$ rpki-client -vvvf rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft File: 90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft (raw, json) Hash identifier: vqqwGZFoLHAh66qFlfji31B9qa4RX6W2sHx+VBEKMTw= Subject key identifier: 3D:41:93:DC:F0:44:07:06:93:21:A7:C5:66:FA:D2:DB:F3:9D:ED:AC Authority key identifier: 90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65 Certificate issuer: /CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365 Certificate serial: 202C2EB6261FBFBD65F358DD39305602516100EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft Manifest number: A3 Signing time: Mon 31 Aug 2026 13:05:13 +0000 Manifest this update: Mon 31 Aug 2026 13:00:13 +0000 Manifest next update: Tue 01 Sep 2026 15:51:13 +0000 Files and hashes: 1: 90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl (hash: 1NsrLXYZB8pwQwvwe7vsytPnt+XcgEXcepvGDNR4Znw=) 2: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (hash: wgymwZqdd8aqR/u2B/QuqB1K7UuATC+6Ntbr9ldLDAY=) 3: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (hash: g6lAbZqkaksDk1xdjsRVZipSwUOrqirOYAGeG6k+1X4=) 4: 3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (hash: GNjW7TFdO0BnW3XzHHL9jNymhW5z46NJgPPIaWaHEpI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 15:51:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:2c:2e:b6:26:1f:bf:bd:65:f3:58:dd:39:30:56:02:51:61:00:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365 Validity Not Before: Aug 31 13:00:13 2026 GMT Not After : Sep 1 15:51:13 2026 GMT Subject: CN=3D4193DCF04407069321A7C566FAD2DBF39DEDAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e7:55:7a:a9:f0:fa:99:27:3a:d1:1a:45:da: 27:bf:7e:7c:b7:c7:79:5f:df:f2:57:04:4b:aa:ad: 9c:3b:23:14:df:45:77:6a:12:c8:f9:0e:62:ba:58: 24:09:95:00:35:ca:40:11:bd:02:ed:a2:24:80:58: 5d:40:4b:63:89:53:99:6f:cf:37:83:83:e7:f7:79: 8d:66:af:db:dd:75:ea:a4:7c:cd:37:46:90:17:03: 37:e8:a9:92:fd:6e:ff:7c:7a:75:cd:9d:a4:fd:91: b7:6f:9d:b1:e3:4a:a7:fb:e9:d8:c6:f6:89:54:9a: be:e1:0d:ed:ca:12:14:50:94:37:83:81:e2:61:86: a9:25:f4:f2:46:70:0f:7e:e7:b8:9f:f7:b1:7c:da: 1a:5a:8c:1b:b1:59:f3:d2:ff:50:9c:23:b2:88:5b: 5d:ff:30:6b:72:97:d5:b6:ca:9f:13:ef:33:c0:1e: 1c:f7:bb:b6:4d:3b:2f:95:61:9d:99:36:d8:9d:e2: fa:50:de:ca:42:1f:19:dd:40:f3:c5:8d:1d:54:e8: 31:e9:16:a5:5d:db:9a:19:5f:60:44:3c:73:93:bd: 36:2a:7b:2b:2b:33:19:99:53:25:d9:82:51:da:9f: 7c:06:d8:b7:38:95:f9:71:18:48:5f:0b:57:f1:d4: e5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:41:93:DC:F0:44:07:06:93:21:A7:C5:66:FA:D2:DB:F3:9D:ED:AC X509v3 Authority Key Identifier: keyid:90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:8f:9f:72:5f:8d:5a:a6:dc:3e:25:f6:40:72:ef:07:db:3e: e6:3b:4c:34:95:bd:07:68:30:9c:58:35:bf:2e:b2:f2:ab:b7: 93:1e:67:8d:22:05:25:b0:7b:3b:19:59:61:3e:ae:ae:36:69: 72:a1:27:76:d4:a5:9d:8a:86:6d:29:e1:c9:b7:57:86:65:0b: 54:0c:0a:2e:04:60:4e:c8:c3:8b:42:9e:76:8f:0b:cb:b4:73: 84:db:b9:d3:4e:c4:70:d7:b0:83:3f:00:30:da:30:ed:8a:6e: 7e:c4:29:1d:36:10:ca:b5:4f:10:c6:48:8e:25:a7:6b:31:5d: a3:c3:5b:da:fa:dc:1b:6d:e5:78:13:b2:25:b0:f2:86:9f:0c: a2:a4:ec:ad:ce:d9:bf:aa:55:9f:42:3b:24:1d:1d:fc:0e:72: ca:ba:98:d2:4f:f6:fa:ff:33:fd:0e:c7:78:f6:30:85:c7:ea: f6:bd:7a:f5:df:a2:2c:f5:10:48:af:0d:ac:12:4c:a0:72:27: f7:14:e2:cb:82:67:77:3f:75:47:58:99:83:09:a7:dc:b6:3f: 16:2f:09:f1:ec:e1:38:96:cc:f1:fb:22:a1:bb:27:88:dd:f9: 9c:e9:60:78:90:69:58:a9:ff:4e:5e:82:0e:c0:1d:42:ab:1e: 36:0f:b5:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUICwutiYfv71l81jdOTBWAlFhAOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBDQzcyMDlDQUE4QTZDN0ZFRUMyMTlEQUU0OTdGN0FF RUY0MzM2NTAeFw0yNjA4MzExMzAwMTNaFw0yNjA5MDExNTUxMTNaMDMxMTAvBgNV BAMTKDNENDE5M0RDRjA0NDA3MDY5MzIxQTdDNTY2RkFEMkRCRjM5REVEQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS51V6qfD6mSc60RpF2ie/fny3 x3lf3/JXBEuqrZw7IxTfRXdqEsj5DmK6WCQJlQA1ykARvQLtoiSAWF1AS2OJU5lv zzeDg+f3eY1mr9vddeqkfM03RpAXAzfoqZL9bv98enXNnaT9kbdvnbHjSqf76djG 9olUmr7hDe3KEhRQlDeDgeJhhqkl9PJGcA9+57if97F82hpajBuxWfPS/1CcI7KI W13/MGtyl9W2yp8T7zPAHhz3u7ZNOy+VYZ2ZNtid4vpQ3spCHxndQPPFjR1U6DHp FqVd25oZX2BEPHOTvTYqeysrMxmZUyXZglHan3wG2Lc4lflxGEhfC1fx1OUvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPUGT3PBEBwaTIafFZvrS2/Od7awwHwYDVR0j BBgwFoAUkMxyCcqopsf+7CGdrkl/eu70M2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjEyYzEzOGMtMmUyNC00OWY1LThhZGEtMDAyN2NiYTdmMTc4LzAvOTBDQzcyMDlD QUE4QTZDN0ZFRUMyMTlEQUU0OTdGN0FFRUY0MzM2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MENDNzIwOUNBQThBNkM3RkVFQzIxOURBRTQ5N0Y3QUVFRjQz MzY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjEyYzEzOGMtMmUyNC00OWY1LThh ZGEtMDAyN2NiYTdmMTc4LzAvOTBDQzcyMDlDQUE4QTZDN0ZFRUMyMTlEQUU0OTdG N0FFRUY0MzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALSPn3JfjVqm3D4l9kBy7wfbPuY7TDSVvQdo MJxYNb8usvKrt5MeZ40iBSWwezsZWWE+rq42aXKhJ3bUpZ2Khm0p4cm3V4ZlC1QM Ci4EYE7Iw4tCnnaPC8u0c4TbudNOxHDXsIM/ADDaMO2Kbn7EKR02EMq1TxDGSI4l p2sxXaPDW9r63Btt5XgTsiWw8oafDKKk7K3O2b+qVZ9COyQdHfwOcsq6mNJP9vr/ M/0Ox3j2MIXH6va9evXfoiz1EEivDawSTKByJ/cU4suCZ3c/dUdYmYMJp9y2PxYv CfHs4TiWzPH7IqG7J4jd+ZzpYHiQaVip/05egg7AHUKrHjYPtRo= -----END CERTIFICATE-----Generated at Tue Sep 1 05:00:11 2026 by rpki-client