$ rpki-client -vvvf rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft File: E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft (raw, json) Hash identifier: O+lox76IXpOv6fVEhKDsX0V2x6Cl/4Vv9w5b2+yUfu4= Subject key identifier: 89:41:C1:53:9D:27:F2:D2:90:BA:5D:CD:F4:BD:5E:7F:DE:EB:A1:9A Authority key identifier: E0:35:D5:F5:D7:02:06:74:8D:3C:08:7B:30:BF:BC:D1:5E:CF:19:6D Certificate issuer: /CN=E035D5F5D70206748D3C087B30BFBCD15ECF196D Certificate serial: 7948642755CA0ACDCC974D2F5877633E0A2F1833 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 19:36:55 +0000 Manifest this update: Wed 02 Sep 2026 19:31:55 +0000 Manifest next update: Thu 03 Sep 2026 21:05:55 +0000 Files and hashes: 1: 3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa (hash: Tts8f+N485CFXeqo33btYWO7LgUOuaCh8Px0kKwHoiY=) 2: E035D5F5D70206748D3C087B30BFBCD15ECF196D.crl (hash: MKpKjwpg6plowUgvDlix/UXdzH0f8QMmaz69DMYJycU=) 3: 3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa (hash: 2NfEf/tbZtwHV+2PFzn79NkNRnQSkFLyDYFjiAxOlwQ=) 4: 3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa (hash: alqTQlTJJckhtW2N9aw/g6aRbRRoD+/QvIdNlTJVbT8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.crl rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:48:64:27:55:ca:0a:cd:cc:97:4d:2f:58:77:63:3e:0a:2f:18:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E035D5F5D70206748D3C087B30BFBCD15ECF196D Validity Not Before: Sep 2 19:31:55 2026 GMT Not After : Sep 3 21:05:55 2026 GMT Subject: CN=8941C1539D27F2D290BA5DCDF4BD5E7FDEEBA19A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:79:a6:be:59:d8:55:40:c7:7a:e8:14:36:b5: 3a:bc:c1:3f:7b:cd:1f:7f:c9:ec:72:d0:d0:49:f2: 85:76:7e:fb:14:bf:9c:24:74:fd:dc:d4:a6:d7:b8: 20:82:2c:65:26:9a:f1:e7:4b:eb:29:31:69:58:f1: 1d:ce:ba:ae:97:48:2c:78:9e:e2:b0:26:00:4b:b4: b1:a7:ae:4f:61:79:60:0b:65:0c:46:ae:1b:0c:6f: 1c:55:c6:26:b0:76:31:69:1e:ce:a1:79:d1:6e:34: 35:0a:9b:ec:27:fb:d7:5f:8b:cc:53:6b:04:71:51: 0c:3e:bb:9a:4f:a7:27:b6:e1:c2:7e:f7:14:b4:53: 72:cb:c6:e4:c1:f3:b9:ed:20:bf:0a:8b:1c:59:2f: 12:49:6b:c2:cb:d7:2d:bc:62:9a:4f:38:75:83:01: 77:17:53:d1:75:5c:a6:39:36:74:55:2e:dd:c5:27: 12:34:96:ed:c6:f8:13:e3:55:ae:3b:74:bc:ae:0f: c5:aa:2c:ab:b2:ea:93:cb:fb:54:1e:1f:5c:4b:40: 49:a9:6d:89:4f:07:d9:4a:d9:65:a3:75:0c:a0:10: a8:c5:95:30:3a:a2:e0:76:a3:d8:9e:59:42:c1:09: d6:ea:12:61:e0:40:4a:d6:de:7e:ef:9e:54:3b:62: c8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:41:C1:53:9D:27:F2:D2:90:BA:5D:CD:F4:BD:5E:7F:DE:EB:A1:9A X509v3 Authority Key Identifier: keyid:E0:35:D5:F5:D7:02:06:74:8D:3C:08:7B:30:BF:BC:D1:5E:CF:19:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:10:5f:bb:47:56:51:e2:a8:3e:a7:32:a6:a8:09:41:a6:07: 1a:a5:87:ab:87:ef:0a:79:07:ea:bb:7a:31:c2:9c:0e:3d:5d: c9:25:7a:28:46:72:fc:09:33:e8:6e:ae:fc:af:e2:74:58:dd: b8:b7:b4:6a:20:52:d8:a8:3c:0e:8c:76:79:cc:d2:6f:cf:db: 8e:87:5f:2f:2c:d2:63:49:1c:3a:2f:ed:24:1d:d4:8b:a8:a3: ec:75:79:e8:c8:88:9d:4f:61:58:4c:4b:4e:b6:e5:7c:44:82: 31:2e:de:d3:62:b3:c8:89:90:ff:53:cd:05:96:a3:b7:fa:9d: 9e:a4:ae:b7:41:af:34:b7:9b:46:a0:73:7b:c4:f5:68:42:8c: 7d:01:ce:60:22:79:4c:c8:47:21:db:c0:eb:30:13:5a:bc:3b: 4d:b3:2a:79:1c:78:92:d0:40:23:2b:39:e2:2a:5f:dd:33:19: 53:62:59:12:34:9b:8e:08:2e:87:dc:dc:a7:1d:c6:6a:4d:c9: a1:9e:55:e4:ea:c9:9b:69:c6:6f:e5:8d:d1:76:96:c5:69:8e: 3e:2b:c7:51:94:5c:ef:3c:89:b2:c2:56:a7:83:b7:16:ab:87: e9:76:eb:30:05:17:6d:aa:0e:6f:56:80:c6:cf:2b:6a:0e:e0: 3f:b4:1a:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeUhkJ1XKCs3Ml00vWHdjPgovGDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAzNUQ1RjVENzAyMDY3NDhEM0MwODdCMzBCRkJDRDE1 RUNGMTk2RDAeFw0yNjA5MDIxOTMxNTVaFw0yNjA5MDMyMTA1NTVaMDMxMTAvBgNV BAMTKDg5NDFDMTUzOUQyN0YyRDI5MEJBNURDREY0QkQ1RTdGREVFQkExOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4eaa+WdhVQMd66BQ2tTq8wT97 zR9/yexy0NBJ8oV2fvsUv5wkdP3c1KbXuCCCLGUmmvHnS+spMWlY8R3Ouq6XSCx4 nuKwJgBLtLGnrk9heWALZQxGrhsMbxxVxiawdjFpHs6hedFuNDUKm+wn+9dfi8xT awRxUQw+u5pPpye24cJ+9xS0U3LLxuTB87ntIL8KixxZLxJJa8LL1y28YppPOHWD AXcXU9F1XKY5NnRVLt3FJxI0lu3G+BPjVa47dLyuD8WqLKuy6pPL+1QeH1xLQEmp bYlPB9lK2WWjdQygEKjFlTA6ouB2o9ieWULBCdbqEmHgQErW3n7vnlQ7YsjZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiUHBU50n8tKQul3N9L1ef97roZowHwYDVR0j BBgwFoAU4DXV9dcCBnSNPAh7ML+80V7PGW0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZiMjA1MTUtOGQ3Yy00NDVjLWJmZjctYmFiZDUyNjU3ODBmLzAvRTAzNUQ1RjVE NzAyMDY3NDhEM0MwODdCMzBCRkJDRDE1RUNGMTk2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDM1RDVGNUQ3MDIwNjc0OEQzQzA4N0IzMEJGQkNEMTVFQ0Yx OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZiMjA1MTUtOGQ3Yy00NDVjLWJm ZjctYmFiZDUyNjU3ODBmLzAvRTAzNUQ1RjVENzAyMDY3NDhEM0MwODdCMzBCRkJD RDE1RUNGMTk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYQX7tHVlHiqD6nMqaoCUGmBxqlh6uH7wp5 B+q7ejHCnA49XckleihGcvwJM+hurvyv4nRY3bi3tGogUtioPA6MdnnM0m/P246H Xy8s0mNJHDov7SQd1Iuoo+x1eejIiJ1PYVhMS0625XxEgjEu3tNis8iJkP9TzQWW o7f6nZ6krrdBrzS3m0agc3vE9WhCjH0BzmAieUzIRyHbwOswE1q8O02zKnkceJLQ QCMrOeIqX90zGVNiWRI0m44ILofc3KcdxmpNyaGeVeTqyZtpxm/ljdF2lsVpjj4r x1GUXO88ibLCVqeDtxarh+l26zAFF22qDm9WgMbPK2oO4D+0Gr4= -----END CERTIFICATE-----Generated at Thu Sep 3 12:38:49 2026 by rpki-client