$ rpki-client -vvvf rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft File: 0356312D4CC6591488396D24CA6010583AD5DEE8.mft (raw, json) Hash identifier: oBf1HK5hT0GqnaDW+0ctZ3A3HsEAsPtdAkuzJId5fCM= Subject key identifier: 3D:07:E3:83:3F:DA:6F:1F:34:70:8B:35:3C:43:AA:C2:D9:8C:58:A2 Authority key identifier: 03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8 Certificate issuer: /CN=0356312D4CC6591488396D24CA6010583AD5DEE8 Certificate serial: 3806E3217E0DFF4F7248A08C3017D627DF9C75F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 05:14:56 +0000 Manifest this update: Thu 17 Sep 2026 05:09:56 +0000 Manifest next update: Fri 18 Sep 2026 06:06:56 +0000 Files and hashes: 1: 0356312D4CC6591488396D24CA6010583AD5DEE8.crl (hash: WJc3Nf+c+dCaEza0zpw7l3B5DDr0JzUG84H8vygh0R0=) 2: 3130332e3132352e3131362e302f32322d3232203d3e20313338313032.roa (hash: 4cPVakwVMjFAfG7saToZJr0gJzWEaBpwBZY2LPcL9EA=) 3: 3130332e3132352e3131392e302f32342d3234203d3e20313338313032.roa (hash: eG51QjU9Y0bXD38UtepL5wxZWUtA5GvOYkJVu27CnrU=) 4: 3130332e3132352e3131372e302f32342d3234203d3e20313338313032.roa (hash: zK9mKFzDzpwlGdkQliowFwWa9QhCrvBB+XTxzaxzwC0=) 5: 3130332e3132352e3131382e302f32342d3234203d3e20313338313032.roa (hash: Z3TbTjv+S/nLuZ1/SdmDvuVHYcF+5+4oOXgFpO7orlg=) 6: 3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa (hash: ApCgtDBxEubdKlndg5cFlm8phdewVjT2t1LXFFDojV8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:06:e3:21:7e:0d:ff:4f:72:48:a0:8c:30:17:d6:27:df:9c:75:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0356312D4CC6591488396D24CA6010583AD5DEE8 Validity Not Before: Sep 17 05:09:56 2026 GMT Not After : Sep 18 06:06:56 2026 GMT Subject: CN=3D07E3833FDA6F1F34708B353C43AAC2D98C58A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:37:bd:05:86:e2:1d:b7:5b:1e:ad:8e:0a:91: 48:c9:09:c9:0f:75:46:0f:ca:35:a3:00:71:1c:bc: 82:39:22:61:a7:ab:20:0c:7a:3c:a3:ba:06:06:fd: 7e:01:7c:7c:88:6a:2a:66:48:0c:a7:cb:ca:97:26: 79:52:24:fd:08:c7:9d:69:a2:67:e6:a6:f1:0c:8b: 2c:c2:95:77:36:ca:e4:f6:ce:7f:8d:b7:05:ac:cc: 5e:fe:9a:15:c9:76:b1:09:97:50:f1:cb:0a:61:54: 11:21:d2:2c:c5:d0:b5:d2:fe:93:98:d2:09:a0:fa: 1e:50:0a:3b:ce:0c:c7:80:b1:5b:25:e8:dc:26:8e: fb:6f:0c:4d:16:25:8a:5b:a5:ba:5e:ab:03:3b:7f: 83:cf:0d:60:d1:3b:1c:d1:ed:c9:87:5c:88:de:84: b7:af:5e:24:78:44:71:dd:09:5c:bc:bb:fc:a2:1c: 73:a3:eb:1c:51:5b:cc:9c:e8:63:8c:c8:4d:fd:6a: d3:57:45:b2:75:37:d9:32:f7:cb:d9:76:7f:32:28: d0:73:ee:6e:33:e6:f6:7a:02:09:3a:57:56:f7:62: 16:3d:58:16:20:c1:d8:26:ae:24:f9:bb:c4:b6:c4: ae:3e:8f:eb:c6:bf:f4:1e:f9:7a:91:e7:1d:39:d3: c0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:07:E3:83:3F:DA:6F:1F:34:70:8B:35:3C:43:AA:C2:D9:8C:58:A2 X509v3 Authority Key Identifier: keyid:03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:4c:37:fa:ab:3c:f9:99:61:66:c4:cd:22:d1:2b:b5:2f:1d: 75:fe:b5:86:c6:9f:fc:ae:32:9d:d1:9b:b5:82:9c:ef:1f:ab: be:90:b7:5a:df:76:e8:75:c8:15:b7:36:ab:c6:fe:61:cf:78: bc:7c:7d:ab:73:1e:34:03:18:10:65:5c:0d:b5:19:62:2a:71: 86:2b:44:08:a0:fe:21:48:b8:64:fd:16:9b:80:66:15:db:cf: 24:79:99:e7:19:3a:3e:15:78:29:80:29:f5:87:51:f5:83:26: c6:ad:92:cc:b2:ad:bc:55:06:56:f5:f4:07:e1:f0:2b:11:90: 85:4b:ca:cb:91:1a:1d:7e:cd:ba:e9:41:5f:5a:b9:13:05:9b: f2:92:22:86:c5:69:36:89:71:c8:30:1d:ea:3b:34:77:44:39: a1:cf:0a:af:d5:85:41:d5:f4:e0:db:67:95:77:30:3b:d9:5a: 98:59:6f:7a:0d:42:1c:67:14:25:8d:b9:ab:d4:9f:7a:35:05: 91:8e:e0:6a:e9:36:22:0b:a3:d3:79:ab:da:02:cf:92:43:c8: 6d:f3:73:53:c1:2d:19:74:d9:ca:6b:98:1b:9e:5b:40:3d:d1: 62:06:1f:63:43:be:82:61:ff:92:3c:a1:4e:60:fc:ae:82:ec: aa:04:22:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOAbjIX4N/09ySKCMMBfWJ9+cdfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM1NjMxMkQ0Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEwNTgz QUQ1REVFODAeFw0yNjA5MTcwNTA5NTZaFw0yNjA5MTgwNjA2NTZaMDMxMTAvBgNV BAMTKDNEMDdFMzgzM0ZEQTZGMUYzNDcwOEIzNTNDNDNBQUMyRDk4QzU4QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAN70FhuIdt1serY4KkUjJCckP dUYPyjWjAHEcvII5ImGnqyAMejyjugYG/X4BfHyIaipmSAyny8qXJnlSJP0Ix51p omfmpvEMiyzClXc2yuT2zn+NtwWszF7+mhXJdrEJl1DxywphVBEh0izF0LXS/pOY 0gmg+h5QCjvODMeAsVsl6NwmjvtvDE0WJYpbpbpeqwM7f4PPDWDROxzR7cmHXIje hLevXiR4RHHdCVy8u/yiHHOj6xxRW8yc6GOMyE39atNXRbJ1N9ky98vZdn8yKNBz 7m4z5vZ6Agk6V1b3YhY9WBYgwdgmriT5u8S2xK4+j+vGv/Qe+XqR5x0508BjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPQfjgz/abx80cIs1PEOqwtmMWKIwHwYDVR0j BBgwFoAUA1YxLUzGWRSIOW0kymAQWDrV3ugwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTBkZTIzMWYtZmI4YS00MjdhLWFhMzYtMGEzZmM5NzIzMjhkLzAvMDM1NjMxMkQ0 Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEwNTgzQUQ1REVFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMzU2MzEyRDRDQzY1OTE0ODgzOTZEMjRDQTYwMTA1ODNBRDVE RUU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTBkZTIzMWYtZmI4YS00MjdhLWFh MzYtMGEzZmM5NzIzMjhkLzAvMDM1NjMxMkQ0Q0M2NTkxNDg4Mzk2RDI0Q0E2MDEw NTgzQUQ1REVFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZMN/qrPPmZYWbEzSLRK7UvHXX+tYbGn/yu Mp3Rm7WCnO8fq76Qt1rfduh1yBW3NqvG/mHPeLx8fatzHjQDGBBlXA21GWIqcYYr RAig/iFIuGT9FpuAZhXbzyR5mecZOj4VeCmAKfWHUfWDJsatksyyrbxVBlb19Afh 8CsRkIVLysuRGh1+zbrpQV9auRMFm/KSIobFaTaJccgwHeo7NHdEOaHPCq/VhUHV 9ODbZ5V3MDvZWphZb3oNQhxnFCWNuavUn3o1BZGO4GrpNiILo9N5q9oCz5JDyG3z c1PBLRl02cprmBueW0A90WIGH2NDvoJh/5I8oU5g/K6C7KoEIq0= -----END CERTIFICATE-----Generated at Thu Sep 17 09:23:34 2026 by rpki-client