$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft File: 90B9450AA39B9CD9586085EFA9EF7887EE613759.mft (raw, json) Hash identifier: 0HyoamdP+EONxtOaUb8tC/HmdVpn2QPTFjoLL3qQVzM= Subject key identifier: 3E:D5:69:D8:19:32:76:20:EF:78:7E:D5:D2:39:BE:8B:50:0E:B7:92 Authority key identifier: 90:B9:45:0A:A3:9B:9C:D9:58:60:85:EF:A9:EF:78:87:EE:61:37:59 Certificate issuer: /CN=90B9450AA39B9CD9586085EFA9EF7887EE613759 Certificate serial: 47541DD6E26C37E0F2620C76B9748D5C8652ED5F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft Manifest number: EB Signing time: Sun 25 Oct 2026 09:07:50 +0000 Manifest this update: Sun 25 Oct 2026 09:02:50 +0000 Manifest next update: Mon 26 Oct 2026 11:14:50 +0000 Files and hashes: 1: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: J0+iHCZ4UXpTu9FbQSO8iPWMu0E+Lc3DRVGjSSCxGxw=) 2: 90B9450AA39B9CD9586085EFA9EF7887EE613759.crl (hash: hNTkbtI7HxhYC2euxw8Key5X1GlScRue2A5UMAI3tVs=) 3: 3130332e3135332e38332e302f32342d3234203d3e20313439373034.roa (hash: i2oBSFPKpVqeh9es/WJHy0i/TdHRHJL5ycGj+adtwXc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.crl rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 11:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:54:1d:d6:e2:6c:37:e0:f2:62:0c:76:b9:74:8d:5c:86:52:ed:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90B9450AA39B9CD9586085EFA9EF7887EE613759 Validity Not Before: Oct 25 09:02:50 2026 GMT Not After : Oct 26 11:14:50 2026 GMT Subject: CN=3ED569D819327620EF787ED5D239BE8B500EB792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:02:a6:da:16:00:03:06:d5:92:30:a9:b1:77: 26:65:ed:5b:24:d7:78:90:74:db:4f:53:58:9d:4a: 4a:cb:7a:b6:89:58:a7:bc:06:2c:5d:24:b7:0e:7a: 36:9b:5b:c5:b7:ed:48:a2:37:75:04:62:01:b4:bf: 25:3f:1a:1a:ce:ce:0e:4f:38:8a:85:77:c5:87:3d: 60:ad:29:e2:25:4c:6d:17:82:fd:20:51:a6:32:54: 48:99:a3:06:2c:08:16:b8:62:00:a3:1b:b0:37:5d: 8b:40:47:fa:12:4c:ca:19:86:d1:85:ff:f5:1c:d2: 46:8d:a7:9e:e5:6b:5a:c9:42:4a:91:cf:d5:35:94: 29:d5:e3:b4:55:73:68:8b:36:51:30:58:33:62:04: dc:02:5c:08:86:2c:6b:bb:f8:f0:96:c5:06:92:28: 1e:53:f3:8a:79:63:fe:07:42:af:52:3d:4b:74:8a: 9d:49:76:c7:d5:fe:67:39:ea:b2:d4:32:f9:82:ed: 03:97:ca:9f:79:83:fa:75:8a:cc:6e:2c:d7:a3:2c: 1b:79:40:ee:17:8c:11:42:62:54:5c:c0:de:b3:22: 67:61:75:d8:30:fa:17:3e:72:6a:99:9f:81:e7:c2: 7a:96:1c:66:79:7b:2e:2f:0c:86:7d:01:4a:86:b7: 3f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D5:69:D8:19:32:76:20:EF:78:7E:D5:D2:39:BE:8B:50:0E:B7:92 X509v3 Authority Key Identifier: keyid:90:B9:45:0A:A3:9B:9C:D9:58:60:85:EF:A9:EF:78:87:EE:61:37:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90B9450AA39B9CD9586085EFA9EF7887EE613759.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/90B9450AA39B9CD9586085EFA9EF7887EE613759.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:50:bf:28:bf:57:5d:c3:e1:fe:13:70:94:f5:a2:05:c5:25: 0e:4f:4a:a5:86:a8:45:81:3d:b8:3e:c9:47:44:53:f1:f0:74: 54:d8:e1:4e:de:65:91:a4:76:5d:96:58:49:e7:01:76:84:fc: 6d:7f:6c:d8:0c:6e:cf:df:90:29:3b:76:e5:95:c3:1b:cd:e0: c5:ea:20:76:49:9d:ab:a4:0b:18:ac:3d:7d:b1:30:aa:a0:ca: 05:9c:c4:a6:c0:44:1f:4f:bc:42:41:bc:e4:41:62:62:13:09: 54:ac:58:a2:c6:3b:5c:3e:99:a7:4e:6e:15:e7:fd:0c:a7:d8: 8b:a5:df:86:93:b4:d4:bf:98:4a:17:6f:7e:9f:b5:28:52:a5: ff:4d:88:85:85:8f:87:a6:d8:1a:e5:fd:97:bb:11:e4:99:48: 70:0f:4d:61:99:36:ed:09:37:c1:ef:5b:25:ae:c1:0a:2a:25: 80:fe:04:9e:70:e7:10:24:be:71:9e:b6:0e:fa:8a:9e:06:98: dc:78:1d:a6:a6:3b:8c:21:97:ce:90:5a:fa:bd:91:d9:f2:c0: d0:97:4f:5d:90:a2:58:48:84:60:23:e9:49:5e:f3:cd:57:4b: 62:14:23:cd:dd:09:55:bc:c1:09:ce:74:3c:1a:28:aa:38:9d: 23:d0:c9:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR1Qd1uJsN+DyYgx2uXSNXIZS7V8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBCOTQ1MEFBMzlCOUNEOTU4NjA4NUVGQTlFRjc4ODdF RTYxMzc1OTAeFw0yNjEwMjUwOTAyNTBaFw0yNjEwMjYxMTE0NTBaMDMxMTAvBgNV BAMTKDNFRDU2OUQ4MTkzMjc2MjBFRjc4N0VENUQyMzlCRThCNTAwRUI3OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkAqbaFgADBtWSMKmxdyZl7Vsk 13iQdNtPU1idSkrLeraJWKe8BixdJLcOejabW8W37UiiN3UEYgG0vyU/GhrOzg5P OIqFd8WHPWCtKeIlTG0Xgv0gUaYyVEiZowYsCBa4YgCjG7A3XYtAR/oSTMoZhtGF //Uc0kaNp57la1rJQkqRz9U1lCnV47RVc2iLNlEwWDNiBNwCXAiGLGu7+PCWxQaS KB5T84p5Y/4HQq9SPUt0ip1JdsfV/mc56rLUMvmC7QOXyp95g/p1isxuLNejLBt5 QO4XjBFCYlRcwN6zImdhddgw+hc+cmqZn4HnwnqWHGZ5ey4vDIZ9AUqGtz/fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPtVp2BkydiDveH7V0jm+i1AOt5IwHwYDVR0j BBgwFoAUkLlFCqObnNlYYIXvqe94h+5hN1kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U3NmRiMWUtYmY5YS00OWE4LWJmNzYtOWYzMTRlN2QxZDhlLzAvOTBCOTQ1MEFB MzlCOUNEOTU4NjA4NUVGQTlFRjc4ODdFRTYxMzc1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEI5NDUwQUEzOUI5Q0Q5NTg2MDg1RUZBOUVGNzg4N0VFNjEz NzU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U3NmRiMWUtYmY5YS00OWE4LWJm NzYtOWYzMTRlN2QxZDhlLzAvOTBCOTQ1MEFBMzlCOUNEOTU4NjA4NUVGQTlFRjc4 ODdFRTYxMzc1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdQvyi/V13D4f4TcJT1ogXFJQ5PSqWGqEWB Pbg+yUdEU/HwdFTY4U7eZZGkdl2WWEnnAXaE/G1/bNgMbs/fkCk7duWVwxvN4MXq IHZJnaukCxisPX2xMKqgygWcxKbARB9PvEJBvORBYmITCVSsWKLGO1w+madObhXn /Qyn2Iul34aTtNS/mEoXb36ftShSpf9NiIWFj4em2Brl/Ze7EeSZSHAPTWGZNu0J N8HvWyWuwQoqJYD+BJ5w5xAkvnGetg76ip4GmNx4HaamO4whl86QWvq9kdnywNCX T12QolhIhGAj6Ule881XS2IUI83dCVW8wQnOdDwaKKo4nSPQyfE= -----END CERTIFICATE-----Generated at Mon Oct 26 04:03:52 2026 by rpki-client