$ rpki-client -vvf rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft File: 2535F6A9A65395B5881ADB0B432A16679C88CC60.mft (raw, json) Hash identifier: LA52i3cBtYy8WLabfpJFE1mB+7OInRqGHU3ztshUz/E= Subject key identifier: FF:B1:D5:B0:DA:D6:27:A6:0E:69:6D:84:7F:A1:40:B3:91:78:56:7F Authority key identifier: 25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60 Certificate issuer: /CN=2535F6A9A65395B5881ADB0B432A16679C88CC60 Certificate serial: 4D52808DE58E17680D2AB77FD08EF10DC9F49E77 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 01:52:03 +0000 Manifest this update: Wed 03 Jun 2026 01:47:03 +0000 Manifest next update: Thu 04 Jun 2026 05:20:03 +0000 Files and hashes: 1: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (hash: lwZi0IQOzBkg5Jj3Quf3uQ8uDEGUC6KSV1rKBtsm4K4=) 2: 2535F6A9A65395B5881ADB0B432A16679C88CC60.crl (hash: FJ/lrmotUaz8gNFGkV9kxM+TcerbRuR3NmB/yalhmMo=) 3: 3230322e312e3233362e302f32342d3234203d3e203435373233.roa (hash: E2CZqc55ytVQ+gL56PQklO6/e15IEHDs3ZeA7hBho40=) 4: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (hash: perZ7IpCPM80Glsi8eW1EfkZGuK/3Og6OKBH6xj5CZ0=) 5: 323430333a316130303a343a3a2f34372d3437203d3e203435373233.roa (hash: kVXs9OKO5SWhYY8QAUmq6Wo0PmjBkNXoXhlgjZszj5Q=) 6: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (hash: 5nElrE2bFD3jeHzGP2EqItlqHxQy+rl4TSko98reQ+k=) 7: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (hash: IT4wEh8zWC2aFJaduZl+3xieFOQo82r5tnnrLJAHogw=) 8: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (hash: LXt8OGULAdQpoNoWK4gxLrA5MzZUVnNwkr0fY1oAkvc=) 9: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (hash: zWsBUB0EsryhwZbrxTe3du0LXbDcYqcCoZB7f/2SeQs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:52:80:8d:e5:8e:17:68:0d:2a:b7:7f:d0:8e:f1:0d:c9:f4:9e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2535F6A9A65395B5881ADB0B432A16679C88CC60 Validity Not Before: Jun 3 01:47:03 2026 GMT Not After : Jun 4 05:20:03 2026 GMT Subject: CN=FFB1D5B0DAD627A60E696D847FA140B39178567F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:04:58:f1:17:a4:64:a0:8d:9c:c3:1c:f4:71: f4:70:c9:5c:a7:3d:c1:ee:d7:c1:6a:50:0f:4c:61: 1e:10:a2:3d:1c:37:0e:b0:bf:c2:0f:43:4a:fd:4c: 1e:a5:d1:0a:6e:f9:a9:6b:53:f9:bc:d2:a1:09:4c: 42:0b:a2:da:f2:aa:6f:9e:d0:a4:2e:27:b3:7f:55: 69:e8:70:9e:f3:a6:4e:52:ac:f2:f4:e0:4e:94:63: f0:7a:fb:60:8e:0d:3e:55:ec:a2:8c:98:9f:4f:2f: ba:55:98:a2:d8:af:fd:c6:90:81:81:56:5b:40:29: 76:1e:b9:ad:8a:a7:a9:a1:3e:e7:d8:47:bb:46:a4: b7:35:d3:7d:e1:d8:3d:03:76:03:20:15:fa:6f:72: ba:2b:e5:d7:cc:24:7e:f7:52:2e:a1:4c:2d:4e:25: 7d:1a:3e:3b:4a:0e:23:a9:a3:48:d1:d6:13:0b:51: 57:80:c7:6b:0e:9b:01:0f:3e:e5:51:0d:5e:16:3f: 23:a7:25:c9:d2:6c:80:95:63:e6:fd:17:06:8a:c7: 2c:52:04:d3:6f:74:33:c4:14:7e:17:b0:9f:32:a3: 4a:d2:69:01:ff:cc:7c:dd:7a:eb:d5:15:14:29:b9: 86:c9:41:3a:01:48:b1:8f:68:8a:f5:46:1b:93:84: 1e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B1:D5:B0:DA:D6:27:A6:0E:69:6D:84:7F:A1:40:B3:91:78:56:7F X509v3 Authority Key Identifier: keyid:25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:cd:a1:26:d2:54:4f:6b:0a:84:c2:36:a2:af:d1:aa:7a:ff: 5e:90:a5:47:8a:b3:29:ad:2f:ea:92:50:67:f8:37:dc:fc:ce: 2e:60:65:14:76:71:23:17:75:a9:cb:46:bc:1c:c9:66:d1:92: 87:5d:8d:aa:60:7f:50:73:43:32:f6:71:b0:a2:8f:a7:1a:39: 5b:aa:e7:91:14:9b:d1:0b:3c:93:ba:ad:3e:3b:f2:92:df:87: 50:91:f0:ec:e9:74:34:45:3b:9f:a7:b5:2e:99:4e:94:87:64: cf:bb:ef:fe:fa:21:9f:b5:4e:7a:38:f5:13:ac:9e:fc:0f:a8: ab:57:22:06:b4:0d:5b:4e:ad:1a:c5:de:ab:d9:6c:2d:db:0f: 4f:0a:3b:db:fe:10:03:82:d0:b5:df:70:13:5f:ac:80:1b:b2: a6:2c:14:17:1c:ed:e4:61:1c:42:ff:86:21:d5:29:87:35:62: 53:82:b6:a7:97:1b:ab:08:ac:9e:39:79:e2:38:37:3e:42:d1: cb:50:5b:7e:0d:1a:8f:d6:12:78:72:4a:21:6d:32:b4:6c:dd: 0e:42:2d:14:19:19:b4:44:f8:9a:14:ab:d9:ed:70:fb:75:5c: bf:0d:96:fa:32:e1:b2:7e:59:9f:48:7b:ec:f7:64:f0:f0:e4: f1:4a:21:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTVKAjeWOF2gNKrd/0I7xDcn0nncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzNUY2QTlBNjUzOTVCNTg4MUFEQjBCNDMyQTE2Njc5 Qzg4Q0M2MDAeFw0yNjA2MDMwMTQ3MDNaFw0yNjA2MDQwNTIwMDNaMDMxMTAvBgNV BAMTKEZGQjFENUIwREFENjI3QTYwRTY5NkQ4NDdGQTE0MEIzOTE3ODU2N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdBFjxF6RkoI2cwxz0cfRwyVyn PcHu18FqUA9MYR4Qoj0cNw6wv8IPQ0r9TB6l0Qpu+alrU/m80qEJTEILotryqm+e 0KQuJ7N/VWnocJ7zpk5SrPL04E6UY/B6+2CODT5V7KKMmJ9PL7pVmKLYr/3GkIGB VltAKXYeua2Kp6mhPufYR7tGpLc1033h2D0DdgMgFfpvcror5dfMJH73Ui6hTC1O JX0aPjtKDiOpo0jR1hMLUVeAx2sOmwEPPuVRDV4WPyOnJcnSbICVY+b9FwaKxyxS BNNvdDPEFH4XsJ8yo0rSaQH/zHzdeuvVFRQpuYbJQToBSLGPaIr1RhuThB6JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/7HVsNrWJ6YOaW2Ef6FAs5F4Vn8wHwYDVR0j BBgwFoAUJTX2qaZTlbWIGtsLQyoWZ5yIzGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDFkYjM3MzAtZjQ5OS00NDlmLWI2ZjItN2E1ZGViNTMyYjBjLzAvMjUzNUY2QTlB NjUzOTVCNTg4MUFEQjBCNDMyQTE2Njc5Qzg4Q0M2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTM1RjZBOUE2NTM5NUI1ODgxQURCMEI0MzJBMTY2NzlDODhD QzYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDFkYjM3MzAtZjQ5OS00NDlmLWI2 ZjItN2E1ZGViNTMyYjBjLzAvMjUzNUY2QTlBNjUzOTVCNTg4MUFEQjBCNDMyQTE2 Njc5Qzg4Q0M2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3NoSbSVE9rCoTCNqKv0ap6/16QpUeKsymt L+qSUGf4N9z8zi5gZRR2cSMXdanLRrwcyWbRkoddjapgf1BzQzL2cbCij6caOVuq 55EUm9ELPJO6rT478pLfh1CR8OzpdDRFO5+ntS6ZTpSHZM+77/76IZ+1Tno49ROs nvwPqKtXIga0DVtOrRrF3qvZbC3bD08KO9v+EAOC0LXfcBNfrIAbsqYsFBcc7eRh HEL/hiHVKYc1YlOCtqeXG6sIrJ45eeI4Nz5C0ctQW34NGo/WEnhySiFtMrRs3Q5C LRQZGbRE+JoUq9ntcPt1XL8Nlvoy4bJ+WZ9Ie+z3ZPDw5PFKIbs= -----END CERTIFICATE-----Generated at Wed Jun 3 03:58:16 2026 by rpki-client