$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft File: 35859E59642559AC99788C194ED55EB1548A2F1F.mft (raw, json) Hash identifier: 5KdsMRfgBuC/SrhEPmk9F/tGFxktybdoXFWxSG7Ezu4= Subject key identifier: 86:5A:26:1F:87:1B:FF:74:08:F8:6D:C6:7B:99:50:B3:C8:D9:30:56 Authority key identifier: 35:85:9E:59:64:25:59:AC:99:78:8C:19:4E:D5:5E:B1:54:8A:2F:1F Certificate issuer: /CN=35859E59642559AC99788C194ED55EB1548A2F1F Certificate serial: 11F241A61F9EC784FB3FF96A85007B833FBB9A20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 19:09:42 +0000 Manifest this update: Wed 23 Sep 2026 19:04:42 +0000 Manifest next update: Thu 24 Sep 2026 21:02:42 +0000 Files and hashes: 1: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: itttPeBqKU49Shq/w4T47E1hAyNoebnpwqyP1PK8wLg=) 2: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: QBz9jVg5iA4vI0m+M7MXqbx0KDdvReCXDCkg90gY1pM=) 3: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: hFjJslECEMnx83EP1P1UtwdiCEUWwcSYSCvr4li07y4=) 4: 35859E59642559AC99788C194ED55EB1548A2F1F.crl (hash: vkm5gLgIaQ1ftjwT2pJkuAGiFN8LpLxrybabUsDIPhY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.crl rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:f2:41:a6:1f:9e:c7:84:fb:3f:f9:6a:85:00:7b:83:3f:bb:9a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35859E59642559AC99788C194ED55EB1548A2F1F Validity Not Before: Sep 23 19:04:42 2026 GMT Not After : Sep 24 21:02:42 2026 GMT Subject: CN=865A261F871BFF7408F86DC67B9950B3C8D93056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:25:ad:76:f1:d0:70:73:17:c9:af:d5:32:e0: 52:24:89:49:fa:ab:87:c8:8e:89:34:3e:fc:77:03: c6:26:18:db:e2:6c:4c:eb:b7:76:0b:ec:13:4a:03: c1:b6:eb:e6:c1:49:65:a4:7a:2a:92:00:3a:0a:14: 23:ad:95:ca:53:90:47:98:ff:a1:6b:c9:72:82:88: 7e:8f:3c:31:55:ac:ab:d9:4a:fc:01:e3:ae:14:6d: 71:81:be:89:3c:46:77:87:12:4a:85:4b:e4:65:71: 9a:4e:ed:d5:2c:bf:89:f7:da:f7:66:15:5e:23:e5: 7d:93:37:3a:b3:d9:f8:b9:39:84:2c:3c:eb:5c:85: d8:d7:39:cd:a2:3a:c5:0b:9c:e9:b1:10:26:8e:48: 55:3d:2c:97:e8:17:b8:11:89:ae:69:22:b9:3d:24: b1:05:ba:fd:3a:73:96:ba:b5:d4:f5:30:6c:3a:23: 4b:5b:68:b3:68:fa:92:de:93:fe:f7:af:75:65:54: 69:cb:d4:41:b1:a4:15:21:2c:d2:18:5c:11:31:d4: 86:74:5d:c5:76:8a:39:c1:9f:22:47:a3:3d:c2:60: ee:0d:9a:3b:8e:ca:96:52:fe:8d:5e:2a:59:91:d0: 46:af:d8:73:c5:8a:a3:4e:3c:8f:8d:f8:ec:4a:df: 57:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5A:26:1F:87:1B:FF:74:08:F8:6D:C6:7B:99:50:B3:C8:D9:30:56 X509v3 Authority Key Identifier: keyid:35:85:9E:59:64:25:59:AC:99:78:8C:19:4E:D5:5E:B1:54:8A:2F:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:84:84:87:dd:d8:54:00:97:40:c3:66:87:c4:cf:68:31:51: 88:23:0f:aa:24:a2:0e:e3:de:b0:5c:41:0d:aa:d4:d2:1c:d2: 2d:f2:a5:ea:f0:03:34:3b:d4:5a:fe:e6:1d:36:be:87:b9:a2: de:c4:89:6e:6d:7e:e3:d4:a0:6d:f8:6d:31:a8:13:bc:e6:41: 28:01:aa:12:22:2f:b9:75:dc:32:1f:f2:83:4f:21:b7:76:8c: d6:a7:79:26:a6:2b:02:da:f5:74:f3:8e:b2:aa:77:29:83:ac: 26:3a:8f:1b:19:e1:08:9a:2a:fe:3c:b5:ab:ec:fb:b4:f7:9e: bd:77:7d:25:05:9e:d7:5f:a2:12:df:7a:76:45:2b:e8:39:99: 6c:50:83:6a:9b:35:c5:b6:92:ed:a9:a9:a6:87:70:15:f2:48: 0c:54:8a:45:e2:29:b6:61:83:fa:de:b9:f8:15:12:93:47:1e: 5d:d1:b7:a9:ec:5b:69:be:e1:a7:f5:7e:ac:9a:57:e3:e9:bb: 42:1f:03:b9:e5:e1:8d:2b:78:ec:10:ee:db:62:f9:5b:28:34: 5b:80:29:a9:04:94:b2:86:fb:a9:df:52:d2:04:bb:af:4d:24: 1e:9c:60:96:24:36:62:c2:b9:38:59:c8:d0:f2:b0:23:e3:86: be:a6:42:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEfJBph+ex4T7P/lqhQB7gz+7miAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4NTlFNTk2NDI1NTlBQzk5Nzg4QzE5NEVENTVFQjE1 NDhBMkYxRjAeFw0yNjA5MjMxOTA0NDJaFw0yNjA5MjQyMTAyNDJaMDMxMTAvBgNV BAMTKDg2NUEyNjFGODcxQkZGNzQwOEY4NkRDNjdCOTk1MEIzQzhEOTMwNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Ja128dBwcxfJr9Uy4FIkiUn6 q4fIjok0Pvx3A8YmGNvibEzrt3YL7BNKA8G26+bBSWWkeiqSADoKFCOtlcpTkEeY /6FryXKCiH6PPDFVrKvZSvwB464UbXGBvok8RneHEkqFS+RlcZpO7dUsv4n32vdm FV4j5X2TNzqz2fi5OYQsPOtchdjXOc2iOsULnOmxECaOSFU9LJfoF7gRia5pIrk9 JLEFuv06c5a6tdT1MGw6I0tbaLNo+pLek/73r3VlVGnL1EGxpBUhLNIYXBEx1IZ0 XcV2ijnBnyJHoz3CYO4NmjuOypZS/o1eKlmR0Eav2HPFiqNOPI+N+OxK31drAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhlomH4cb/3QI+G3Ge5lQs8jZMFYwHwYDVR0j BBgwFoAUNYWeWWQlWayZeIwZTtVesVSKLx8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJlZmJmMDQtNDFiZS00OGQ3LWFjMDAtOGEzYzQ5OGNhOWFlLzAvMzU4NTlFNTk2 NDI1NTlBQzk5Nzg4QzE5NEVENTVFQjE1NDhBMkYxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNTg1OUU1OTY0MjU1OUFDOTk3ODhDMTk0RUQ1NUVCMTU0OEEy RjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWJlZmJmMDQtNDFiZS00OGQ3LWFj MDAtOGEzYzQ5OGNhOWFlLzAvMzU4NTlFNTk2NDI1NTlBQzk5Nzg4QzE5NEVENTVF QjE1NDhBMkYxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuEhIfd2FQAl0DDZofEz2gxUYgjD6okog7j 3rBcQQ2q1NIc0i3yperwAzQ71Fr+5h02voe5ot7EiW5tfuPUoG34bTGoE7zmQSgB qhIiL7l13DIf8oNPIbd2jNaneSamKwLa9XTzjrKqdymDrCY6jxsZ4QiaKv48tavs +7T3nr13fSUFntdfohLfenZFK+g5mWxQg2qbNcW2ku2pqaaHcBXySAxUikXiKbZh g/reufgVEpNHHl3Rt6nsW2m+4af1fqyaV+Ppu0IfA7nl4Y0reOwQ7tti+VsoNFuA KakElLKG+6nfUtIEu69NJB6cYJYkNmLCuThZyNDysCPjhr6mQrQ= -----END CERTIFICATE-----Generated at Wed Sep 23 21:47:58 2026 by rpki-client