$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft File: 90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft (raw, json) Hash identifier: FDx9NdYf9gehTwO3WB2P4yZXo+VQwpGhFXz5i0ovu2s= Subject key identifier: 90:F7:69:01:06:7D:A2:F9:17:38:FF:81:F0:20:BE:90:03:75:6A:B6 Authority key identifier: 90:B0:BF:C1:8E:B9:04:96:C0:32:33:83:DC:DC:92:1D:9D:8E:62:C7 Certificate issuer: /CN=90B0BFC18EB90496C0323383DCDC921D9D8E62C7 Certificate serial: 61BA10D64083CB0DFECD2BF35473F886D84AF97F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 23:17:42 +0000 Manifest this update: Wed 16 Sep 2026 23:12:42 +0000 Manifest next update: Fri 18 Sep 2026 01:43:42 +0000 Files and hashes: 1: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: 9wRrgktFn4gbGNfBo3IH1gpwK1hyiBcfUs4oIPcTOYQ=) 2: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: f1xLE51GWOwQNLvRvEntiSu/P1tXHq8fAnPJwIPOL+s=) 3: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: fBi7KOxItMXmNwqCO9NrsVw12oG+iWETgMZG+hflMwY=) 4: 90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl (hash: CWVXccTMcxvZkSirREzRTa4YaicAukMLfhbypPKJQt0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ba:10:d6:40:83:cb:0d:fe:cd:2b:f3:54:73:f8:86:d8:4a:f9:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90B0BFC18EB90496C0323383DCDC921D9D8E62C7 Validity Not Before: Sep 16 23:12:42 2026 GMT Not After : Sep 18 01:43:42 2026 GMT Subject: CN=90F76901067DA2F91738FF81F020BE9003756AB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c4:36:d9:48:ce:e2:e6:b8:83:50:6a:b7:32: 0b:3e:63:d2:dd:e4:13:61:d4:7a:66:cd:c2:a1:af: 63:9b:a2:e7:b1:83:0a:3e:00:0c:89:44:9a:41:b7: 5b:1e:2d:16:15:3b:e8:d2:c8:d4:5c:3b:8c:4b:c2: cf:b7:0f:d6:9c:8d:7a:6f:76:9e:80:79:44:fc:71: b1:b7:73:05:48:d1:92:d3:85:6b:25:34:73:68:9d: 64:02:8c:a7:e6:02:be:9d:fb:d3:46:4f:56:a3:83: f2:98:bf:67:11:22:ee:b4:f6:f2:ce:37:9e:f8:a3: 79:c9:a5:5b:15:00:37:6e:1b:58:3c:91:b2:0f:0f: 3b:df:02:a0:b2:ae:3d:b0:12:20:6f:a6:81:9e:de: f0:cb:7a:c2:dd:12:c1:1f:8b:65:5b:db:bb:72:05: b5:9e:a1:08:7e:06:4c:9e:06:4f:ff:35:05:dc:d3: 4c:85:58:2a:80:ff:00:bc:88:63:ab:42:52:c5:69: 0f:14:db:21:6f:47:36:99:78:0b:e6:fe:d5:75:14: b7:1a:44:88:85:69:f6:b9:e0:15:50:74:ca:b9:69: fb:9a:e4:bd:89:04:c3:00:7f:7d:88:b5:b7:86:2f: d8:40:43:0e:78:01:d6:8b:55:64:8e:e2:39:c0:a3: d8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F7:69:01:06:7D:A2:F9:17:38:FF:81:F0:20:BE:90:03:75:6A:B6 X509v3 Authority Key Identifier: keyid:90:B0:BF:C1:8E:B9:04:96:C0:32:33:83:DC:DC:92:1D:9D:8E:62:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/90B0BFC18EB90496C0323383DCDC921D9D8E62C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:8a:36:f2:c0:b4:67:54:f9:82:48:c8:bd:ca:70:19:6a:4c: 54:24:e9:e9:e4:b2:86:d8:75:d8:7a:ed:5f:f0:80:ac:7c:44: a2:2f:e4:71:8c:93:d9:79:2e:f9:d9:2c:a0:0e:6f:20:64:5b: 99:4d:9c:cc:fa:fc:3c:62:e5:a6:20:92:91:e5:ae:1c:40:06: 04:e1:92:58:cb:66:c8:02:a2:40:f0:e6:f2:44:9b:a8:f2:39: ad:49:cc:55:8e:91:42:18:e0:d8:63:70:87:2e:07:38:a8:8a: 29:1f:dd:07:8d:fb:27:d7:6b:1b:30:ab:57:17:08:82:b1:d8: 98:4a:eb:22:c0:57:7e:91:db:3f:8b:c7:33:09:3c:23:c6:45: 2b:c1:25:c4:d2:77:c8:93:dc:ab:0a:b8:50:a6:f7:a3:03:16: f0:d8:88:45:54:ec:ef:bd:8a:a9:3b:e0:3b:0e:0f:a9:13:ec: 36:81:eb:83:20:09:88:ea:63:d0:fd:86:7d:dc:1d:d3:03:17: ff:8d:35:f1:5e:48:b8:f5:52:b3:53:63:b0:ac:5b:80:38:a1: 36:c1:a9:94:47:2c:39:b5:d5:f7:d7:58:80:cc:d2:40:bb:19: 67:e8:40:ea:0a:a9:b7:97:d8:32:c8:a4:7f:6e:0d:60:20:da: 9d:1e:d7:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYboQ1kCDyw3+zSvzVHP4hthK+X8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBCMEJGQzE4RUI5MDQ5NkMwMzIzMzgzRENEQzkyMUQ5 RDhFNjJDNzAeFw0yNjA5MTYyMzEyNDJaFw0yNjA5MTgwMTQzNDJaMDMxMTAvBgNV BAMTKDkwRjc2OTAxMDY3REEyRjkxNzM4RkY4MUYwMjBCRTkwMDM3NTZBQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHxDbZSM7i5riDUGq3Mgs+Y9Ld 5BNh1HpmzcKhr2Obouexgwo+AAyJRJpBt1seLRYVO+jSyNRcO4xLws+3D9acjXpv dp6AeUT8cbG3cwVI0ZLThWslNHNonWQCjKfmAr6d+9NGT1ajg/KYv2cRIu609vLO N574o3nJpVsVADduG1g8kbIPDzvfAqCyrj2wEiBvpoGe3vDLesLdEsEfi2Vb27ty BbWeoQh+BkyeBk//NQXc00yFWCqA/wC8iGOrQlLFaQ8U2yFvRzaZeAvm/tV1FLca RIiFafa54BVQdMq5afua5L2JBMMAf32ItbeGL9hAQw54AdaLVWSO4jnAo9inAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkPdpAQZ9ovkXOP+B8CC+kAN1arYwHwYDVR0j BBgwFoAUkLC/wY65BJbAMjOD3NySHZ2OYscwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGQ0ZGNkZTMtNzU3Zi00M2Q0LWFkZTItZmYwODg3Y2MyNDg3LzAvOTBCMEJGQzE4 RUI5MDQ5NkMwMzIzMzgzRENEQzkyMUQ5RDhFNjJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEIwQkZDMThFQjkwNDk2QzAzMjMzODNEQ0RDOTIxRDlEOEU2 MkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvOTBCMEJGQzE4RUI5MDQ5NkMwMzIzMzgzRENEQzky MUQ5RDhFNjJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMuKNvLAtGdU+YJIyL3KcBlqTFQk6enksobY ddh67V/wgKx8RKIv5HGMk9l5LvnZLKAObyBkW5lNnMz6/Dxi5aYgkpHlrhxABgTh kljLZsgCokDw5vJEm6jyOa1JzFWOkUIY4NhjcIcuBzioiikf3QeN+yfXaxswq1cX CIKx2JhK6yLAV36R2z+LxzMJPCPGRSvBJcTSd8iT3KsKuFCm96MDFvDYiEVU7O+9 iqk74DsOD6kT7DaB64MgCYjqY9D9hn3cHdMDF/+NNfFeSLj1UrNTY7CsW4A4oTbB qZRHLDm11ffXWIDM0kC7GWfoQOoKqbeX2DLIpH9uDWAg2p0e16E= -----END CERTIFICATE-----Generated at Thu Sep 17 09:20:52 2026 by rpki-client