$ rpki-client -vvf rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft File: 2535F6A9A65395B5881ADB0B432A16679C88CC60.mft (raw, json) Hash identifier: jGgHkrRS247M3T6oCZwJQB85qVCTfWFn6+UunT0dMU8= Subject key identifier: 01:06:50:99:E1:7D:07:3B:FB:59:3B:DF:76:E4:34:EA:45:94:6E:70 Authority key identifier: 25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60 Certificate issuer: /CN=2535F6A9A65395B5881ADB0B432A16679C88CC60 Certificate serial: 1DCA1410BE44358975812F9387FA4B1C013FE0CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 10:01:45 +0000 Manifest this update: Fri 24 Jul 2026 09:56:45 +0000 Manifest next update: Sat 25 Jul 2026 13:08:45 +0000 Files and hashes: 1: 2535F6A9A65395B5881ADB0B432A16679C88CC60.crl (hash: iQsdoEEsqYS/Qfm5R42af1y43NKFnqQVqY4r9YjheW4=) 2: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (hash: zWsBUB0EsryhwZbrxTe3du0LXbDcYqcCoZB7f/2SeQs=) 3: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (hash: LXt8OGULAdQpoNoWK4gxLrA5MzZUVnNwkr0fY1oAkvc=) 4: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (hash: 5nElrE2bFD3jeHzGP2EqItlqHxQy+rl4TSko98reQ+k=) 5: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (hash: IT4wEh8zWC2aFJaduZl+3xieFOQo82r5tnnrLJAHogw=) 6: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (hash: perZ7IpCPM80Glsi8eW1EfkZGuK/3Og6OKBH6xj5CZ0=) 7: 323430333a316130303a343a3a2f34372d3437203d3e203435373233.roa (hash: kVXs9OKO5SWhYY8QAUmq6Wo0PmjBkNXoXhlgjZszj5Q=) 8: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (hash: lwZi0IQOzBkg5Jj3Quf3uQ8uDEGUC6KSV1rKBtsm4K4=) 9: 3230322e312e3233362e302f32342d3234203d3e203435373233.roa (hash: E2CZqc55ytVQ+gL56PQklO6/e15IEHDs3ZeA7hBho40=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ca:14:10:be:44:35:89:75:81:2f:93:87:fa:4b:1c:01:3f:e0:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2535F6A9A65395B5881ADB0B432A16679C88CC60 Validity Not Before: Jul 24 09:56:45 2026 GMT Not After : Jul 25 13:08:45 2026 GMT Subject: CN=01065099E17D073BFB593BDF76E434EA45946E70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:87:31:5d:6c:54:23:d1:c4:93:8f:19:f8:12: 1b:04:6f:12:5b:32:bb:d7:3e:da:98:0e:a8:e3:f9: c8:66:51:3d:26:b8:f9:01:7c:ab:f7:d7:42:4d:2c: 16:30:17:87:33:e8:58:7a:cf:09:67:41:5d:45:3a: 57:52:e6:bb:bb:78:88:f9:8c:74:de:bc:17:93:6c: f6:08:df:86:62:63:84:ec:ff:e9:a4:b6:d7:8c:c6: e1:3c:ce:c5:40:80:d9:ca:df:1b:05:b2:7e:1f:ef: ff:bb:ff:d8:db:c4:fd:53:9c:25:1e:c2:c6:e9:a2: b5:11:47:2e:ab:13:92:ed:87:e6:c7:0f:f7:63:8e: 31:20:85:88:f8:66:4b:b2:cf:9c:91:d9:b6:45:19: e2:85:b7:ad:33:f3:29:e5:0c:4c:94:89:d9:87:05: 93:76:0c:0e:dc:71:6c:e7:f2:8b:af:44:91:e3:a6: b7:09:d4:d7:d7:d6:a5:f0:d2:17:2c:eb:4b:ec:b2: 4c:5d:bd:c2:f3:52:2a:96:13:27:6d:bf:02:bc:71: d0:84:9f:41:37:91:2b:33:c7:b9:0b:c9:a3:24:ab: 79:c9:be:f4:71:a1:c8:36:dc:4d:ec:d3:23:a8:22: cc:1d:f4:e0:61:12:d5:a8:4c:1c:ad:0c:08:57:c2: 15:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:06:50:99:E1:7D:07:3B:FB:59:3B:DF:76:E4:34:EA:45:94:6E:70 X509v3 Authority Key Identifier: keyid:25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:c5:2e:31:6b:e6:58:c4:3f:c6:5b:43:38:64:0d:e4:6d:46: 3f:82:f7:cf:a8:3a:2b:4d:54:23:f2:0f:76:63:28:8b:fe:e7: ea:86:55:3c:d3:4f:57:3c:b4:39:ac:36:8f:8e:11:a5:5d:a6: 57:fb:c4:67:c0:03:dc:26:fb:ca:91:0f:cb:8f:6b:fd:01:6a: 1c:d0:11:32:45:98:5d:08:f1:c2:0e:d4:00:7d:b7:d6:0f:09: 60:5d:74:6a:10:9a:8a:5e:1c:0e:a0:f8:3d:77:33:0a:c0:5e: 61:52:70:2a:61:8f:53:1b:b9:55:35:44:cb:e9:cf:38:2b:bd: ee:7b:e8:d8:4d:b2:dd:c4:42:e6:75:b4:29:55:06:33:75:eb: 7c:97:34:48:d0:fd:d0:bc:3a:d7:e1:d5:22:c6:48:4b:66:c7: 82:67:88:6b:03:a0:ff:6a:d9:44:cc:b3:2a:79:81:df:00:db: f0:eb:ad:24:8e:ce:77:91:24:ca:8c:dc:69:df:32:13:37:9c: c0:22:98:a5:3f:f3:05:aa:0a:84:73:07:d5:72:a7:e4:11:71: 0c:48:30:25:36:50:ed:73:c7:82:73:47:94:fc:85:f5:9f:6c: 1c:cb:2d:64:af:c8:3d:db:cc:1b:b6:8d:ae:34:10:f5:fd:0f: 21:4b:ad:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHcoUEL5ENYl1gS+Th/pLHAE/4MowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzNUY2QTlBNjUzOTVCNTg4MUFEQjBCNDMyQTE2Njc5 Qzg4Q0M2MDAeFw0yNjA3MjQwOTU2NDVaFw0yNjA3MjUxMzA4NDVaMDMxMTAvBgNV BAMTKDAxMDY1MDk5RTE3RDA3M0JGQjU5M0JERjc2RTQzNEVBNDU5NDZFNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0hzFdbFQj0cSTjxn4EhsEbxJb MrvXPtqYDqjj+chmUT0muPkBfKv310JNLBYwF4cz6Fh6zwlnQV1FOldS5ru7eIj5 jHTevBeTbPYI34ZiY4Ts/+mktteMxuE8zsVAgNnK3xsFsn4f7/+7/9jbxP1TnCUe wsbporURRy6rE5Lth+bHD/djjjEghYj4Zkuyz5yR2bZFGeKFt60z8ynlDEyUidmH BZN2DA7ccWzn8ouvRJHjprcJ1NfX1qXw0hcs60vsskxdvcLzUiqWEydtvwK8cdCE n0E3kSszx7kLyaMkq3nJvvRxocg23E3s0yOoIswd9OBhEtWoTBytDAhXwhV5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAQZQmeF9Bzv7WTvfduQ06kWUbnAwHwYDVR0j BBgwFoAUJTX2qaZTlbWIGtsLQyoWZ5yIzGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDFkYjM3MzAtZjQ5OS00NDlmLWI2ZjItN2E1ZGViNTMyYjBjLzAvMjUzNUY2QTlB NjUzOTVCNTg4MUFEQjBCNDMyQTE2Njc5Qzg4Q0M2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTM1RjZBOUE2NTM5NUI1ODgxQURCMEI0MzJBMTY2NzlDODhD QzYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDFkYjM3MzAtZjQ5OS00NDlmLWI2 ZjItN2E1ZGViNTMyYjBjLzAvMjUzNUY2QTlBNjUzOTVCNTg4MUFEQjBCNDMyQTE2 Njc5Qzg4Q0M2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHFLjFr5ljEP8ZbQzhkDeRtRj+C98+oOitN VCPyD3ZjKIv+5+qGVTzTT1c8tDmsNo+OEaVdplf7xGfAA9wm+8qRD8uPa/0BahzQ ETJFmF0I8cIO1AB9t9YPCWBddGoQmopeHA6g+D13MwrAXmFScCphj1MbuVU1RMvp zzgrve576NhNst3EQuZ1tClVBjN163yXNEjQ/dC8Otfh1SLGSEtmx4JniGsDoP9q 2UTMsyp5gd8A2/DrrSSOzneRJMqM3GnfMhM3nMAimKU/8wWqCoRzB9Vyp+QRcQxI MCU2UO1zx4JzR5T8hfWfbBzLLWSvyD3bzBu2ja40EPX9DyFLrUw= -----END CERTIFICATE-----Generated at Fri Jul 24 14:32:07 2026 by rpki-client