$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft File: 35859E59642559AC99788C194ED55EB1548A2F1F.mft (raw, json) Hash identifier: j1gB7L2QkNu3+CqFv+MHzd/RzSaC7xPuCW3zyLSSGYk= Subject key identifier: 4A:55:3A:47:D5:A5:49:67:91:13:0C:8E:EB:6F:43:5D:55:B5:AE:91 Authority key identifier: 35:85:9E:59:64:25:59:AC:99:78:8C:19:4E:D5:5E:B1:54:8A:2F:1F Certificate issuer: /CN=35859E59642559AC99788C194ED55EB1548A2F1F Certificate serial: 032AD41B692A831EAECC30106B2CBB2D6F6CF1DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 00:21:18 +0000 Manifest this update: Tue 21 Jul 2026 00:16:18 +0000 Manifest next update: Wed 22 Jul 2026 00:21:18 +0000 Files and hashes: 1: 35859E59642559AC99788C194ED55EB1548A2F1F.crl (hash: AFQk2sQYjMbmIFKcKLJgS9nz9NLH6lHRYmLjTAEddQg=) 2: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: QBz9jVg5iA4vI0m+M7MXqbx0KDdvReCXDCkg90gY1pM=) 3: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: itttPeBqKU49Shq/w4T47E1hAyNoebnpwqyP1PK8wLg=) 4: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: hFjJslECEMnx83EP1P1UtwdiCEUWwcSYSCvr4li07y4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.crl rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 00:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:2a:d4:1b:69:2a:83:1e:ae:cc:30:10:6b:2c:bb:2d:6f:6c:f1:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35859E59642559AC99788C194ED55EB1548A2F1F Validity Not Before: Jul 21 00:16:18 2026 GMT Not After : Jul 22 00:21:18 2026 GMT Subject: CN=4A553A47D5A5496791130C8EEB6F435D55B5AE91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:00:ce:a3:aa:5f:00:46:89:cc:a5:e5:54:57: a8:b7:65:32:8c:19:e4:27:18:5a:d0:3f:19:34:b2: 7c:b3:7a:79:b9:c0:1e:44:cc:f6:2a:d7:f6:5a:ad: 8d:29:bd:4a:5e:cb:63:1d:ba:ea:b0:70:2a:ba:ef: f6:45:c3:0a:2e:19:b0:f5:81:09:c9:ef:93:c2:38: 4d:f3:bb:b7:98:53:af:e9:9c:78:b6:3e:d3:09:c7: 64:84:41:f5:17:7f:46:4b:c2:fb:20:cc:6c:0a:5f: 83:cd:72:9f:a8:f9:b3:1e:f4:08:f8:01:47:30:5f: 1e:0e:bd:df:99:3c:28:e6:63:34:77:d5:cf:03:24: 08:d7:4d:97:7d:17:58:80:de:af:82:4b:8e:f9:f7: 0d:f8:cf:dc:f4:62:a7:24:74:55:bf:03:67:ec:48: 3f:39:7c:71:67:f7:db:67:28:4a:4b:1b:11:79:9e: c1:7c:c8:0b:35:8f:9c:21:45:ff:3e:9d:cd:6f:c5: 51:9e:ab:07:74:b2:93:22:d5:40:06:09:ce:44:7a: fc:d4:c0:f1:fa:28:67:55:46:8d:51:f1:fc:a7:60: 8a:6b:25:9b:8a:ac:aa:f3:83:5f:34:3e:47:42:d1: 51:32:7a:1b:d6:80:82:6f:5d:04:8e:d0:e2:fb:44: 95:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:55:3A:47:D5:A5:49:67:91:13:0C:8E:EB:6F:43:5D:55:B5:AE:91 X509v3 Authority Key Identifier: keyid:35:85:9E:59:64:25:59:AC:99:78:8C:19:4E:D5:5E:B1:54:8A:2F:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:db:b7:fe:a7:21:ad:50:a9:d8:93:8c:68:43:aa:1e:dc:b3: 40:c8:ad:03:87:a5:5a:be:89:28:c6:17:da:5d:f3:e6:f3:a8: 03:34:1e:8a:d3:64:95:53:fb:d7:cb:2c:7b:75:01:ea:8d:99: a9:fb:05:82:ca:9a:9d:8e:28:94:1f:09:1c:3f:13:af:a7:58: e0:56:7b:d2:6e:b9:4c:4e:de:e0:5c:90:22:83:02:57:a5:e9: e6:ed:6d:27:e5:2c:98:55:e8:ca:bb:83:06:42:f4:b0:38:15: de:85:fa:b8:51:9a:61:a1:0a:d8:df:6d:b6:07:fa:1b:0d:8a: 7e:1b:c8:c1:74:be:12:92:55:7f:5c:03:b1:f5:d3:5a:8e:de: 3e:aa:09:88:ab:b0:a1:9e:38:79:0b:72:b3:86:fe:c0:02:36: 19:ca:30:1f:87:cb:31:bf:8a:47:fe:68:c5:4e:f8:e2:0f:64: 18:37:75:9d:27:1a:f9:e3:fb:d5:9c:d2:19:17:c3:df:57:27: 51:af:be:52:71:17:3a:1c:f8:9b:20:01:f8:5d:57:79:f4:3b: 07:68:4b:d8:1f:f0:73:9c:42:2a:58:24:b7:f3:34:77:ab:cd: 28:b7:88:64:f0:3a:54:dd:87:5f:5b:9c:1c:3b:42:55:3c:73: 89:8a:44:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAyrUG2kqgx6uzDAQayy7LW9s8d4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4NTlFNTk2NDI1NTlBQzk5Nzg4QzE5NEVENTVFQjE1 NDhBMkYxRjAeFw0yNjA3MjEwMDE2MThaFw0yNjA3MjIwMDIxMThaMDMxMTAvBgNV BAMTKDRBNTUzQTQ3RDVBNTQ5Njc5MTEzMEM4RUVCNkY0MzVENTVCNUFFOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMAM6jql8ARonMpeVUV6i3ZTKM GeQnGFrQPxk0snyzenm5wB5EzPYq1/ZarY0pvUpey2MduuqwcCq67/ZFwwouGbD1 gQnJ75PCOE3zu7eYU6/pnHi2PtMJx2SEQfUXf0ZLwvsgzGwKX4PNcp+o+bMe9Aj4 AUcwXx4Ovd+ZPCjmYzR31c8DJAjXTZd9F1iA3q+CS4759w34z9z0YqckdFW/A2fs SD85fHFn99tnKEpLGxF5nsF8yAs1j5whRf8+nc1vxVGeqwd0spMi1UAGCc5EevzU wPH6KGdVRo1R8fynYIprJZuKrKrzg180PkdC0VEyehvWgIJvXQSO0OL7RJV1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSlU6R9WlSWeREwyO629DXVW1rpEwHwYDVR0j BBgwFoAUNYWeWWQlWayZeIwZTtVesVSKLx8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJlZmJmMDQtNDFiZS00OGQ3LWFjMDAtOGEzYzQ5OGNhOWFlLzAvMzU4NTlFNTk2 NDI1NTlBQzk5Nzg4QzE5NEVENTVFQjE1NDhBMkYxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNTg1OUU1OTY0MjU1OUFDOTk3ODhDMTk0RUQ1NUVCMTU0OEEy RjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWJlZmJmMDQtNDFiZS00OGQ3LWFj MDAtOGEzYzQ5OGNhOWFlLzAvMzU4NTlFNTk2NDI1NTlBQzk5Nzg4QzE5NEVENTVF QjE1NDhBMkYxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPbt/6nIa1QqdiTjGhDqh7cs0DIrQOHpVq+ iSjGF9pd8+bzqAM0HorTZJVT+9fLLHt1AeqNman7BYLKmp2OKJQfCRw/E6+nWOBW e9JuuUxO3uBckCKDAlel6ebtbSflLJhV6Mq7gwZC9LA4Fd6F+rhRmmGhCtjfbbYH +hsNin4byMF0vhKSVX9cA7H101qO3j6qCYirsKGeOHkLcrOG/sACNhnKMB+HyzG/ ikf+aMVO+OIPZBg3dZ0nGvnj+9Wc0hkXw99XJ1GvvlJxFzoc+JsgAfhdV3n0Owdo S9gf8HOcQipYJLfzNHerzSi3iGTwOlTdh19bnBw7QlU8c4mKRLI= -----END CERTIFICATE-----Generated at Tue Jul 21 06:04:04 2026 by rpki-client