$ rpki-client -vvf rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft File: 90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft (raw, json) Hash identifier: CVWEdDnEkcucdhKMekQHfPtd4IX066Uz6Lu7jZHlcrs= Subject key identifier: 22:FD:75:4F:12:08:E0:E6:71:10:4D:F3:3A:61:F9:19:E7:7A:D7:CA Authority key identifier: 90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65 Certificate issuer: /CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365 Certificate serial: 1AD701B14CED3165BA4B24F25C7C55AEA4E818FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft Manifest number: 67 Signing time: Fri 17 Jul 2026 17:14:18 +0000 Manifest this update: Fri 17 Jul 2026 17:09:18 +0000 Manifest next update: Sat 18 Jul 2026 21:10:18 +0000 Files and hashes: 1: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (hash: wgymwZqdd8aqR/u2B/QuqB1K7UuATC+6Ntbr9ldLDAY=) 2: 90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl (hash: Do6wyshDrF6TbbI6VeMgDlUS4iReaGyfSEXDeMQYjLA=) 3: 3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (hash: GNjW7TFdO0BnW3XzHHL9jNymhW5z46NJgPPIaWaHEpI=) 4: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (hash: g6lAbZqkaksDk1xdjsRVZipSwUOrqirOYAGeG6k+1X4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 20:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d7:01:b1:4c:ed:31:65:ba:4b:24:f2:5c:7c:55:ae:a4:e8:18:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365 Validity Not Before: Jul 17 17:09:18 2026 GMT Not After : Jul 18 21:10:18 2026 GMT Subject: CN=22FD754F1208E0E671104DF33A61F919E77AD7CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8c:9c:0d:66:e2:90:62:13:1a:8b:4a:0b:23: d7:97:b3:70:d5:0d:62:0a:5a:71:7c:49:43:ae:cf: d9:e3:59:f3:2d:88:d5:f1:a5:80:95:bc:bf:76:e8: 7b:8b:3f:1e:12:1e:1a:ba:2b:67:96:91:bc:32:12: fb:d5:bb:de:7b:18:ab:89:2d:0e:5f:ec:72:3f:4a: 11:37:ed:74:4e:99:f9:1a:03:6e:ef:a1:66:b4:14: fb:ce:66:c4:c1:1c:6e:27:17:75:8c:b0:05:63:54: d9:5a:7b:df:ce:0d:c1:b4:ef:24:4c:c2:94:14:42: 38:45:1d:ea:1c:e9:dc:a8:a2:b2:7e:42:03:88:25: 62:da:33:43:fb:be:ad:4f:3f:f1:ec:c1:2a:08:b8: 7c:4b:9f:e6:a0:f0:52:c3:91:79:2a:60:0c:97:4b: a1:24:82:f7:81:4a:22:9a:07:56:de:2b:cd:af:ae: 7a:c7:85:3c:cc:cc:44:ac:c8:95:19:8a:ce:fb:d3: 3e:ad:31:c6:70:a3:f3:c0:4f:20:a2:61:19:4b:ee: f3:25:ab:1e:e3:ae:33:0c:82:18:66:cc:3a:a0:bd: 81:fe:b5:99:41:ce:ff:6b:09:76:91:af:96:ba:66: ab:fa:c0:0a:61:bd:43:e2:04:d9:c5:12:e3:24:f1: dc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FD:75:4F:12:08:E0:E6:71:10:4D:F3:3A:61:F9:19:E7:7A:D7:CA X509v3 Authority Key Identifier: keyid:90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:8c:c5:ef:cb:a1:d5:3d:87:88:33:92:c8:2d:33:9f:6f:ae: 5b:c1:27:a7:4a:2e:44:5d:7a:ff:49:49:9c:6b:83:9b:aa:c7: fe:2c:23:3a:bb:25:4d:a6:81:a5:2e:38:e4:6f:9e:fc:73:00: 30:9e:8b:47:8a:d3:13:74:ac:c8:21:4c:7f:04:65:ab:ec:16: 91:66:e9:0d:83:9b:b9:e5:de:fc:cd:57:4c:b7:db:fc:34:ac: 6b:d0:76:84:b2:a6:2c:b5:56:97:80:7b:87:ab:0c:4e:27:fc: af:cf:5e:df:ec:9d:b6:b5:78:05:aa:30:b6:59:a9:01:84:97: fc:e6:27:95:68:a3:31:0c:c3:38:dd:1c:55:3a:68:22:57:e8: 2d:f3:a2:da:0c:c8:f8:94:f5:46:77:48:de:17:b6:fd:b6:c3: 20:5b:3e:59:9f:9a:91:57:1c:6c:6d:35:7d:98:2a:84:10:84: 76:4a:5a:49:d0:d6:75:3d:c7:02:49:96:1a:05:60:2f:31:8f: ca:b4:59:27:08:6e:9b:c3:ab:6c:fa:50:63:83:8c:1e:f8:c2: ef:28:e5:63:e6:89:25:22:3d:a4:25:54:e7:60:19:a4:be:59: 9f:49:09:ad:12:44:a4:a7:3a:48:08:56:5c:76:cb:e5:ad:83: 3b:2c:05:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGtcBsUztMWW6SyTyXHxVrqToGP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBDQzcyMDlDQUE4QTZDN0ZFRUMyMTlEQUU0OTdGN0FF RUY0MzM2NTAeFw0yNjA3MTcxNzA5MThaFw0yNjA3MTgyMTEwMThaMDMxMTAvBgNV BAMTKDIyRkQ3NTRGMTIwOEUwRTY3MTEwNERGMzNBNjFGOTE5RTc3QUQ3Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7jJwNZuKQYhMai0oLI9eXs3DV DWIKWnF8SUOuz9njWfMtiNXxpYCVvL926HuLPx4SHhq6K2eWkbwyEvvVu957GKuJ LQ5f7HI/ShE37XROmfkaA27voWa0FPvOZsTBHG4nF3WMsAVjVNlae9/ODcG07yRM wpQUQjhFHeoc6dyoorJ+QgOIJWLaM0P7vq1PP/HswSoIuHxLn+ag8FLDkXkqYAyX S6EkgveBSiKaB1beK82vrnrHhTzMzESsyJUZis770z6tMcZwo/PATyCiYRlL7vMl qx7jrjMMghhmzDqgvYH+tZlBzv9rCXaRr5a6Zqv6wAphvUPiBNnFEuMk8dxrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIv11TxII4OZxEE3zOmH5Ged618owHwYDVR0j BBgwFoAUkMxyCcqopsf+7CGdrkl/eu70M2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjEyYzEzOGMtMmUyNC00OWY1LThhZGEtMDAyN2NiYTdmMTc4LzAvOTBDQzcyMDlD QUE4QTZDN0ZFRUMyMTlEQUU0OTdGN0FFRUY0MzM2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MENDNzIwOUNBQThBNkM3RkVFQzIxOURBRTQ5N0Y3QUVFRjQz MzY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjEyYzEzOGMtMmUyNC00OWY1LThh ZGEtMDAyN2NiYTdmMTc4LzAvOTBDQzcyMDlDQUE4QTZDN0ZFRUMyMTlEQUU0OTdG N0FFRUY0MzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+Mxe/LodU9h4gzksgtM59vrlvBJ6dKLkRd ev9JSZxrg5uqx/4sIzq7JU2mgaUuOORvnvxzADCei0eK0xN0rMghTH8EZavsFpFm 6Q2Dm7nl3vzNV0y32/w0rGvQdoSypiy1VpeAe4erDE4n/K/PXt/snba1eAWqMLZZ qQGEl/zmJ5VoozEMwzjdHFU6aCJX6C3zotoMyPiU9UZ3SN4Xtv22wyBbPlmfmpFX HGxtNX2YKoQQhHZKWknQ1nU9xwJJlhoFYC8xj8q0WScIbpvDq2z6UGODjB74wu8o 5WPmiSUiPaQlVOdgGaS+WZ9JCa0SRKSnOkgIVlx2y+WtgzssBSU= -----END CERTIFICATE-----Generated at Sat Jul 18 02:27:46 2026 by rpki-client