
$ rpki-client -vvf rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft
File: D35962E8F839460DC5283C472D81ADB87BBD3992.mft (raw, json)
Hash identifier: 9E4iipuOe7byuwgrkcFY1sUSAKxSRZ0/3dTZpO1zF4o=
Subject key identifier: 19:3F:02:E4:36:31:77:D3:2E:AD:4B:E0:8C:43:2C:D5:D7:D7:10:01
Authority key identifier: D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92
Certificate issuer: /CN=D35962E8F839460DC5283C472D81ADB87BBD3992
Certificate serial: 010BA83001E740A168AE2EC359330666123C1858
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 18:37:52 +0000
Manifest this update: Thu 23 Jul 2026 18:32:52 +0000
Manifest next update: Fri 24 Jul 2026 21:40:52 +0000
Files and hashes: 1: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (hash: xgjDAhQZn+M5QT3iWDFTTkYvcaKaz/dtqKLQQBwYvgA=)
2: 3132322e3234382e33352e302f32342d3234203d3e20313431313432.roa (hash: bM/0Dm/kJz164oUyk+EyLG8dzY/v3xcPNTwfnlLmVSk=)
3: 3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (hash: fTQwNjegjWMOzBPfeCGxyPxzuktj8uBwcPPy5ukBNDg=)
4: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (hash: a2g7FXBxKjJ9sPuBWUpxfzMOG1+kUNuv9IQ11Ti9Pks=)
5: 323430303a373530303a3a2f33322d3332203d3e20313431313432.roa (hash: zbddhP7SNU+N1CDEwFKRNo4Q4pKFgeqQ1pbI5rRqtBU=)
6: 3132322e3234382e34372e302f32342d3234203d3e203435333235.roa (hash: AP1Uq+hh+Bk2TKrn6WpCz+/Kjlfl/SuzP91WxFo1LEI=)
7: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (hash: zRrlJoG5zcUtX6wFVCQMeL8cPbII1W88o2EQ5g8PVNA=)
8: 3132322e3234382e33382e302f32342d3234203d3e203435333235.roa (hash: O/C54fK6Fh0hkPYgUaevMk58lHbQGzg+mBNsocdzdL4=)
9: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (hash: Y/DmOT1ERuXNTR9l4X0obDV2SVqxiolJs80GKn5Zz9s=)
10: 3132322e3234382e34352e302f32342d3234203d3e203435333235.roa (hash: YFkGY+wSseirD/L/4qz7sLnl/2atYUZvqHfKN+6xB9M=)
11: 3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (hash: KtloGbIfkKJ4NXlhmcMPxJB4OgAOFnDw3xxvTqso1no=)
12: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (hash: LXPm+M8vAxjssdAZLO3Rx0wFITGhuZf7YIbnBsCAbss=)
13: 3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (hash: SHUyhFJkNlfUafPQZznwzypagEog72AhZ4GF3ZoArLM=)
14: 3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (hash: 0eliJEonh/Nebf/NJDVLw46smOx9iWVTCt/50JmdxX4=)
15: 3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (hash: eLGownyXQbAHwo7lmiV7AZcGiEJZfmA0J0Wx85SPn6A=)
16: 3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (hash: zZKnPm65wCA/b7MgYVi6OYfLbBSyB9aR0+gTJCkjT98=)
17: 3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (hash: VzZhSRiw8XBW/yDedZyS5uY03yRNTIbVc//42y9SUvw=)
18: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (hash: 1WM6A0xkGbon1XjjFMKySJrVDJV2Gtw2xI0n8qXoIUg=)
19: 3132322e3234382e33362e302f32342d3234203d3e203435333235.roa (hash: L0mPxNgbcwwNWadhYDVYcEPoRwXw/apNhz/JQNHU27s=)
20: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (hash: F2/X+b+sJTBnlu6Sh9LFFYTW3UjFRRXVyNaKWEGhbhY=)
21: D35962E8F839460DC5283C472D81ADB87BBD3992.crl (hash: 30azY9IGclUR5G0uTl95UylW/xbxOakut2WrAoZDkao=)
22: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (hash: 9A3NELKN62n/Uv+kjUVb0RNEBPpV0EUgsvMetodVNuE=)
23: 3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (hash: 7PFw1XvCft2aOIZ+63/foK4bvYq8ag5iSEDET2cMWPo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl
rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 21:40:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0b:a8:30:01:e7:40:a1:68:ae:2e:c3:59:33:06:66:12:3c:18:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D35962E8F839460DC5283C472D81ADB87BBD3992
Validity
Not Before: Jul 23 18:32:52 2026 GMT
Not After : Jul 24 21:40:52 2026 GMT
Subject: CN=193F02E4363177D32EAD4BE08C432CD5D7D71001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:24:38:88:5b:e2:c8:32:33:1f:db:3f:00:
84:13:3d:d5:54:95:3b:8a:ec:ba:bc:3f:5f:04:62:
57:c5:1a:d2:b6:6e:4c:47:10:5f:61:6e:73:7f:97:
be:33:ba:fa:27:bf:42:a8:d9:0a:f4:3d:b4:72:92:
92:00:2b:65:8e:d7:0b:e2:7d:9e:69:6a:02:0a:6f:
23:b2:91:39:d9:40:4a:55:2d:c8:b8:9d:2d:59:54:
3c:20:dc:cd:1e:67:de:bd:0f:c1:5f:d6:3b:3f:e2:
d1:17:94:ac:4e:03:cd:2b:f5:2e:a9:d1:29:c2:0b:
13:8c:f3:a1:ee:ba:e8:41:fb:84:a6:b9:91:93:73:
be:23:d8:79:a9:8d:3c:ab:e7:91:9c:20:08:a9:ce:
58:96:2d:87:94:20:bf:2d:4d:f9:c7:54:bb:83:42:
1f:cb:5e:db:34:e0:94:5c:cc:8f:18:be:47:30:96:
dc:9e:71:d9:a6:bf:e2:b6:d6:db:90:34:ec:b0:74:
72:ab:f9:e9:85:a6:9f:c1:62:06:4a:f4:33:c3:1c:
32:01:a3:ef:26:cc:8a:77:4e:84:bd:ec:ed:d6:2a:
4d:9d:8b:c4:e6:aa:01:5c:33:aa:e3:e0:1c:c2:a2:
61:d6:01:6a:d1:40:74:3e:be:73:4d:c1:fb:4a:25:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3F:02:E4:36:31:77:D3:2E:AD:4B:E0:8C:43:2C:D5:D7:D7:10:01
X509v3 Authority Key Identifier:
keyid:D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ca:56:78:bb:55:85:9f:e5:a6:54:04:6c:85:67:00:ff:3a:
54:90:cb:ce:7c:b5:d2:eb:a8:9c:bb:6d:53:fa:68:95:96:9f:
eb:84:52:8d:fb:5c:0f:81:46:79:37:e1:27:69:92:96:a0:96:
48:d5:ae:01:fb:99:b1:fe:a9:ef:3d:9f:dc:b3:ba:93:90:e3:
2a:50:ea:b1:50:8e:72:82:3e:78:a6:4b:ac:72:65:fb:02:57:
f6:b2:93:67:15:ad:08:84:28:18:1b:69:78:98:41:64:0e:08:
9f:e9:f1:ec:2d:5c:31:ee:8e:32:ba:a1:6d:a3:ee:9f:66:76:
fe:c4:b2:a4:71:54:6b:29:03:4c:83:f6:cd:d2:21:b5:e6:75:
1a:3f:92:c4:2d:d3:f9:d9:45:22:f6:8d:0f:13:b2:1a:c6:2e:
4e:33:63:5e:54:3b:ac:a2:8c:58:80:7c:5f:43:27:50:d0:e5:
0c:fe:32:3c:cd:bc:22:25:ac:f8:65:75:fc:5e:c1:a8:1b:a4:
06:62:a9:3c:66:7a:af:6c:a9:fa:bf:c2:d1:f3:50:54:c4:7b:
2f:76:32:1e:9d:87:cf:05:99:35:ce:90:ed:90:c4:c7:47:01:
5b:d2:32:24:2f:7a:80:2d:29:60:a1:08:3e:07:02:f2:9e:c0:
d7:c7:a9:06
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAQuoMAHnQKFori7DWTMGZhI8GFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3
QkJEMzk5MjAeFw0yNjA3MjMxODMyNTJaFw0yNjA3MjQyMTQwNTJaMDMxMTAvBgNV
BAMTKDE5M0YwMkU0MzYzMTc3RDMyRUFENEJFMDhDNDMyQ0Q1RDdENzEwMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsxSQ4iFviyDIzH9s/AIQTPdVU
lTuK7Lq8P18EYlfFGtK2bkxHEF9hbnN/l74zuvonv0Ko2Qr0PbRykpIAK2WO1wvi
fZ5pagIKbyOykTnZQEpVLci4nS1ZVDwg3M0eZ969D8Ff1js/4tEXlKxOA80r9S6p
0SnCCxOM86HuuuhB+4SmuZGTc74j2HmpjTyr55GcIAipzliWLYeUIL8tTfnHVLuD
Qh/LXts04JRczI8Yvkcwltyecdmmv+K21tuQNOywdHKr+emFpp/BYgZK9DPDHDIB
o+8mzIp3ToS97O3WKk2di8TmqgFcM6rj4BzComHWAWrRQHQ+vnNNwftKJXYHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGT8C5DYxd9MurUvgjEMs1dfXEAEwHwYDVR0j
BBgwFoAU01li6Pg5Rg3FKDxHLYGtuHu9OZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGYyZTdmZDYtZWI1ZS00ODBhLThlOTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThG
ODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3QkJEMzk5Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EMzU5NjJFOEY4Mzk0NjBEQzUyODNDNDcyRDgxQURCODdCQkQz
OTkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYyZTdmZDYtZWI1ZS00ODBhLThl
OTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFE
Qjg3QkJEMzk5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADTKVni7VYWf5aZUBGyFZwD/OlSQy858tdLr
qJy7bVP6aJWWn+uEUo37XA+BRnk34SdpkpaglkjVrgH7mbH+qe89n9yzupOQ4ypQ
6rFQjnKCPnimS6xyZfsCV/ayk2cVrQiEKBgbaXiYQWQOCJ/p8ewtXDHujjK6oW2j
7p9mdv7EsqRxVGspA0yD9s3SIbXmdRo/ksQt0/nZRSL2jQ8TshrGLk4zY15UO6yi
jFiAfF9DJ1DQ5Qz+MjzNvCIlrPhldfxewagbpAZiqTxmeq9sqfq/wtHzUFTEey92
Mh6dh88FmTXOkO2QxMdHAVvSMiQveoAtKWChCD4HAvKewNfHqQY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:18 2026 by rpki-client