$ rpki-client -vvf rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft File: D35962E8F839460DC5283C472D81ADB87BBD3992.mft (raw, json) Hash identifier: ji89HYot+iBbxTh0cmY9wITcEnJ8N3XVqg54P1+sqOo= Subject key identifier: ED:84:AE:44:F9:2D:FE:A0:46:F5:5C:30:5A:B0:E8:1A:DB:D6:42:21 Authority key identifier: D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 Certificate issuer: /CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Certificate serial: 59EBE8077F6E527109A2CE6FD013CA330D9DBD1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 18:34:31 +0000 Manifest this update: Mon 20 Jul 2026 18:29:31 +0000 Manifest next update: Tue 21 Jul 2026 20:18:31 +0000 Files and hashes: 1: 3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (hash: zZKnPm65wCA/b7MgYVi6OYfLbBSyB9aR0+gTJCkjT98=) 2: 3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (hash: 7PFw1XvCft2aOIZ+63/foK4bvYq8ag5iSEDET2cMWPo=) 3: D35962E8F839460DC5283C472D81ADB87BBD3992.crl (hash: pCQKDV5iUK/6HM4PIqc8OeZjv57U80qZBxRHiLwQSy8=) 4: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (hash: zRrlJoG5zcUtX6wFVCQMeL8cPbII1W88o2EQ5g8PVNA=) 5: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (hash: 1WM6A0xkGbon1XjjFMKySJrVDJV2Gtw2xI0n8qXoIUg=) 6: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (hash: F2/X+b+sJTBnlu6Sh9LFFYTW3UjFRRXVyNaKWEGhbhY=) 7: 3132322e3234382e34372e302f32342d3234203d3e203435333235.roa (hash: AP1Uq+hh+Bk2TKrn6WpCz+/Kjlfl/SuzP91WxFo1LEI=) 8: 3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (hash: 0eliJEonh/Nebf/NJDVLw46smOx9iWVTCt/50JmdxX4=) 9: 3132322e3234382e33382e302f32342d3234203d3e203435333235.roa (hash: O/C54fK6Fh0hkPYgUaevMk58lHbQGzg+mBNsocdzdL4=) 10: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (hash: Y/DmOT1ERuXNTR9l4X0obDV2SVqxiolJs80GKn5Zz9s=) 11: 3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (hash: eLGownyXQbAHwo7lmiV7AZcGiEJZfmA0J0Wx85SPn6A=) 12: 323430303a373530303a3a2f33322d3332203d3e20313431313432.roa (hash: zbddhP7SNU+N1CDEwFKRNo4Q4pKFgeqQ1pbI5rRqtBU=) 13: 3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (hash: fTQwNjegjWMOzBPfeCGxyPxzuktj8uBwcPPy5ukBNDg=) 14: 3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (hash: KtloGbIfkKJ4NXlhmcMPxJB4OgAOFnDw3xxvTqso1no=) 15: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (hash: LXPm+M8vAxjssdAZLO3Rx0wFITGhuZf7YIbnBsCAbss=) 16: 3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (hash: SHUyhFJkNlfUafPQZznwzypagEog72AhZ4GF3ZoArLM=) 17: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (hash: a2g7FXBxKjJ9sPuBWUpxfzMOG1+kUNuv9IQ11Ti9Pks=) 18: 3132322e3234382e33362e302f32342d3234203d3e203435333235.roa (hash: L0mPxNgbcwwNWadhYDVYcEPoRwXw/apNhz/JQNHU27s=) 19: 3132322e3234382e34352e302f32342d3234203d3e203435333235.roa (hash: YFkGY+wSseirD/L/4qz7sLnl/2atYUZvqHfKN+6xB9M=) 20: 3132322e3234382e33352e302f32342d3234203d3e20313431313432.roa (hash: bM/0Dm/kJz164oUyk+EyLG8dzY/v3xcPNTwfnlLmVSk=) 21: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (hash: 9A3NELKN62n/Uv+kjUVb0RNEBPpV0EUgsvMetodVNuE=) 22: 3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (hash: VzZhSRiw8XBW/yDedZyS5uY03yRNTIbVc//42y9SUvw=) 23: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (hash: xgjDAhQZn+M5QT3iWDFTTkYvcaKaz/dtqKLQQBwYvgA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:eb:e8:07:7f:6e:52:71:09:a2:ce:6f:d0:13:ca:33:0d:9d:bd:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Validity Not Before: Jul 20 18:29:31 2026 GMT Not After : Jul 21 20:18:31 2026 GMT Subject: CN=ED84AE44F92DFEA046F55C305AB0E81ADBD64221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:cc:88:10:d2:c9:c6:1a:64:d2:07:c2:92:db: e3:99:c0:35:16:6e:54:4c:f4:4c:5a:d3:7b:8e:0c: cc:5d:7e:8f:10:d7:88:a4:7f:f1:be:57:c0:21:52: b5:0d:ec:ef:7c:16:09:f8:32:0c:04:a5:5d:c3:df: 38:38:df:3c:7a:e3:dd:d2:86:09:a9:1c:55:a6:02: 6d:0f:89:5e:9c:db:5c:ec:5b:cc:d2:8a:ae:1c:c7: 53:da:ed:e5:d6:90:2d:1d:17:62:96:78:87:e6:09: b3:4c:e0:ec:eb:99:4b:dd:02:29:6c:c7:a4:fd:d3: 38:6c:0f:06:e3:40:a3:0b:c1:cb:6e:f6:be:f0:94: d2:8c:51:f8:fc:e4:23:f5:f0:0e:5d:42:0b:50:60: e7:df:80:7d:66:9a:14:16:6d:64:01:1a:c1:63:78: b4:0f:5b:ae:30:1c:d8:c8:07:b3:b9:ad:6f:fd:59: d5:70:bb:a4:0f:2b:3a:fc:4c:7f:c8:09:5a:94:0c: 26:76:59:6b:31:6b:a8:a1:ff:31:5c:c2:48:f2:df: 27:8f:5e:ea:74:28:3a:bb:99:e6:40:64:e2:97:4f: 9b:ac:20:4f:15:c0:74:b0:cc:50:bb:03:8b:ab:e2: 8c:61:94:85:20:b9:16:94:fd:fc:07:ba:06:6e:1b: e5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:84:AE:44:F9:2D:FE:A0:46:F5:5C:30:5A:B0:E8:1A:DB:D6:42:21 X509v3 Authority Key Identifier: keyid:D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:ac:d6:f0:5c:06:7d:99:bd:a8:eb:86:fd:88:f9:80:1b:47: cc:54:ee:05:71:f6:86:c5:ef:9d:75:d8:8d:58:ad:7e:e5:09: 89:f0:56:c8:97:11:c7:76:26:5e:0e:cf:19:98:63:31:29:bc: ab:9d:60:68:da:0c:2d:aa:7c:1f:57:28:90:84:2e:0b:ee:5e: fa:69:4e:62:97:3f:a2:17:e6:71:63:36:25:e2:d2:5e:f9:eb: bf:4c:7e:10:36:5b:5c:5d:f4:7f:f6:de:bd:96:29:f3:37:61: 99:83:4a:61:cf:4a:06:79:4a:cc:82:13:cd:62:59:dd:c7:56: f5:0b:67:e4:fe:5a:89:55:69:6f:84:a8:b8:53:ec:e3:31:ea: 90:01:95:ca:25:65:75:30:f0:62:4a:ca:16:e7:47:9d:61:1d: 87:cf:b1:a9:1f:3c:c3:a3:32:1d:45:16:f0:09:9b:0d:91:7c: 8d:e7:6d:e5:7a:d4:1c:6b:9d:80:ac:84:e0:f8:07:61:f4:e8: 8c:85:50:50:dd:6e:26:86:0e:bc:d9:e5:8a:e5:8b:7d:38:0c: 51:42:c1:3c:93:fb:62:f4:3a:e8:73:90:18:c9:f4:89:63:e9: 87:83:20:96:ba:0a:8a:cd:de:06:6e:4b:00:6b:5c:a3:24:94: 9b:77:2d:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWevoB39uUnEJos5v0BPKMw2dvRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3 QkJEMzk5MjAeFw0yNjA3MjAxODI5MzFaFw0yNjA3MjEyMDE4MzFaMDMxMTAvBgNV BAMTKEVEODRBRTQ0RjkyREZFQTA0NkY1NUMzMDVBQjBFODFBREJENjQyMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvzIgQ0snGGmTSB8KS2+OZwDUW blRM9Exa03uODMxdfo8Q14ikf/G+V8AhUrUN7O98Fgn4MgwEpV3D3zg43zx6493S hgmpHFWmAm0PiV6c21zsW8zSiq4cx1Pa7eXWkC0dF2KWeIfmCbNM4OzrmUvdAils x6T90zhsDwbjQKMLwctu9r7wlNKMUfj85CP18A5dQgtQYOffgH1mmhQWbWQBGsFj eLQPW64wHNjIB7O5rW/9WdVwu6QPKzr8TH/ICVqUDCZ2WWsxa6ih/zFcwkjy3yeP Xup0KDq7meZAZOKXT5usIE8VwHSwzFC7A4ur4oxhlIUguRaU/fwHugZuG+VZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7YSuRPkt/qBG9VwwWrDoGtvWQiEwHwYDVR0j BBgwFoAU01li6Pg5Rg3FKDxHLYGtuHu9OZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYyZTdmZDYtZWI1ZS00ODBhLThlOTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThG ODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3QkJEMzk5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzU5NjJFOEY4Mzk0NjBEQzUyODNDNDcyRDgxQURCODdCQkQz OTkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYyZTdmZDYtZWI1ZS00ODBhLThl OTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFE Qjg3QkJEMzk5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCs1vBcBn2Zvajrhv2I+YAbR8xU7gVx9obF 75112I1YrX7lCYnwVsiXEcd2Jl4OzxmYYzEpvKudYGjaDC2qfB9XKJCELgvuXvpp TmKXP6IX5nFjNiXi0l75679MfhA2W1xd9H/23r2WKfM3YZmDSmHPSgZ5SsyCE81i Wd3HVvULZ+T+WolVaW+EqLhT7OMx6pABlcolZXUw8GJKyhbnR51hHYfPsakfPMOj Mh1FFvAJmw2RfI3nbeV61BxrnYCshOD4B2H06IyFUFDdbiaGDrzZ5Yrli304DFFC wTyT+2L0OuhzkBjJ9Ilj6YeDIJa6CorN3gZuSwBrXKMklJt3Lf8= -----END CERTIFICATE-----Generated at Tue Jul 21 07:01:32 2026 by rpki-client