$ rpki-client -vvvf rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft File: D35962E8F839460DC5283C472D81ADB87BBD3992.mft (raw, json) Hash identifier: Q5i4u8NQ8pWLbQE3mm8O04malEloxTCLK1x6zk9CQ8E= Subject key identifier: 3D:85:93:BC:06:8B:5D:FE:D1:E5:7E:A4:61:3A:3F:46:D1:A0:5A:43 Authority key identifier: D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 Certificate issuer: /CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Certificate serial: 2C64ABBFD22511DBCB2215A21E2E9EEF0F5D156C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 15:09:54 +0000 Manifest this update: Wed 23 Sep 2026 15:04:54 +0000 Manifest next update: Thu 24 Sep 2026 17:45:54 +0000 Files and hashes: 1: 3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (hash: fTQwNjegjWMOzBPfeCGxyPxzuktj8uBwcPPy5ukBNDg=) 2: 3132322e3234382e33382e302f32342d3234203d3e203435333235.roa (hash: O/C54fK6Fh0hkPYgUaevMk58lHbQGzg+mBNsocdzdL4=) 3: 3132322e3234382e34352e302f32342d3234203d3e203435333235.roa (hash: YFkGY+wSseirD/L/4qz7sLnl/2atYUZvqHfKN+6xB9M=) 4: 3132322e3234382e33362e302f32342d3234203d3e203435333235.roa (hash: L0mPxNgbcwwNWadhYDVYcEPoRwXw/apNhz/JQNHU27s=) 5: D35962E8F839460DC5283C472D81ADB87BBD3992.crl (hash: JZDWs43Vd3jU3VoQT9gcV09uiReenmvErzKN7NmpRoM=) 6: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (hash: 1WM6A0xkGbon1XjjFMKySJrVDJV2Gtw2xI0n8qXoIUg=) 7: 3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (hash: KtloGbIfkKJ4NXlhmcMPxJB4OgAOFnDw3xxvTqso1no=) 8: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (hash: LXPm+M8vAxjssdAZLO3Rx0wFITGhuZf7YIbnBsCAbss=) 9: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (hash: Y/DmOT1ERuXNTR9l4X0obDV2SVqxiolJs80GKn5Zz9s=) 10: 3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (hash: VzZhSRiw8XBW/yDedZyS5uY03yRNTIbVc//42y9SUvw=) 11: 323430303a373530303a3a2f33322d3332203d3e20313431313432.roa (hash: zbddhP7SNU+N1CDEwFKRNo4Q4pKFgeqQ1pbI5rRqtBU=) 12: 3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (hash: zZKnPm65wCA/b7MgYVi6OYfLbBSyB9aR0+gTJCkjT98=) 13: 3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (hash: 0eliJEonh/Nebf/NJDVLw46smOx9iWVTCt/50JmdxX4=) 14: 3132322e3234382e33352e302f32342d3234203d3e20313431313432.roa (hash: bM/0Dm/kJz164oUyk+EyLG8dzY/v3xcPNTwfnlLmVSk=) 15: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (hash: 9A3NELKN62n/Uv+kjUVb0RNEBPpV0EUgsvMetodVNuE=) 16: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (hash: a2g7FXBxKjJ9sPuBWUpxfzMOG1+kUNuv9IQ11Ti9Pks=) 17: 3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (hash: 7PFw1XvCft2aOIZ+63/foK4bvYq8ag5iSEDET2cMWPo=) 18: 3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (hash: eLGownyXQbAHwo7lmiV7AZcGiEJZfmA0J0Wx85SPn6A=) 19: 3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (hash: SHUyhFJkNlfUafPQZznwzypagEog72AhZ4GF3ZoArLM=) 20: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (hash: xgjDAhQZn+M5QT3iWDFTTkYvcaKaz/dtqKLQQBwYvgA=) 21: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (hash: zRrlJoG5zcUtX6wFVCQMeL8cPbII1W88o2EQ5g8PVNA=) 22: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (hash: F2/X+b+sJTBnlu6Sh9LFFYTW3UjFRRXVyNaKWEGhbhY=) 23: 3132322e3234382e34372e302f32342d3234203d3e203435333235.roa (hash: AP1Uq+hh+Bk2TKrn6WpCz+/Kjlfl/SuzP91WxFo1LEI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:64:ab:bf:d2:25:11:db:cb:22:15:a2:1e:2e:9e:ef:0f:5d:15:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Validity Not Before: Sep 23 15:04:54 2026 GMT Not After : Sep 24 17:45:54 2026 GMT Subject: CN=3D8593BC068B5DFED1E57EA4613A3F46D1A05A43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ab:cc:2f:1a:ca:07:78:51:7b:c1:5e:d7:2a: 21:9a:f4:cd:d8:ee:34:9e:eb:0a:7f:47:05:26:3c: fd:34:65:53:48:fe:39:c8:9d:be:a1:1e:6a:ce:69: 79:4d:a4:f7:68:06:f9:f1:78:bc:12:66:b7:a2:6e: 30:ec:b7:99:ec:a9:2b:22:b8:0c:57:26:d8:07:59: 8e:35:15:fe:46:50:57:fe:f5:6e:cf:70:94:84:2a: 46:4e:01:f6:ba:06:bb:f1:b3:02:ab:a5:f2:fa:4b: e1:76:49:1a:32:4a:c6:18:44:8c:1f:16:80:8d:5e: e7:5d:31:d6:eb:c4:5f:b1:79:74:bd:3a:e9:20:94: 4e:95:67:5e:6d:cf:19:1a:2a:84:be:64:af:0f:46: 8a:d4:ea:cd:20:4d:c7:2e:52:c0:c5:62:55:bb:77: 6a:a4:eb:bb:c2:79:9e:86:91:5e:18:eb:ed:98:f8: e1:66:36:0c:86:11:68:e2:3d:a5:2d:4d:59:f8:8f: bf:c1:33:90:0a:00:59:35:99:d8:bb:eb:8a:96:7f: b0:72:24:bc:5c:b8:d3:32:20:57:15:f6:bc:c8:ef: 14:3f:c2:20:c5:fa:6f:53:64:55:bd:66:94:38:f9: 17:c0:ae:24:8c:6c:43:de:74:52:41:a4:24:4d:6c: 6b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:85:93:BC:06:8B:5D:FE:D1:E5:7E:A4:61:3A:3F:46:D1:A0:5A:43 X509v3 Authority Key Identifier: keyid:D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b8:39:ed:50:11:ae:f3:38:29:3f:ba:8e:9f:11:3d:01:4a: f3:28:2b:fb:fd:0c:58:7f:78:b4:01:81:4a:85:bc:5e:3a:3f: 37:c2:ab:6e:c1:6b:8a:95:4b:26:a8:5d:bb:7a:2f:2c:0b:72: 46:6c:f7:3a:eb:44:bb:9a:df:29:63:94:34:2e:37:29:91:ba: d7:7b:71:83:54:c3:43:84:0b:04:e8:a0:42:a6:33:e1:6d:a4: 4f:b9:4d:9a:ba:3b:19:e2:f5:c7:46:60:a3:56:81:52:63:37: 74:0a:f0:3d:b8:d7:27:1f:73:eb:56:12:0f:4d:7b:eb:d9:96: cf:6a:ea:10:e4:df:12:ce:c9:eb:b8:93:cf:ef:12:29:47:6e: 20:2e:e2:d0:41:c4:35:e3:97:fc:2d:b8:82:de:67:d6:6d:d5: f7:58:cd:9e:d9:16:1d:80:de:93:00:1a:c1:0f:87:5b:b6:ee: f9:0e:aa:7d:3a:07:0a:24:82:4d:81:03:0a:2d:70:72:11:3d: 10:7b:46:c8:f7:e1:ba:f7:a8:16:a0:9a:b4:a9:9f:23:51:e9: 16:e1:68:57:fb:1f:d2:c0:ad:b4:c8:fd:6f:31:63:d3:c5:ad: 12:45:60:4f:0f:de:f8:12:a2:41:6b:cb:19:24:57:8c:93:b5: 09:1a:36:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULGSrv9IlEdvLIhWiHi6e7w9dFWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3 QkJEMzk5MjAeFw0yNjA5MjMxNTA0NTRaFw0yNjA5MjQxNzQ1NTRaMDMxMTAvBgNV BAMTKDNEODU5M0JDMDY4QjVERkVEMUU1N0VBNDYxM0EzRjQ2RDFBMDVBNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGq8wvGsoHeFF7wV7XKiGa9M3Y 7jSe6wp/RwUmPP00ZVNI/jnInb6hHmrOaXlNpPdoBvnxeLwSZreibjDst5nsqSsi uAxXJtgHWY41Ff5GUFf+9W7PcJSEKkZOAfa6BrvxswKrpfL6S+F2SRoySsYYRIwf FoCNXuddMdbrxF+xeXS9OukglE6VZ15tzxkaKoS+ZK8PRorU6s0gTccuUsDFYlW7 d2qk67vCeZ6GkV4Y6+2Y+OFmNgyGEWjiPaUtTVn4j7/BM5AKAFk1mdi764qWf7By JLxcuNMyIFcV9rzI7xQ/wiDF+m9TZFW9ZpQ4+RfAriSMbEPedFJBpCRNbGt9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPYWTvAaLXf7R5X6kYTo/RtGgWkMwHwYDVR0j BBgwFoAU01li6Pg5Rg3FKDxHLYGtuHu9OZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYyZTdmZDYtZWI1ZS00ODBhLThlOTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThG ODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3QkJEMzk5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzU5NjJFOEY4Mzk0NjBEQzUyODNDNDcyRDgxQURCODdCQkQz OTkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYyZTdmZDYtZWI1ZS00ODBhLThl OTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFE Qjg3QkJEMzk5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFS4Oe1QEa7zOCk/uo6fET0BSvMoK/v9DFh/ eLQBgUqFvF46PzfCq27Ba4qVSyaoXbt6LywLckZs9zrrRLua3yljlDQuNymRutd7 cYNUw0OECwTooEKmM+FtpE+5TZq6Oxni9cdGYKNWgVJjN3QK8D241ycfc+tWEg9N e+vZls9q6hDk3xLOyeu4k8/vEilHbiAu4tBBxDXjl/wtuILeZ9Zt1fdYzZ7ZFh2A 3pMAGsEPh1u27vkOqn06Bwokgk2BAwotcHIRPRB7Rsj34br3qBagmrSpnyNR6Rbh aFf7H9LArbTI/W8xY9PFrRJFYE8P3vgSokFryxkkV4yTtQkaNiI= -----END CERTIFICATE-----Generated at Wed Sep 23 23:16:35 2026 by rpki-client