$ rpki-client -vvvf rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft File: 0356312D4CC6591488396D24CA6010583AD5DEE8.mft (raw, json) Hash identifier: UumfxZrApaDNGi8hR6uqmL1f1yWGWjGXiJQVaO9Sax8= Subject key identifier: 84:16:F4:1D:C2:AA:03:44:72:43:19:E8:3E:7C:5B:99:0A:8F:14:84 Authority key identifier: 03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8 Certificate issuer: /CN=0356312D4CC6591488396D24CA6010583AD5DEE8 Certificate serial: 51E1ED78F0CB908420D283E05BCD9D985BAA9C15 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft Manifest number: F4 Signing time: Sun 01 Nov 2026 22:41:07 +0000 Manifest this update: Sun 01 Nov 2026 22:36:07 +0000 Manifest next update: Tue 03 Nov 2026 01:05:07 +0000 Files and hashes: 1: 3130332e3132352e3131372e302f32342d3234203d3e20313338313032.roa (hash: zK9mKFzDzpwlGdkQliowFwWa9QhCrvBB+XTxzaxzwC0=) 2: 0356312D4CC6591488396D24CA6010583AD5DEE8.crl (hash: /Guv9S4BiKT7feI7t+s/fGhxf7q/tDNqjBMmpuUxyaU=) 3: 3130332e3132352e3131392e302f32342d3234203d3e20313338313032.roa (hash: eG51QjU9Y0bXD38UtepL5wxZWUtA5GvOYkJVu27CnrU=) 4: 3130332e3132352e3131362e302f32322d3232203d3e20313338313032.roa (hash: 4cPVakwVMjFAfG7saToZJr0gJzWEaBpwBZY2LPcL9EA=) 5: 3130332e3132352e3131382e302f32342d3234203d3e20313338313032.roa (hash: Z3TbTjv+S/nLuZ1/SdmDvuVHYcF+5+4oOXgFpO7orlg=) 6: 3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa (hash: ApCgtDBxEubdKlndg5cFlm8phdewVjT2t1LXFFDojV8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:e1:ed:78:f0:cb:90:84:20:d2:83:e0:5b:cd:9d:98:5b:aa:9c:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0356312D4CC6591488396D24CA6010583AD5DEE8 Validity Not Before: Nov 1 22:36:07 2026 GMT Not After : Nov 3 01:05:07 2026 GMT Subject: CN=8416F41DC2AA0344724319E83E7C5B990A8F1484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b2:eb:26:cb:ad:8a:2d:84:34:96:05:5b:5b: f0:42:3c:65:3c:5d:ed:b2:2f:6f:9f:b5:84:d4:4a: eb:ba:14:f1:7b:22:e4:3c:7c:3d:61:3c:ee:69:da: 2f:a6:09:d6:c1:9c:2b:01:1a:b8:8c:a7:70:53:65: 4f:b9:ba:e6:61:4b:63:8f:ed:d9:ec:7f:1e:28:84: 6e:7e:ba:e2:4a:52:44:d3:1c:b5:de:b0:88:30:1a: 74:ac:d4:01:a3:c4:a7:9b:03:65:a1:1d:3e:a0:56: d2:42:29:de:61:1f:d4:f5:9a:76:86:1f:0b:c9:b0: 9e:ce:1f:5f:49:01:a1:3a:31:71:4b:c3:e3:2f:c5: 32:63:6c:f9:36:30:7a:7b:20:47:86:07:bb:1d:96: 29:df:e4:6a:2f:17:c6:08:27:0d:8d:b7:cc:49:e9: f1:6e:a1:ca:19:ed:4c:d3:56:1e:c7:ac:0d:10:53: 17:ec:bf:2e:59:3a:42:8b:b7:73:d3:8a:39:7c:0e: aa:a5:13:a9:1a:eb:6f:c2:c6:db:70:c4:a5:c0:1a: 45:b0:e4:26:c0:e3:94:d2:ab:ba:8b:56:9d:26:ca: 8c:1a:71:71:0b:58:b4:66:df:20:f0:95:3d:b4:cf: c6:91:73:ae:cd:1f:6b:37:33:64:51:00:d0:5e:94: 14:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:16:F4:1D:C2:AA:03:44:72:43:19:E8:3E:7C:5B:99:0A:8F:14:84 X509v3 Authority Key Identifier: keyid:03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:03:e6:d8:62:78:9a:e6:53:52:15:e6:fd:92:58:d6:ed:e0: 9a:75:ef:cc:fa:e5:af:67:d5:de:f4:40:15:7c:96:3b:81:dc: 3e:ce:80:ff:d1:4d:2d:c6:89:14:c6:c2:c4:03:90:53:3b:99: 8f:86:da:f0:77:1b:08:d4:be:b9:d8:f8:ee:04:67:18:16:1d: c0:d5:3e:78:a5:4c:2e:e1:81:92:c6:dd:8a:4c:ef:32:4c:c3: d6:5e:e9:ec:4b:bf:d1:8d:86:39:bb:f8:b0:33:31:7d:9c:c9: 52:2f:a2:39:ab:b4:ab:0f:cf:69:68:32:d1:dc:ea:10:17:c2: 6b:72:2b:e9:42:3a:a9:38:9d:3e:e4:fd:58:56:71:1c:e3:b0: 35:4b:f7:54:cb:30:93:ac:b1:c3:63:3f:80:c4:75:30:2c:94: ac:2f:33:3a:a6:04:01:57:3a:20:d7:8f:a9:ca:15:09:39:ad: 58:ed:e7:36:4e:e3:52:c2:bb:94:54:61:43:0f:50:dd:77:47: 8d:6b:bc:b7:2e:c7:06:92:98:64:8a:44:52:d9:3e:69:5d:0e: 38:e9:13:c3:fa:95:e7:39:7f:8d:c8:b3:7a:07:82:d6:be:dc: d1:49:d3:86:a2:44:a5:49:c0:38:05:e6:1c:3f:4d:40:4b:15: bf:e0:a6:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUeHtePDLkIQg0oPgW82dmFuqnBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM1NjMxMkQ0Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEwNTgz QUQ1REVFODAeFw0yNjExMDEyMjM2MDdaFw0yNjExMDMwMTA1MDdaMDMxMTAvBgNV BAMTKDg0MTZGNDFEQzJBQTAzNDQ3MjQzMTlFODNFN0M1Qjk5MEE4RjE0ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8susmy62KLYQ0lgVbW/BCPGU8 Xe2yL2+ftYTUSuu6FPF7IuQ8fD1hPO5p2i+mCdbBnCsBGriMp3BTZU+5uuZhS2OP 7dnsfx4ohG5+uuJKUkTTHLXesIgwGnSs1AGjxKebA2WhHT6gVtJCKd5hH9T1mnaG HwvJsJ7OH19JAaE6MXFLw+MvxTJjbPk2MHp7IEeGB7sdlinf5GovF8YIJw2Nt8xJ 6fFuocoZ7UzTVh7HrA0QUxfsvy5ZOkKLt3PTijl8DqqlE6ka62/CxttwxKXAGkWw 5CbA45TSq7qLVp0myowacXELWLRm3yDwlT20z8aRc67NH2s3M2RRANBelBTRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhBb0HcKqA0RyQxnoPnxbmQqPFIQwHwYDVR0j BBgwFoAUA1YxLUzGWRSIOW0kymAQWDrV3ugwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTBkZTIzMWYtZmI4YS00MjdhLWFhMzYtMGEzZmM5NzIzMjhkLzAvMDM1NjMxMkQ0 Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEwNTgzQUQ1REVFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMzU2MzEyRDRDQzY1OTE0ODgzOTZEMjRDQTYwMTA1ODNBRDVE RUU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTBkZTIzMWYtZmI4YS00MjdhLWFh MzYtMGEzZmM5NzIzMjhkLzAvMDM1NjMxMkQ0Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEw NTgzQUQ1REVFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALUD5thieJrmU1IV5v2SWNbt4Jp178z65a9n 1d70QBV8ljuB3D7OgP/RTS3GiRTGwsQDkFM7mY+G2vB3GwjUvrnY+O4EZxgWHcDV PnilTC7hgZLG3YpM7zJMw9Ze6exLv9GNhjm7+LAzMX2cyVIvojmrtKsPz2loMtHc 6hAXwmtyK+lCOqk4nT7k/VhWcRzjsDVL91TLMJOsscNjP4DEdTAslKwvMzqmBAFX OiDXj6nKFQk5rVjt5zZO41LCu5RUYUMPUN13R41rvLcuxwaSmGSKRFLZPmldDjjp E8P6lec5f43Is3oHgta+3NFJ04aiRKVJwDgF5hw/TUBLFb/gptQ= -----END CERTIFICATE-----Generated at Mon Nov 2 05:55:21 2026 by rpki-client