$ rpki-client -vvf rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft File: 2535F6A9A65395B5881ADB0B432A16679C88CC60.mft (raw, json) Hash identifier: o5M9YBnPTwMzGXcEjXABc8aQaTWEusZL41NdlIhDT3g= Subject key identifier: 7E:4C:D6:64:68:AE:86:C2:3B:0D:3F:C1:D1:85:B4:0A:64:48:A9:68 Authority key identifier: 25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60 Certificate issuer: /CN=2535F6A9A65395B5881ADB0B432A16679C88CC60 Certificate serial: 4F1846CEA38DEC759991077486C4FBBEDF17F63E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft Manifest number: 69 Signing time: Mon 20 Jul 2026 11:50:59 +0000 Manifest this update: Mon 20 Jul 2026 11:45:59 +0000 Manifest next update: Tue 21 Jul 2026 15:25:59 +0000 Files and hashes: 1: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (hash: perZ7IpCPM80Glsi8eW1EfkZGuK/3Og6OKBH6xj5CZ0=) 2: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (hash: 5nElrE2bFD3jeHzGP2EqItlqHxQy+rl4TSko98reQ+k=) 3: 323430333a316130303a343a3a2f34372d3437203d3e203435373233.roa (hash: kVXs9OKO5SWhYY8QAUmq6Wo0PmjBkNXoXhlgjZszj5Q=) 4: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (hash: lwZi0IQOzBkg5Jj3Quf3uQ8uDEGUC6KSV1rKBtsm4K4=) 5: 2535F6A9A65395B5881ADB0B432A16679C88CC60.crl (hash: xOugvsuCXmCukFPbr2bDYqKWesVBMnWTloueO0iMp6c=) 6: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (hash: zWsBUB0EsryhwZbrxTe3du0LXbDcYqcCoZB7f/2SeQs=) 7: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (hash: IT4wEh8zWC2aFJaduZl+3xieFOQo82r5tnnrLJAHogw=) 8: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (hash: LXt8OGULAdQpoNoWK4gxLrA5MzZUVnNwkr0fY1oAkvc=) 9: 3230322e312e3233362e302f32342d3234203d3e203435373233.roa (hash: E2CZqc55ytVQ+gL56PQklO6/e15IEHDs3ZeA7hBho40=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:18:46:ce:a3:8d:ec:75:99:91:07:74:86:c4:fb:be:df:17:f6:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2535F6A9A65395B5881ADB0B432A16679C88CC60 Validity Not Before: Jul 20 11:45:59 2026 GMT Not After : Jul 21 15:25:59 2026 GMT Subject: CN=7E4CD66468AE86C23B0D3FC1D185B40A6448A968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fa:ac:89:26:ed:f1:12:df:9b:0a:da:18:0d: 2f:42:ea:3c:21:96:e5:c3:b9:17:eb:52:07:a3:5c: a2:44:04:0f:af:fa:e5:81:04:bc:6a:ad:60:c1:88: 91:d0:07:82:cb:11:7e:05:4a:95:c4:a4:07:62:95: d9:d2:d3:8e:21:a6:27:af:49:58:a2:ca:c3:c9:be: a3:b3:c0:b8:a9:9e:d2:4a:d9:e6:61:e2:90:ce:73: cb:bb:17:94:80:d0:87:7a:ee:6b:00:d4:73:73:e8: 79:f5:29:48:a8:82:01:9c:4a:df:d7:61:65:1a:2d: 97:cf:4f:d7:c1:11:a5:9e:11:8b:d2:9a:ff:95:67: b3:7d:45:12:09:ff:b7:26:0d:59:67:67:23:1b:e6: 08:e8:81:c1:91:9a:6b:25:a4:3c:a1:a3:10:17:06: 40:25:0a:f7:97:3a:f9:ea:f8:47:13:6b:ac:16:f4: 85:97:02:5d:1f:38:45:39:ff:c0:ce:4c:4e:fe:dd: 88:a8:8d:e3:7f:ea:c5:e5:85:15:96:83:0c:d7:28: 8c:ae:22:67:17:15:5b:72:08:b4:0e:6b:1d:03:2f: c6:8b:76:12:5a:7e:e4:1d:db:58:49:9d:b1:7d:c9: 9b:e3:87:73:81:04:a2:e9:3f:5d:1c:da:3c:cc:3d: a4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4C:D6:64:68:AE:86:C2:3B:0D:3F:C1:D1:85:B4:0A:64:48:A9:68 X509v3 Authority Key Identifier: keyid:25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:9e:6b:f0:9a:cd:ed:b2:f2:3a:14:ef:25:ee:02:da:17:a7: a6:d0:04:f8:fd:df:8e:ac:7a:2c:53:26:68:f7:d1:e3:a1:0c: 4e:5b:f2:5b:10:4d:be:fa:09:93:9e:1e:98:34:ca:bf:10:59: 0a:36:fe:8f:76:68:90:ba:c6:fe:5e:dd:c1:29:8d:a1:8c:ab: c6:8f:cf:93:d3:bc:50:b0:e8:bf:f8:38:98:c1:62:bd:43:56: 5a:bf:04:6f:c0:b0:89:1e:aa:8a:b6:a6:f3:d7:95:ff:d3:85: 0e:38:d5:0a:ac:b5:af:92:9f:8c:8d:46:89:b2:df:d9:93:56: d1:8b:89:33:2f:f7:18:50:b0:53:d7:54:24:46:21:d1:9e:b0: 03:7e:42:5b:f4:62:6d:b7:ee:02:fb:ee:d6:76:bb:c2:c6:fb: 2c:6b:de:73:4f:60:15:ac:fc:a9:67:8c:8c:6b:e6:ce:ed:d0: df:6d:c8:a1:4e:f8:9f:69:49:4f:4b:a6:96:29:41:2a:7c:d1: 03:2e:4b:0d:42:46:31:5a:ae:79:49:7b:26:ce:87:67:c7:77: 98:0f:65:ce:aa:07:a5:16:35:07:e4:d2:c4:af:38:93:5c:b0: 8f:4f:d7:4d:23:0b:88:56:e5:91:df:37:7f:e9:98:88:ef:09: 0d:7d:ab:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTxhGzqON7HWZkQd0hsT7vt8X9j4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzNUY2QTlBNjUzOTVCNTg4MUFEQjBCNDMyQTE2Njc5 Qzg4Q0M2MDAeFw0yNjA3MjAxMTQ1NTlaFw0yNjA3MjExNTI1NTlaMDMxMTAvBgNV BAMTKDdFNENENjY0NjhBRTg2QzIzQjBEM0ZDMUQxODVCNDBBNjQ0OEE5NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx+qyJJu3xEt+bCtoYDS9C6jwh luXDuRfrUgejXKJEBA+v+uWBBLxqrWDBiJHQB4LLEX4FSpXEpAdildnS044hpiev SViiysPJvqOzwLipntJK2eZh4pDOc8u7F5SA0Id67msA1HNz6Hn1KUioggGcSt/X YWUaLZfPT9fBEaWeEYvSmv+VZ7N9RRIJ/7cmDVlnZyMb5gjogcGRmmslpDyhoxAX BkAlCveXOvnq+EcTa6wW9IWXAl0fOEU5/8DOTE7+3YiojeN/6sXlhRWWgwzXKIyu ImcXFVtyCLQOax0DL8aLdhJafuQd21hJnbF9yZvjh3OBBKLpP10c2jzMPaSdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfkzWZGiuhsI7DT/B0YW0CmRIqWgwHwYDVR0j BBgwFoAUJTX2qaZTlbWIGtsLQyoWZ5yIzGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDFkYjM3MzAtZjQ5OS00NDlmLWI2ZjItN2E1ZGViNTMyYjBjLzAvMjUzNUY2QTlB NjUzOTVCNTg4MUFEQjBCNDMyQTE2Njc5Qzg4Q0M2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTM1RjZBOUE2NTM5NUI1ODgxQURCMEI0MzJBMTY2NzlDODhD QzYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDFkYjM3MzAtZjQ5OS00NDlmLWI2 ZjItN2E1ZGViNTMyYjBjLzAvMjUzNUY2QTlBNjUzOTVCNTg4MUFEQjBCNDMyQTE2 Njc5Qzg4Q0M2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+ea/Caze2y8joU7yXuAtoXp6bQBPj9346s eixTJmj30eOhDE5b8lsQTb76CZOeHpg0yr8QWQo2/o92aJC6xv5e3cEpjaGMq8aP z5PTvFCw6L/4OJjBYr1DVlq/BG/AsIkeqoq2pvPXlf/ThQ441Qqsta+Sn4yNRomy 39mTVtGLiTMv9xhQsFPXVCRGIdGesAN+Qlv0Ym237gL77tZ2u8LG+yxr3nNPYBWs /KlnjIxr5s7t0N9tyKFO+J9pSU9LppYpQSp80QMuSw1CRjFarnlJeybOh2fHd5gP Zc6qB6UWNQfk0sSvOJNcsI9P100jC4hW5ZHfN3/pmIjvCQ19q4E= -----END CERTIFICATE-----Generated at Tue Jul 21 08:15:43 2026 by rpki-client