$ rpki-client -vvf rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft File: 0356312D4CC6591488396D24CA6010583AD5DEE8.mft (raw, json) Hash identifier: +oXZPmVf07Ie4ejL1e9+HYdaCheyI1kCyszM544CIm4= Subject key identifier: 0C:EC:5E:A4:D7:F8:27:EE:B7:27:F8:4A:F6:1C:72:A8:35:42:CE:27 Authority key identifier: 03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8 Certificate issuer: /CN=0356312D4CC6591488396D24CA6010583AD5DEE8 Certificate serial: 2B891512A1CC1F9444136FA05086DF61B68710E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 03:11:42 +0000 Manifest this update: Wed 17 Jun 2026 03:06:42 +0000 Manifest next update: Thu 18 Jun 2026 04:57:42 +0000 Files and hashes: 1: 3130332e3132352e3131392e302f32342d3234203d3e20313338313032.roa (hash: eG51QjU9Y0bXD38UtepL5wxZWUtA5GvOYkJVu27CnrU=) 2: 3130332e3132352e3131362e302f32322d3232203d3e20313338313032.roa (hash: 4cPVakwVMjFAfG7saToZJr0gJzWEaBpwBZY2LPcL9EA=) 3: 3130332e3132352e3131382e302f32342d3234203d3e20313338313032.roa (hash: Z3TbTjv+S/nLuZ1/SdmDvuVHYcF+5+4oOXgFpO7orlg=) 4: 0356312D4CC6591488396D24CA6010583AD5DEE8.crl (hash: J2tmmwGcyNlgUEGF7uZuZp9ARdRiE/ts7jquh1ntHys=) 5: 3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa (hash: ApCgtDBxEubdKlndg5cFlm8phdewVjT2t1LXFFDojV8=) 6: 3130332e3132352e3131372e302f32342d3234203d3e20313338313032.roa (hash: zK9mKFzDzpwlGdkQliowFwWa9QhCrvBB+XTxzaxzwC0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:89:15:12:a1:cc:1f:94:44:13:6f:a0:50:86:df:61:b6:87:10:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0356312D4CC6591488396D24CA6010583AD5DEE8 Validity Not Before: Jun 17 03:06:42 2026 GMT Not After : Jun 18 04:57:42 2026 GMT Subject: CN=0CEC5EA4D7F827EEB727F84AF61C72A83542CE27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:90:45:06:70:e3:36:94:92:51:d8:ff:db: 52:62:e1:a4:23:38:0b:a1:5a:a6:5e:e9:4f:e6:21: ed:d1:18:35:76:33:bd:8c:dd:70:19:db:c6:b2:47: b2:bc:69:0a:72:ce:c1:7d:08:a6:ff:0c:a9:ae:92: 69:3d:85:27:1a:dc:80:74:ca:fd:2a:47:5e:3e:b3: e8:8b:89:10:50:e1:ce:8c:ee:b6:6d:9f:10:17:94: 1c:99:c8:4d:a5:13:aa:4d:b7:ce:3e:5e:38:4e:57: cf:84:72:df:88:8c:bb:5b:fb:6d:87:e7:2d:04:81: d9:78:a6:79:c9:14:77:a1:0b:fb:69:41:2b:dd:24: 1a:0b:14:8c:20:d5:60:6e:09:71:39:6d:08:30:b2: b9:7b:6e:db:65:72:dc:b9:56:a2:cb:15:af:43:ee: d3:ea:77:0f:74:d3:bb:14:30:bd:76:60:94:9f:bb: 46:bd:67:9e:76:c1:f9:69:15:64:c3:b3:98:2f:e1: 1e:b5:09:5b:03:02:51:d8:05:9b:83:d4:37:91:13: 1a:b2:a1:4d:cf:90:78:b0:ff:0b:bd:65:e3:8e:ea: be:37:ca:07:d9:2f:8d:9a:14:65:b1:eb:43:dd:97: 6b:f6:ab:6e:25:02:43:6e:72:1c:99:f3:e7:9b:0e: 37:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EC:5E:A4:D7:F8:27:EE:B7:27:F8:4A:F6:1C:72:A8:35:42:CE:27 X509v3 Authority Key Identifier: keyid:03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:14:4e:e9:e1:db:98:c5:c3:6d:a7:39:ef:93:cf:44:07:02: ac:92:a5:48:d0:df:c2:4a:68:99:df:29:dc:65:f8:39:c7:66: 55:f0:eb:9d:b3:bb:98:33:09:54:a5:ed:f9:62:2b:cb:f8:1e: 5a:7d:11:c3:3c:14:51:1e:48:8c:69:b2:ec:35:26:fc:f6:b1: e0:34:0a:d2:2c:f2:b2:14:36:f7:a7:62:f2:f6:63:c4:36:8c: 19:70:14:d2:44:30:d9:0d:a6:b6:f1:02:f0:43:cb:03:ee:b1: de:4f:cc:a3:0c:7e:d4:c1:16:7a:a7:3f:40:5b:8f:0d:00:bc: e7:59:73:75:f3:3b:c8:7a:9d:b6:66:b3:ef:06:3b:a9:35:a8: 2c:be:0e:03:9f:70:d0:f9:66:f8:c9:55:57:75:1a:33:f7:ac: 1d:df:de:f4:f9:80:c8:f1:a4:87:27:3c:d6:90:d4:0e:cf:1f: 2d:34:96:91:da:17:25:2c:04:4f:9f:f7:49:6b:68:5e:f3:b0: 98:f3:7a:98:65:1f:13:04:a3:a6:fc:fd:12:56:bb:a8:5f:17: 9a:9d:78:76:b7:f9:91:af:e9:9b:d9:63:4d:0e:40:a4:fb:a3: 99:34:db:a3:96:8c:8a:64:59:93:b0:78:f3:0d:6d:a5:19:1b: a1:dd:9d:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK4kVEqHMH5REE2+gUIbfYbaHEOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM1NjMxMkQ0Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEwNTgz QUQ1REVFODAeFw0yNjA2MTcwMzA2NDJaFw0yNjA2MTgwNDU3NDJaMDMxMTAvBgNV BAMTKDBDRUM1RUE0RDdGODI3RUVCNzI3Rjg0QUY2MUM3MkE4MzU0MkNFMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC69JBFBnDjNpSSUdj/21Ji4aQj OAuhWqZe6U/mIe3RGDV2M72M3XAZ28ayR7K8aQpyzsF9CKb/DKmukmk9hSca3IB0 yv0qR14+s+iLiRBQ4c6M7rZtnxAXlByZyE2lE6pNt84+XjhOV8+Ect+IjLtb+22H 5y0Egdl4pnnJFHehC/tpQSvdJBoLFIwg1WBuCXE5bQgwsrl7bttlcty5VqLLFa9D 7tPqdw9007sUML12YJSfu0a9Z552wflpFWTDs5gv4R61CVsDAlHYBZuD1DeRExqy oU3PkHiw/wu9ZeOO6r43ygfZL42aFGWx60Pdl2v2q24lAkNuchyZ8+ebDjdHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDOxepNf4J+63J/hK9hxyqDVCzicwHwYDVR0j BBgwFoAUA1YxLUzGWRSIOW0kymAQWDrV3ugwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTBkZTIzMWYtZmI4YS00MjdhLWFhMzYtMGEzZmM5NzIzMjhkLzAvMDM1NjMxMkQ0 Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEwNTgzQUQ1REVFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMzU2MzEyRDRDQzY1OTE0ODgzOTZEMjRDQTYwMTA1ODNBRDVE RUU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTBkZTIzMWYtZmI4YS00MjdhLWFh MzYtMGEzZmM5NzIzMjhkLzAvMDM1NjMxMkQ0Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEw NTgzQUQ1REVFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAUTunh25jFw22nOe+Tz0QHAqySpUjQ38JK aJnfKdxl+DnHZlXw652zu5gzCVSl7fliK8v4Hlp9EcM8FFEeSIxpsuw1Jvz2seA0 CtIs8rIUNvenYvL2Y8Q2jBlwFNJEMNkNprbxAvBDywPusd5PzKMMftTBFnqnP0Bb jw0AvOdZc3XzO8h6nbZms+8GO6k1qCy+DgOfcND5ZvjJVVd1GjP3rB3f3vT5gMjx pIcnPNaQ1A7PHy00lpHaFyUsBE+f90lraF7zsJjzephlHxMEo6b8/RJWu6hfF5qd eHa3+ZGv6ZvZY00OQKT7o5k026OWjIpkWZOwePMNbaUZG6HdneE= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:14 2026 by rpki-client