$ rpki-client -vvf rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft File: 0356312D4CC6591488396D24CA6010583AD5DEE8.mft (raw, json) Hash identifier: o3W6dZqy2pw0v1Q+FQWJ7XEUNoXEy5yaHvh4uZ/0MFo= Subject key identifier: 83:81:6B:E7:B7:05:83:90:79:42:7C:B0:6B:71:52:5B:30:03:BE:D7 Authority key identifier: 03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8 Certificate issuer: /CN=0356312D4CC6591488396D24CA6010583AD5DEE8 Certificate serial: 0CDB65F9280E27DFCA32A865A4AB00DD8448D096 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:32:50 +0000 Manifest this update: Tue 12 May 2026 03:27:50 +0000 Manifest next update: Wed 13 May 2026 04:02:50 +0000 Files and hashes: 1: 3130332e3132352e3131362e302f32322d3232203d3e20313338313032.roa (hash: 4cPVakwVMjFAfG7saToZJr0gJzWEaBpwBZY2LPcL9EA=) 2: 3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa (hash: ApCgtDBxEubdKlndg5cFlm8phdewVjT2t1LXFFDojV8=) 3: 3130332e3132352e3131392e302f32342d3234203d3e20313338313032.roa (hash: eG51QjU9Y0bXD38UtepL5wxZWUtA5GvOYkJVu27CnrU=) 4: 3130332e3132352e3131382e302f32342d3234203d3e20313338313032.roa (hash: Z3TbTjv+S/nLuZ1/SdmDvuVHYcF+5+4oOXgFpO7orlg=) 5: 3130332e3132352e3131372e302f32342d3234203d3e20313338313032.roa (hash: zK9mKFzDzpwlGdkQliowFwWa9QhCrvBB+XTxzaxzwC0=) 6: 0356312D4CC6591488396D24CA6010583AD5DEE8.crl (hash: CvjgWxfRpJO13VP3l1F80tT1sAJYMH3yfd0TaW0mFdQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 04:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:db:65:f9:28:0e:27:df:ca:32:a8:65:a4:ab:00:dd:84:48:d0:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0356312D4CC6591488396D24CA6010583AD5DEE8 Validity Not Before: May 12 03:27:50 2026 GMT Not After : May 13 04:02:50 2026 GMT Subject: CN=83816BE7B705839079427CB06B71525B3003BED7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2b:55:25:dc:f3:41:15:18:c7:3c:4a:bb:1b: 09:e0:cb:bc:db:45:0a:3f:4a:a1:23:94:c6:f2:b4: d8:83:cf:db:89:12:94:d3:88:78:a8:41:fa:a8:b6: 3d:bc:0c:23:cf:64:67:82:95:ca:ce:59:f5:d6:b8: 9b:5b:9b:4f:73:13:b0:01:2d:49:e3:ab:02:d7:e1: 29:12:65:80:cc:11:5c:97:3d:37:4e:f3:fc:a7:e7: ec:9e:30:c5:cc:5c:2e:22:0b:90:55:8d:89:6a:96: 37:d1:14:01:1f:e9:27:a6:43:a9:cd:2a:7b:b1:3c: af:6c:65:2a:19:e6:e2:39:f1:fd:87:2c:d7:93:03: aa:71:4f:dc:52:21:eb:d0:a3:fd:d4:8f:ef:a2:b7: 44:4f:0c:d3:83:16:70:64:e9:af:93:d8:8d:54:ad: a8:51:f4:f1:92:40:d0:6a:36:28:e8:6a:5b:6a:b2: bb:c3:4a:e7:1b:de:2d:54:cc:3d:22:58:ad:7c:2a: a2:0d:de:d1:a4:64:12:0d:e3:2a:a8:3f:cc:4c:3e: 5d:63:5c:af:e2:6d:ef:88:72:6d:37:a5:25:c7:bd: a6:88:57:0d:40:6a:eb:e7:b4:a7:27:9b:32:8f:66: d5:0a:db:1e:de:ab:e0:17:ec:59:3b:a8:59:26:77: 8d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:81:6B:E7:B7:05:83:90:79:42:7C:B0:6B:71:52:5B:30:03:BE:D7 X509v3 Authority Key Identifier: keyid:03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:d1:d1:14:8a:d3:00:a7:c1:f8:5b:b1:51:e6:31:15:2f:80: 4e:31:19:47:a3:d0:47:10:b6:45:20:31:38:2e:21:9a:07:8a: ad:b9:29:e2:9b:ba:a8:a3:ec:de:98:45:d6:79:5a:b9:d4:59: db:e2:dc:83:9d:93:c6:dd:10:d7:c7:ba:f3:dc:b0:a4:72:6b: 46:b4:b7:ab:02:f5:7d:3b:a6:2e:88:65:27:c8:e5:e4:92:10: 7a:f8:40:90:54:42:90:ee:29:c5:7a:bd:b1:b5:c8:a0:f5:2b: c0:a0:8e:d5:83:0d:b6:44:92:e6:d5:d2:24:bd:33:71:23:f0: f5:1d:68:b0:8a:b6:59:0b:c4:2d:c1:f8:c9:5a:3c:e8:d6:02: e5:1d:42:df:15:5e:55:07:db:e4:f5:f1:bd:86:6f:dc:77:e7: 2b:a7:fb:f9:15:23:64:2f:5b:e2:1a:b7:03:41:26:7d:ae:21: 71:c1:51:4e:38:c5:b1:4f:0f:d9:c9:e5:5e:ef:0f:b2:93:c5: e4:43:a6:ca:66:2e:d6:61:09:83:b8:e6:5c:49:bc:ce:34:08: 00:ce:01:71:8a:b3:80:06:fb:cf:e2:20:74:9e:3d:d8:43:d0: a1:3e:6d:10:ab:bf:a5:53:af:e7:d3:7c:26:b2:ba:6c:aa:8a: 65:3e:78:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDNtl+SgOJ9/KMqhlpKsA3YRI0JYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM1NjMxMkQ0Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEwNTgz QUQ1REVFODAeFw0yNjA1MTIwMzI3NTBaFw0yNjA1MTMwNDAyNTBaMDMxMTAvBgNV BAMTKDgzODE2QkU3QjcwNTgzOTA3OTQyN0NCMDZCNzE1MjVCMzAwM0JFRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMK1Ul3PNBFRjHPEq7Gwngy7zb RQo/SqEjlMbytNiDz9uJEpTTiHioQfqotj28DCPPZGeClcrOWfXWuJtbm09zE7AB LUnjqwLX4SkSZYDMEVyXPTdO8/yn5+yeMMXMXC4iC5BVjYlqljfRFAEf6SemQ6nN KnuxPK9sZSoZ5uI58f2HLNeTA6pxT9xSIevQo/3Uj++it0RPDNODFnBk6a+T2I1U rahR9PGSQNBqNijoaltqsrvDSucb3i1UzD0iWK18KqIN3tGkZBIN4yqoP8xMPl1j XK/ibe+Icm03pSXHvaaIVw1AauvntKcnmzKPZtUK2x7eq+AX7Fk7qFkmd42VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg4Fr57cFg5B5Qnywa3FSWzADvtcwHwYDVR0j BBgwFoAUA1YxLUzGWRSIOW0kymAQWDrV3ugwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTBkZTIzMWYtZmI4YS00MjdhLWFhMzYtMGEzZmM5NzIzMjhkLzAvMDM1NjMxMkQ0 Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEwNTgzQUQ1REVFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMzU2MzEyRDRDQzY1OTE0ODgzOTZEMjRDQTYwMTA1ODNBRDVE RUU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTBkZTIzMWYtZmI4YS00MjdhLWFh MzYtMGEzZmM5NzIzMjhkLzAvMDM1NjMxMkQ0Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEw NTgzQUQ1REVFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3R0RSK0wCnwfhbsVHmMRUvgE4xGUej0EcQ tkUgMTguIZoHiq25KeKbuqij7N6YRdZ5WrnUWdvi3IOdk8bdENfHuvPcsKRya0a0 t6sC9X07pi6IZSfI5eSSEHr4QJBUQpDuKcV6vbG1yKD1K8CgjtWDDbZEkubV0iS9 M3Ej8PUdaLCKtlkLxC3B+MlaPOjWAuUdQt8VXlUH2+T18b2Gb9x35yun+/kVI2Qv W+IatwNBJn2uIXHBUU44xbFPD9nJ5V7vD7KTxeRDpspmLtZhCYO45lxJvM40CADO AXGKs4AG+8/iIHSePdhD0KE+bRCrv6VTr+fTfCayumyqimU+eAA= -----END CERTIFICATE-----Generated at Tue May 12 22:19:56 2026 by rpki-client