$ rpki-client -vvf rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft File: E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft (raw, json) Hash identifier: GgO3WXMraQz7jHRAGMt7UCKgdMV+g54pWZ+NttGp59Y= Subject key identifier: 36:CE:69:41:66:1D:5D:7E:22:1E:71:75:9B:7C:F7:94:C2:50:A0:33 Authority key identifier: E0:35:D5:F5:D7:02:06:74:8D:3C:08:7B:30:BF:BC:D1:5E:CF:19:6D Certificate issuer: /CN=E035D5F5D70206748D3C087B30BFBCD15ECF196D Certificate serial: 661BC6EA38A123E13EEFDAEFC88FE48CE657CDFD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:00:46 +0000 Manifest this update: Thu 23 Jul 2026 20:55:46 +0000 Manifest next update: Fri 24 Jul 2026 22:36:46 +0000 Files and hashes: 1: E035D5F5D70206748D3C087B30BFBCD15ECF196D.crl (hash: 2oGWBv538ubnbzdN94a0A1GI2uCFTX9hje4SoRzpvLM=) 2: 3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa (hash: alqTQlTJJckhtW2N9aw/g6aRbRRoD+/QvIdNlTJVbT8=) 3: 3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa (hash: 2NfEf/tbZtwHV+2PFzn79NkNRnQSkFLyDYFjiAxOlwQ=) 4: 3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa (hash: Tts8f+N485CFXeqo33btYWO7LgUOuaCh8Px0kKwHoiY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.crl rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:1b:c6:ea:38:a1:23:e1:3e:ef:da:ef:c8:8f:e4:8c:e6:57:cd:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E035D5F5D70206748D3C087B30BFBCD15ECF196D Validity Not Before: Jul 23 20:55:46 2026 GMT Not After : Jul 24 22:36:46 2026 GMT Subject: CN=36CE6941661D5D7E221E71759B7CF794C250A033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:f1:7b:03:54:70:8f:72:73:ec:37:f8:57: 44:87:3b:e9:e1:fb:a0:23:91:b1:72:90:32:3d:6a: 93:69:4a:83:b1:22:02:27:77:02:fb:b6:6d:60:f5: 65:9b:b4:b8:6e:67:ae:e0:02:1b:5b:44:22:d6:d3: 60:3a:dd:68:89:92:96:74:82:18:fd:84:93:56:8a: 7c:63:1c:d6:54:db:3d:b5:69:f2:6e:3d:08:50:9c: 1c:73:64:23:2d:b8:62:d2:d2:11:70:18:b0:b0:b2: 14:92:d7:36:4f:7d:7e:3e:5f:c9:1a:75:05:7f:42: 34:d6:ca:2d:c0:d9:ad:1c:46:f6:f3:63:ab:a2:26: cd:73:9d:db:78:d0:cc:2d:ad:2c:86:9d:80:19:b7: 79:42:2a:0e:df:80:22:77:db:1c:1e:e3:8c:9c:a9: 0f:9c:ea:b3:e9:7a:c7:e9:39:0e:df:0b:88:c3:07: cf:e3:a7:d4:6c:8d:27:31:70:7a:9a:64:7b:76:15: e3:47:b9:28:d3:ef:74:b3:be:f1:ac:d8:0a:f0:81: b1:d3:0e:5d:8c:ed:e7:35:67:2f:e0:78:03:ab:b9: ca:ed:92:30:08:cd:14:8a:04:b5:38:7c:54:e7:1c: 7e:fc:c5:f7:76:00:e1:28:fc:59:7e:10:0d:fd:a2: ec:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CE:69:41:66:1D:5D:7E:22:1E:71:75:9B:7C:F7:94:C2:50:A0:33 X509v3 Authority Key Identifier: keyid:E0:35:D5:F5:D7:02:06:74:8D:3C:08:7B:30:BF:BC:D1:5E:CF:19:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:20:9b:e8:e3:af:74:c8:be:b5:cf:9d:ef:eb:dd:7f:1c:a7: 24:a4:fd:1d:f9:9b:2e:2f:de:b8:a8:86:8d:57:a6:d7:b9:3e: cd:8f:29:e3:bc:52:f8:d1:03:37:0b:7b:02:90:df:7f:6e:40: ab:b4:20:62:f9:76:b3:81:5e:30:4c:40:aa:a7:af:0b:23:59: 4a:89:55:87:07:34:35:de:9e:29:e2:59:1d:ce:ff:1d:90:9c: 23:70:0e:ef:fc:6f:c3:7c:a7:d1:fc:bd:b2:04:33:47:4c:32: 8f:27:47:0d:4b:13:88:7c:43:a0:63:13:51:99:05:c4:60:18: 74:b6:64:37:90:06:8f:40:91:ba:26:1c:48:b4:77:25:d7:63: 62:7f:32:57:ae:ad:24:4e:03:24:ed:0a:15:32:51:ec:dd:11: 4b:89:c4:f6:81:cf:ca:cd:e8:fa:76:ca:c9:33:02:9b:e7:59: d0:3a:a8:5f:63:45:f3:3b:03:a8:5a:4d:2a:f0:06:d1:ea:33: 94:3b:3e:39:60:c9:1a:36:59:35:ad:a0:53:b9:af:08:60:fa: 3d:f4:49:e6:2c:58:a7:21:24:f2:aa:c4:1f:3e:73:e2:2a:27: c1:34:07:fe:25:54:95:81:40:d1:9d:bc:30:91:6a:6b:33:7c: 9f:2c:51:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZhvG6jihI+E+79rvyI/kjOZXzf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAzNUQ1RjVENzAyMDY3NDhEM0MwODdCMzBCRkJDRDE1 RUNGMTk2RDAeFw0yNjA3MjMyMDU1NDZaFw0yNjA3MjQyMjM2NDZaMDMxMTAvBgNV BAMTKDM2Q0U2OTQxNjYxRDVEN0UyMjFFNzE3NTlCN0NGNzk0QzI1MEEwMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpbPF7A1Rwj3Jz7Df4V0SHO+nh +6AjkbFykDI9apNpSoOxIgIndwL7tm1g9WWbtLhuZ67gAhtbRCLW02A63WiJkpZ0 ghj9hJNWinxjHNZU2z21afJuPQhQnBxzZCMtuGLS0hFwGLCwshSS1zZPfX4+X8ka dQV/QjTWyi3A2a0cRvbzY6uiJs1zndt40MwtrSyGnYAZt3lCKg7fgCJ32xwe44yc qQ+c6rPpesfpOQ7fC4jDB8/jp9RsjScxcHqaZHt2FeNHuSjT73SzvvGs2ArwgbHT Dl2M7ec1Zy/geAOrucrtkjAIzRSKBLU4fFTnHH78xfd2AOEo/Fl+EA39ouz3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNs5pQWYdXX4iHnF1m3z3lMJQoDMwHwYDVR0j BBgwFoAU4DXV9dcCBnSNPAh7ML+80V7PGW0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZiMjA1MTUtOGQ3Yy00NDVjLWJmZjctYmFiZDUyNjU3ODBmLzAvRTAzNUQ1RjVE NzAyMDY3NDhEM0MwODdCMzBCRkJDRDE1RUNGMTk2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDM1RDVGNUQ3MDIwNjc0OEQzQzA4N0IzMEJGQkNEMTVFQ0Yx OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZiMjA1MTUtOGQ3Yy00NDVjLWJm ZjctYmFiZDUyNjU3ODBmLzAvRTAzNUQ1RjVENzAyMDY3NDhEM0MwODdCMzBCRkJD RDE1RUNGMTk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwgm+jjr3TIvrXPne/r3X8cpySk/R35my4v 3rioho1Xpte5Ps2PKeO8UvjRAzcLewKQ339uQKu0IGL5drOBXjBMQKqnrwsjWUqJ VYcHNDXeniniWR3O/x2QnCNwDu/8b8N8p9H8vbIEM0dMMo8nRw1LE4h8Q6BjE1GZ BcRgGHS2ZDeQBo9AkbomHEi0dyXXY2J/MleurSROAyTtChUyUezdEUuJxPaBz8rN 6Pp2yskzApvnWdA6qF9jRfM7A6haTSrwBtHqM5Q7PjlgyRo2WTWtoFO5rwhg+j30 SeYsWKchJPKqxB8+c+IqJ8E0B/4lVJWBQNGdvDCRamszfJ8sUVY= -----END CERTIFICATE-----Generated at Fri Jul 24 04:20:35 2026 by rpki-client