$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft File: 35859E59642559AC99788C194ED55EB1548A2F1F.mft (raw, json) Hash identifier: Juy4EmB8CeRIFNtejRIvKyilwMOOOhq7EnqY3plGWO0= Subject key identifier: 75:EA:5D:D8:A6:84:09:18:26:20:AE:C2:3D:92:5C:47:7D:66:2E:6B Authority key identifier: 35:85:9E:59:64:25:59:AC:99:78:8C:19:4E:D5:5E:B1:54:8A:2F:1F Certificate issuer: /CN=35859E59642559AC99788C194ED55EB1548A2F1F Certificate serial: 32EC86CC913A3EC896CE6CCB7AFD9E7945684AFA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft Manifest number: 0F Signing time: Tue 12 May 2026 10:01:14 +0000 Manifest this update: Tue 12 May 2026 09:56:14 +0000 Manifest next update: Wed 13 May 2026 10:42:14 +0000 Files and hashes: 1: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: hFjJslECEMnx83EP1P1UtwdiCEUWwcSYSCvr4li07y4=) 2: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: itttPeBqKU49Shq/w4T47E1hAyNoebnpwqyP1PK8wLg=) 3: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: QBz9jVg5iA4vI0m+M7MXqbx0KDdvReCXDCkg90gY1pM=) 4: 35859E59642559AC99788C194ED55EB1548A2F1F.crl (hash: 4ofKs68lbZKiZxHN7EkI/i/q2xGL/Y42qbScDFewwiM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.crl rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ec:86:cc:91:3a:3e:c8:96:ce:6c:cb:7a:fd:9e:79:45:68:4a:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35859E59642559AC99788C194ED55EB1548A2F1F Validity Not Before: May 12 09:56:14 2026 GMT Not After : May 13 10:42:14 2026 GMT Subject: CN=75EA5DD8A68409182620AEC23D925C477D662E6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:7c:dd:7a:af:83:be:bb:11:f9:c3:bf:9a:73: 48:da:2e:75:26:97:cd:a4:6e:5f:6c:fa:c6:96:f4: 27:bb:f4:78:be:63:bb:f2:88:89:dc:a3:a6:eb:cc: cd:03:22:64:3c:44:2a:7b:94:f5:eb:37:88:2a:09: 2c:27:54:85:07:e4:42:1c:34:05:19:6d:5a:60:31: 4b:8c:9c:e2:fd:b3:3c:4d:77:0d:88:07:32:fa:e5: dc:e1:43:be:d8:7b:9a:51:43:0b:03:11:bd:21:1e: 75:04:d1:e3:fc:d2:7d:63:28:ba:2d:d6:50:fa:28: c1:5c:61:7c:9b:f0:2a:34:e2:cc:0b:04:ba:7a:39: 82:d0:4c:dc:7a:90:92:6b:51:b8:bc:2d:05:82:87: 74:7e:64:e5:19:99:04:4a:6e:07:9e:39:03:34:c9: 50:8c:1f:5e:16:c1:c8:12:04:0c:75:bb:98:ea:66: e7:72:cc:ff:d1:16:11:fb:a1:5c:03:6c:64:9a:43: f3:ad:f0:53:f3:d2:69:70:be:7b:9c:fd:d1:de:be: f4:41:eb:9f:79:46:56:50:4f:f8:a9:0f:9d:31:4c: 3e:71:79:66:4c:f8:e1:83:6a:70:f3:3c:35:1d:02: bd:88:47:5e:e8:42:16:f1:06:6d:c1:69:ae:51:c1: 13:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EA:5D:D8:A6:84:09:18:26:20:AE:C2:3D:92:5C:47:7D:66:2E:6B X509v3 Authority Key Identifier: keyid:35:85:9E:59:64:25:59:AC:99:78:8C:19:4E:D5:5E:B1:54:8A:2F:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:d6:05:d4:78:3e:44:c2:bf:d0:bc:f0:59:89:b0:8f:c5:07: c4:fa:4f:8f:d2:06:37:68:f8:ef:0a:3d:6d:7f:51:2b:42:01: 7a:16:b0:71:ed:31:56:38:fb:61:e4:0e:af:49:cc:9e:16:56: 00:cc:b1:ba:08:d1:25:92:e3:1c:d0:45:41:14:fe:d3:3f:9b: 16:ce:2e:1e:69:a8:13:2a:d2:be:3c:f4:f4:2c:20:8c:b6:56: 5f:29:b9:42:95:de:00:bc:1a:84:59:3f:3f:55:72:24:11:cd: 0e:9e:c6:c4:58:8d:a8:ea:ef:3d:f5:fa:bc:ff:a6:ef:2e:52: 70:a8:9a:91:fa:b5:49:51:fd:91:ca:1f:96:8a:19:0b:86:37: 7f:c4:b6:c8:3b:6b:ed:6c:44:31:3a:d4:cf:cd:ec:82:3f:d6: 62:ac:45:7f:a0:8d:e3:06:0a:2a:7e:6b:33:46:f8:e1:76:bd: eb:7c:70:87:36:4a:09:d4:63:d2:90:28:27:80:0d:93:16:ad: e3:62:cc:a7:63:4e:ee:42:eb:4e:e0:74:e6:ea:19:68:9b:da: 4e:6a:58:c4:01:3a:8b:da:7c:ef:67:84:c9:07:2c:b1:32:06: 26:f0:17:76:10:0d:0c:9a:b9:e1:42:02:ea:0a:2a:e0:de:1d: ec:fa:3a:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuyGzJE6PsiWzmzLev2eeUVoSvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4NTlFNTk2NDI1NTlBQzk5Nzg4QzE5NEVENTVFQjE1 NDhBMkYxRjAeFw0yNjA1MTIwOTU2MTRaFw0yNjA1MTMxMDQyMTRaMDMxMTAvBgNV BAMTKDc1RUE1REQ4QTY4NDA5MTgyNjIwQUVDMjNEOTI1QzQ3N0Q2NjJFNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3fN16r4O+uxH5w7+ac0jaLnUm l82kbl9s+saW9Ce79Hi+Y7vyiInco6brzM0DImQ8RCp7lPXrN4gqCSwnVIUH5EIc NAUZbVpgMUuMnOL9szxNdw2IBzL65dzhQ77Ye5pRQwsDEb0hHnUE0eP80n1jKLot 1lD6KMFcYXyb8Co04swLBLp6OYLQTNx6kJJrUbi8LQWCh3R+ZOUZmQRKbgeeOQM0 yVCMH14WwcgSBAx1u5jqZudyzP/RFhH7oVwDbGSaQ/Ot8FPz0mlwvnuc/dHevvRB 6595RlZQT/ipD50xTD5xeWZM+OGDanDzPDUdAr2IR17oQhbxBm3Baa5RwRM3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdepd2KaECRgmIK7CPZJcR31mLmswHwYDVR0j BBgwFoAUNYWeWWQlWayZeIwZTtVesVSKLx8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJlZmJmMDQtNDFiZS00OGQ3LWFjMDAtOGEzYzQ5OGNhOWFlLzAvMzU4NTlFNTk2 NDI1NTlBQzk5Nzg4QzE5NEVENTVFQjE1NDhBMkYxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNTg1OUU1OTY0MjU1OUFDOTk3ODhDMTk0RUQ1NUVCMTU0OEEy RjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWJlZmJmMDQtNDFiZS00OGQ3LWFj MDAtOGEzYzQ5OGNhOWFlLzAvMzU4NTlFNTk2NDI1NTlBQzk5Nzg4QzE5NEVENTVF QjE1NDhBMkYxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPWBdR4PkTCv9C88FmJsI/FB8T6T4/SBjdo +O8KPW1/UStCAXoWsHHtMVY4+2HkDq9JzJ4WVgDMsboI0SWS4xzQRUEU/tM/mxbO Lh5pqBMq0r489PQsIIy2Vl8puUKV3gC8GoRZPz9VciQRzQ6exsRYjajq7z31+rz/ pu8uUnCompH6tUlR/ZHKH5aKGQuGN3/Etsg7a+1sRDE61M/N7II/1mKsRX+gjeMG Cip+azNG+OF2vet8cIc2SgnUY9KQKCeADZMWreNizKdjTu5C607gdObqGWib2k5q WMQBOovafO9nhMkHLLEyBibwF3YQDQyaueFCAuoKKuDeHez6OnA= -----END CERTIFICATE-----Generated at Tue May 12 22:13:22 2026 by rpki-client