$ rpki-client -vvf rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft File: 0356312D4CC6591488396D24CA6010583AD5DEE8.mft (raw, json) Hash identifier: vNpjNJ1H4buHKFNxFntDGYtx7Me5QWvRgQByUOiyEcg= Subject key identifier: 9D:F2:98:A4:5A:0A:F5:8B:1C:BE:CF:7A:C1:56:8E:F7:ED:4E:3B:35 Authority key identifier: 03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8 Certificate issuer: /CN=0356312D4CC6591488396D24CA6010583AD5DEE8 Certificate serial: 7D5A2D70B71D5B54E24BD3815E9A3A9CE3FC200B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:26:01 +0000 Manifest this update: Fri 24 Jul 2026 01:21:01 +0000 Manifest next update: Sat 25 Jul 2026 01:51:01 +0000 Files and hashes: 1: 3130332e3132352e3131362e302f32322d3232203d3e20313338313032.roa (hash: 4cPVakwVMjFAfG7saToZJr0gJzWEaBpwBZY2LPcL9EA=) 2: 3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa (hash: ApCgtDBxEubdKlndg5cFlm8phdewVjT2t1LXFFDojV8=) 3: 0356312D4CC6591488396D24CA6010583AD5DEE8.crl (hash: z7R+wtHMUxiRW5ank2Z4KJeInSBIpgDg5Xc0rrvljgU=) 4: 3130332e3132352e3131392e302f32342d3234203d3e20313338313032.roa (hash: eG51QjU9Y0bXD38UtepL5wxZWUtA5GvOYkJVu27CnrU=) 5: 3130332e3132352e3131372e302f32342d3234203d3e20313338313032.roa (hash: zK9mKFzDzpwlGdkQliowFwWa9QhCrvBB+XTxzaxzwC0=) 6: 3130332e3132352e3131382e302f32342d3234203d3e20313338313032.roa (hash: Z3TbTjv+S/nLuZ1/SdmDvuVHYcF+5+4oOXgFpO7orlg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:5a:2d:70:b7:1d:5b:54:e2:4b:d3:81:5e:9a:3a:9c:e3:fc:20:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0356312D4CC6591488396D24CA6010583AD5DEE8 Validity Not Before: Jul 24 01:21:01 2026 GMT Not After : Jul 25 01:51:01 2026 GMT Subject: CN=9DF298A45A0AF58B1CBECF7AC1568EF7ED4E3B35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:08:a0:f2:13:bc:63:85:cd:1a:e2:95:45:89: c4:4a:09:ba:27:43:f4:82:f3:97:92:bd:9c:60:f9: 8b:e3:31:b6:90:28:b8:75:a5:58:18:06:52:64:d0: 55:f8:71:7e:34:73:04:90:68:7b:09:b5:62:25:e3: 12:44:8f:63:eb:f4:09:f7:d0:86:16:f8:31:4d:f4: cc:43:e9:0e:87:f6:97:64:0f:53:d8:03:0b:4c:38: 26:73:b1:13:e5:28:82:f9:2f:14:bc:2b:3a:16:b5: 35:6d:82:a7:3c:8c:a5:c3:14:05:48:1a:51:9c:69: ce:79:dd:8d:6c:af:c2:6a:06:9e:eb:55:00:68:da: cc:a4:19:10:6e:8e:e4:fe:5e:88:14:3c:35:38:7b: 96:f7:3d:25:9f:76:d8:12:cd:2a:ca:d5:1a:08:1d: 1d:9d:36:24:b3:80:4b:6d:a5:0e:ff:23:5a:a2:c2: 9a:d7:c1:fd:df:77:b5:38:1b:0f:2e:a4:34:2f:a4: 03:e0:4d:da:cf:ab:b9:c7:0d:cc:c0:e2:fc:6f:34: 4f:b2:bb:1b:5f:3c:84:86:32:73:e4:93:b4:e5:94: 2e:4e:e8:7e:2c:85:4a:bc:8e:bd:df:98:ff:23:16: 36:72:a3:b1:5b:e7:8d:38:fb:5a:9c:55:c0:4a:c6: 51:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F2:98:A4:5A:0A:F5:8B:1C:BE:CF:7A:C1:56:8E:F7:ED:4E:3B:35 X509v3 Authority Key Identifier: keyid:03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:81:ff:64:a8:c7:0c:9a:fe:c0:15:bf:7b:55:24:02:de:fc: 09:79:b1:03:54:82:b5:d8:b1:4f:b8:48:04:34:ab:16:f6:f7: 7a:28:e0:80:11:ed:14:78:50:ea:a6:7f:f3:eb:01:2c:f1:c3: 50:7b:d5:15:1b:71:e1:9e:71:cc:86:43:b1:b1:99:24:5f:48: e5:8b:41:43:ad:ba:97:1f:33:23:9a:6a:26:61:58:cb:e1:b1: 58:e5:f2:e6:ad:22:fe:af:ec:74:e9:38:fc:97:a2:8f:46:cb: 95:b1:f8:64:3f:53:39:fb:70:e8:63:32:1f:ce:1f:3b:da:1b: 62:6d:34:c7:9d:a5:78:8e:3d:08:c3:3b:06:89:d9:d9:69:4b: 1d:83:10:2d:43:64:e1:52:4c:a2:46:be:d2:40:7e:71:cf:3c: 46:2a:53:d2:c7:91:b6:d2:84:65:66:df:03:ac:ee:3d:b6:47: 15:03:a8:e0:a6:4a:d1:2a:16:c6:93:72:ed:db:7c:4e:3f:ed: ab:91:5c:85:55:3f:fd:1d:d7:54:db:57:03:a5:2d:71:df:3a: 33:6c:0f:5a:a2:94:f8:24:4b:17:4f:c0:d3:97:a3:70:43:7f: 11:b1:1d:07:7c:9b:e2:a8:14:1d:8b:d3:3c:b0:46:cd:30:4b: 8b:49:88:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfVotcLcdW1TiS9OBXpo6nOP8IAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM1NjMxMkQ0Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEwNTgz QUQ1REVFODAeFw0yNjA3MjQwMTIxMDFaFw0yNjA3MjUwMTUxMDFaMDMxMTAvBgNV BAMTKDlERjI5OEE0NUEwQUY1OEIxQ0JFQ0Y3QUMxNTY4RUY3RUQ0RTNCMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSCKDyE7xjhc0a4pVFicRKCbon Q/SC85eSvZxg+YvjMbaQKLh1pVgYBlJk0FX4cX40cwSQaHsJtWIl4xJEj2Pr9An3 0IYW+DFN9MxD6Q6H9pdkD1PYAwtMOCZzsRPlKIL5LxS8KzoWtTVtgqc8jKXDFAVI GlGcac553Y1sr8JqBp7rVQBo2sykGRBujuT+XogUPDU4e5b3PSWfdtgSzSrK1RoI HR2dNiSzgEttpQ7/I1qiwprXwf3fd7U4Gw8upDQvpAPgTdrPq7nHDczA4vxvNE+y uxtfPISGMnPkk7TllC5O6H4shUq8jr3fmP8jFjZyo7Fb5404+1qcVcBKxlEHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnfKYpFoK9Yscvs96wVaO9+1OOzUwHwYDVR0j BBgwFoAUA1YxLUzGWRSIOW0kymAQWDrV3ugwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTBkZTIzMWYtZmI4YS00MjdhLWFhMzYtMGEzZmM5NzIzMjhkLzAvMDM1NjMxMkQ0 Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEwNTgzQUQ1REVFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMzU2MzEyRDRDQzY1OTE0ODgzOTZEMjRDQTYwMTA1ODNBRDVE RUU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTBkZTIzMWYtZmI4YS00MjdhLWFh MzYtMGEzZmM5NzIzMjhkLzAvMDM1NjMxMkQ0Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEw NTgzQUQ1REVFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqB/2Soxwya/sAVv3tVJALe/Al5sQNUgrXY sU+4SAQ0qxb293oo4IAR7RR4UOqmf/PrASzxw1B71RUbceGeccyGQ7GxmSRfSOWL QUOtupcfMyOaaiZhWMvhsVjl8uatIv6v7HTpOPyXoo9Gy5Wx+GQ/Uzn7cOhjMh/O HzvaG2JtNMedpXiOPQjDOwaJ2dlpSx2DEC1DZOFSTKJGvtJAfnHPPEYqU9LHkbbS hGVm3wOs7j22RxUDqOCmStEqFsaTcu3bfE4/7auRXIVVP/0d11TbVwOlLXHfOjNs D1qilPgkSxdPwNOXo3BDfxGxHQd8m+KoFB2L0zywRs0wS4tJiOM= -----END CERTIFICATE-----Generated at Fri Jul 24 07:40:31 2026 by rpki-client