$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft File: 35859E59642559AC99788C194ED55EB1548A2F1F.mft (raw, json) Hash identifier: L1pOS/9M1pLyVBHSard/cWEqM76Q4w4Y6We4PYB4zJs= Subject key identifier: 4F:51:EB:9F:78:DA:55:5B:3F:92:90:5C:B0:33:3A:D6:8D:69:68:8D Authority key identifier: 35:85:9E:59:64:25:59:AC:99:78:8C:19:4E:D5:5E:B1:54:8A:2F:1F Certificate issuer: /CN=35859E59642559AC99788C194ED55EB1548A2F1F Certificate serial: 53EE6470B64B4153DAD1F6F33726852E2D758384 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft Manifest number: 2C Signing time: Tue 02 Jun 2026 23:24:10 +0000 Manifest this update: Tue 02 Jun 2026 23:19:10 +0000 Manifest next update: Thu 04 Jun 2026 00:52:10 +0000 Files and hashes: 1: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: QBz9jVg5iA4vI0m+M7MXqbx0KDdvReCXDCkg90gY1pM=) 2: 35859E59642559AC99788C194ED55EB1548A2F1F.crl (hash: 0kNlF90tIJC9akqcGUOgLbaVAFfcUJWTtu7k/OttY/k=) 3: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: hFjJslECEMnx83EP1P1UtwdiCEUWwcSYSCvr4li07y4=) 4: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: itttPeBqKU49Shq/w4T47E1hAyNoebnpwqyP1PK8wLg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.crl rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ee:64:70:b6:4b:41:53:da:d1:f6:f3:37:26:85:2e:2d:75:83:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35859E59642559AC99788C194ED55EB1548A2F1F Validity Not Before: Jun 2 23:19:10 2026 GMT Not After : Jun 4 00:52:10 2026 GMT Subject: CN=4F51EB9F78DA555B3F92905CB0333AD68D69688D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8f:28:49:6d:8e:d2:25:0c:ec:ca:cf:b3:cd: 32:2f:01:aa:00:2c:38:a1:6f:4b:b6:a4:d1:75:f3: 19:d4:44:c3:df:fb:72:7b:67:8b:b1:4a:5f:f1:f4: 19:72:30:a9:2d:be:a7:36:7d:8c:27:07:14:ce:22: e2:7f:3c:c8:cf:09:85:e1:6c:7a:4f:0c:75:f4:39: f9:4d:bb:42:88:2e:5d:72:ab:8e:7e:4b:a1:62:59: a0:3f:db:23:b6:3a:27:51:aa:93:1e:7d:0f:8c:49: 4f:18:73:ea:05:30:0e:95:f1:6c:5c:3f:3c:80:ef: 19:55:e7:ca:a7:0c:11:61:14:d7:00:c4:c5:84:72: 9c:c0:57:99:1d:62:09:51:40:de:70:b3:c6:02:01: 6d:a7:20:84:ed:cc:6c:01:1a:b1:f2:34:80:36:62: 16:01:5e:fb:55:ed:ec:d7:e5:27:60:17:22:86:d9: ab:1a:f4:86:84:fd:d1:f9:d7:0f:36:3f:a5:22:ea: 91:62:59:9f:bf:63:6f:c6:19:ca:79:30:ab:11:66: ce:ff:bc:ef:a1:4e:e6:b4:20:b4:72:b4:7b:f3:d4: 8b:54:2c:80:ef:b4:bd:41:86:f3:fd:dc:77:9e:73: 52:6b:01:ac:d9:d7:d4:16:a5:5a:1f:23:3a:d8:b5: e1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:51:EB:9F:78:DA:55:5B:3F:92:90:5C:B0:33:3A:D6:8D:69:68:8D X509v3 Authority Key Identifier: keyid:35:85:9E:59:64:25:59:AC:99:78:8C:19:4E:D5:5E:B1:54:8A:2F:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:ae:4a:31:ba:ca:2b:fd:bd:07:97:c9:6d:91:d4:eb:5b:35: eb:2e:c8:73:4b:6b:c9:50:ca:b7:53:eb:7b:9e:a6:35:26:3b: 32:a3:dd:c9:04:73:5d:7f:48:47:b0:e6:ec:63:f5:8a:3b:c4: ec:b0:2d:5b:89:b6:60:de:fa:33:a5:05:58:83:74:3b:d8:a1: de:59:68:94:84:e6:6a:41:5a:18:d8:25:d3:15:c8:50:df:e7: 50:a7:b3:74:a9:93:84:a3:78:7a:f0:0a:48:63:ab:53:33:94: 0c:dc:53:ba:db:5e:32:bf:a3:4f:ab:b3:7f:6b:54:c2:0d:04: f1:02:81:4e:73:b8:a1:c1:e7:19:6d:4a:0a:af:24:33:8b:00: 98:a0:90:32:cf:23:e3:23:35:19:40:92:48:7c:38:a0:ca:f4: a7:63:f4:0b:b5:dd:46:31:3e:12:16:f9:b5:ac:ef:ad:ad:de: b1:46:50:47:90:b5:7c:44:66:ab:36:02:1a:4e:68:e0:ed:7e: 09:89:18:0b:83:a4:76:1a:c3:eb:76:c5:83:9c:1b:c2:78:84: f1:2c:a9:d4:e4:3c:b2:da:3f:5a:a6:e7:37:1d:69:22:b0:72: 6e:68:a0:10:16:2f:cb:d2:f6:df:1f:5f:e4:35:f6:e4:ca:fe: 3f:26:5c:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU+5kcLZLQVPa0fbzNyaFLi11g4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4NTlFNTk2NDI1NTlBQzk5Nzg4QzE5NEVENTVFQjE1 NDhBMkYxRjAeFw0yNjA2MDIyMzE5MTBaFw0yNjA2MDQwMDUyMTBaMDMxMTAvBgNV BAMTKDRGNTFFQjlGNzhEQTU1NUIzRjkyOTA1Q0IwMzMzQUQ2OEQ2OTY4OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjjyhJbY7SJQzsys+zzTIvAaoA LDihb0u2pNF18xnURMPf+3J7Z4uxSl/x9BlyMKktvqc2fYwnBxTOIuJ/PMjPCYXh bHpPDHX0OflNu0KILl1yq45+S6FiWaA/2yO2OidRqpMefQ+MSU8Yc+oFMA6V8Wxc PzyA7xlV58qnDBFhFNcAxMWEcpzAV5kdYglRQN5ws8YCAW2nIITtzGwBGrHyNIA2 YhYBXvtV7ezX5SdgFyKG2asa9IaE/dH51w82P6Ui6pFiWZ+/Y2/GGcp5MKsRZs7/ vO+hTua0ILRytHvz1ItULIDvtL1BhvP93Heec1JrAazZ19QWpVofIzrYteFJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT1Hrn3jaVVs/kpBcsDM61o1paI0wHwYDVR0j BBgwFoAUNYWeWWQlWayZeIwZTtVesVSKLx8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJlZmJmMDQtNDFiZS00OGQ3LWFjMDAtOGEzYzQ5OGNhOWFlLzAvMzU4NTlFNTk2 NDI1NTlBQzk5Nzg4QzE5NEVENTVFQjE1NDhBMkYxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNTg1OUU1OTY0MjU1OUFDOTk3ODhDMTk0RUQ1NUVCMTU0OEEy RjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWJlZmJmMDQtNDFiZS00OGQ3LWFj MDAtOGEzYzQ5OGNhOWFlLzAvMzU4NTlFNTk2NDI1NTlBQzk5Nzg4QzE5NEVENTVF QjE1NDhBMkYxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCuSjG6yiv9vQeXyW2R1OtbNesuyHNLa8lQ yrdT63uepjUmOzKj3ckEc11/SEew5uxj9Yo7xOywLVuJtmDe+jOlBViDdDvYod5Z aJSE5mpBWhjYJdMVyFDf51Cns3Spk4SjeHrwCkhjq1MzlAzcU7rbXjK/o0+rs39r VMINBPECgU5zuKHB5xltSgqvJDOLAJigkDLPI+MjNRlAkkh8OKDK9Kdj9Au13UYx PhIW+bWs762t3rFGUEeQtXxEZqs2AhpOaODtfgmJGAuDpHYaw+t2xYOcG8J4hPEs qdTkPLLaP1qm5zcdaSKwcm5ooBAWL8vS9t8fX+Q19uTK/j8mXL8= -----END CERTIFICATE-----Generated at Wed Jun 3 03:38:55 2026 by rpki-client