$ rpki-client -vvf rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft File: 90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft (raw, json) Hash identifier: BEfkc7P/X/FjD14gN9GfQbSN+dbIfP8xr/sMgraYsz8= Subject key identifier: CD:A6:62:29:02:BA:3B:26:8C:C7:16:8E:C2:74:4B:41:F8:66:95:43 Authority key identifier: 90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65 Certificate issuer: /CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365 Certificate serial: 60BA63C9234EA90C14B0E5DDDB4630118DFD9455 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:37:33 +0000 Manifest this update: Tue 02 Jun 2026 18:32:33 +0000 Manifest next update: Wed 03 Jun 2026 18:49:33 +0000 Files and hashes: 1: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (hash: wgymwZqdd8aqR/u2B/QuqB1K7UuATC+6Ntbr9ldLDAY=) 2: 3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (hash: GNjW7TFdO0BnW3XzHHL9jNymhW5z46NJgPPIaWaHEpI=) 3: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (hash: g6lAbZqkaksDk1xdjsRVZipSwUOrqirOYAGeG6k+1X4=) 4: 90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl (hash: g2twbXurp3+LZrs8ASwSDIDZjMPlwY6NDjQonEiBPp4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ba:63:c9:23:4e:a9:0c:14:b0:e5:dd:db:46:30:11:8d:fd:94:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365 Validity Not Before: Jun 2 18:32:33 2026 GMT Not After : Jun 3 18:49:33 2026 GMT Subject: CN=CDA6622902BA3B268CC7168EC2744B41F8669543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0d:7d:15:71:ec:71:91:2b:29:10:67:e1:8d: a6:92:42:e9:99:26:f1:0d:36:d7:9e:55:f0:f4:4a: e9:cb:9f:1d:c0:ee:b9:c2:b2:e7:7e:93:21:24:6e: ea:13:d2:03:a6:96:14:1d:e3:64:99:b9:4d:a4:5b: 92:76:d7:ed:3a:67:e0:3f:f2:59:b2:2f:f1:61:7c: df:97:64:94:ee:ad:6a:65:5c:60:f6:de:0b:50:02: 0e:5b:c8:1e:2d:bd:50:74:86:af:5b:7c:f2:52:54: ce:7b:98:1a:05:86:b4:f2:11:67:39:f6:be:1d:ee: 91:b0:e9:7d:5a:04:17:85:5e:ff:60:63:90:05:b2: 73:53:65:fe:62:16:2c:a7:07:03:7d:18:8d:6d:dc: 3f:ad:a7:9f:1d:e9:33:ee:a2:69:5e:04:b5:f5:74: 96:31:aa:a8:a8:ad:5d:69:02:81:e2:80:84:ea:fa: 32:ca:47:31:2c:21:4a:38:52:70:49:73:a1:ca:ed: 66:b8:4a:dd:bb:38:bb:62:b2:12:e1:2e:ab:36:b1: dc:68:e8:12:46:7d:05:35:5d:dd:73:b4:7a:e7:06: e3:51:66:59:69:b6:78:60:d4:eb:9f:ff:4a:e5:13: d5:a2:fa:10:78:2d:c2:5f:e2:21:1a:26:36:c5:5c: 21:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A6:62:29:02:BA:3B:26:8C:C7:16:8E:C2:74:4B:41:F8:66:95:43 X509v3 Authority Key Identifier: keyid:90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:72:be:5e:fb:83:38:10:d9:84:a7:f7:0b:59:d7:96:26:2b: fb:ea:b5:d1:a1:94:4d:7a:33:96:db:41:c1:74:87:5d:34:8c: 02:0d:cb:a2:ce:a7:9b:9c:70:82:21:20:3f:9b:84:a1:29:e4: 48:86:4d:8f:d5:2a:48:a3:d6:34:f2:c1:8c:d8:34:b8:c9:2e: 00:9d:ed:ee:30:8c:98:cc:28:2c:c2:a6:f1:8e:f0:dd:7a:d6: 97:9f:0c:31:14:4f:b7:a8:9c:6e:4f:37:c5:2b:bc:12:e9:54: 7c:22:26:6a:f3:dc:ac:95:ba:4e:31:7e:b8:2a:c2:ce:bc:7f: 5f:89:33:ff:20:14:18:e5:7e:c9:ae:76:b1:16:72:16:4d:f7: 09:cd:8d:d9:eb:a4:a2:48:c1:7a:bf:28:9f:ed:8c:38:4c:8a: 67:b2:96:19:89:ea:03:16:62:0c:bc:15:ad:06:16:4d:20:b0: 87:93:9c:1d:4a:1c:38:98:37:fc:ba:fa:10:62:5e:ed:08:5b: f6:69:91:4f:4c:73:13:06:ae:5b:52:cd:05:98:d0:2c:53:4c: d2:d4:ff:9e:de:89:24:bc:39:0c:36:93:01:2a:37:c9:18:58: 09:a2:99:5a:97:c4:82:82:b5:37:32:83:73:9c:d7:ae:97:a5: 0e:a2:62:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYLpjySNOqQwUsOXd20YwEY39lFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBDQzcyMDlDQUE4QTZDN0ZFRUMyMTlEQUU0OTdGN0FF RUY0MzM2NTAeFw0yNjA2MDIxODMyMzNaFw0yNjA2MDMxODQ5MzNaMDMxMTAvBgNV BAMTKENEQTY2MjI5MDJCQTNCMjY4Q0M3MTY4RUMyNzQ0QjQxRjg2Njk1NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjDX0VcexxkSspEGfhjaaSQumZ JvENNteeVfD0SunLnx3A7rnCsud+kyEkbuoT0gOmlhQd42SZuU2kW5J21+06Z+A/ 8lmyL/FhfN+XZJTurWplXGD23gtQAg5byB4tvVB0hq9bfPJSVM57mBoFhrTyEWc5 9r4d7pGw6X1aBBeFXv9gY5AFsnNTZf5iFiynBwN9GI1t3D+tp58d6TPuomleBLX1 dJYxqqiorV1pAoHigITq+jLKRzEsIUo4UnBJc6HK7Wa4St27OLtishLhLqs2sdxo 6BJGfQU1Xd1ztHrnBuNRZllptnhg1Ouf/0rlE9Wi+hB4LcJf4iEaJjbFXCHRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzaZiKQK6OyaMxxaOwnRLQfhmlUMwHwYDVR0j BBgwFoAUkMxyCcqopsf+7CGdrkl/eu70M2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjEyYzEzOGMtMmUyNC00OWY1LThhZGEtMDAyN2NiYTdmMTc4LzAvOTBDQzcyMDlD QUE4QTZDN0ZFRUMyMTlEQUU0OTdGN0FFRUY0MzM2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MENDNzIwOUNBQThBNkM3RkVFQzIxOURBRTQ5N0Y3QUVFRjQz MzY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjEyYzEzOGMtMmUyNC00OWY1LThh ZGEtMDAyN2NiYTdmMTc4LzAvOTBDQzcyMDlDQUE4QTZDN0ZFRUMyMTlEQUU0OTdG N0FFRUY0MzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJyvl77gzgQ2YSn9wtZ15YmK/vqtdGhlE16 M5bbQcF0h100jAINy6LOp5uccIIhID+bhKEp5EiGTY/VKkij1jTywYzYNLjJLgCd 7e4wjJjMKCzCpvGO8N161pefDDEUT7eonG5PN8UrvBLpVHwiJmrz3KyVuk4xfrgq ws68f1+JM/8gFBjlfsmudrEWchZN9wnNjdnrpKJIwXq/KJ/tjDhMimeylhmJ6gMW Ygy8Fa0GFk0gsIeTnB1KHDiYN/y6+hBiXu0IW/ZpkU9McxMGrltSzQWY0CxTTNLU /57eiSS8OQw2kwEqN8kYWAmimVqXxIKCtTcyg3Oc166XpQ6iYsU= -----END CERTIFICATE-----Generated at Tue Jun 2 21:32:14 2026 by rpki-client