$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft File: 2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft (raw, json) Hash identifier: x9zqsJrEpl5Qb2q4umqYYTmW6c91shwObksyUyuGhz8= Subject key identifier: AA:1D:C1:AB:9A:1E:2D:BB:81:B7:1D:A0:A3:F1:43:A4:A5:E1:01:B5 Authority key identifier: 2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 Certificate issuer: /CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Certificate serial: 4E38DBE5B135D51C09C5B6D065232C541597767E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft Manifest number: EC Signing time: Sun 25 Oct 2026 17:28:31 +0000 Manifest this update: Sun 25 Oct 2026 17:23:31 +0000 Manifest next update: Mon 26 Oct 2026 20:29:31 +0000 Files and hashes: 1: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: YxIG5gE82yucA04IL0UOvUpSplXnSvbMztHXZbePQI4=) 2: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: Zn0CgMhZBE1Ox5HRkdKzvhOJuMe+bbXdGHM8Z1fRLu4=) 3: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: Sc3G90iBjlZbQp4eiRWZGBi7/nNefrAvOJorxw0BbBg=) 4: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: o8ATK3bD9zxeJufeZWJNK7oFuttO5EJXj2X9FF47zyA=) 5: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: +Yvf7pOmzIGa62dYtF9IiIRwOM/GLeNEJw6+0hLCuFs=) 6: 2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl (hash: dJpQcIZMU2PXpt1LwTniYj1hl9XJSF+OL0plKKlYFCM=) 7: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: mQrrkGIS8HoF4AiDSmw6SD2SG/T7/MXDAFnexE70y7o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:38:db:e5:b1:35:d5:1c:09:c5:b6:d0:65:23:2c:54:15:97:76:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E90C7427FE1B90255DD8556DBC9CC69D30C4635 Validity Not Before: Oct 25 17:23:31 2026 GMT Not After : Oct 26 20:29:31 2026 GMT Subject: CN=AA1DC1AB9A1E2DBB81B71DA0A3F143A4A5E101B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:79:c3:14:d6:41:47:f8:f6:be:e0:0b:df:8b: b6:8b:cf:62:f7:13:10:37:6d:88:2e:12:ed:11:6d: fc:3a:07:fa:00:4e:2b:46:f5:ad:ce:0a:77:39:53: 41:48:10:07:ad:3d:5b:6a:68:9f:3e:34:30:62:d1: 26:10:02:87:a3:bc:c7:a4:40:c5:5d:de:06:83:76: 74:00:e3:20:72:ae:1e:f6:64:3d:16:a7:af:a3:2a: 4e:8f:e9:3a:27:b7:c3:ed:8e:cf:1c:76:c9:1d:16: b2:6b:a5:0b:69:84:c6:fe:86:f8:57:54:ad:21:a1: 04:39:93:e4:15:fc:80:4d:93:14:7f:f2:59:e3:6d: cc:99:8e:b0:ea:4a:65:9b:3f:84:5c:4d:f2:a7:0b: 67:0a:80:40:32:33:95:a6:ac:fb:f4:8c:70:d8:38: c0:ab:63:ca:d3:68:93:21:3e:3b:80:71:ca:7f:8d: 86:0d:09:5e:56:39:f0:d7:c1:8b:cc:2d:e5:af:f2: 85:27:86:06:12:02:e6:65:c7:d3:a0:61:1f:bb:4a: b6:b1:8c:c2:66:3b:9c:89:df:2a:80:e1:46:e1:df: fe:7d:c5:a5:ab:9f:a2:48:59:7e:6b:6e:a1:84:25: f8:4e:5f:9f:8c:fe:e6:df:f1:9b:36:ce:1f:13:1d: 65:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1D:C1:AB:9A:1E:2D:BB:81:B7:1D:A0:A3:F1:43:A4:A5:E1:01:B5 X509v3 Authority Key Identifier: keyid:2E:90:C7:42:7F:E1:B9:02:55:DD:85:56:DB:C9:CC:69:D3:0C:46:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/2E90C7427FE1B90255DD8556DBC9CC69D30C4635.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:50:5a:61:d4:be:d9:cb:a1:42:81:be:65:cb:07:c7:b8:79: 0e:6d:68:1b:15:1a:f0:a8:4a:98:76:7c:79:9e:dd:0c:11:a6: cf:10:44:2c:10:a4:d1:f9:5b:df:f1:8c:2c:13:14:fd:28:32: ca:2b:04:e9:89:95:1f:51:fd:41:ad:50:45:d6:22:5b:15:8b: 11:72:56:1f:48:41:d7:a0:d4:50:85:d1:c7:ce:4d:f9:d9:70: e2:08:19:59:a4:b8:b8:db:29:1e:51:c2:01:70:52:af:4e:a4: d5:5f:91:be:c5:44:dd:4b:77:a8:03:40:4c:ec:c5:29:d3:ca: db:85:2d:b8:10:0c:5b:65:cb:79:7d:83:b4:54:58:4b:c7:99: 10:12:95:7c:26:be:55:81:2b:81:04:0b:c5:f7:96:ff:5b:ee: 5c:52:ed:8d:34:a0:91:17:3b:63:b3:8b:9f:91:97:c6:2e:ce: 10:cb:7b:22:91:42:c8:99:bd:23:42:de:e8:20:69:93:44:66: 1a:37:4f:97:24:a1:b3:a2:a6:e8:13:ef:c9:c7:39:39:c5:bd: 80:31:6f:cd:0e:ef:9f:39:38:75:49:15:08:6a:47:61:ac:eb: db:8f:5a:41:73:37:f4:8d:7a:b8:06:5d:0d:c4:54:5d:e6:21: 4d:d2:4d:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTjjb5bE11RwJxbbQZSMsVBWXdn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlE MzBDNDYzNTAeFw0yNjEwMjUxNzIzMzFaFw0yNjEwMjYyMDI5MzFaMDMxMTAvBgNV BAMTKEFBMURDMUFCOUExRTJEQkI4MUI3MURBMEEzRjE0M0E0QTVFMTAxQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuecMU1kFH+Pa+4Avfi7aLz2L3 ExA3bYguEu0Rbfw6B/oATitG9a3OCnc5U0FIEAetPVtqaJ8+NDBi0SYQAoejvMek QMVd3gaDdnQA4yByrh72ZD0Wp6+jKk6P6Tont8Ptjs8cdskdFrJrpQtphMb+hvhX VK0hoQQ5k+QV/IBNkxR/8lnjbcyZjrDqSmWbP4RcTfKnC2cKgEAyM5WmrPv0jHDY OMCrY8rTaJMhPjuAccp/jYYNCV5WOfDXwYvMLeWv8oUnhgYSAuZlx9OgYR+7Srax jMJmO5yJ3yqA4Ubh3/59xaWrn6JIWX5rbqGEJfhOX5+M/ubf8Zs2zh8THWULAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqh3Bq5oeLbuBtx2go/FDpKXhAbUwHwYDVR0j BBgwFoAULpDHQn/huQJV3YVW28nMadMMRjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTAzNmUwN2MtODI4My00M2QzLTkxNjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3 RkUxQjkwMjU1REQ4NTU2REJDOUNDNjlEMzBDNDYzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRTkwQzc0MjdGRTFCOTAyNTVERDg1NTZEQkM5Q0M2OUQzMEM0 NjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvMkU5MEM3NDI3RkUxQjkwMjU1REQ4NTU2REJDOUND NjlEMzBDNDYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFQWmHUvtnLoUKBvmXLB8e4eQ5taBsVGvCo Sph2fHme3QwRps8QRCwQpNH5W9/xjCwTFP0oMsorBOmJlR9R/UGtUEXWIlsVixFy Vh9IQdeg1FCF0cfOTfnZcOIIGVmkuLjbKR5RwgFwUq9OpNVfkb7FRN1Ld6gDQEzs xSnTytuFLbgQDFtly3l9g7RUWEvHmRASlXwmvlWBK4EEC8X3lv9b7lxS7Y00oJEX O2Ozi5+Rl8YuzhDLeyKRQsiZvSNC3uggaZNEZho3T5ckobOipugT78nHOTnFvYAx b80O7585OHVJFQhqR2Gs69uPWkFzN/SNergGXQ3EVF3mIU3STeY= -----END CERTIFICATE-----Generated at Sun Oct 25 19:48:05 2026 by rpki-client