$ rpki-client -vvvf rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft File: D35962E8F839460DC5283C472D81ADB87BBD3992.mft (raw, json) Hash identifier: qU8xwfcpGQ5gqiM9Ebvk0fgtdxWoSTAp5HPV62biVQk= Subject key identifier: 8A:47:68:48:30:57:C4:40:D1:02:F6:9E:EC:3A:02:8C:C3:B5:55:E5 Authority key identifier: D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 Certificate issuer: /CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Certificate serial: 0C694D00F41763840E9B9E6B7A62DA26B35CDCE4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 22:06:16 +0000 Manifest this update: Wed 16 Sep 2026 22:01:16 +0000 Manifest next update: Fri 18 Sep 2026 00:34:16 +0000 Files and hashes: 1: 3132322e3234382e34352e302f32342d3234203d3e203435333235.roa (hash: YFkGY+wSseirD/L/4qz7sLnl/2atYUZvqHfKN+6xB9M=) 2: 323430303a373530303a3a2f33322d3332203d3e20313431313432.roa (hash: zbddhP7SNU+N1CDEwFKRNo4Q4pKFgeqQ1pbI5rRqtBU=) 3: 3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (hash: SHUyhFJkNlfUafPQZznwzypagEog72AhZ4GF3ZoArLM=) 4: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (hash: zRrlJoG5zcUtX6wFVCQMeL8cPbII1W88o2EQ5g8PVNA=) 5: 3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (hash: VzZhSRiw8XBW/yDedZyS5uY03yRNTIbVc//42y9SUvw=) 6: 3132322e3234382e33352e302f32342d3234203d3e20313431313432.roa (hash: bM/0Dm/kJz164oUyk+EyLG8dzY/v3xcPNTwfnlLmVSk=) 7: 3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (hash: KtloGbIfkKJ4NXlhmcMPxJB4OgAOFnDw3xxvTqso1no=) 8: 3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (hash: fTQwNjegjWMOzBPfeCGxyPxzuktj8uBwcPPy5ukBNDg=) 9: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (hash: 9A3NELKN62n/Uv+kjUVb0RNEBPpV0EUgsvMetodVNuE=) 10: 3132322e3234382e33382e302f32342d3234203d3e203435333235.roa (hash: O/C54fK6Fh0hkPYgUaevMk58lHbQGzg+mBNsocdzdL4=) 11: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (hash: 1WM6A0xkGbon1XjjFMKySJrVDJV2Gtw2xI0n8qXoIUg=) 12: 3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (hash: 0eliJEonh/Nebf/NJDVLw46smOx9iWVTCt/50JmdxX4=) 13: 3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (hash: 7PFw1XvCft2aOIZ+63/foK4bvYq8ag5iSEDET2cMWPo=) 14: 3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (hash: eLGownyXQbAHwo7lmiV7AZcGiEJZfmA0J0Wx85SPn6A=) 15: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (hash: LXPm+M8vAxjssdAZLO3Rx0wFITGhuZf7YIbnBsCAbss=) 16: D35962E8F839460DC5283C472D81ADB87BBD3992.crl (hash: wVzuW9LeEYRnrO3eyoVJPxgBgynBXAZ7Vv5sqEzhLR0=) 17: 3132322e3234382e33362e302f32342d3234203d3e203435333235.roa (hash: L0mPxNgbcwwNWadhYDVYcEPoRwXw/apNhz/JQNHU27s=) 18: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (hash: a2g7FXBxKjJ9sPuBWUpxfzMOG1+kUNuv9IQ11Ti9Pks=) 19: 3132322e3234382e34372e302f32342d3234203d3e203435333235.roa (hash: AP1Uq+hh+Bk2TKrn6WpCz+/Kjlfl/SuzP91WxFo1LEI=) 20: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (hash: F2/X+b+sJTBnlu6Sh9LFFYTW3UjFRRXVyNaKWEGhbhY=) 21: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (hash: Y/DmOT1ERuXNTR9l4X0obDV2SVqxiolJs80GKn5Zz9s=) 22: 3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (hash: zZKnPm65wCA/b7MgYVi6OYfLbBSyB9aR0+gTJCkjT98=) 23: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (hash: xgjDAhQZn+M5QT3iWDFTTkYvcaKaz/dtqKLQQBwYvgA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:69:4d:00:f4:17:63:84:0e:9b:9e:6b:7a:62:da:26:b3:5c:dc:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Validity Not Before: Sep 16 22:01:16 2026 GMT Not After : Sep 18 00:34:16 2026 GMT Subject: CN=8A4768483057C440D102F69EEC3A028CC3B555E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b4:65:ec:74:02:31:8e:34:27:aa:86:3c:c2: 34:db:b3:44:2d:4c:9b:54:18:1d:49:8b:49:9b:f9: 08:ec:9f:eb:2b:7a:e5:e4:75:01:c2:4c:c7:52:62: a1:a1:6c:53:85:e9:ab:02:69:94:ff:65:8f:e6:69: 00:50:1d:3a:d3:71:c1:16:27:93:0a:71:d8:99:c9: 67:7b:bc:b5:4a:14:73:08:13:a4:76:01:96:a8:b2: 3a:fb:8d:29:bc:c6:85:bb:5e:53:68:83:3e:12:db: 2a:08:b5:91:bc:04:48:13:d2:99:ac:f9:a2:f2:1a: d8:81:32:67:ef:96:cc:55:22:6c:52:70:8e:e0:e3: ac:ca:52:0e:b1:d1:49:16:48:d5:42:45:98:f2:1d: 25:55:7d:ff:de:6f:19:75:58:ee:c8:be:dc:7c:c0: 57:be:cd:ab:b8:a7:fa:10:ed:eb:83:76:cb:4a:a1: bf:fb:82:97:ad:5b:ab:aa:f7:d5:95:a2:ff:cb:de: 3d:f2:8b:23:0d:23:ea:b6:59:95:fd:b0:6d:42:80: 66:62:90:31:2a:47:5b:e9:b8:0c:7c:2e:d0:e4:9c: 80:ab:33:0d:66:40:33:04:06:ce:a6:83:56:62:a7: a1:c0:dc:8e:f5:fd:86:7f:c7:ef:95:df:b4:6f:3f: e8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:47:68:48:30:57:C4:40:D1:02:F6:9E:EC:3A:02:8C:C3:B5:55:E5 X509v3 Authority Key Identifier: keyid:D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:cc:9b:65:84:ed:4c:1f:e4:f5:d8:53:63:81:b4:f5:68:37: 85:3b:5d:fe:5f:bb:b5:55:68:25:15:63:36:13:1b:92:63:a7: 71:be:8c:2f:2c:04:5d:51:02:1f:fe:5c:d8:01:8d:f1:16:6f: e3:06:65:85:a5:d2:70:73:f1:03:19:40:dc:17:3f:bb:53:9c: 1d:8a:dc:99:87:6c:9a:58:18:cf:29:ea:6d:63:36:16:e7:f2: 87:0b:ca:c9:da:c5:55:65:0f:bd:a8:04:8a:9e:ce:fa:45:38: 88:f9:a7:91:f9:bc:07:fe:6f:da:00:e4:53:c5:74:af:7b:d4: 1c:ac:a1:ea:2b:53:d5:ac:cf:da:75:27:4b:68:07:72:1c:7c: 67:34:14:2e:f9:c4:c5:3b:8f:4d:2b:58:23:c2:cb:8c:6c:a7: 0d:6b:a5:67:71:6e:2f:cb:78:e6:f9:e9:01:b7:72:f1:ee:9f: 26:38:80:fd:a8:6b:24:e0:fa:ea:5a:c9:ac:e1:57:cc:2c:15: f2:10:1c:a4:5b:cb:50:bf:6d:10:dc:1d:86:56:e9:2f:61:58: ec:3d:81:f3:40:5f:46:b0:73:3c:78:6c:76:4f:40:82:6b:cf: bb:7d:fd:4f:23:ad:55:41:31:eb:1f:69:30:02:94:3a:f1:be: bd:10:07:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDGlNAPQXY4QOm55remLaJrNc3OQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3 QkJEMzk5MjAeFw0yNjA5MTYyMjAxMTZaFw0yNjA5MTgwMDM0MTZaMDMxMTAvBgNV BAMTKDhBNDc2ODQ4MzA1N0M0NDBEMTAyRjY5RUVDM0EwMjhDQzNCNTU1RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDptGXsdAIxjjQnqoY8wjTbs0Qt TJtUGB1Ji0mb+Qjsn+sreuXkdQHCTMdSYqGhbFOF6asCaZT/ZY/maQBQHTrTccEW J5MKcdiZyWd7vLVKFHMIE6R2AZaosjr7jSm8xoW7XlNogz4S2yoItZG8BEgT0pms +aLyGtiBMmfvlsxVImxScI7g46zKUg6x0UkWSNVCRZjyHSVVff/ebxl1WO7Ivtx8 wFe+zau4p/oQ7euDdstKob/7gpetW6uq99WVov/L3j3yiyMNI+q2WZX9sG1CgGZi kDEqR1vpuAx8LtDknICrMw1mQDMEBs6mg1Zip6HA3I71/YZ/x++V37RvP+hnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUikdoSDBXxEDRAvae7DoCjMO1VeUwHwYDVR0j BBgwFoAU01li6Pg5Rg3FKDxHLYGtuHu9OZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYyZTdmZDYtZWI1ZS00ODBhLThlOTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThG ODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3QkJEMzk5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzU5NjJFOEY4Mzk0NjBEQzUyODNDNDcyRDgxQURCODdCQkQz OTkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYyZTdmZDYtZWI1ZS00ODBhLThl OTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFE Qjg3QkJEMzk5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrMm2WE7Uwf5PXYU2OBtPVoN4U7Xf5fu7VV aCUVYzYTG5Jjp3G+jC8sBF1RAh/+XNgBjfEWb+MGZYWl0nBz8QMZQNwXP7tTnB2K 3JmHbJpYGM8p6m1jNhbn8ocLysnaxVVlD72oBIqezvpFOIj5p5H5vAf+b9oA5FPF dK971BysoeorU9Wsz9p1J0toB3IcfGc0FC75xMU7j00rWCPCy4xspw1rpWdxbi/L eOb56QG3cvHunyY4gP2oayTg+upayazhV8wsFfIQHKRby1C/bRDcHYZW6S9hWOw9 gfNAX0awczx4bHZPQIJrz7t9/U8jrVVBMesfaTAClDrxvr0QBwc= -----END CERTIFICATE-----Generated at Thu Sep 17 12:39:59 2026 by rpki-client