$ rpki-client -vvf rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft File: 2535F6A9A65395B5881ADB0B432A16679C88CC60.mft (raw, json) Hash identifier: U3s3yEOTkzZJ5zUtJX6UssxfOgjhGhtlmgOIEng7iQU= Subject key identifier: 2F:4C:CC:9E:64:DA:0B:B1:62:10:C1:61:AD:E3:2B:7C:21:1B:6E:E2 Authority key identifier: 25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60 Certificate issuer: /CN=2535F6A9A65395B5881ADB0B432A16679C88CC60 Certificate serial: 725DD199A8AAED631C5ABC764727DD40044A12FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft Manifest number: 0F Signing time: Wed 13 May 2026 03:22:20 +0000 Manifest this update: Wed 13 May 2026 03:17:20 +0000 Manifest next update: Thu 14 May 2026 06:34:20 +0000 Files and hashes: 1: 2535F6A9A65395B5881ADB0B432A16679C88CC60.crl (hash: fDXNwlC/J/XYziXsogPtfDcwY+oQGoOdzGxKswacvLY=) 2: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (hash: 5nElrE2bFD3jeHzGP2EqItlqHxQy+rl4TSko98reQ+k=) 3: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (hash: lwZi0IQOzBkg5Jj3Quf3uQ8uDEGUC6KSV1rKBtsm4K4=) 4: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (hash: perZ7IpCPM80Glsi8eW1EfkZGuK/3Og6OKBH6xj5CZ0=) 5: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (hash: zWsBUB0EsryhwZbrxTe3du0LXbDcYqcCoZB7f/2SeQs=) 6: 3230322e312e3233362e302f32342d3234203d3e203435373233.roa (hash: E2CZqc55ytVQ+gL56PQklO6/e15IEHDs3ZeA7hBho40=) 7: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (hash: IT4wEh8zWC2aFJaduZl+3xieFOQo82r5tnnrLJAHogw=) 8: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (hash: LXt8OGULAdQpoNoWK4gxLrA5MzZUVnNwkr0fY1oAkvc=) 9: 323430333a316130303a343a3a2f34372d3437203d3e203435373233.roa (hash: kVXs9OKO5SWhYY8QAUmq6Wo0PmjBkNXoXhlgjZszj5Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:5d:d1:99:a8:aa:ed:63:1c:5a:bc:76:47:27:dd:40:04:4a:12:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2535F6A9A65395B5881ADB0B432A16679C88CC60 Validity Not Before: May 13 03:17:20 2026 GMT Not After : May 14 06:34:20 2026 GMT Subject: CN=2F4CCC9E64DA0BB16210C161ADE32B7C211B6EE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:47:e7:49:a1:86:0e:e8:b7:0f:1e:cd:e3:1a: e0:95:c6:bd:79:73:67:54:49:f1:c7:a5:ed:ae:51: 72:0e:a6:1e:10:28:85:50:66:a0:4a:ff:f4:af:2b: f3:ef:ce:ad:e0:65:6d:35:2f:cf:3a:83:2b:33:cc: 8f:31:bf:fa:1d:f8:14:f3:dc:79:9b:9b:b0:98:d2: 80:02:57:16:63:1a:d5:dd:d3:64:66:d1:d2:6c:9a: 81:78:f7:29:35:38:84:cf:5b:11:24:eb:72:e2:44: 16:a6:93:56:a1:3c:24:6e:c1:cf:b2:68:1c:17:55: 47:96:07:4b:e8:7e:83:82:9f:a8:17:b4:b5:4a:8f: 34:98:0b:39:c0:ed:a8:66:2c:81:53:a5:b4:0e:dd: 0f:0e:35:ef:f5:da:f3:fa:a1:90:c7:a3:33:14:81: 33:51:06:1f:88:8d:c1:8d:87:59:0b:81:ed:e1:12: f3:a8:9e:e5:36:6c:62:c3:9c:7f:b1:82:25:82:9a: ac:cc:b7:93:e1:ad:9c:7c:a2:2a:31:0c:3c:30:5b: 49:89:47:11:05:a5:cb:00:91:c7:96:93:3c:f0:c5: 43:50:2a:43:7f:cc:a3:00:73:42:ed:22:f6:e5:bc: 45:85:1a:c0:d0:e1:92:26:23:84:38:37:de:d6:7c: c7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4C:CC:9E:64:DA:0B:B1:62:10:C1:61:AD:E3:2B:7C:21:1B:6E:E2 X509v3 Authority Key Identifier: keyid:25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:4a:0f:91:a8:8a:10:27:ce:a4:59:04:05:75:e7:86:f8:2a: 68:3d:ad:43:d7:ba:93:6b:c5:4c:ed:c7:35:4c:f4:88:15:ab: 2e:ef:23:5e:ec:47:d1:89:4a:0c:c0:60:15:c3:bf:1b:d7:ed: be:3e:ce:38:ba:58:30:31:bb:2e:4a:61:f8:58:16:a6:db:cb: 68:85:c8:6e:d7:88:2d:e6:3b:49:20:60:bc:ff:3b:bf:d1:84: 49:5a:85:a0:37:22:67:66:d6:37:93:5f:4c:68:4e:f1:9f:b9: c2:5b:be:5c:cb:91:2e:dd:00:ad:b9:b5:7b:5c:c1:ef:30:3d: 95:1e:08:c5:fe:f5:97:91:f7:73:83:8b:7e:d5:e4:d5:b5:06: b4:e9:58:8d:2e:a2:f3:dd:2d:6d:d5:79:ef:e3:e2:7e:77:bc: f2:6f:06:89:33:b4:a4:6a:d1:db:c5:d3:37:93:17:7e:ce:a2: ba:77:14:d0:d4:ec:d3:12:1c:59:8b:0d:79:19:be:45:ef:c8: 68:3e:f5:3a:ce:59:2d:f6:b6:a9:77:96:a1:ce:17:ec:bf:db: f4:68:85:ae:1b:fb:29:58:5a:3a:50:c4:b5:e1:7c:14:c8:af: 03:13:7f:c2:7b:46:64:8d:33:6c:49:2c:f9:85:cd:de:f9:5f: 6f:70:14:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcl3Rmaiq7WMcWrx2RyfdQARKEvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzNUY2QTlBNjUzOTVCNTg4MUFEQjBCNDMyQTE2Njc5 Qzg4Q0M2MDAeFw0yNjA1MTMwMzE3MjBaFw0yNjA1MTQwNjM0MjBaMDMxMTAvBgNV BAMTKDJGNENDQzlFNjREQTBCQjE2MjEwQzE2MUFERTMyQjdDMjExQjZFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKR+dJoYYO6LcPHs3jGuCVxr15 c2dUSfHHpe2uUXIOph4QKIVQZqBK//SvK/Pvzq3gZW01L886gyszzI8xv/od+BTz 3Hmbm7CY0oACVxZjGtXd02Rm0dJsmoF49yk1OITPWxEk63LiRBamk1ahPCRuwc+y aBwXVUeWB0vofoOCn6gXtLVKjzSYCznA7ahmLIFTpbQO3Q8ONe/12vP6oZDHozMU gTNRBh+IjcGNh1kLge3hEvOonuU2bGLDnH+xgiWCmqzMt5PhrZx8oioxDDwwW0mJ RxEFpcsAkceWkzzwxUNQKkN/zKMAc0LtIvblvEWFGsDQ4ZImI4Q4N97WfMe9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL0zMnmTaC7FiEMFhreMrfCEbbuIwHwYDVR0j BBgwFoAUJTX2qaZTlbWIGtsLQyoWZ5yIzGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDFkYjM3MzAtZjQ5OS00NDlmLWI2ZjItN2E1ZGViNTMyYjBjLzAvMjUzNUY2QTlB NjUzOTVCNTg4MUFEQjBCNDMyQTE2Njc5Qzg4Q0M2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTM1RjZBOUE2NTM5NUI1ODgxQURCMEI0MzJBMTY2NzlDODhD QzYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDFkYjM3MzAtZjQ5OS00NDlmLWI2 ZjItN2E1ZGViNTMyYjBjLzAvMjUzNUY2QTlBNjUzOTVCNTg4MUFEQjBCNDMyQTE2 Njc5Qzg4Q0M2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5KD5GoihAnzqRZBAV154b4Kmg9rUPXupNr xUztxzVM9IgVqy7vI17sR9GJSgzAYBXDvxvX7b4+zji6WDAxuy5KYfhYFqbby2iF yG7XiC3mO0kgYLz/O7/RhElahaA3Imdm1jeTX0xoTvGfucJbvlzLkS7dAK25tXtc we8wPZUeCMX+9ZeR93ODi37V5NW1BrTpWI0uovPdLW3Vee/j4n53vPJvBokztKRq 0dvF0zeTF37Oorp3FNDU7NMSHFmLDXkZvkXvyGg+9TrOWS32tql3lqHOF+y/2/Ro ha4b+ylYWjpQxLXhfBTIrwMTf8J7RmSNM2xJLPmFzd75X29wFHE= -----END CERTIFICATE-----Generated at Wed May 13 12:46:29 2026 by rpki-client