$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft File: 35859E59642559AC99788C194ED55EB1548A2F1F.mft (raw, json) Hash identifier: 3hE69xU9kA2kY4fM3JzLYTjegnHuXOHmmWuVrb7AL8Q= Subject key identifier: B1:2A:98:81:61:A5:67:C1:A3:5B:86:AF:2A:57:BB:50:4C:B8:D9:F2 Authority key identifier: 35:85:9E:59:64:25:59:AC:99:78:8C:19:4E:D5:5E:B1:54:8A:2F:1F Certificate issuer: /CN=35859E59642559AC99788C194ED55EB1548A2F1F Certificate serial: 42DE4FED281282CE72A053554148C16546CBF17F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 00:39:55 +0000 Manifest this update: Fri 24 Jul 2026 00:34:55 +0000 Manifest next update: Sat 25 Jul 2026 01:38:55 +0000 Files and hashes: 1: 35859E59642559AC99788C194ED55EB1548A2F1F.crl (hash: wd8pnf9091g7Tj9EabEBWEa1mb4kC/6KcwzwxhkK+n4=) 2: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: hFjJslECEMnx83EP1P1UtwdiCEUWwcSYSCvr4li07y4=) 3: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: itttPeBqKU49Shq/w4T47E1hAyNoebnpwqyP1PK8wLg=) 4: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: QBz9jVg5iA4vI0m+M7MXqbx0KDdvReCXDCkg90gY1pM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.crl rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:de:4f:ed:28:12:82:ce:72:a0:53:55:41:48:c1:65:46:cb:f1:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35859E59642559AC99788C194ED55EB1548A2F1F Validity Not Before: Jul 24 00:34:55 2026 GMT Not After : Jul 25 01:38:55 2026 GMT Subject: CN=B12A988161A567C1A35B86AF2A57BB504CB8D9F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:74:c7:7c:6e:80:b4:52:45:27:1c:a3:00:a7: 2f:fa:01:fb:26:46:83:e6:51:89:c8:91:a3:5e:b4: 97:8b:cd:61:0f:47:19:99:96:cf:8b:42:91:c3:08: 11:27:12:79:9f:7d:2c:7f:5d:2a:de:9b:57:95:a2: cf:86:6a:e8:ce:21:2f:fa:42:e9:9b:4b:dd:18:8c: 22:cd:43:04:88:2c:02:7a:05:71:ec:81:0b:ef:a0: 47:67:18:73:69:82:66:33:5e:d0:ec:15:35:6b:6e: 0a:93:2d:aa:89:c0:f9:82:3d:e2:81:92:8a:85:c8: 3f:5e:d5:fe:44:7d:66:25:b0:55:1f:e0:c0:5e:82: e5:18:a5:7b:e9:2d:cb:93:68:b2:36:fc:ca:fa:91: 27:6f:6b:c2:ee:c5:fa:66:c9:0e:5d:d0:de:15:eb: 94:95:fb:41:2f:75:9a:17:5b:58:f2:d6:6e:b2:ca: 77:a6:fe:67:61:06:0e:fb:1a:03:c2:ca:12:43:5d: 22:94:b9:c0:7e:d2:f7:62:93:c5:94:5b:c9:9c:20: 8e:2e:65:11:7c:ae:20:da:13:e8:d0:0a:e9:f9:e7: d9:31:4f:d0:ce:65:f0:f3:34:10:a1:f0:de:b8:66: bc:b4:4d:5d:15:dd:0b:4d:bb:3d:cb:7b:b3:e6:43: e5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2A:98:81:61:A5:67:C1:A3:5B:86:AF:2A:57:BB:50:4C:B8:D9:F2 X509v3 Authority Key Identifier: keyid:35:85:9E:59:64:25:59:AC:99:78:8C:19:4E:D5:5E:B1:54:8A:2F:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:1c:c3:08:92:a6:8d:a6:12:20:8a:b2:88:a0:6d:ec:3f:83: 5f:19:24:62:0a:f6:43:ce:9b:46:f6:38:60:7f:81:ea:71:86: 53:f2:a0:c5:c5:56:a5:02:c5:47:07:7e:d3:85:42:7a:a2:fc: 04:ac:2a:51:b1:9b:e1:1d:99:82:89:ef:e4:39:44:9b:65:00: 9b:96:19:f7:36:b7:57:e3:97:17:44:4b:40:b9:57:7e:e8:09: ca:1d:ae:69:89:0a:1c:72:17:67:01:60:da:c4:b2:3c:33:5a: 7c:b3:d0:c8:bc:ac:51:5a:28:40:47:44:a6:6e:2f:f5:c0:b1: c2:c2:9e:56:cd:d5:e5:9a:a3:65:a2:40:15:a9:0e:4e:60:a1: 91:57:fb:05:5e:1b:60:90:69:d9:a6:ba:a9:21:91:ee:33:ad: c3:69:0e:5e:12:c9:5a:19:53:e6:55:11:6b:18:d9:83:8a:93: a3:d6:b6:f0:ab:2e:4a:c8:d9:f3:29:f2:7c:7b:3e:11:8f:55: 45:5a:ec:4d:4f:80:89:d5:22:16:c3:af:2f:ba:e3:36:2c:2a: cf:ce:05:07:8f:46:6a:1b:4a:be:88:f0:f3:b1:b6:57:5c:4f: 2e:20:a8:71:d0:ac:29:2e:10:8c:b5:08:e9:b3:a7:5f:c4:6f: 7c:52:68:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQt5P7SgSgs5yoFNVQUjBZUbL8X8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4NTlFNTk2NDI1NTlBQzk5Nzg4QzE5NEVENTVFQjE1 NDhBMkYxRjAeFw0yNjA3MjQwMDM0NTVaFw0yNjA3MjUwMTM4NTVaMDMxMTAvBgNV BAMTKEIxMkE5ODgxNjFBNTY3QzFBMzVCODZBRjJBNTdCQjUwNENCOEQ5RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDldMd8boC0UkUnHKMApy/6Afsm RoPmUYnIkaNetJeLzWEPRxmZls+LQpHDCBEnEnmffSx/XSrem1eVos+GaujOIS/6 QumbS90YjCLNQwSILAJ6BXHsgQvvoEdnGHNpgmYzXtDsFTVrbgqTLaqJwPmCPeKB koqFyD9e1f5EfWYlsFUf4MBeguUYpXvpLcuTaLI2/Mr6kSdva8LuxfpmyQ5d0N4V 65SV+0EvdZoXW1jy1m6yynem/mdhBg77GgPCyhJDXSKUucB+0vdik8WUW8mcII4u ZRF8riDaE+jQCun559kxT9DOZfDzNBCh8N64Zry0TV0V3QtNuz3Le7PmQ+UFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsSqYgWGlZ8GjW4avKle7UEy42fIwHwYDVR0j BBgwFoAUNYWeWWQlWayZeIwZTtVesVSKLx8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJlZmJmMDQtNDFiZS00OGQ3LWFjMDAtOGEzYzQ5OGNhOWFlLzAvMzU4NTlFNTk2 NDI1NTlBQzk5Nzg4QzE5NEVENTVFQjE1NDhBMkYxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNTg1OUU1OTY0MjU1OUFDOTk3ODhDMTk0RUQ1NUVCMTU0OEEy RjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWJlZmJmMDQtNDFiZS00OGQ3LWFj MDAtOGEzYzQ5OGNhOWFlLzAvMzU4NTlFNTk2NDI1NTlBQzk5Nzg4QzE5NEVENTVF QjE1NDhBMkYxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIcwwiSpo2mEiCKsoigbew/g18ZJGIK9kPO m0b2OGB/gepxhlPyoMXFVqUCxUcHftOFQnqi/ASsKlGxm+EdmYKJ7+Q5RJtlAJuW Gfc2t1fjlxdES0C5V37oCcodrmmJChxyF2cBYNrEsjwzWnyz0Mi8rFFaKEBHRKZu L/XAscLCnlbN1eWao2WiQBWpDk5goZFX+wVeG2CQadmmuqkhke4zrcNpDl4SyVoZ U+ZVEWsY2YOKk6PWtvCrLkrI2fMp8nx7PhGPVUVa7E1PgInVIhbDry+64zYsKs/O BQePRmobSr6I8POxtldcTy4gqHHQrCkuEIy1COmzp1/Eb3xSaA8= -----END CERTIFICATE-----Generated at Fri Jul 24 05:11:50 2026 by rpki-client