$ rpki-client -vvvf rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft File: 0356312D4CC6591488396D24CA6010583AD5DEE8.mft (raw, json) Hash identifier: KenDkpX/HnbLerMNZvSw4DKRbohNeDBBmXQG2ZIapLg= Subject key identifier: 93:2B:2F:6A:76:49:65:2E:11:F7:67:C0:35:DF:DB:6F:AA:3A:5D:1F Authority key identifier: 03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8 Certificate issuer: /CN=0356312D4CC6591488396D24CA6010583AD5DEE8 Certificate serial: 71A6C08D70350BCB12AE6D666B9C3B110DA14E94 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft Manifest number: BD Signing time: Mon 21 Sep 2026 02:09:10 +0000 Manifest this update: Mon 21 Sep 2026 02:04:10 +0000 Manifest next update: Tue 22 Sep 2026 04:29:10 +0000 Files and hashes: 1: 0356312D4CC6591488396D24CA6010583AD5DEE8.crl (hash: GnXYHtzD4+IsUSm86KmmdwMddsfOJSMUFLELUNiteqg=) 2: 3130332e3132352e3131372e302f32342d3234203d3e20313338313032.roa (hash: zK9mKFzDzpwlGdkQliowFwWa9QhCrvBB+XTxzaxzwC0=) 3: 3130332e3132352e3131392e302f32342d3234203d3e20313338313032.roa (hash: eG51QjU9Y0bXD38UtepL5wxZWUtA5GvOYkJVu27CnrU=) 4: 3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa (hash: ApCgtDBxEubdKlndg5cFlm8phdewVjT2t1LXFFDojV8=) 5: 3130332e3132352e3131382e302f32342d3234203d3e20313338313032.roa (hash: Z3TbTjv+S/nLuZ1/SdmDvuVHYcF+5+4oOXgFpO7orlg=) 6: 3130332e3132352e3131362e302f32322d3232203d3e20313338313032.roa (hash: 4cPVakwVMjFAfG7saToZJr0gJzWEaBpwBZY2LPcL9EA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a6:c0:8d:70:35:0b:cb:12:ae:6d:66:6b:9c:3b:11:0d:a1:4e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0356312D4CC6591488396D24CA6010583AD5DEE8 Validity Not Before: Sep 21 02:04:10 2026 GMT Not After : Sep 22 04:29:10 2026 GMT Subject: CN=932B2F6A7649652E11F767C035DFDB6FAA3A5D1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:91:92:ee:04:f4:e1:a7:59:4c:11:0a:9d:c3: b0:ef:1f:a4:01:c6:d5:af:76:94:34:9b:45:53:2c: eb:9f:e1:bf:1e:49:91:6d:77:5f:24:63:fb:ff:09: 58:38:30:6a:40:22:1b:3d:7d:59:5d:3d:e7:46:f9: 78:56:64:b4:4d:76:17:6c:18:00:f2:c1:6b:17:53: 5b:23:dc:80:05:34:dd:97:3c:fe:76:5d:27:eb:08: d0:f3:7f:68:21:f5:71:16:6d:e1:d2:51:db:c5:9a: cb:f4:33:d7:1a:36:54:f7:fc:d7:08:9a:d3:79:5c: ff:4d:3b:b7:f2:7d:54:0b:1a:fc:bb:87:34:e0:9c: 06:d9:33:a9:63:6c:61:43:2e:7e:29:9d:ee:64:fe: 62:f1:5b:eb:be:36:69:a7:c5:ce:48:a1:4f:f2:33: 90:10:00:4d:4d:21:20:32:d3:09:de:25:a7:be:b4: 65:c9:ea:3d:ce:48:ec:a7:d7:c7:71:df:14:9e:00: dc:9f:7b:d1:e9:2f:fd:7f:9e:31:ce:4d:45:0d:1b: 90:58:72:54:db:29:d8:7a:a2:cd:88:d6:59:5d:a6: ec:68:8b:d6:8d:9e:55:6e:db:55:3f:77:f1:11:f8: 83:58:92:88:bd:5a:af:4d:ed:56:12:e5:06:5b:4b: f9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2B:2F:6A:76:49:65:2E:11:F7:67:C0:35:DF:DB:6F:AA:3A:5D:1F X509v3 Authority Key Identifier: keyid:03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:1a:92:9e:af:61:4b:74:88:dd:a5:b4:02:80:36:32:6f:de: 24:68:ef:75:56:04:8d:55:a4:e4:04:a1:da:15:dc:02:6a:3a: 8b:12:35:79:eb:64:29:7d:19:cc:d6:6d:bd:76:05:e4:23:36: 56:70:56:15:f8:a2:55:71:7f:1a:c4:c7:95:31:75:69:9b:37: 2c:b0:51:96:c4:b3:e4:7a:8b:ae:14:d4:e6:66:c8:5b:af:72: f2:f5:49:f5:d3:1b:b8:59:ac:f9:bf:d8:00:6f:31:9d:9a:3f: ad:2e:c5:e9:71:da:d8:de:df:d3:73:ce:78:4b:e8:a7:d1:6b: 62:a7:6b:48:28:bb:40:76:de:c2:ab:dd:40:d9:e8:47:7d:66: 26:eb:3c:4b:62:88:00:3c:6a:76:7e:a1:47:56:c1:7a:54:1a: 25:a6:e7:ff:53:21:04:3f:3b:86:24:66:e2:68:98:7a:98:8f: d2:2d:39:ce:02:3b:69:cc:af:c4:41:01:ec:0d:0f:5b:3a:9b: e8:69:11:df:e8:5a:5b:70:cd:71:0f:6c:08:56:4d:b0:8d:c5: 80:0c:a4:70:b2:cf:aa:eb:0e:e7:46:06:22:02:74:ab:f0:70: ec:34:1a:7a:ae:ef:11:fa:a1:0a:7e:20:b4:07:52:18:86:ae: 74:b7:28:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcabAjXA1C8sSrm1ma5w7EQ2hTpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM1NjMxMkQ0Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEwNTgz QUQ1REVFODAeFw0yNjA5MjEwMjA0MTBaFw0yNjA5MjIwNDI5MTBaMDMxMTAvBgNV BAMTKDkzMkIyRjZBNzY0OTY1MkUxMUY3NjdDMDM1REZEQjZGQUEzQTVEMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJkZLuBPThp1lMEQqdw7DvH6QB xtWvdpQ0m0VTLOuf4b8eSZFtd18kY/v/CVg4MGpAIhs9fVldPedG+XhWZLRNdhds GADywWsXU1sj3IAFNN2XPP52XSfrCNDzf2gh9XEWbeHSUdvFmsv0M9caNlT3/NcI mtN5XP9NO7fyfVQLGvy7hzTgnAbZM6ljbGFDLn4pne5k/mLxW+u+Nmmnxc5IoU/y M5AQAE1NISAy0wneJae+tGXJ6j3OSOyn18dx3xSeANyfe9HpL/1/njHOTUUNG5BY clTbKdh6os2I1lldpuxoi9aNnlVu21U/d/ER+INYkoi9Wq9N7VYS5QZbS/kjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkysvanZJZS4R92fANd/bb6o6XR8wHwYDVR0j BBgwFoAUA1YxLUzGWRSIOW0kymAQWDrV3ugwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTBkZTIzMWYtZmI4YS00MjdhLWFhMzYtMGEzZmM5NzIzMjhkLzAvMDM1NjMxMkQ0 Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEwNTgzQUQ1REVFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMzU2MzEyRDRDQzY1OTE0ODgzOTZEMjRDQTYwMTA1ODNBRDVE RUU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTBkZTIzMWYtZmI4YS00MjdhLWFh MzYtMGEzZmM5NzIzMjhkLzAvMDM1NjMxMkQ0Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEw NTgzQUQ1REVFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYakp6vYUt0iN2ltAKANjJv3iRo73VWBI1V pOQEodoV3AJqOosSNXnrZCl9GczWbb12BeQjNlZwVhX4olVxfxrEx5UxdWmbNyyw UZbEs+R6i64U1OZmyFuvcvL1SfXTG7hZrPm/2ABvMZ2aP60uxelx2tje39NzznhL 6KfRa2Kna0gou0B23sKr3UDZ6Ed9ZibrPEtiiAA8anZ+oUdWwXpUGiWm5/9TIQQ/ O4YkZuJomHqYj9ItOc4CO2nMr8RBAewND1s6m+hpEd/oWltwzXEPbAhWTbCNxYAM pHCyz6rrDudGBiICdKvwcOw0Gnqu7xH6oQp+ILQHUhiGrnS3KOQ= -----END CERTIFICATE-----Generated at Mon Sep 21 16:05:41 2026 by rpki-client