$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft File: 90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft (raw, json) Hash identifier: n4IRpykEtjgBdHssvQ9KyGOtdsN07PS2cdH/OgEulj4= Subject key identifier: E2:B3:CC:8C:E1:67:01:EF:8E:43:17:01:07:86:26:F5:2F:35:42:F8 Authority key identifier: 90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D Certificate issuer: /CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D Certificate serial: 4B2AC5152F9D777B50321EA96912FE96063068FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 01:25:19 +0000 Manifest this update: Thu 17 Sep 2026 01:20:19 +0000 Manifest next update: Fri 18 Sep 2026 05:08:19 +0000 Files and hashes: 1: 90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl (hash: gEEof4aMbh3zNgsLrFFz81Mhx6G50HgPNtoenLkIX7g=) 2: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: uouUKGbUozmFnKgub/+5mqf8ILo68JfceNZ+JRrYL4g=) 3: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: ytetHbaOFcdooikcS2dP3RfK75XM1xqRpP+fXSjDKG0=) 4: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: BNrW0eQU53nT/ba5DR3gG5VeToq8WtIzwdZt0XrzHK8=) 5: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: FSyjqZtd8XDVrxqAKcbaFrMIwjpkZU6OHpA9ABCfhcY=) 6: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: k5tpWx2NqoJhL6Gv4Q6AOH3uxzUVB7/CghrllRzLLUQ=) 7: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: KvOleZIfcn6EoZkKf6ZdFcLhmThnSWrW2/dXX/n7URA=) 8: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: dXDKfmvmczU9aYgLQYslTHLZ6G4+e/q+u9H8ndaerLU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:2a:c5:15:2f:9d:77:7b:50:32:1e:a9:69:12:fe:96:06:30:68:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D Validity Not Before: Sep 17 01:20:19 2026 GMT Not After : Sep 18 05:08:19 2026 GMT Subject: CN=E2B3CC8CE16701EF8E431701078626F52F3542F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6d:3c:aa:aa:8e:41:67:d8:92:d1:8e:fd:2e: 7b:47:dc:ff:c9:89:60:12:3e:ef:72:12:ed:d7:c9: 70:91:82:a3:9f:05:59:eb:05:6e:2d:49:98:6e:fb: b5:27:c9:4d:56:61:af:d3:28:ca:de:06:e6:bc:92: b2:fe:19:52:b7:1b:3e:1e:70:ba:60:d0:f4:4f:9e: 16:f3:01:7c:ea:5d:d8:8b:39:76:75:41:dc:26:61: be:e0:36:8d:0e:a8:e4:d2:ae:ae:5f:47:87:a7:69: 3f:ac:7a:c2:37:7e:47:50:69:4f:05:6a:5a:fa:0c: 83:83:5e:03:6d:43:2b:8c:69:58:a2:dc:d2:87:91: 22:db:d8:56:3d:f9:45:2e:d8:4b:b2:7b:ec:c7:97: 85:64:5b:20:0c:09:df:bb:e3:c3:06:d2:0f:9d:1f: 69:2f:03:44:71:6b:d8:c0:34:70:78:89:3b:8b:5a: a2:a8:3a:83:ed:24:d5:fb:0a:38:70:e1:c4:4d:6c: fd:8e:c3:00:8f:79:aa:ff:39:49:14:1f:9b:6a:90: f1:92:f7:2c:69:41:49:43:39:81:36:00:8f:49:46: dc:9d:02:7c:25:78:1f:20:0b:ca:9c:cf:9b:a9:c0: 57:c6:b2:e6:bb:1d:6a:9d:34:cc:8a:91:d7:a4:38: 9c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B3:CC:8C:E1:67:01:EF:8E:43:17:01:07:86:26:F5:2F:35:42:F8 X509v3 Authority Key Identifier: keyid:90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:cf:fb:45:bd:7d:af:90:16:d4:bc:85:09:d2:cd:6a:a6:3a: 8f:00:ef:c7:77:f6:32:55:02:51:a3:1f:78:f0:3a:a6:70:f4: 45:b1:b1:a7:83:05:80:9a:54:ef:8f:a8:7f:e2:d9:0c:9c:ca: 5e:34:c1:9b:d9:06:7f:10:54:4f:e0:a0:6f:ee:09:35:bd:c1: 25:e1:78:27:6d:d9:59:2b:3e:ea:b6:ed:65:b8:61:ef:75:61: 4f:22:26:b5:ad:d6:fb:4a:af:bd:b6:71:94:62:18:e2:0c:b2: 1a:f9:45:39:28:62:f0:76:73:49:51:a4:ea:e3:32:bd:f5:9f: 3f:9f:1b:03:50:57:f2:fe:7f:68:9d:ec:5d:e5:ad:5f:14:0d: 68:e9:71:8d:c1:d0:8b:f4:10:e8:b8:31:0a:ee:c8:68:85:4e: 2f:74:d8:09:f5:f4:e3:b0:c4:18:a0:e1:16:25:ef:ef:37:5c: b8:b0:79:3e:b3:27:a8:13:62:15:e9:24:dd:5f:07:50:4d:0b: 41:63:76:b6:70:5b:3a:0c:a2:57:c3:35:c2:c5:7c:c2:d2:9d: bc:d0:3a:30:a8:1e:6d:21:4c:99:dd:25:bb:31:65:f4:9f:85: 52:12:30:36:e4:4b:92:6c:64:43:ac:b1:e8:3d:e1:62:c5:e6: e9:39:cd:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSyrFFS+dd3tQMh6paRL+lgYwaP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBDM0JDNjZBQTc0NUM5RUE4REE5RDgxNUFEN0JGNEJG MkRFNUU1RDAeFw0yNjA5MTcwMTIwMTlaFw0yNjA5MTgwNTA4MTlaMDMxMTAvBgNV BAMTKEUyQjNDQzhDRTE2NzAxRUY4RTQzMTcwMTA3ODYyNkY1MkYzNTQyRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsbTyqqo5BZ9iS0Y79LntH3P/J iWASPu9yEu3XyXCRgqOfBVnrBW4tSZhu+7UnyU1WYa/TKMreBua8krL+GVK3Gz4e cLpg0PRPnhbzAXzqXdiLOXZ1QdwmYb7gNo0OqOTSrq5fR4enaT+sesI3fkdQaU8F alr6DIODXgNtQyuMaVii3NKHkSLb2FY9+UUu2Euye+zHl4VkWyAMCd+748MG0g+d H2kvA0Rxa9jANHB4iTuLWqKoOoPtJNX7Cjhw4cRNbP2OwwCPear/OUkUH5tqkPGS 9yxpQUlDOYE2AI9JRtydAnwleB8gC8qcz5upwFfGsua7HWqdNMyKkdekOJyXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4rPMjOFnAe+OQxcBB4Ym9S81QvgwHwYDVR0j BBgwFoAUkMO8Zqp0XJ6o2p2BWte/S/LeXl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjZiNWFlMWUtYmU2Ni00YTMwLWE5NDgtN2Q0NzhjMjJlYTJiLzAvOTBDM0JDNjZB QTc0NUM5RUE4REE5RDgxNUFEN0JGNEJGMkRFNUU1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MEMzQkM2NkFBNzQ1QzlFQThEQTlEODE1QUQ3QkY0QkYyREU1 RTVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjZiNWFlMWUtYmU2Ni00YTMwLWE5 NDgtN2Q0NzhjMjJlYTJiLzAvOTBDM0JDNjZBQTc0NUM5RUE4REE5RDgxNUFEN0JG NEJGMkRFNUU1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7P+0W9fa+QFtS8hQnSzWqmOo8A78d39jJV AlGjH3jwOqZw9EWxsaeDBYCaVO+PqH/i2Qycyl40wZvZBn8QVE/goG/uCTW9wSXh eCdt2VkrPuq27WW4Ye91YU8iJrWt1vtKr722cZRiGOIMshr5RTkoYvB2c0lRpOrj Mr31nz+fGwNQV/L+f2id7F3lrV8UDWjpcY3B0Iv0EOi4MQruyGiFTi902An19OOw xBig4RYl7+83XLiweT6zJ6gTYhXpJN1fB1BNC0FjdrZwWzoMolfDNcLFfMLSnbzQ OjCoHm0hTJndJbsxZfSfhVISMDbkS5JsZEOsseg94WLF5uk5zdc= -----END CERTIFICATE-----Generated at Thu Sep 17 11:04:18 2026 by rpki-client