
$ rpki-client -vvf repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft
File: 90508FF980097E19CEF65ED72A856616A6F690AB.mft (raw, json)
Hash identifier: UGbRzaaVAlEuw5zOd20CcfMIlFfjKrAvoZmAAlDiLmQ=
Subject key identifier: 8D:D4:42:DB:D6:F0:35:4B:09:38:A5:2E:D5:BB:3C:F4:6F:97:C9:D1
Authority key identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB
Certificate issuer: /CN=90508FF980097E19CEF65ED72A856616A6F690AB
Certificate serial: 195C1AF2F6F6A6DCE0CF55972B5D959BA524E5F2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft
Manifest number: 0567
Signing time: Mon 13 Apr 2026 12:22:16 +0000
Manifest this update: Mon 13 Apr 2026 12:17:16 +0000
Manifest next update: Thu 16 Apr 2026 17:10:16 +0000
Files and hashes: 1: 3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (hash: JNjDlAZZhJPbXz9QnoPN2kXEdVorueRNiZ3y4BzRO+s=)
2: 3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (hash: NUlokuFe9GARtT8KTw9qoKUuu+MeiOKu86jOn++3TJ0=)
3: 90508FF980097E19CEF65ED72A856616A6F690AB.crl (hash: QjWVzNkub9vS1t4Zlsxh9r8MMaPltdfPFWOgo2UBvLg=)
4: 3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (hash: 7pdp3iomZV1Sl4nuURLGWWHMiPLMkvx/Ece8HW9MQqg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl
rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 16 Apr 2026 17:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:5c:1a:f2:f6:f6:a6:dc:e0:cf:55:97:2b:5d:95:9b:a5:24:e5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90508FF980097E19CEF65ED72A856616A6F690AB
Validity
Not Before: Apr 13 12:17:16 2026 GMT
Not After : Apr 16 17:10:16 2026 GMT
Subject: CN=8DD442DBD6F0354B0938A52ED5BB3CF46F97C9D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8e:f4:43:f4:7c:ab:cd:e0:28:01:75:76:57:
a8:cd:90:f6:ef:f2:7b:ea:cf:a4:32:98:38:68:6e:
ef:90:42:89:3e:6b:5c:b8:70:56:3c:33:55:ca:40:
8b:df:ab:11:a6:c1:e5:71:fd:a6:46:f9:92:de:a7:
61:32:6e:9c:e1:ff:ff:1c:7d:4a:b2:ae:28:a7:20:
03:e3:89:57:e1:ca:c0:e4:c8:b1:dd:0a:e0:94:5c:
3e:ff:c8:48:69:c8:9a:5d:a5:1d:ac:ab:57:ce:e8:
41:12:e9:5d:02:93:29:2e:57:7e:39:d2:05:03:16:
1b:b9:07:3e:ac:3f:a6:40:dd:86:2b:4b:ae:0f:a3:
d6:26:2f:ce:b9:07:a7:2b:97:a1:08:76:93:4f:39:
5f:3f:88:e9:bb:d7:a6:e0:1a:75:19:c1:59:8d:b4:
60:e5:59:74:6f:e1:6b:75:ea:2b:7a:89:f0:05:a2:
10:6b:c7:76:24:f0:b8:ce:71:b4:d1:9e:d7:00:b5:
fa:34:5a:c9:c0:7c:fa:db:84:cb:8e:72:7b:f0:53:
b3:06:58:f0:6b:a6:e3:17:a6:57:03:e2:bb:8c:20:
6b:17:5c:9e:b7:a0:46:1c:d2:ce:ac:8f:0c:53:b9:
e7:c2:c3:2e:2a:13:d8:15:1d:d5:c0:4b:ed:5f:02:
25:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D4:42:DB:D6:F0:35:4B:09:38:A5:2E:D5:BB:3C:F4:6F:97:C9:D1
X509v3 Authority Key Identifier:
keyid:90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4e:f4:98:21:45:4b:15:f8:1d:7d:65:65:2c:86:53:51:b6:
30:68:ad:57:ae:02:50:17:ac:4f:66:f0:72:8f:31:76:90:91:
f7:14:af:76:de:a7:c7:9f:f0:be:07:8a:88:15:c0:70:f0:6f:
75:b5:d5:71:26:e8:db:03:b6:0a:34:88:fc:b2:ee:7f:90:f5:
f3:cb:77:af:bc:9c:7c:7a:06:7a:ef:6b:e9:ba:7d:e4:f4:bb:
62:19:c3:82:cc:dd:db:31:67:2b:09:80:fa:93:bb:5e:20:6d:
fc:3e:49:2c:4b:63:e3:42:fc:aa:dc:cc:0f:37:d2:1e:30:24:
58:db:4d:f2:de:93:c5:95:cb:3b:75:c0:f4:7b:a0:75:84:da:
e4:8c:66:8d:ee:d8:52:1f:58:a0:83:55:71:2f:da:85:44:b7:
17:29:52:4c:da:ae:fc:c5:8a:9e:26:1d:9b:a6:c1:c2:9d:d4:
f6:67:3d:52:f3:26:f4:92:1c:75:80:08:fc:8d:80:a1:c5:44:
71:40:8e:b8:01:c2:07:67:b6:db:3e:9b:fb:80:e9:8c:5b:e1:
4b:da:58:fe:31:6c:9b:18:04:b7:7a:9b:eb:ba:35:8f:8a:48:
10:4a:7d:56:6c:7b:06:46:05:ab:68:66:ba:14:d5:8b:52:a2:
ea:23:0a:97
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGVwa8vb2ptzgz1WXK12Vm6Uk5fIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZB
NkY2OTBBQjAeFw0yNjA0MTMxMjE3MTZaFw0yNjA0MTYxNzEwMTZaMDMxMTAvBgNV
BAMTKDhERDQ0MkRCRDZGMDM1NEIwOTM4QTUyRUQ1QkIzQ0Y0NkY5N0M5RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnjvRD9HyrzeAoAXV2V6jNkPbv
8nvqz6QymDhobu+QQok+a1y4cFY8M1XKQIvfqxGmweVx/aZG+ZLep2Eybpzh//8c
fUqyriinIAPjiVfhysDkyLHdCuCUXD7/yEhpyJpdpR2sq1fO6EES6V0CkykuV345
0gUDFhu5Bz6sP6ZA3YYrS64Po9YmL865B6crl6EIdpNPOV8/iOm716bgGnUZwVmN
tGDlWXRv4Wt16it6ifAFohBrx3Yk8LjOcbTRntcAtfo0WsnAfPrbhMuOcnvwU7MG
WPBrpuMXplcD4ruMIGsXXJ63oEYc0s6sjwxTuefCwy4qE9gVHdXAS+1fAiUDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjdRC29bwNUsJOKUu1bs89G+XydEwHwYDVR0j
BBgwFoAUkFCP+YAJfhnO9l7XKoVmFqb2kKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ODgzZTNiZS01N2UyLTQxMjUtYTBjNS05YTllYTUwMWJmMDUvMC85MDUwOEZGOTgw
MDk3RTE5Q0VGNjVFRDcyQTg1NjYxNkE2RjY5MEFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZBNkY2
OTBBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg4M2UzYmUtNTdlMi00MTI1LWEw
YzUtOWE5ZWE1MDFiZjA1LzAvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2
MTZBNkY2OTBBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH1O9JghRUsV+B19ZWUshlNRtjBorVeuAlAX
rE9m8HKPMXaQkfcUr3bep8ef8L4HiogVwHDwb3W11XEm6NsDtgo0iPyy7n+Q9fPL
d6+8nHx6Bnrva+m6feT0u2IZw4LM3dsxZysJgPqTu14gbfw+SSxLY+NC/KrczA83
0h4wJFjbTfLek8WVyzt1wPR7oHWE2uSMZo3u2FIfWKCDVXEv2oVEtxcpUkzarvzF
ip4mHZumwcKd1PZnPVLzJvSSHHWACPyNgKHFRHFAjrgBwgdntts+m/uA6Yxb4Uva
WP4xbJsYBLd6m+u6NY+KSBBKfVZsewZGBatoZroU1YtSouojCpc=
-----END CERTIFICATE-----
Generated at Wed Apr 15 08:44:42 2026 by rpki-client