$ rpki-client -vvf rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft File: C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft (raw, json) Hash identifier: Z3B7u31eUJduF1l54QvlYSZFGo4rabMEe4hEtlqCaj4= Subject key identifier: 67:6F:69:A3:D0:A4:67:C3:DC:FE:67:8F:B3:2A:5E:90:78:3E:F8:E5 Authority key identifier: C9:04:68:D7:EB:B1:55:0C:7E:74:86:32:F6:8F:6F:E0:83:EB:BD:DD Certificate issuer: /CN=C90468D7EBB1550C7E748632F68F6FE083EBBDDD Certificate serial: 7274A7683BF4E3A823C67A18E12F31128BB94718 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 19:03:57 +0000 Manifest this update: Fri 19 Jun 2026 18:58:57 +0000 Manifest next update: Sat 20 Jun 2026 20:37:57 +0000 Files and hashes: 1: C90468D7EBB1550C7E748632F68F6FE083EBBDDD.crl (hash: RI7wfJkHMc810AusU4r2xPZROp/Q61h/2eCWpg8mtxU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.crl rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:74:a7:68:3b:f4:e3:a8:23:c6:7a:18:e1:2f:31:12:8b:b9:47:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C90468D7EBB1550C7E748632F68F6FE083EBBDDD Validity Not Before: Jun 19 18:58:57 2026 GMT Not After : Jun 20 20:37:57 2026 GMT Subject: CN=676F69A3D0A467C3DCFE678FB32A5E90783EF8E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4d:a5:ae:ed:e1:32:01:b6:3b:73:9a:3c:6a: 2c:69:2f:35:52:31:00:15:8d:c3:b9:02:d2:e4:04: 83:04:a7:f2:76:f3:36:e4:fe:44:5c:cd:d4:ba:72: 1a:fd:61:c6:a4:e0:ff:09:08:a7:38:51:b9:f2:de: 5d:6b:76:d4:ab:9c:62:94:1c:95:e8:dd:bb:98:f6: 91:2f:03:07:7e:59:85:8b:05:86:28:d9:17:bd:fe: da:2a:0a:d3:fa:8b:82:48:48:f8:a5:63:22:12:a0: f6:69:ad:bb:93:cb:a2:f8:cf:74:79:5b:44:b9:71: a8:06:41:3d:f2:ed:72:50:c6:a8:d6:59:ea:14:9d: 2d:a5:85:33:aa:ba:02:30:a6:54:db:cf:34:a0:e8: 50:c8:aa:d6:c8:03:4b:d6:56:23:a2:18:b8:2c:99: 31:10:ff:e2:10:d0:b3:55:d2:0d:ab:06:6c:22:a3: 2a:b4:ba:bd:38:50:44:a9:d4:f2:22:e1:fb:5c:72: 3f:b6:89:94:10:a8:a5:1c:70:7a:8e:08:95:31:fb: d1:b4:fb:6a:1b:2d:84:00:e7:19:d5:64:cb:96:bf: 3c:73:b0:7f:2e:d2:7e:b0:dc:9a:fd:4a:07:7d:60: 51:9f:1f:ef:15:35:73:32:72:5e:e6:f0:61:1d:fe: 88:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6F:69:A3:D0:A4:67:C3:DC:FE:67:8F:B3:2A:5E:90:78:3E:F8:E5 X509v3 Authority Key Identifier: keyid:C9:04:68:D7:EB:B1:55:0C:7E:74:86:32:F6:8F:6F:E0:83:EB:BD:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/C90468D7EBB1550C7E748632F68F6FE083EBBDDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:48:ee:7d:b8:13:e5:24:ac:d0:d4:82:8d:22:86:c7:be:4c: a7:ea:4d:1c:45:ba:68:49:d6:ef:77:bd:22:a4:9e:58:86:92: 1f:82:aa:1d:16:d9:d5:db:41:88:4b:1e:e7:f7:59:2d:a1:90: 69:86:ee:28:47:a5:8f:31:55:14:c1:e1:c9:b2:d4:b1:17:43: d6:7d:fd:ff:b0:ba:58:8c:0e:05:97:df:e7:11:e7:6d:d1:0f: 42:5a:5d:27:52:2b:a1:d9:86:78:7b:a8:47:4b:17:43:6d:80: 16:c9:04:b0:74:b0:28:0f:cd:e9:74:ba:fc:a2:bd:51:f9:8f: 3a:8c:8a:f3:33:dd:37:cd:85:7f:10:0b:f6:d6:3d:d0:c1:e2: 02:55:73:4d:f0:06:57:ce:e0:c3:b6:05:29:d8:2f:8a:19:4b: 6f:98:81:a6:ed:7b:e2:8b:09:35:ed:2e:56:c2:72:d6:59:90: 50:6a:6f:39:f8:07:44:91:2e:15:d2:a0:54:ab:36:eb:54:b3: c5:ee:1a:fc:0a:35:de:fd:82:88:49:d3:91:cd:b1:ba:85:79: d5:88:1e:ef:55:08:7f:ca:04:05:20:f7:d4:b0:2c:3e:d2:58: e4:bf:6e:d5:ec:83:70:41:ec:10:09:fe:f3:55:48:bb:e7:78: d9:b8:cf:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcnSnaDv046gjxnoY4S8xEou5RxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkwNDY4RDdFQkIxNTUwQzdFNzQ4NjMyRjY4RjZGRTA4 M0VCQkRERDAeFw0yNjA2MTkxODU4NTdaFw0yNjA2MjAyMDM3NTdaMDMxMTAvBgNV BAMTKDY3NkY2OUEzRDBBNDY3QzNEQ0ZFNjc4RkIzMkE1RTkwNzgzRUY4RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZTaWu7eEyAbY7c5o8aixpLzVS MQAVjcO5AtLkBIMEp/J28zbk/kRczdS6chr9Ycak4P8JCKc4Ubny3l1rdtSrnGKU HJXo3buY9pEvAwd+WYWLBYYo2Re9/toqCtP6i4JISPilYyISoPZprbuTy6L4z3R5 W0S5cagGQT3y7XJQxqjWWeoUnS2lhTOqugIwplTbzzSg6FDIqtbIA0vWViOiGLgs mTEQ/+IQ0LNV0g2rBmwioyq0ur04UESp1PIi4ftccj+2iZQQqKUccHqOCJUx+9G0 +2obLYQA5xnVZMuWvzxzsH8u0n6w3Jr9Sgd9YFGfH+8VNXMycl7m8GEd/ogjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ29po9CkZ8Pc/mePsypekHg++OUwHwYDVR0j BBgwFoAUyQRo1+uxVQx+dIYy9o9v4IPrvd0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2NkMzIzYmUtODM3ZC00MjQ0LTg0NmMtN2QyMzkzYTlhMDA5LzAvQzkwNDY4RDdF QkIxNTUwQzdFNzQ4NjMyRjY4RjZGRTA4M0VCQkRERC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTA0NjhEN0VCQjE1NTBDN0U3NDg2MzJGNjhGNkZFMDgzRUJC RERELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2NkMzIzYmUtODM3ZC00MjQ0LTg0 NmMtN2QyMzkzYTlhMDA5LzAvQzkwNDY4RDdFQkIxNTUwQzdFNzQ4NjMyRjY4RjZG RTA4M0VCQkRERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClI7n24E+UkrNDUgo0ihse+TKfqTRxFumhJ 1u93vSKknliGkh+Cqh0W2dXbQYhLHuf3WS2hkGmG7ihHpY8xVRTB4cmy1LEXQ9Z9 /f+wuliMDgWX3+cR523RD0JaXSdSK6HZhnh7qEdLF0NtgBbJBLB0sCgPzel0uvyi vVH5jzqMivMz3TfNhX8QC/bWPdDB4gJVc03wBlfO4MO2BSnYL4oZS2+Ygabte+KL CTXtLlbCctZZkFBqbzn4B0SRLhXSoFSrNutUs8XuGvwKNd79gohJ05HNsbqFedWI Hu9VCH/KBAUg99SwLD7SWOS/btXsg3BB7BAJ/vNVSLvneNm4z3E= -----END CERTIFICATE-----Generated at Sat Jun 20 09:19:58 2026 by rpki-client