN9OEDFJ+/AUE/rARFfQk8TDku2nBnEk 90U25uBrxQb1OPPyCaSDdwQcFJFrwaiHSIGzXW8ZShZF/31RneUAxKPvSe2QQ78M kpkbnpdjRQ0FU53TOD7uygpSMVM5Mm5k8SkO8M6NiC7s3J+WukAUj1HgyzDL+VLu mXBLuxeaKEwFzYoxAHtsARaJoftA1rfzRD7aP4Ho1CQDZeyc51zV491sgsWAJEE+ sgdCXNkmZsvL9tT3QLlN5asdocpDUBnz2TXegqyNIswofP2ufkU= -----END CERTIFICATE-----Generated at Thu Feb 26 16:57:55 2026 by rpki-client