$ rpki-client -vvf rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft File: D35962E8F839460DC5283C472D81ADB87BBD3992.mft (raw, json) Hash identifier: ok8lztabQ5vQjm/Kw8IpLFBiMHgtDqMx3XDjSFw/CB0= Subject key identifier: 49:6E:70:32:8B:09:3C:D0:6A:94:BB:2F:CA:26:7A:98:A9:0A:14:66 Authority key identifier: D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 Certificate issuer: /CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Certificate serial: 713519195AF413B88F3A37A8949339533E4D3038 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:33:44 +0000 Manifest this update: Tue 02 Jun 2026 19:28:44 +0000 Manifest next update: Wed 03 Jun 2026 21:34:44 +0000 Files and hashes: 1: 3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (hash: VzZhSRiw8XBW/yDedZyS5uY03yRNTIbVc//42y9SUvw=) 2: 3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (hash: fTQwNjegjWMOzBPfeCGxyPxzuktj8uBwcPPy5ukBNDg=) 3: 3132322e3234382e33362e302f32342d3234203d3e203435333235.roa (hash: L0mPxNgbcwwNWadhYDVYcEPoRwXw/apNhz/JQNHU27s=) 4: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (hash: Y/DmOT1ERuXNTR9l4X0obDV2SVqxiolJs80GKn5Zz9s=) 5: 3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (hash: eLGownyXQbAHwo7lmiV7AZcGiEJZfmA0J0Wx85SPn6A=) 6: 3132322e3234382e34352e302f32342d3234203d3e203435333235.roa (hash: YFkGY+wSseirD/L/4qz7sLnl/2atYUZvqHfKN+6xB9M=) 7: 3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (hash: 0eliJEonh/Nebf/NJDVLw46smOx9iWVTCt/50JmdxX4=) 8: 323430303a373530303a3a2f33322d3332203d3e20313431313432.roa (hash: zbddhP7SNU+N1CDEwFKRNo4Q4pKFgeqQ1pbI5rRqtBU=) 9: 3132322e3234382e34372e302f32342d3234203d3e203435333235.roa (hash: AP1Uq+hh+Bk2TKrn6WpCz+/Kjlfl/SuzP91WxFo1LEI=) 10: 3132322e3234382e33382e302f32342d3234203d3e203435333235.roa (hash: O/C54fK6Fh0hkPYgUaevMk58lHbQGzg+mBNsocdzdL4=) 11: 3132322e3234382e33352e302f32342d3234203d3e20313431313432.roa (hash: bM/0Dm/kJz164oUyk+EyLG8dzY/v3xcPNTwfnlLmVSk=) 12: 3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (hash: 7PFw1XvCft2aOIZ+63/foK4bvYq8ag5iSEDET2cMWPo=) 13: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (hash: xgjDAhQZn+M5QT3iWDFTTkYvcaKaz/dtqKLQQBwYvgA=) 14: 3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (hash: KtloGbIfkKJ4NXlhmcMPxJB4OgAOFnDw3xxvTqso1no=) 15: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (hash: LXPm+M8vAxjssdAZLO3Rx0wFITGhuZf7YIbnBsCAbss=) 16: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (hash: F2/X+b+sJTBnlu6Sh9LFFYTW3UjFRRXVyNaKWEGhbhY=) 17: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (hash: 1WM6A0xkGbon1XjjFMKySJrVDJV2Gtw2xI0n8qXoIUg=) 18: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (hash: 9A3NELKN62n/Uv+kjUVb0RNEBPpV0EUgsvMetodVNuE=) 19: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (hash: zRrlJoG5zcUtX6wFVCQMeL8cPbII1W88o2EQ5g8PVNA=) 20: 3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (hash: zZKnPm65wCA/b7MgYVi6OYfLbBSyB9aR0+gTJCkjT98=) 21: 3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (hash: SHUyhFJkNlfUafPQZznwzypagEog72AhZ4GF3ZoArLM=) 22: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (hash: a2g7FXBxKjJ9sPuBWUpxfzMOG1+kUNuv9IQ11Ti9Pks=) 23: D35962E8F839460DC5283C472D81ADB87BBD3992.crl (hash: mezeGylv7oehOVyTU4XFHG6B9/ui7hFEBM2G2wn5l4Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:35:19:19:5a:f4:13:b8:8f:3a:37:a8:94:93:39:53:3e:4d:30:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Validity Not Before: Jun 2 19:28:44 2026 GMT Not After : Jun 3 21:34:44 2026 GMT Subject: CN=496E70328B093CD06A94BB2FCA267A98A90A1466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fc:72:5b:00:b2:97:41:a3:8a:4a:38:58:02: 16:51:e5:15:95:ed:43:70:e2:fa:51:c2:f8:7a:41: 70:b7:3e:0f:4f:c2:c2:ba:da:b7:6f:43:5d:46:c4: 02:a6:68:27:8c:09:49:62:dd:dc:ee:da:0e:d0:f9: ad:05:92:3f:34:63:df:fe:fd:07:b5:28:c5:f3:d7: 76:a1:92:aa:48:7a:1e:b9:d9:aa:d1:c0:ce:c6:b3: a4:1d:83:9d:78:7a:1a:f1:b1:af:d4:23:fa:a6:6f: bf:a6:31:3b:b4:41:14:f9:b2:9d:34:d4:84:24:b4: d4:13:82:8f:a8:30:45:0c:b0:28:1e:16:c7:27:11: 87:f8:74:d6:29:0a:4c:80:f5:b1:84:95:40:d1:44: d3:0c:32:96:54:61:c3:84:61:c9:db:7c:0a:91:cb: 59:0d:4c:0e:3c:78:17:28:ef:54:42:85:09:eb:40: 3d:96:d7:6b:e7:c8:c3:2d:3b:73:d5:35:b4:8f:03: 66:55:d1:31:6e:ce:77:b9:3c:c4:4b:3f:e6:6c:97: 74:b9:75:21:09:e8:c9:ab:19:31:67:4b:90:eb:32: e1:be:1e:18:c3:29:ae:ce:c6:8d:23:d1:8e:74:85: fd:3a:b8:87:2f:6a:7c:75:34:5b:53:b2:7a:22:a1: e3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6E:70:32:8B:09:3C:D0:6A:94:BB:2F:CA:26:7A:98:A9:0A:14:66 X509v3 Authority Key Identifier: keyid:D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:78:05:e8:77:87:e6:4f:fe:e3:68:bc:24:af:10:e9:db:03: 5e:7e:c6:78:38:99:be:c3:42:34:c8:25:fb:76:f4:4f:fd:0d: e2:b6:24:47:ec:3c:ea:25:3f:69:f7:7b:8c:65:61:47:85:67: d8:60:e8:a3:70:79:b5:b3:7e:e0:9f:31:32:33:4b:a0:4c:f3: 75:52:ee:08:91:e7:a2:fa:fe:ff:c2:61:04:18:90:7e:bd:74: 40:59:7d:a0:f9:38:f9:28:7b:b2:8d:60:13:e4:4a:99:f3:04: d6:c5:24:6b:80:53:65:17:75:f4:8e:fe:c0:aa:46:11:a5:16: 5e:14:f3:66:f9:cd:49:e4:85:99:fb:91:39:06:f4:dd:5c:5b: 04:c1:4f:6e:bf:d9:76:90:ee:ca:a7:15:a2:f0:60:25:d4:a7: eb:f6:8a:75:41:94:2d:c6:6e:85:43:92:9f:36:0f:16:e9:d3: d4:19:30:94:fa:9e:12:d4:dd:49:00:a7:bb:60:92:30:7f:da: 06:ea:43:a1:b2:19:2f:68:7d:07:93:31:26:43:0e:43:dc:cd: d6:d3:cf:c5:e8:b1:1b:e9:56:2a:aa:81:c9:a8:1b:2e:91:fd: 59:fc:51:17:ff:ae:bf:91:87:a5:1c:9c:68:ab:24:8e:b2:63: ab:a0:83:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcTUZGVr0E7iPOjeolJM5Uz5NMDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3 QkJEMzk5MjAeFw0yNjA2MDIxOTI4NDRaFw0yNjA2MDMyMTM0NDRaMDMxMTAvBgNV BAMTKDQ5NkU3MDMyOEIwOTNDRDA2QTk0QkIyRkNBMjY3QTk4QTkwQTE0NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW/HJbALKXQaOKSjhYAhZR5RWV 7UNw4vpRwvh6QXC3Pg9PwsK62rdvQ11GxAKmaCeMCUli3dzu2g7Q+a0Fkj80Y9/+ /Qe1KMXz13ahkqpIeh652arRwM7Gs6Qdg514ehrxsa/UI/qmb7+mMTu0QRT5sp00 1IQktNQTgo+oMEUMsCgeFscnEYf4dNYpCkyA9bGElUDRRNMMMpZUYcOEYcnbfAqR y1kNTA48eBco71RChQnrQD2W12vnyMMtO3PVNbSPA2ZV0TFuzne5PMRLP+Zsl3S5 dSEJ6MmrGTFnS5DrMuG+HhjDKa7Oxo0j0Y50hf06uIcvanx1NFtTsnoioeNlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSW5wMosJPNBqlLsvyiZ6mKkKFGYwHwYDVR0j BBgwFoAU01li6Pg5Rg3FKDxHLYGtuHu9OZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYyZTdmZDYtZWI1ZS00ODBhLThlOTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThG ODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3QkJEMzk5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzU5NjJFOEY4Mzk0NjBEQzUyODNDNDcyRDgxQURCODdCQkQz OTkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYyZTdmZDYtZWI1ZS00ODBhLThl OTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFE Qjg3QkJEMzk5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHR4Beh3h+ZP/uNovCSvEOnbA15+xng4mb7D QjTIJft29E/9DeK2JEfsPOolP2n3e4xlYUeFZ9hg6KNwebWzfuCfMTIzS6BM83VS 7giR56L6/v/CYQQYkH69dEBZfaD5OPkoe7KNYBPkSpnzBNbFJGuAU2UXdfSO/sCq RhGlFl4U82b5zUnkhZn7kTkG9N1cWwTBT26/2XaQ7sqnFaLwYCXUp+v2inVBlC3G boVDkp82Dxbp09QZMJT6nhLU3UkAp7tgkjB/2gbqQ6GyGS9ofQeTMSZDDkPczdbT z8XosRvpViqqgcmoGy6R/Vn8URf/rr+Rh6UcnGirJI6yY6ugg8Y= -----END CERTIFICATE-----Generated at Wed Jun 3 03:28:23 2026 by rpki-client