$ rpki-client -vvf rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft File: E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft (raw, json) Hash identifier: u4sOmW5vKY0wMC5DJCWme8JuxdHbVz0pA+Whp8lg7xA= Subject key identifier: 33:88:41:E9:6A:BF:64:AB:1F:62:BC:A6:10:B1:36:6A:9E:A8:CE:C3 Authority key identifier: E0:35:D5:F5:D7:02:06:74:8D:3C:08:7B:30:BF:BC:D1:5E:CF:19:6D Certificate issuer: /CN=E035D5F5D70206748D3C087B30BFBCD15ECF196D Certificate serial: 3FBDEDAE8FD4E50B4C2B54B79C121C2BDD48D1CC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft Manifest number: 0F Signing time: Tue 12 May 2026 13:58:56 +0000 Manifest this update: Tue 12 May 2026 13:53:56 +0000 Manifest next update: Wed 13 May 2026 17:51:56 +0000 Files and hashes: 1: 3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa (hash: alqTQlTJJckhtW2N9aw/g6aRbRRoD+/QvIdNlTJVbT8=) 2: 3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa (hash: Tts8f+N485CFXeqo33btYWO7LgUOuaCh8Px0kKwHoiY=) 3: E035D5F5D70206748D3C087B30BFBCD15ECF196D.crl (hash: LP9lb9wlXD5T1SDDWms7AYEa4wAZ/u6K4zwhYt+hLqU=) 4: 3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa (hash: 2NfEf/tbZtwHV+2PFzn79NkNRnQSkFLyDYFjiAxOlwQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.crl rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:bd:ed:ae:8f:d4:e5:0b:4c:2b:54:b7:9c:12:1c:2b:dd:48:d1:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E035D5F5D70206748D3C087B30BFBCD15ECF196D Validity Not Before: May 12 13:53:56 2026 GMT Not After : May 13 17:51:56 2026 GMT Subject: CN=338841E96ABF64AB1F62BCA610B1366A9EA8CEC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f6:f8:43:a6:f8:80:42:b6:b9:3c:f9:97:27: fa:cb:5e:0a:05:2b:98:39:c3:39:17:c8:10:f2:b9: 59:eb:b9:2c:40:23:a4:b1:6d:8b:09:9f:d0:85:c2: cc:61:06:2f:78:da:79:fe:dc:97:99:08:64:f1:e6: 3d:97:95:98:5e:76:b4:57:c1:40:48:8e:2b:a7:eb: 2c:1d:e0:fb:cc:dc:81:a7:e6:99:c2:aa:5b:2c:ef: 1b:10:ca:f5:10:24:57:87:65:ca:b7:58:8c:1f:5e: dd:6a:ba:e5:d8:77:47:13:82:1c:14:c7:51:46:96: 79:0a:c8:a8:51:ce:2f:b1:66:58:a3:89:86:3d:27: ca:c7:80:03:27:6d:5f:80:fd:6b:b6:2d:20:94:e7: 2e:10:33:0a:b2:f4:aa:07:05:92:37:5b:82:cd:cc: 5f:d7:59:de:82:a2:ec:da:f2:33:8c:bd:34:4a:7c: 33:4b:61:46:0a:e7:95:9a:34:d8:86:98:7a:3f:3a: 8f:bc:c6:63:e3:3a:2b:8b:9d:47:b1:55:ce:03:a4: b8:6d:ef:c2:1a:dd:8d:90:26:f1:37:95:84:a6:51: a8:30:b2:4e:0d:c1:f0:aa:74:89:5d:69:ae:a4:d6: 03:fc:87:d3:96:a0:de:39:71:6e:85:5c:f2:94:38: 83:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:88:41:E9:6A:BF:64:AB:1F:62:BC:A6:10:B1:36:6A:9E:A8:CE:C3 X509v3 Authority Key Identifier: keyid:E0:35:D5:F5:D7:02:06:74:8D:3C:08:7B:30:BF:BC:D1:5E:CF:19:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:1c:24:0d:39:68:c0:97:0f:00:7a:06:f7:bd:32:fb:16:b3: 94:49:03:21:1b:37:55:4c:2c:a3:6e:e9:96:63:c9:ba:53:43: 8f:d6:62:fd:6b:f4:49:22:68:4a:8a:25:ca:b0:ca:e6:29:74: 30:01:7e:99:c1:ec:a9:e9:2d:00:76:06:32:c0:23:67:2f:68: cc:7a:b6:99:ad:7c:ea:2a:c0:0e:fe:68:01:2f:18:24:3f:88: 71:88:57:ab:0f:58:c6:22:32:22:a3:b9:77:da:63:1d:ee:d2: 9a:67:b8:91:ee:5b:fb:ed:48:f9:9e:ab:b3:fa:40:21:0c:bd: fe:fc:3d:43:8a:2c:e5:4d:c1:a8:2f:ad:ca:22:f8:0b:6f:73: fe:a0:90:22:02:6a:1e:ee:26:8a:12:33:85:0d:13:bc:17:c5: 67:5f:2e:46:99:b4:27:98:66:b3:d3:b1:ff:c3:df:55:a8:9b: ee:ce:d3:23:c3:ef:ec:7f:ce:1b:53:a5:0b:1f:41:37:69:e5: 54:09:d9:77:db:2d:c0:78:48:74:88:e0:b2:60:1a:2a:b7:05: 44:52:e8:f2:21:ff:fa:f3:96:85:fa:fe:7d:76:cc:90:3e:6e: d0:81:c3:a2:83:bd:ed:e7:93:97:ab:5c:bc:4e:9a:f0:3a:18: b5:81:de:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP73tro/U5QtMK1S3nBIcK91I0cwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAzNUQ1RjVENzAyMDY3NDhEM0MwODdCMzBCRkJDRDE1 RUNGMTk2RDAeFw0yNjA1MTIxMzUzNTZaFw0yNjA1MTMxNzUxNTZaMDMxMTAvBgNV BAMTKDMzODg0MUU5NkFCRjY0QUIxRjYyQkNBNjEwQjEzNjZBOUVBOENFQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59vhDpviAQra5PPmXJ/rLXgoF K5g5wzkXyBDyuVnruSxAI6SxbYsJn9CFwsxhBi942nn+3JeZCGTx5j2XlZhedrRX wUBIjiun6ywd4PvM3IGn5pnCqlss7xsQyvUQJFeHZcq3WIwfXt1quuXYd0cTghwU x1FGlnkKyKhRzi+xZlijiYY9J8rHgAMnbV+A/Wu2LSCU5y4QMwqy9KoHBZI3W4LN zF/XWd6Couza8jOMvTRKfDNLYUYK55WaNNiGmHo/Oo+8xmPjOiuLnUexVc4DpLht 78Ia3Y2QJvE3lYSmUagwsk4NwfCqdIldaa6k1gP8h9OWoN45cW6FXPKUOINHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM4hB6Wq/ZKsfYrymELE2ap6ozsMwHwYDVR0j BBgwFoAU4DXV9dcCBnSNPAh7ML+80V7PGW0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZiMjA1MTUtOGQ3Yy00NDVjLWJmZjctYmFiZDUyNjU3ODBmLzAvRTAzNUQ1RjVE NzAyMDY3NDhEM0MwODdCMzBCRkJDRDE1RUNGMTk2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDM1RDVGNUQ3MDIwNjc0OEQzQzA4N0IzMEJGQkNEMTVFQ0Yx OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZiMjA1MTUtOGQ3Yy00NDVjLWJm ZjctYmFiZDUyNjU3ODBmLzAvRTAzNUQ1RjVENzAyMDY3NDhEM0MwODdCMzBCRkJD RDE1RUNGMTk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL8cJA05aMCXDwB6Bve9MvsWs5RJAyEbN1VM LKNu6ZZjybpTQ4/WYv1r9EkiaEqKJcqwyuYpdDABfpnB7KnpLQB2BjLAI2cvaMx6 tpmtfOoqwA7+aAEvGCQ/iHGIV6sPWMYiMiKjuXfaYx3u0ppnuJHuW/vtSPmeq7P6 QCEMvf78PUOKLOVNwagvrcoi+Atvc/6gkCICah7uJooSM4UNE7wXxWdfLkaZtCeY ZrPTsf/D31Wom+7O0yPD7+x/zhtTpQsfQTdp5VQJ2XfbLcB4SHSI4LJgGiq3BURS 6PIh//rzloX6/n12zJA+btCBw6KDve3nk5erXLxOmvA6GLWB3m4= -----END CERTIFICATE-----Generated at Wed May 13 02:37:39 2026 by rpki-client