$ rpki-client -vvf rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft File: D35962E8F839460DC5283C472D81ADB87BBD3992.mft (raw, json) Hash identifier: PsHsS3QIoFIwPFYovh55O83NlEbulxZp6fLMsdzcikg= Subject key identifier: F9:DC:51:3B:6B:C1:E1:3A:86:F7:CC:1E:81:D7:F4:AF:7E:33:FF:19 Authority key identifier: D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 Certificate issuer: /CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Certificate serial: 4D71A342B5E40F6075FC0463EE34E83CE841A05E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:20:57 +0000 Manifest this update: Tue 12 May 2026 16:15:57 +0000 Manifest next update: Wed 13 May 2026 18:39:57 +0000 Files and hashes: 1: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (hash: Y/DmOT1ERuXNTR9l4X0obDV2SVqxiolJs80GKn5Zz9s=) 2: 3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (hash: VzZhSRiw8XBW/yDedZyS5uY03yRNTIbVc//42y9SUvw=) 3: 3132322e3234382e33352e302f32342d3234203d3e20313431313432.roa (hash: bM/0Dm/kJz164oUyk+EyLG8dzY/v3xcPNTwfnlLmVSk=) 4: 323430303a373530303a3a2f33322d3332203d3e20313431313432.roa (hash: zbddhP7SNU+N1CDEwFKRNo4Q4pKFgeqQ1pbI5rRqtBU=) 5: 3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (hash: zZKnPm65wCA/b7MgYVi6OYfLbBSyB9aR0+gTJCkjT98=) 6: 3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (hash: KtloGbIfkKJ4NXlhmcMPxJB4OgAOFnDw3xxvTqso1no=) 7: 3132322e3234382e33362e302f32342d3234203d3e203435333235.roa (hash: L0mPxNgbcwwNWadhYDVYcEPoRwXw/apNhz/JQNHU27s=) 8: 3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (hash: eLGownyXQbAHwo7lmiV7AZcGiEJZfmA0J0Wx85SPn6A=) 9: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (hash: a2g7FXBxKjJ9sPuBWUpxfzMOG1+kUNuv9IQ11Ti9Pks=) 10: 3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (hash: 0eliJEonh/Nebf/NJDVLw46smOx9iWVTCt/50JmdxX4=) 11: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (hash: xgjDAhQZn+M5QT3iWDFTTkYvcaKaz/dtqKLQQBwYvgA=) 12: 3132322e3234382e33382e302f32342d3234203d3e203435333235.roa (hash: O/C54fK6Fh0hkPYgUaevMk58lHbQGzg+mBNsocdzdL4=) 13: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (hash: 1WM6A0xkGbon1XjjFMKySJrVDJV2Gtw2xI0n8qXoIUg=) 14: D35962E8F839460DC5283C472D81ADB87BBD3992.crl (hash: PxU/P6ucyEuj9rZTUVZoWUFY6V3o9e9eCu7pCt0Cbl0=) 15: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (hash: zRrlJoG5zcUtX6wFVCQMeL8cPbII1W88o2EQ5g8PVNA=) 16: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (hash: LXPm+M8vAxjssdAZLO3Rx0wFITGhuZf7YIbnBsCAbss=) 17: 3132322e3234382e34352e302f32342d3234203d3e203435333235.roa (hash: YFkGY+wSseirD/L/4qz7sLnl/2atYUZvqHfKN+6xB9M=) 18: 3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (hash: fTQwNjegjWMOzBPfeCGxyPxzuktj8uBwcPPy5ukBNDg=) 19: 3132322e3234382e34372e302f32342d3234203d3e203435333235.roa (hash: AP1Uq+hh+Bk2TKrn6WpCz+/Kjlfl/SuzP91WxFo1LEI=) 20: 3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (hash: SHUyhFJkNlfUafPQZznwzypagEog72AhZ4GF3ZoArLM=) 21: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (hash: 9A3NELKN62n/Uv+kjUVb0RNEBPpV0EUgsvMetodVNuE=) 22: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (hash: F2/X+b+sJTBnlu6Sh9LFFYTW3UjFRRXVyNaKWEGhbhY=) 23: 3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (hash: 7PFw1XvCft2aOIZ+63/foK4bvYq8ag5iSEDET2cMWPo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:71:a3:42:b5:e4:0f:60:75:fc:04:63:ee:34:e8:3c:e8:41:a0:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Validity Not Before: May 12 16:15:57 2026 GMT Not After : May 13 18:39:57 2026 GMT Subject: CN=F9DC513B6BC1E13A86F7CC1E81D7F4AF7E33FF19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:76:7a:d3:ad:96:17:08:5a:24:10:98:1e:13: 86:0b:98:0e:ff:93:3f:c0:30:89:ef:5c:0f:68:bb: be:74:5c:bf:ca:61:6e:27:24:da:d0:a0:b3:f5:10: 5d:75:d5:d5:4d:f0:5c:5d:ff:9a:55:e2:62:43:02: be:ed:96:20:cd:05:6c:13:10:13:fb:cd:8d:9f:30: 93:a1:7a:01:a7:fa:9b:62:06:00:a2:81:82:c7:37: a7:12:8b:5b:bf:d3:37:e5:e8:ee:ca:65:ac:f8:2d: 80:e4:f3:db:fa:f2:b5:66:64:22:0e:39:b2:53:e4: 4b:db:a8:7e:89:17:66:28:f6:7b:dd:68:0b:4c:38: 3a:a9:53:f2:58:af:16:74:2f:08:f7:a2:0c:45:3c: 05:13:8d:5d:1b:6e:a2:a6:e8:0b:2f:23:f0:20:bd: 81:de:08:6e:18:8d:88:1b:af:f8:48:9c:4f:32:b6: 38:74:20:77:ae:f7:ca:40:fc:7c:51:be:c8:13:a0: 4c:43:7d:ad:a2:fd:33:e0:73:6c:dd:1c:f7:cb:1a: 0b:ca:e3:cc:d8:98:5d:2e:df:13:0f:16:64:cb:b2: a1:5b:dd:79:bd:d6:7a:2e:d2:50:3e:69:35:94:8e: bc:9e:da:47:84:8b:47:00:f6:5e:84:7a:e5:78:82: c0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DC:51:3B:6B:C1:E1:3A:86:F7:CC:1E:81:D7:F4:AF:7E:33:FF:19 X509v3 Authority Key Identifier: keyid:D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:30:a4:e3:1c:33:8e:3b:89:36:11:15:c9:10:bc:87:05:d0: 99:b7:2c:ae:89:dd:68:9e:ec:0c:78:9d:f9:95:4c:73:fa:66: 22:3d:6b:48:ad:64:65:f0:d7:92:e2:27:9f:de:08:6a:f6:8e: d9:03:77:cd:b8:75:d4:b2:46:31:d1:d8:cf:b7:7d:7f:a5:17: f7:92:90:03:5e:36:73:5f:cd:c2:5a:51:31:e3:94:92:98:93: 43:9c:20:f0:43:9d:12:37:8d:c4:fa:d8:02:73:1e:b1:b4:29: 5c:9e:27:96:14:9d:80:f5:9c:6a:0e:9d:7c:5c:46:5b:aa:dc: 1f:fa:54:e4:84:c7:2b:a8:3f:42:fb:f9:56:e1:e3:c2:75:e4: 30:bb:92:73:19:f0:56:d6:33:1c:ad:61:a0:04:1f:e0:e3:39: 9c:67:3d:1e:5c:99:70:f9:fe:88:9b:f4:ba:9b:25:1a:01:3c: 0c:99:b0:39:22:8b:b1:92:0c:5c:32:ba:bf:39:49:ca:07:08: 0f:19:06:dd:40:db:9d:76:30:47:54:4b:c9:21:cb:12:69:8e: 2b:10:81:11:88:b1:f7:c5:1b:97:33:29:9b:b2:19:c2:9e:43: 68:d7:62:4a:6b:43:98:39:f0:23:ad:eb:0d:32:56:68:eb:1b: 5f:e7:7b:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTXGjQrXkD2B1/ARj7jToPOhBoF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3 QkJEMzk5MjAeFw0yNjA1MTIxNjE1NTdaFw0yNjA1MTMxODM5NTdaMDMxMTAvBgNV BAMTKEY5REM1MTNCNkJDMUUxM0E4NkY3Q0MxRTgxRDdGNEFGN0UzM0ZGMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMdnrTrZYXCFokEJgeE4YLmA7/ kz/AMInvXA9ou750XL/KYW4nJNrQoLP1EF111dVN8Fxd/5pV4mJDAr7tliDNBWwT EBP7zY2fMJOhegGn+ptiBgCigYLHN6cSi1u/0zfl6O7KZaz4LYDk89v68rVmZCIO ObJT5EvbqH6JF2Yo9nvdaAtMODqpU/JYrxZ0Lwj3ogxFPAUTjV0bbqKm6AsvI/Ag vYHeCG4YjYgbr/hInE8ytjh0IHeu98pA/HxRvsgToExDfa2i/TPgc2zdHPfLGgvK 48zYmF0u3xMPFmTLsqFb3Xm91nou0lA+aTWUjrye2keEi0cA9l6EeuV4gsBHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+dxRO2vB4TqG98wegdf0r34z/xkwHwYDVR0j BBgwFoAU01li6Pg5Rg3FKDxHLYGtuHu9OZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYyZTdmZDYtZWI1ZS00ODBhLThlOTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThG ODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3QkJEMzk5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzU5NjJFOEY4Mzk0NjBEQzUyODNDNDcyRDgxQURCODdCQkQz OTkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYyZTdmZDYtZWI1ZS00ODBhLThl OTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFE Qjg3QkJEMzk5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwwpOMcM447iTYRFckQvIcF0Jm3LK6J3Wie 7Ax4nfmVTHP6ZiI9a0itZGXw15LiJ5/eCGr2jtkDd824ddSyRjHR2M+3fX+lF/eS kANeNnNfzcJaUTHjlJKYk0OcIPBDnRI3jcT62AJzHrG0KVyeJ5YUnYD1nGoOnXxc Rluq3B/6VOSExyuoP0L7+Vbh48J15DC7knMZ8FbWMxytYaAEH+DjOZxnPR5cmXD5 /oib9LqbJRoBPAyZsDkii7GSDFwyur85ScoHCA8ZBt1A2512MEdUS8khyxJpjisQ gRGIsffFG5czKZuyGcKeQ2jXYkprQ5g58COt6w0yVmjrG1/ne88= -----END CERTIFICATE-----Generated at Wed May 13 00:21:22 2026 by rpki-client