$ rpki-client -vvvf rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft File: E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft (raw, json) Hash identifier: BR5IvLFPn0P4YwHPNImTU2/LVgUTI5lqcM+hIPQ5dX0= Subject key identifier: 6D:6C:81:40:62:0E:EE:69:6B:D2:8D:00:61:A8:72:1D:3B:49:94:3E Authority key identifier: E0:35:D5:F5:D7:02:06:74:8D:3C:08:7B:30:BF:BC:D1:5E:CF:19:6D Certificate issuer: /CN=E035D5F5D70206748D3C087B30BFBCD15ECF196D Certificate serial: 30CF14750DC2C01757990F2A7A61272AE30306B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft Manifest number: EA Signing time: Sat 24 Oct 2026 21:46:20 +0000 Manifest this update: Sat 24 Oct 2026 21:41:20 +0000 Manifest next update: Mon 26 Oct 2026 00:41:20 +0000 Files and hashes: 1: 3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa (hash: alqTQlTJJckhtW2N9aw/g6aRbRRoD+/QvIdNlTJVbT8=) 2: E035D5F5D70206748D3C087B30BFBCD15ECF196D.crl (hash: LIABsEbJL79ZDfH3AVe/v1e8OL66BhbIMBGSrcb3e3Y=) 3: 3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa (hash: 2NfEf/tbZtwHV+2PFzn79NkNRnQSkFLyDYFjiAxOlwQ=) 4: 3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa (hash: Tts8f+N485CFXeqo33btYWO7LgUOuaCh8Px0kKwHoiY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.crl rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:cf:14:75:0d:c2:c0:17:57:99:0f:2a:7a:61:27:2a:e3:03:06:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E035D5F5D70206748D3C087B30BFBCD15ECF196D Validity Not Before: Oct 24 21:41:20 2026 GMT Not After : Oct 26 00:41:20 2026 GMT Subject: CN=6D6C8140620EEE696BD28D0061A8721D3B49943E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:81:bc:f4:a6:7b:04:1c:dc:db:9f:23:06:d0: fc:00:32:59:fe:23:82:c3:29:49:3e:86:7b:ee:f9: 3b:14:9d:76:98:9d:39:bf:12:8d:49:ec:dc:79:da: ef:4d:fc:92:c7:53:82:46:37:70:83:aa:53:ad:5a: 16:6e:65:a8:32:d7:7b:76:03:af:a4:8b:c3:2e:59: 57:30:7e:c7:54:bd:47:b5:cc:7b:60:bc:45:00:c5: e8:74:c9:bf:3a:63:8e:b4:c0:89:0b:42:62:30:6c: b7:a9:61:be:58:2f:6d:27:f5:ce:34:83:f2:15:f0: 5b:f9:d2:74:30:b4:f2:d3:6a:ed:2b:60:82:3c:7a: fb:56:77:54:a1:76:b4:59:34:3d:39:24:84:e3:32: 21:6e:b0:88:37:4d:a2:81:c3:b1:b6:4c:86:4c:07: c1:16:09:c1:52:3e:4c:ba:ef:05:91:37:8f:ec:cf: 5e:6f:01:85:cc:26:47:68:55:8d:03:11:b2:4d:70: 23:0f:4c:61:52:77:ad:fb:a8:3f:1e:1c:ea:ba:ef: 61:d3:87:48:ef:7c:12:fb:5b:cf:27:20:f3:93:82: 9a:fd:6b:3a:8b:1a:ed:b9:00:99:56:ca:f3:32:e2: 05:ca:69:86:45:39:9e:85:22:d0:e8:56:f2:4f:70: 59:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6C:81:40:62:0E:EE:69:6B:D2:8D:00:61:A8:72:1D:3B:49:94:3E X509v3 Authority Key Identifier: keyid:E0:35:D5:F5:D7:02:06:74:8D:3C:08:7B:30:BF:BC:D1:5E:CF:19:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:29:89:ee:2f:23:56:a1:7c:6e:a8:2d:02:2a:19:48:30:ed: 80:ca:6f:7a:35:17:f7:59:9c:f7:71:4b:e2:9f:be:c9:33:39: 3c:f7:23:21:b3:a8:9f:e9:76:1f:4c:64:59:e4:d4:e9:ac:82: 65:4d:e4:86:26:0c:b7:a9:98:da:22:92:22:bc:70:60:7d:c4: 12:3b:67:d2:11:95:f5:f5:ad:07:2e:eb:30:d2:19:47:b8:01: c0:a4:3f:66:8f:5a:2b:09:9d:c7:ef:0e:b6:4d:5c:c8:72:62: ae:d7:5f:6d:5c:0e:8c:39:29:bc:29:ca:f6:03:1e:66:2c:be: 2c:2a:93:59:6e:ab:8f:64:f6:67:be:ac:42:ed:e5:48:51:1c: 23:29:0b:2e:99:35:8f:f1:f4:74:5e:ff:95:1d:8f:c8:4f:b5: 66:3f:96:23:ea:be:29:d7:78:21:ee:f8:c4:c3:89:f8:85:50: 3f:6d:c0:71:d6:40:a0:45:24:6b:1b:f6:4e:32:23:93:16:98: 73:45:52:11:55:07:97:60:42:5b:d2:6d:5b:81:48:9a:bf:4b: 0c:85:42:ab:26:bd:32:72:d4:df:a7:d6:5c:05:a1:e1:b8:3d: e1:2c:5e:b6:8c:62:7d:86:1c:4c:1e:e7:09:8a:e5:6b:36:cd: b3:e8:df:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMM8UdQ3CwBdXmQ8qemEnKuMDBrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAzNUQ1RjVENzAyMDY3NDhEM0MwODdCMzBCRkJDRDE1 RUNGMTk2RDAeFw0yNjEwMjQyMTQxMjBaFw0yNjEwMjYwMDQxMjBaMDMxMTAvBgNV BAMTKDZENkM4MTQwNjIwRUVFNjk2QkQyOEQwMDYxQTg3MjFEM0I0OTk0M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSgbz0pnsEHNzbnyMG0PwAMln+ I4LDKUk+hnvu+TsUnXaYnTm/Eo1J7Nx52u9N/JLHU4JGN3CDqlOtWhZuZagy13t2 A6+ki8MuWVcwfsdUvUe1zHtgvEUAxeh0yb86Y460wIkLQmIwbLepYb5YL20n9c40 g/IV8Fv50nQwtPLTau0rYII8evtWd1ShdrRZND05JITjMiFusIg3TaKBw7G2TIZM B8EWCcFSPky67wWRN4/sz15vAYXMJkdoVY0DEbJNcCMPTGFSd637qD8eHOq672HT h0jvfBL7W88nIPOTgpr9azqLGu25AJlWyvMy4gXKaYZFOZ6FItDoVvJPcFk1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbWyBQGIO7mlr0o0AYahyHTtJlD4wHwYDVR0j BBgwFoAU4DXV9dcCBnSNPAh7ML+80V7PGW0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZiMjA1MTUtOGQ3Yy00NDVjLWJmZjctYmFiZDUyNjU3ODBmLzAvRTAzNUQ1RjVE NzAyMDY3NDhEM0MwODdCMzBCRkJDRDE1RUNGMTk2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMDM1RDVGNUQ3MDIwNjc0OEQzQzA4N0IzMEJGQkNEMTVFQ0Yx OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZiMjA1MTUtOGQ3Yy00NDVjLWJm ZjctYmFiZDUyNjU3ODBmLzAvRTAzNUQ1RjVENzAyMDY3NDhEM0MwODdCMzBCRkJD RDE1RUNGMTk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANcpie4vI1ahfG6oLQIqGUgw7YDKb3o1F/dZ nPdxS+KfvskzOTz3IyGzqJ/pdh9MZFnk1OmsgmVN5IYmDLepmNoikiK8cGB9xBI7 Z9IRlfX1rQcu6zDSGUe4AcCkP2aPWisJncfvDrZNXMhyYq7XX21cDow5KbwpyvYD HmYsviwqk1luq49k9me+rELt5UhRHCMpCy6ZNY/x9HRe/5Udj8hPtWY/liPqvinX eCHu+MTDifiFUD9twHHWQKBFJGsb9k4yI5MWmHNFUhFVB5dgQlvSbVuBSJq/SwyF QqsmvTJy1N+n1lwFoeG4PeEsXraMYn2GHEwe5wmK5Ws2zbPo3xg= -----END CERTIFICATE-----Generated at Sun Oct 25 09:02:20 2026 by rpki-client