$ rpki-client -vvvf rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft File: 2535F6A9A65395B5881ADB0B432A16679C88CC60.mft (raw, json) Hash identifier: JIJrU/5DLM8rnngiEzT3dfZAYIErb5WnAnL7bsuy7tU= Subject key identifier: F4:9A:F5:AA:C6:31:C3:57:50:57:03:D0:A5:89:C6:F9:18:15:73:BE Authority key identifier: 25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60 Certificate issuer: /CN=2535F6A9A65395B5881ADB0B432A16679C88CC60 Certificate serial: 7F6124F447DA28B10C2FF95DCA897B5580948645 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft Manifest number: C2 Signing time: Thu 17 Sep 2026 01:45:44 +0000 Manifest this update: Thu 17 Sep 2026 01:40:44 +0000 Manifest next update: Fri 18 Sep 2026 05:39:44 +0000 Files and hashes: 1: 323430333a316130303a343a3a2f34372d3437203d3e203435373233.roa (hash: kVXs9OKO5SWhYY8QAUmq6Wo0PmjBkNXoXhlgjZszj5Q=) 2: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (hash: 9IugcQnlhS8YqjpFiHIRL3UozLXDJSvET54UoliRNtA=) 3: 2535F6A9A65395B5881ADB0B432A16679C88CC60.crl (hash: qsBlRZbo0qPnOfYzOAIKMchhfGcttYMw7kMcfHWEYZ0=) 4: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (hash: umYqwo2FiD8e3UtdgPNaP9b6kDv065RdUn/kTf3EPuQ=) 5: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (hash: 5nElrE2bFD3jeHzGP2EqItlqHxQy+rl4TSko98reQ+k=) 6: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (hash: zWsBUB0EsryhwZbrxTe3du0LXbDcYqcCoZB7f/2SeQs=) 7: 3230322e312e3233362e302f32342d3234203d3e203435373233.roa (hash: E2CZqc55ytVQ+gL56PQklO6/e15IEHDs3ZeA7hBho40=) 8: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (hash: +tQQrL91DKY3GF87Bol7tPaM5Rdp2tOqyU/y9K8IpU4=) 9: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (hash: LXt8OGULAdQpoNoWK4gxLrA5MzZUVnNwkr0fY1oAkvc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:61:24:f4:47:da:28:b1:0c:2f:f9:5d:ca:89:7b:55:80:94:86:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2535F6A9A65395B5881ADB0B432A16679C88CC60 Validity Not Before: Sep 17 01:40:44 2026 GMT Not After : Sep 18 05:39:44 2026 GMT Subject: CN=F49AF5AAC631C357505703D0A589C6F9181573BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:95:50:55:51:cd:3c:c8:dd:bc:1c:fa:1b:f4: 13:5e:1d:a7:03:a8:6a:a1:2e:61:74:4c:47:29:c9: b0:6d:ab:43:c8:4c:9a:f9:23:54:56:7c:09:f6:60: c2:3e:82:e2:5a:a5:2c:bd:0e:d5:dd:35:71:6a:00: f3:37:9e:ac:5d:d9:82:b4:d0:be:64:42:d7:71:c2: d0:91:22:66:03:21:54:9e:8e:10:ff:63:a7:80:16: 6d:28:b5:af:6c:a0:5f:52:21:4d:7b:02:f0:6a:48: 1f:90:14:18:f5:3a:9f:a0:6c:1c:31:ba:51:b1:69: 87:7b:70:d9:12:fc:9a:cf:10:66:0e:28:64:00:97: 3e:b2:a3:c9:4c:2a:27:05:9e:70:91:c6:d5:73:c7: 7b:69:79:16:2d:7e:01:c0:8c:3d:74:7e:69:2b:98: 83:23:47:c1:38:f1:82:76:40:a0:60:c5:02:a8:2d: 32:6b:03:7a:ff:a6:0d:e9:08:92:90:70:cb:c5:40: ef:15:ec:0b:51:20:a5:c4:fa:7a:d2:66:94:f3:a5: 0d:b0:d2:43:a1:89:bd:a0:e8:3e:2b:4d:04:77:7a: a0:e2:06:a0:26:ee:cc:84:f1:ce:2b:39:30:cb:2f: 1f:04:97:1b:7f:92:43:2c:0b:42:c1:55:3e:5e:c3: 8c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9A:F5:AA:C6:31:C3:57:50:57:03:D0:A5:89:C6:F9:18:15:73:BE X509v3 Authority Key Identifier: keyid:25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:f4:96:05:19:eb:6e:a6:46:17:9f:df:f6:03:5f:2a:e6:ed: 09:8d:d0:a7:f3:56:d4:42:d2:ff:15:b2:a5:a5:32:71:d2:97: 02:08:4a:f3:c5:f1:7e:d6:dc:ae:7f:ce:b1:c4:d4:93:e8:14: 52:63:73:c6:52:ed:d4:16:14:05:de:b1:6e:65:fa:67:95:d5: 0d:9c:ff:24:cb:d2:4f:fb:bb:9b:2a:0c:dc:af:e9:db:a7:72: 7d:01:50:4a:40:d9:e2:d4:e6:71:97:b9:3c:5e:00:0c:ce:bd: c4:ff:e2:6d:6a:79:fe:8e:5b:67:06:e5:2c:a8:cd:de:ce:61: 87:1f:59:c5:cb:c2:b3:b9:9c:66:db:54:db:b1:1c:37:36:67: c6:43:4c:5f:15:1b:e1:2d:30:b3:43:2e:b8:88:27:ae:4a:94: 4b:35:ca:31:6a:e1:1d:17:0c:b8:8a:d6:43:15:ab:29:9c:23: 00:2f:45:fc:e5:b7:a1:f9:0e:99:9e:62:51:8e:83:86:52:7c: 1b:2f:3d:ba:85:39:5c:51:de:50:a2:d1:49:b8:df:05:17:65: e1:0a:88:03:cc:c2:4f:cc:0a:14:ac:02:f7:f2:10:85:bc:66: 02:3f:a3:f0:4b:cb:e8:81:3d:59:7d:ab:46:16:c3:6a:17:44: 05:b7:c9:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf2Ek9EfaKLEML/ldyol7VYCUhkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzNUY2QTlBNjUzOTVCNTg4MUFEQjBCNDMyQTE2Njc5 Qzg4Q0M2MDAeFw0yNjA5MTcwMTQwNDRaFw0yNjA5MTgwNTM5NDRaMDMxMTAvBgNV BAMTKEY0OUFGNUFBQzYzMUMzNTc1MDU3MDNEMEE1ODlDNkY5MTgxNTczQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/lVBVUc08yN28HPob9BNeHacD qGqhLmF0TEcpybBtq0PITJr5I1RWfAn2YMI+guJapSy9DtXdNXFqAPM3nqxd2YK0 0L5kQtdxwtCRImYDIVSejhD/Y6eAFm0ota9soF9SIU17AvBqSB+QFBj1Op+gbBwx ulGxaYd7cNkS/JrPEGYOKGQAlz6yo8lMKicFnnCRxtVzx3tpeRYtfgHAjD10fmkr mIMjR8E48YJ2QKBgxQKoLTJrA3r/pg3pCJKQcMvFQO8V7AtRIKXE+nrSZpTzpQ2w 0kOhib2g6D4rTQR3eqDiBqAm7syE8c4rOTDLLx8Elxt/kkMsC0LBVT5ew4wZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Jr1qsYxw1dQVwPQpYnG+RgVc74wHwYDVR0j BBgwFoAUJTX2qaZTlbWIGtsLQyoWZ5yIzGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDFkYjM3MzAtZjQ5OS00NDlmLWI2ZjItN2E1ZGViNTMyYjBjLzAvMjUzNUY2QTlB NjUzOTVCNTg4MUFEQjBCNDMyQTE2Njc5Qzg4Q0M2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTM1RjZBOUE2NTM5NUI1ODgxQURCMEI0MzJBMTY2NzlDODhD QzYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDFkYjM3MzAtZjQ5OS00NDlmLWI2 ZjItN2E1ZGViNTMyYjBjLzAvMjUzNUY2QTlBNjUzOTVCNTg4MUFEQjBCNDMyQTE2 Njc5Qzg4Q0M2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIT0lgUZ626mRhef3/YDXyrm7QmN0KfzVtRC 0v8VsqWlMnHSlwIISvPF8X7W3K5/zrHE1JPoFFJjc8ZS7dQWFAXesW5l+meV1Q2c /yTL0k/7u5sqDNyv6duncn0BUEpA2eLU5nGXuTxeAAzOvcT/4m1qef6OW2cG5Syo zd7OYYcfWcXLwrO5nGbbVNuxHDc2Z8ZDTF8VG+EtMLNDLriIJ65KlEs1yjFq4R0X DLiK1kMVqymcIwAvRfzlt6H5DpmeYlGOg4ZSfBsvPbqFOVxR3lCi0Um43wUXZeEK iAPMwk/MChSsAvfyEIW8ZgI/o/BLy+iBPVl9q0YWw2oXRAW3yR4= -----END CERTIFICATE-----Generated at Thu Sep 17 14:17:27 2026 by rpki-client