$ rpki-client -vvvf rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft File: 0356312D4CC6591488396D24CA6010583AD5DEE8.mft (raw, json) Hash identifier: yjQg6hc0nsRiVraDD8oNGxAADnrgdrRmgG7MB1hij6Q= Subject key identifier: 4E:DC:CB:7A:06:03:B3:D2:A5:77:1E:7D:D9:E1:27:DD:62:0C:66:4C Authority key identifier: 03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8 Certificate issuer: /CN=0356312D4CC6591488396D24CA6010583AD5DEE8 Certificate serial: 6834BA9D446E6083274CA2B25C924C928E1B61FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 02:44:07 +0000 Manifest this update: Thu 24 Sep 2026 02:39:07 +0000 Manifest next update: Fri 25 Sep 2026 06:35:07 +0000 Files and hashes: 1: 3130332e3132352e3131362e302f32322d3232203d3e20313338313032.roa (hash: 4cPVakwVMjFAfG7saToZJr0gJzWEaBpwBZY2LPcL9EA=) 2: 0356312D4CC6591488396D24CA6010583AD5DEE8.crl (hash: fhA1UzOir/lXManT+ZNu3sTJA8hCln6XQ0585u9MeYI=) 3: 3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa (hash: ApCgtDBxEubdKlndg5cFlm8phdewVjT2t1LXFFDojV8=) 4: 3130332e3132352e3131372e302f32342d3234203d3e20313338313032.roa (hash: zK9mKFzDzpwlGdkQliowFwWa9QhCrvBB+XTxzaxzwC0=) 5: 3130332e3132352e3131382e302f32342d3234203d3e20313338313032.roa (hash: Z3TbTjv+S/nLuZ1/SdmDvuVHYcF+5+4oOXgFpO7orlg=) 6: 3130332e3132352e3131392e302f32342d3234203d3e20313338313032.roa (hash: eG51QjU9Y0bXD38UtepL5wxZWUtA5GvOYkJVu27CnrU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:34:ba:9d:44:6e:60:83:27:4c:a2:b2:5c:92:4c:92:8e:1b:61:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0356312D4CC6591488396D24CA6010583AD5DEE8 Validity Not Before: Sep 24 02:39:07 2026 GMT Not After : Sep 25 06:35:07 2026 GMT Subject: CN=4EDCCB7A0603B3D2A5771E7DD9E127DD620C664C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c9:6d:ac:bb:d3:ce:d9:9b:8c:b3:c2:bf:8b: 77:99:cc:52:e4:88:59:52:12:5d:3b:d6:4d:7f:96: ba:8a:b8:76:e5:a0:55:b8:50:6b:7c:10:9c:50:db: be:8a:20:3d:ed:b6:fd:bb:cc:57:3a:12:28:c1:1e: 09:80:04:44:10:0a:62:65:80:f7:6e:80:64:fb:61: 68:74:43:52:ae:f8:10:f9:67:35:b3:2d:f8:8f:96: 47:29:06:0b:2e:0f:fe:be:de:15:56:cd:c8:ec:da: 2b:9a:61:bd:ff:b4:a9:88:4a:4b:ec:bb:a3:84:be: 80:e8:13:53:8b:65:05:ea:7b:47:3b:c7:3d:36:d2: 33:d4:9b:d8:d1:81:08:97:f1:74:45:e1:2c:b6:a0: 1a:ae:8c:25:f3:94:68:8e:02:08:e3:16:1d:24:ec: a2:a5:a6:70:1a:9c:41:c8:f8:15:cd:f7:ef:c2:84: af:d4:34:12:1d:4b:e1:92:84:1e:80:39:e0:f9:36: 52:51:ec:07:74:ca:14:57:c5:b5:96:95:0e:49:f9: da:e1:09:27:78:b1:36:0f:e7:55:62:52:b1:b0:4d: 8a:62:9b:e3:81:d7:5a:1a:af:9e:0d:c2:be:c0:9f: 76:cc:7b:98:09:da:63:ec:84:16:23:1b:8e:59:0f: 98:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DC:CB:7A:06:03:B3:D2:A5:77:1E:7D:D9:E1:27:DD:62:0C:66:4C X509v3 Authority Key Identifier: keyid:03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:08:7c:cc:df:12:49:76:1a:84:44:73:53:d2:0c:11:06:17: cb:db:cc:08:9e:12:1b:29:aa:d9:23:68:1e:ff:30:11:67:34: ee:6f:ba:b6:37:f5:27:a5:90:91:4e:5c:82:81:43:06:78:36: 55:f8:c2:7d:04:f3:13:cf:7d:b1:64:eb:4b:92:1c:fd:ef:98: 23:61:c7:6e:4f:71:2c:d0:3a:cf:74:a4:82:60:2e:16:4a:0a: e2:c4:97:ea:16:4a:4f:79:c1:ea:ab:b0:74:86:d9:43:42:e0: 5c:43:1b:23:f2:95:60:f7:0d:e5:53:fc:36:86:2b:16:e2:66: f3:55:ea:12:da:88:d1:95:ca:16:ed:a0:50:c0:94:be:f1:86: 1e:6a:51:48:dd:b4:80:8f:8a:7c:90:6c:27:9f:a6:e0:6f:49: 19:75:a1:40:60:c8:1c:d6:1f:04:1f:25:fc:84:c5:7e:c4:97: 1a:c0:fb:be:ec:1a:cb:00:51:cd:12:bb:56:cb:bf:20:68:c2: 33:5e:0d:4b:5f:c8:fc:d2:d1:ca:b7:60:24:29:89:94:1a:fa: 3f:8c:4d:36:56:ec:a0:1e:df:62:cd:45:92:cc:b4:63:13:2a: e7:f5:68:9b:e2:bb:1f:85:f9:b0:9a:74:3b:50:3c:78:93:ea: c0:30:16:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaDS6nURuYIMnTKKyXJJMko4bYfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM1NjMxMkQ0Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEwNTgz QUQ1REVFODAeFw0yNjA5MjQwMjM5MDdaFw0yNjA5MjUwNjM1MDdaMDMxMTAvBgNV BAMTKDRFRENDQjdBMDYwM0IzRDJBNTc3MUU3REQ5RTEyN0RENjIwQzY2NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPyW2su9PO2ZuMs8K/i3eZzFLk iFlSEl071k1/lrqKuHbloFW4UGt8EJxQ276KID3ttv27zFc6EijBHgmABEQQCmJl gPdugGT7YWh0Q1Ku+BD5ZzWzLfiPlkcpBgsuD/6+3hVWzcjs2iuaYb3/tKmISkvs u6OEvoDoE1OLZQXqe0c7xz020jPUm9jRgQiX8XRF4Sy2oBqujCXzlGiOAgjjFh0k 7KKlpnAanEHI+BXN9+/ChK/UNBIdS+GShB6AOeD5NlJR7Ad0yhRXxbWWlQ5J+drh CSd4sTYP51ViUrGwTYpim+OB11oar54Nwr7An3bMe5gJ2mPshBYjG45ZD5gNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTtzLegYDs9Kldx592eEn3WIMZkwwHwYDVR0j BBgwFoAUA1YxLUzGWRSIOW0kymAQWDrV3ugwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTBkZTIzMWYtZmI4YS00MjdhLWFhMzYtMGEzZmM5NzIzMjhkLzAvMDM1NjMxMkQ0 Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEwNTgzQUQ1REVFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMzU2MzEyRDRDQzY1OTE0ODgzOTZEMjRDQTYwMTA1ODNBRDVE RUU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTBkZTIzMWYtZmI4YS00MjdhLWFh MzYtMGEzZmM5NzIzMjhkLzAvMDM1NjMxMkQ0Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEw NTgzQUQ1REVFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMIfMzfEkl2GoREc1PSDBEGF8vbzAieEhsp qtkjaB7/MBFnNO5vurY39SelkJFOXIKBQwZ4NlX4wn0E8xPPfbFk60uSHP3vmCNh x25PcSzQOs90pIJgLhZKCuLEl+oWSk95weqrsHSG2UNC4FxDGyPylWD3DeVT/DaG KxbiZvNV6hLaiNGVyhbtoFDAlL7xhh5qUUjdtICPinyQbCefpuBvSRl1oUBgyBzW HwQfJfyExX7ElxrA+77sGssAUc0Su1bLvyBowjNeDUtfyPzS0cq3YCQpiZQa+j+M TTZW7KAe32LNRZLMtGMTKuf1aJviux+F+bCadDtQPHiT6sAwFkE= -----END CERTIFICATE-----Generated at Thu Sep 24 10:41:03 2026 by rpki-client