$ rpki-client -vvvf rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft File: D35962E8F839460DC5283C472D81ADB87BBD3992.mft (raw, json) Hash identifier: KsGPZSIZm7Iak0fnIdY3AwBmjcQmnax7XEmc5k7TdtA= Subject key identifier: 14:A8:41:51:EA:B1:86:0C:C3:8F:B7:41:64:A0:B4:84:F4:15:20:94 Authority key identifier: D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 Certificate issuer: /CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Certificate serial: 08CB65CB0A9076CE32B2EA41076C872A2C1E15FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 03:58:02 +0000 Manifest this update: Wed 04 Nov 2026 03:53:02 +0000 Manifest next update: Thu 05 Nov 2026 04:55:02 +0000 Files and hashes: 1: 3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (hash: 0eliJEonh/Nebf/NJDVLw46smOx9iWVTCt/50JmdxX4=) 2: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (hash: F2/X+b+sJTBnlu6Sh9LFFYTW3UjFRRXVyNaKWEGhbhY=) 3: 3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (hash: fTQwNjegjWMOzBPfeCGxyPxzuktj8uBwcPPy5ukBNDg=) 4: 3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (hash: KtloGbIfkKJ4NXlhmcMPxJB4OgAOFnDw3xxvTqso1no=) 5: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (hash: LXPm+M8vAxjssdAZLO3Rx0wFITGhuZf7YIbnBsCAbss=) 6: D35962E8F839460DC5283C472D81ADB87BBD3992.crl (hash: 4kYaWKbzWo8FurHEeMf9YDJhA5frjFgyie8tr7MvOLA=) 7: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (hash: xgjDAhQZn+M5QT3iWDFTTkYvcaKaz/dtqKLQQBwYvgA=) 8: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (hash: zRrlJoG5zcUtX6wFVCQMeL8cPbII1W88o2EQ5g8PVNA=) 9: 3132322e3234382e33362e302f32342d3234203d3e203435333235.roa (hash: L0mPxNgbcwwNWadhYDVYcEPoRwXw/apNhz/JQNHU27s=) 10: 3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (hash: eLGownyXQbAHwo7lmiV7AZcGiEJZfmA0J0Wx85SPn6A=) 11: 3132322e3234382e33352e302f32342d3234203d3e20313431313432.roa (hash: bM/0Dm/kJz164oUyk+EyLG8dzY/v3xcPNTwfnlLmVSk=) 12: 323430303a373530303a3a2f33322d3332203d3e20313431313432.roa (hash: zbddhP7SNU+N1CDEwFKRNo4Q4pKFgeqQ1pbI5rRqtBU=) 13: 3132322e3234382e34352e302f32342d3234203d3e203435333235.roa (hash: YFkGY+wSseirD/L/4qz7sLnl/2atYUZvqHfKN+6xB9M=) 14: 3132322e3234382e34372e302f32342d3234203d3e203435333235.roa (hash: AP1Uq+hh+Bk2TKrn6WpCz+/Kjlfl/SuzP91WxFo1LEI=) 15: 3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (hash: 7PFw1XvCft2aOIZ+63/foK4bvYq8ag5iSEDET2cMWPo=) 16: 3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (hash: zZKnPm65wCA/b7MgYVi6OYfLbBSyB9aR0+gTJCkjT98=) 17: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (hash: Y/DmOT1ERuXNTR9l4X0obDV2SVqxiolJs80GKn5Zz9s=) 18: 3132322e3234382e33382e302f32342d3234203d3e203435333235.roa (hash: O/C54fK6Fh0hkPYgUaevMk58lHbQGzg+mBNsocdzdL4=) 19: 3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (hash: VzZhSRiw8XBW/yDedZyS5uY03yRNTIbVc//42y9SUvw=) 20: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (hash: 1WM6A0xkGbon1XjjFMKySJrVDJV2Gtw2xI0n8qXoIUg=) 21: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (hash: a2g7FXBxKjJ9sPuBWUpxfzMOG1+kUNuv9IQ11Ti9Pks=) 22: 3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (hash: SHUyhFJkNlfUafPQZznwzypagEog72AhZ4GF3ZoArLM=) 23: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (hash: 9A3NELKN62n/Uv+kjUVb0RNEBPpV0EUgsvMetodVNuE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 04:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:cb:65:cb:0a:90:76:ce:32:b2:ea:41:07:6c:87:2a:2c:1e:15:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Validity Not Before: Nov 4 03:53:02 2026 GMT Not After : Nov 5 04:55:02 2026 GMT Subject: CN=14A84151EAB1860CC38FB74164A0B484F4152094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0d:a7:79:80:cf:72:80:30:c1:67:16:15:fd: f2:d7:81:99:c2:77:e1:0d:a9:3c:dd:65:df:af:a2: 9a:6c:ea:d2:52:38:52:5e:5a:73:b2:c9:5b:18:11: a8:07:c6:01:40:aa:bd:63:78:3f:30:da:c5:c5:c9: d6:c2:96:35:c6:8e:e4:d0:af:d0:65:fe:3c:49:29: 22:35:30:e7:ef:67:26:43:4f:89:f3:f3:75:30:0a: d5:23:27:98:4e:01:79:63:72:87:0b:70:66:c5:c1: e7:a1:c5:59:04:45:cf:6e:c6:e9:92:27:3f:ad:4f: 26:a6:dd:37:60:08:ca:f8:87:4a:bf:5e:72:42:6a: 2c:6b:ae:bd:25:04:e4:1b:0c:f0:24:cd:e1:66:e0: c9:dc:2a:c4:c4:be:07:e4:9a:00:4a:30:ed:17:35: 32:f6:f6:1d:ee:6f:0b:32:de:32:b5:f4:fa:b9:45: 7c:26:a5:27:fd:9e:db:55:38:f4:2e:8a:23:f1:df: 1e:73:71:7f:69:55:56:7c:d4:c8:9c:a3:fb:17:c2: 5d:a7:51:3e:0f:31:7a:23:93:e0:44:12:65:16:95: 85:8f:ee:c5:ee:4e:3f:b6:1a:0a:43:9a:1b:0f:b9: a6:a1:75:2d:89:6d:49:a8:66:29:2e:4d:54:44:eb: 38:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A8:41:51:EA:B1:86:0C:C3:8F:B7:41:64:A0:B4:84:F4:15:20:94 X509v3 Authority Key Identifier: keyid:D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ca:5a:bf:6a:32:3a:34:cd:fb:ac:33:6f:99:91:e0:84:09: 2a:55:04:40:c6:57:5a:54:0b:f3:65:4d:83:98:a6:9e:e4:fd: cd:52:cd:e3:da:c4:17:b2:0e:e0:ca:19:01:5b:6c:38:1c:f9: eb:cc:40:59:76:7d:29:20:c2:af:6a:bf:5d:e5:fc:56:4a:65: 4f:57:f5:0d:08:fe:9b:e3:5f:14:56:c7:97:be:5a:82:bf:73: bf:22:4c:d9:4d:2d:cd:39:5f:11:84:d3:e8:3f:a6:d9:3b:92: 10:7b:6e:66:89:80:a5:a4:83:ad:90:29:19:07:0c:07:c0:e1: be:f1:4e:11:ef:1f:0a:88:91:a2:2a:59:d4:b3:e5:5b:0a:f5: c9:e4:72:2a:ea:15:5d:f2:c0:15:5a:24:04:b5:76:68:e2:05: f2:b6:37:f6:70:71:d8:ba:2e:97:41:fc:58:40:c4:59:0e:bd: e0:33:60:17:8d:b6:dd:5e:3c:05:3e:dc:f8:99:5b:80:a3:e9: c9:df:e5:d6:97:9b:37:7d:6f:50:92:95:a1:3c:49:51:14:d7: cf:90:f2:b0:2b:b4:74:8e:22:55:f3:23:38:ef:39:9a:1f:a7: f9:a2:ff:2d:da:c9:05:eb:54:f7:1a:62:1f:fb:cc:a9:01:a1: 47:f5:63:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCMtlywqQds4ysupBB2yHKiweFf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3 QkJEMzk5MjAeFw0yNjExMDQwMzUzMDJaFw0yNjExMDUwNDU1MDJaMDMxMTAvBgNV BAMTKDE0QTg0MTUxRUFCMTg2MENDMzhGQjc0MTY0QTBCNDg0RjQxNTIwOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBDad5gM9ygDDBZxYV/fLXgZnC d+ENqTzdZd+vopps6tJSOFJeWnOyyVsYEagHxgFAqr1jeD8w2sXFydbCljXGjuTQ r9Bl/jxJKSI1MOfvZyZDT4nz83UwCtUjJ5hOAXljcocLcGbFweehxVkERc9uxumS Jz+tTyam3TdgCMr4h0q/XnJCaixrrr0lBOQbDPAkzeFm4MncKsTEvgfkmgBKMO0X NTL29h3ubwsy3jK19Pq5RXwmpSf9nttVOPQuiiPx3x5zcX9pVVZ81Mico/sXwl2n UT4PMXojk+BEEmUWlYWP7sXuTj+2GgpDmhsPuaahdS2JbUmoZikuTVRE6zjfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFKhBUeqxhgzDj7dBZKC0hPQVIJQwHwYDVR0j BBgwFoAU01li6Pg5Rg3FKDxHLYGtuHu9OZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYyZTdmZDYtZWI1ZS00ODBhLThlOTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThG ODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3QkJEMzk5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzU5NjJFOEY4Mzk0NjBEQzUyODNDNDcyRDgxQURCODdCQkQz OTkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYyZTdmZDYtZWI1ZS00ODBhLThl OTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFE Qjg3QkJEMzk5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrKWr9qMjo0zfusM2+ZkeCECSpVBEDGV1pU C/NlTYOYpp7k/c1SzePaxBeyDuDKGQFbbDgc+evMQFl2fSkgwq9qv13l/FZKZU9X 9Q0I/pvjXxRWx5e+WoK/c78iTNlNLc05XxGE0+g/ptk7khB7bmaJgKWkg62QKRkH DAfA4b7xThHvHwqIkaIqWdSz5VsK9cnkcirqFV3ywBVaJAS1dmjiBfK2N/Zwcdi6 LpdB/FhAxFkOveAzYBeNtt1ePAU+3PiZW4Cj6cnf5daXmzd9b1CSlaE8SVEU18+Q 8rArtHSOIlXzIzjvOZofp/mi/y3ayQXrVPcaYh/7zKkBoUf1Y9E= -----END CERTIFICATE-----Generated at Thu Nov 5 01:57:46 2026 by rpki-client