$ rpki-client -vvf rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft File: 0356312D4CC6591488396D24CA6010583AD5DEE8.mft (raw, json) Hash identifier: cvoOR0vd9jNs7Vm/fNDeXJY3L5oO8hF0tUfg42QIaF4= Subject key identifier: 96:C1:03:B3:02:33:5B:CD:0C:13:F9:B0:76:F3:53:68:F5:64:70:B8 Authority key identifier: 03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8 Certificate issuer: /CN=0356312D4CC6591488396D24CA6010583AD5DEE8 Certificate serial: 14F1241C25DC76BB646634AE3E5C66EE20F57B56 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 16:50:13 +0000 Manifest this update: Tue 02 Jun 2026 16:45:13 +0000 Manifest next update: Wed 03 Jun 2026 19:02:13 +0000 Files and hashes: 1: 3130332e3132352e3131382e302f32342d3234203d3e20313338313032.roa (hash: Z3TbTjv+S/nLuZ1/SdmDvuVHYcF+5+4oOXgFpO7orlg=) 2: 3130332e3132352e3131362e302f32322d3232203d3e20313338313032.roa (hash: 4cPVakwVMjFAfG7saToZJr0gJzWEaBpwBZY2LPcL9EA=) 3: 0356312D4CC6591488396D24CA6010583AD5DEE8.crl (hash: BVjmIc/zTZhgdL8xOZPBjv+T12Ix5/72LZ4e9oRti34=) 4: 3130332e3132352e3131372e302f32342d3234203d3e20313338313032.roa (hash: zK9mKFzDzpwlGdkQliowFwWa9QhCrvBB+XTxzaxzwC0=) 5: 3130332e3132352e3131392e302f32342d3234203d3e20313338313032.roa (hash: eG51QjU9Y0bXD38UtepL5wxZWUtA5GvOYkJVu27CnrU=) 6: 3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa (hash: ApCgtDBxEubdKlndg5cFlm8phdewVjT2t1LXFFDojV8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 19:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:f1:24:1c:25:dc:76:bb:64:66:34:ae:3e:5c:66:ee:20:f5:7b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0356312D4CC6591488396D24CA6010583AD5DEE8 Validity Not Before: Jun 2 16:45:13 2026 GMT Not After : Jun 3 19:02:13 2026 GMT Subject: CN=96C103B302335BCD0C13F9B076F35368F56470B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a7:7b:f7:42:8c:14:b6:3a:dc:31:77:63:30: d0:79:a5:7e:4e:d1:5d:ec:55:b1:61:97:40:a9:c2: 6d:bc:73:e5:b0:5f:ca:3b:54:62:75:5f:8d:4e:b9: 53:5c:a5:c1:bd:23:f1:b9:fa:5b:38:6d:42:12:99: b5:56:9e:63:84:ac:ac:3e:16:f4:26:43:7d:c1:72: 27:dd:67:cb:d2:85:9a:26:8d:d7:e3:64:2a:ca:8b: 0b:a1:90:90:52:ca:1f:57:e5:cd:5c:b5:d1:40:20: 27:ca:0a:97:aa:3b:14:a7:75:81:59:e1:3e:dd:1d: 88:df:c8:bf:24:b1:bf:93:76:ee:04:ad:f0:df:b5: f4:0f:a9:e2:74:cc:a7:92:ad:93:e7:93:56:e8:ec: 23:81:da:86:83:df:9a:6f:29:ae:53:f5:f4:21:da: ba:7d:19:9b:03:7a:c2:4a:38:a4:67:a1:4e:9c:ec: 64:b8:5b:e4:ee:e2:a0:28:84:68:fd:41:6d:be:57: ca:f6:2d:9d:7f:9f:f9:87:de:5a:c9:a1:6e:35:01: b5:71:46:88:1a:35:d0:8d:e8:c4:17:6c:e5:26:ff: df:f0:7a:f1:eb:49:ec:3e:9a:63:36:43:b4:09:fa: 26:45:94:05:88:80:f8:7f:ef:ad:ca:71:53:af:12: 97:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C1:03:B3:02:33:5B:CD:0C:13:F9:B0:76:F3:53:68:F5:64:70:B8 X509v3 Authority Key Identifier: keyid:03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:74:d5:4e:be:14:81:63:80:7b:ef:23:d7:e1:c4:b3:a4:83: 86:3d:6c:d3:86:a4:88:56:86:c0:a6:67:a3:a6:29:23:ac:45: fe:7c:b6:e9:d8:96:5a:1f:bc:e2:41:34:5e:b0:bd:e3:3a:29: 9c:28:29:8a:5c:6f:e8:87:70:17:71:eb:af:3e:03:cd:f0:8a: c9:c0:ef:df:21:8d:bb:29:13:31:cb:e1:3e:0f:3f:2d:3e:04: 2c:06:85:26:c6:00:b3:8a:ee:fc:74:31:4f:1d:df:6e:e8:5c: 5b:cb:80:91:ca:bc:a9:e5:27:a0:d6:bb:ff:1a:d6:29:4d:f2: df:7a:43:5a:73:fd:3a:dd:ef:f5:1c:14:4a:50:e7:cb:0a:9f: d2:5d:c5:b2:b8:7e:87:bc:f2:72:5a:f2:c5:76:3e:07:b0:63: e3:cc:fe:05:23:ab:4e:b5:11:d3:99:b7:86:d9:79:12:27:75: 7e:a1:ef:f1:18:de:c2:85:0b:69:3a:9d:1e:5f:c7:06:12:fd: 2f:d1:22:9f:aa:00:dc:17:6f:ad:37:75:fa:fc:3f:2c:eb:32: 9c:ae:dc:ec:f5:03:38:36:50:1f:4f:8e:08:c2:27:db:c6:5c: 8f:eb:b4:f7:f7:cc:21:a4:e5:89:ff:c0:d9:70:22:7e:3a:8a: a4:07:37:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFPEkHCXcdrtkZjSuPlxm7iD1e1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM1NjMxMkQ0Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEwNTgz QUQ1REVFODAeFw0yNjA2MDIxNjQ1MTNaFw0yNjA2MDMxOTAyMTNaMDMxMTAvBgNV BAMTKDk2QzEwM0IzMDIzMzVCQ0QwQzEzRjlCMDc2RjM1MzY4RjU2NDcwQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/p3v3QowUtjrcMXdjMNB5pX5O 0V3sVbFhl0Cpwm28c+WwX8o7VGJ1X41OuVNcpcG9I/G5+ls4bUISmbVWnmOErKw+ FvQmQ33BcifdZ8vShZomjdfjZCrKiwuhkJBSyh9X5c1ctdFAICfKCpeqOxSndYFZ 4T7dHYjfyL8ksb+Tdu4ErfDftfQPqeJ0zKeSrZPnk1bo7COB2oaD35pvKa5T9fQh 2rp9GZsDesJKOKRnoU6c7GS4W+Tu4qAohGj9QW2+V8r2LZ1/n/mH3lrJoW41AbVx RogaNdCN6MQXbOUm/9/wevHrSew+mmM2Q7QJ+iZFlAWIgPh/763KcVOvEpe3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlsEDswIzW80ME/mwdvNTaPVkcLgwHwYDVR0j BBgwFoAUA1YxLUzGWRSIOW0kymAQWDrV3ugwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTBkZTIzMWYtZmI4YS00MjdhLWFhMzYtMGEzZmM5NzIzMjhkLzAvMDM1NjMxMkQ0 Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEwNTgzQUQ1REVFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMzU2MzEyRDRDQzY1OTE0ODgzOTZEMjRDQTYwMTA1ODNBRDVE RUU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTBkZTIzMWYtZmI4YS00MjdhLWFh MzYtMGEzZmM5NzIzMjhkLzAvMDM1NjMxMkQ0Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEw NTgzQUQ1REVFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZ01U6+FIFjgHvvI9fhxLOkg4Y9bNOGpIhW hsCmZ6OmKSOsRf58tunYllofvOJBNF6wveM6KZwoKYpcb+iHcBdx668+A83wisnA 798hjbspEzHL4T4PPy0+BCwGhSbGALOK7vx0MU8d327oXFvLgJHKvKnlJ6DWu/8a 1ilN8t96Q1pz/Trd7/UcFEpQ58sKn9JdxbK4foe88nJa8sV2PgewY+PM/gUjq061 EdOZt4bZeRIndX6h7/EY3sKFC2k6nR5fxwYS/S/RIp+qANwXb603dfr8PyzrMpyu 3Oz1Azg2UB9PjgjCJ9vGXI/rtPf3zCGk5Yn/wNlwIn46iqQHN5I= -----END CERTIFICATE-----Generated at Wed Jun 3 04:20:59 2026 by rpki-client