$ rpki-client -vvvf rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft File: 2535F6A9A65395B5881ADB0B432A16679C88CC60.mft (raw, json) Hash identifier: 8T6iAW/cR4aTXr1jswPIbZoH9hFGp9r2OC2pdoCSLps= Subject key identifier: 32:BC:C2:1D:34:19:46:61:50:D9:FB:42:50:0C:37:94:CE:FC:73:A0 Authority key identifier: 25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60 Certificate issuer: /CN=2535F6A9A65395B5881ADB0B432A16679C88CC60 Certificate serial: 1AD0B6EFB514FEDD85F68DA8A0FE65D66D31874C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft Manifest number: D1 Signing time: Mon 28 Sep 2026 14:07:14 +0000 Manifest this update: Mon 28 Sep 2026 14:02:14 +0000 Manifest next update: Tue 29 Sep 2026 15:07:14 +0000 Files and hashes: 1: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (hash: 9IugcQnlhS8YqjpFiHIRL3UozLXDJSvET54UoliRNtA=) 2: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (hash: LXt8OGULAdQpoNoWK4gxLrA5MzZUVnNwkr0fY1oAkvc=) 3: 3230322e312e3233362e302f32342d3234203d3e203435373233.roa (hash: E2CZqc55ytVQ+gL56PQklO6/e15IEHDs3ZeA7hBho40=) 4: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (hash: zWsBUB0EsryhwZbrxTe3du0LXbDcYqcCoZB7f/2SeQs=) 5: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (hash: umYqwo2FiD8e3UtdgPNaP9b6kDv065RdUn/kTf3EPuQ=) 6: 323430333a316130303a343a3a2f34372d3437203d3e203435373233.roa (hash: kVXs9OKO5SWhYY8QAUmq6Wo0PmjBkNXoXhlgjZszj5Q=) 7: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (hash: 5nElrE2bFD3jeHzGP2EqItlqHxQy+rl4TSko98reQ+k=) 8: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (hash: +tQQrL91DKY3GF87Bol7tPaM5Rdp2tOqyU/y9K8IpU4=) 9: 2535F6A9A65395B5881ADB0B432A16679C88CC60.crl (hash: bfpKA52E9fBckrmdqRLmqon88jCV5ZPwU2avhzeHaQI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d0:b6:ef:b5:14:fe:dd:85:f6:8d:a8:a0:fe:65:d6:6d:31:87:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2535F6A9A65395B5881ADB0B432A16679C88CC60 Validity Not Before: Sep 28 14:02:14 2026 GMT Not After : Sep 29 15:07:14 2026 GMT Subject: CN=32BCC21D3419466150D9FB42500C3794CEFC73A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e0:98:86:c7:58:90:25:e0:7f:89:76:0c:26: fe:d7:62:ba:5d:7b:b7:5b:ba:04:34:03:2c:02:b2: fb:17:43:b2:04:7d:d0:d4:4a:47:c6:5b:be:2a:e1: 15:46:0b:29:dc:8c:fa:b2:87:ad:c9:59:c0:0d:88: 51:5b:9c:b2:45:dd:e8:8d:52:b9:2b:ab:83:eb:fa: bf:c8:39:ed:d3:63:4b:7a:9b:9a:0a:4a:d5:be:fc: e2:3f:3b:39:06:8d:5f:78:c4:8c:27:43:cb:1c:70: 54:dd:ad:3e:f7:02:9e:5d:e4:bb:83:fc:1d:9b:84: 06:e9:67:7b:30:e7:85:6b:8b:21:71:11:e8:d4:46: 3f:7a:93:91:b0:bc:80:cb:e1:6d:0f:b8:cd:18:91: ea:30:09:fd:62:bc:3a:56:30:6a:d3:4f:4d:f2:8b: 6e:29:1a:19:55:8e:f7:90:61:77:a7:8b:10:93:06: 84:45:e1:e8:d3:11:2d:9c:6f:3d:75:e7:87:8c:d8: db:b6:1c:2f:98:88:9d:1e:5b:53:fa:32:06:83:b2: 1a:6a:34:29:65:86:26:99:71:48:26:f9:c2:1d:c4: ec:54:a2:93:fe:8a:a1:8f:01:b8:ba:f7:ae:d6:d0: d1:5f:e1:49:d2:e4:ca:c5:b4:8a:70:8e:91:f0:bf: 6c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BC:C2:1D:34:19:46:61:50:D9:FB:42:50:0C:37:94:CE:FC:73:A0 X509v3 Authority Key Identifier: keyid:25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:7a:7c:d3:02:ff:28:9a:2e:d0:19:31:2d:62:1d:a5:70:7c: 92:a1:2c:a4:ca:ed:d5:36:4d:5d:93:eb:3e:ad:7b:95:9b:39: 51:c3:84:85:f1:81:ab:77:b6:77:00:9e:b3:15:f1:a9:3c:c8: f0:23:36:4c:8a:37:ec:5c:a4:fa:39:84:47:7d:32:45:cf:75: b9:61:51:9a:46:47:14:5f:ea:30:d5:64:ae:f9:bf:aa:01:23: b3:87:2c:fb:87:99:fa:22:af:01:59:9e:81:0b:2d:80:b1:9f: e5:0c:70:17:0c:90:66:e7:f7:10:d9:4a:f9:34:76:cd:e8:0a: 80:e4:db:e4:04:9d:15:64:8d:01:df:86:7e:05:4e:9a:4e:0f: 48:f9:09:a8:07:bf:1f:6c:c8:c1:b2:bf:03:a7:96:6d:61:62: e4:81:ed:48:b9:22:71:d7:22:a0:17:37:1d:26:ab:d7:bb:b3: 12:68:a8:cb:68:22:5e:95:b3:ef:8a:88:22:a9:b2:42:b0:35: d2:2d:7f:51:51:04:1c:6e:e4:fa:c2:09:39:d8:5d:cb:7a:31: 1d:41:85:65:86:ce:6e:45:57:02:c6:21:a8:c0:0f:40:44:92: 53:4f:2e:17:f6:17:71:db:f8:4c:8c:6c:f1:43:86:c1:2b:c5: 5f:47:e1:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGtC277UU/t2F9o2ooP5l1m0xh0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzNUY2QTlBNjUzOTVCNTg4MUFEQjBCNDMyQTE2Njc5 Qzg4Q0M2MDAeFw0yNjA5MjgxNDAyMTRaFw0yNjA5MjkxNTA3MTRaMDMxMTAvBgNV BAMTKDMyQkNDMjFEMzQxOTQ2NjE1MEQ5RkI0MjUwMEMzNzk0Q0VGQzczQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc4JiGx1iQJeB/iXYMJv7XYrpd e7dbugQ0AywCsvsXQ7IEfdDUSkfGW74q4RVGCyncjPqyh63JWcANiFFbnLJF3eiN Urkrq4Pr+r/IOe3TY0t6m5oKStW+/OI/OzkGjV94xIwnQ8sccFTdrT73Ap5d5LuD /B2bhAbpZ3sw54VriyFxEejURj96k5GwvIDL4W0PuM0YkeowCf1ivDpWMGrTT03y i24pGhlVjveQYXenixCTBoRF4ejTES2cbz1154eM2Nu2HC+YiJ0eW1P6MgaDshpq NCllhiaZcUgm+cIdxOxUopP+iqGPAbi6967W0NFf4UnS5MrFtIpwjpHwv2wBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMrzCHTQZRmFQ2ftCUAw3lM78c6AwHwYDVR0j BBgwFoAUJTX2qaZTlbWIGtsLQyoWZ5yIzGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDFkYjM3MzAtZjQ5OS00NDlmLWI2ZjItN2E1ZGViNTMyYjBjLzAvMjUzNUY2QTlB NjUzOTVCNTg4MUFEQjBCNDMyQTE2Njc5Qzg4Q0M2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTM1RjZBOUE2NTM5NUI1ODgxQURCMEI0MzJBMTY2NzlDODhD QzYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDFkYjM3MzAtZjQ5OS00NDlmLWI2 ZjItN2E1ZGViNTMyYjBjLzAvMjUzNUY2QTlBNjUzOTVCNTg4MUFEQjBCNDMyQTE2 Njc5Qzg4Q0M2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC56fNMC/yiaLtAZMS1iHaVwfJKhLKTK7dU2 TV2T6z6te5WbOVHDhIXxgat3tncAnrMV8ak8yPAjNkyKN+xcpPo5hEd9MkXPdblh UZpGRxRf6jDVZK75v6oBI7OHLPuHmfoirwFZnoELLYCxn+UMcBcMkGbn9xDZSvk0 ds3oCoDk2+QEnRVkjQHfhn4FTppOD0j5CagHvx9syMGyvwOnlm1hYuSB7Ui5InHX IqAXNx0mq9e7sxJoqMtoIl6Vs++KiCKpskKwNdItf1FRBBxu5PrCCTnYXct6MR1B hWWGzm5FVwLGIajAD0BEklNPLhf2F3Hb+EyMbPFDhsErxV9H4Rg= -----END CERTIFICATE-----Generated at Mon Sep 28 21:41:03 2026 by rpki-client