$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft File: 35859E59642559AC99788C194ED55EB1548A2F1F.mft (raw, json) Hash identifier: rQfXjr7d6Ku98h3oj/IJDmisg9ZCL78O+CkdoC9CZcw= Subject key identifier: 3C:4A:C8:97:68:20:EE:ED:92:13:2D:D9:47:EF:C6:02:13:2F:49:94 Authority key identifier: 35:85:9E:59:64:25:59:AC:99:78:8C:19:4E:D5:5E:B1:54:8A:2F:1F Certificate issuer: /CN=35859E59642559AC99788C194ED55EB1548A2F1F Certificate serial: 6CE875B8137E98A473B814856E16013643C21925 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 00:54:44 +0000 Manifest this update: Thu 17 Sep 2026 00:49:44 +0000 Manifest next update: Fri 18 Sep 2026 01:56:44 +0000 Files and hashes: 1: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: hFjJslECEMnx83EP1P1UtwdiCEUWwcSYSCvr4li07y4=) 2: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: itttPeBqKU49Shq/w4T47E1hAyNoebnpwqyP1PK8wLg=) 3: 35859E59642559AC99788C194ED55EB1548A2F1F.crl (hash: Tc2fFaABm7WTNbKqcSxb2YoDWd3jlFg3OPL2AFBL3XY=) 4: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: QBz9jVg5iA4vI0m+M7MXqbx0KDdvReCXDCkg90gY1pM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.crl rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:e8:75:b8:13:7e:98:a4:73:b8:14:85:6e:16:01:36:43:c2:19:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35859E59642559AC99788C194ED55EB1548A2F1F Validity Not Before: Sep 17 00:49:44 2026 GMT Not After : Sep 18 01:56:44 2026 GMT Subject: CN=3C4AC8976820EEED92132DD947EFC602132F4994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6d:9b:bd:21:f6:7c:2b:ef:be:c0:a1:13:ea: 21:92:bd:96:5d:c3:97:c5:a1:0e:af:9b:3f:aa:06: 6f:68:4f:b0:23:af:0d:9a:1e:9e:a7:fc:5d:a8:a3: 53:0e:a6:2d:06:75:67:bd:d4:84:98:4f:59:80:89: 52:5d:9c:63:66:32:ec:0f:9e:16:9f:b7:3e:6f:9f: 20:93:42:f7:a4:8e:f5:b3:1f:ab:ac:42:f9:6f:29: a5:d1:5d:10:7f:7e:e1:0f:8b:c3:ca:7e:04:67:14: 5d:97:32:4d:29:3a:df:97:e8:94:9b:0a:aa:ea:a0: 98:51:d1:85:1d:8f:c7:ff:76:c1:10:e8:ed:1a:7c: fc:6f:77:45:ef:d2:48:67:cb:1a:cd:01:d5:0b:cc: 41:dc:b5:18:e4:e7:3d:9c:f1:22:3e:b1:0d:7e:51: 7e:21:a1:d2:41:32:d6:b6:e6:a7:a2:3c:6c:5e:18: 90:0f:69:84:89:b7:b4:5a:00:d2:bb:8b:0c:21:04: 7f:a6:72:35:76:3b:46:22:82:6a:24:b7:8e:d3:35: 6a:1a:e9:ab:91:53:a4:ab:af:20:89:46:c3:bc:64: 0d:f3:6e:62:0b:83:a7:34:89:74:fd:2e:e6:35:f4: 06:c9:c9:29:e5:36:54:96:4d:06:05:96:37:67:b2: cf:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4A:C8:97:68:20:EE:ED:92:13:2D:D9:47:EF:C6:02:13:2F:49:94 X509v3 Authority Key Identifier: keyid:35:85:9E:59:64:25:59:AC:99:78:8C:19:4E:D5:5E:B1:54:8A:2F:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:78:b7:c7:96:d5:39:ad:9e:a1:11:46:9b:28:33:3b:d8:03: 48:7f:91:2a:8c:de:1b:6b:f1:4a:65:55:fb:cd:61:ec:01:35: 4f:f4:09:b9:98:be:fa:d3:f4:1a:5e:00:a5:0e:83:5b:4d:54: 4e:9a:66:ed:6d:2b:6c:e2:09:eb:53:db:a5:e4:29:a4:72:59: e4:c2:95:4e:d5:46:12:03:a3:61:25:0b:eb:b0:c6:df:4f:fc: 41:c8:22:b6:53:e6:da:09:60:1f:56:e7:e9:ac:8b:02:3e:8f: 62:37:46:29:87:28:55:8e:ce:ff:f3:a0:a7:7a:3b:09:9b:5f: db:e3:ba:6a:a9:28:a0:97:0c:5d:7c:65:07:2a:ce:0c:ba:b7: 6f:22:a4:94:fe:d0:9c:51:96:6e:07:a5:9d:45:7b:a7:c8:b3: 91:27:90:87:b8:2f:c0:5d:ad:8e:26:8f:4e:3b:79:9d:1b:fd: 31:22:b7:d0:c6:6b:02:1b:64:ef:dd:35:b9:d5:dc:4b:37:57: 78:99:eb:37:9b:a5:58:d0:3b:2f:f8:76:1b:38:98:f5:48:33: 23:15:ba:4a:30:03:59:6f:1a:72:58:bf:a8:4c:9d:cd:7a:c3: b3:3e:1b:05:8a:f8:e9:6b:2a:b1:5d:38:92:5f:08:6c:16:de: 0b:84:ca:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbOh1uBN+mKRzuBSFbhYBNkPCGSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4NTlFNTk2NDI1NTlBQzk5Nzg4QzE5NEVENTVFQjE1 NDhBMkYxRjAeFw0yNjA5MTcwMDQ5NDRaFw0yNjA5MTgwMTU2NDRaMDMxMTAvBgNV BAMTKDNDNEFDODk3NjgyMEVFRUQ5MjEzMkREOTQ3RUZDNjAyMTMyRjQ5OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKbZu9IfZ8K+++wKET6iGSvZZd w5fFoQ6vmz+qBm9oT7Ajrw2aHp6n/F2oo1MOpi0GdWe91ISYT1mAiVJdnGNmMuwP nhaftz5vnyCTQvekjvWzH6usQvlvKaXRXRB/fuEPi8PKfgRnFF2XMk0pOt+X6JSb CqrqoJhR0YUdj8f/dsEQ6O0afPxvd0Xv0khnyxrNAdULzEHctRjk5z2c8SI+sQ1+ UX4hodJBMta25qeiPGxeGJAPaYSJt7RaANK7iwwhBH+mcjV2O0Yigmokt47TNWoa 6auRU6SrryCJRsO8ZA3zbmILg6c0iXT9LuY19AbJySnlNlSWTQYFljdnss8rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPErIl2gg7u2SEy3ZR+/GAhMvSZQwHwYDVR0j BBgwFoAUNYWeWWQlWayZeIwZTtVesVSKLx8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJlZmJmMDQtNDFiZS00OGQ3LWFjMDAtOGEzYzQ5OGNhOWFlLzAvMzU4NTlFNTk2 NDI1NTlBQzk5Nzg4QzE5NEVENTVFQjE1NDhBMkYxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNTg1OUU1OTY0MjU1OUFDOTk3ODhDMTk0RUQ1NUVCMTU0OEEy RjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWJlZmJmMDQtNDFiZS00OGQ3LWFj MDAtOGEzYzQ5OGNhOWFlLzAvMzU4NTlFNTk2NDI1NTlBQzk5Nzg4QzE5NEVENTVF QjE1NDhBMkYxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEV4t8eW1TmtnqERRpsoMzvYA0h/kSqM3htr 8UplVfvNYewBNU/0CbmYvvrT9BpeAKUOg1tNVE6aZu1tK2ziCetT26XkKaRyWeTC lU7VRhIDo2ElC+uwxt9P/EHIIrZT5toJYB9W5+msiwI+j2I3RimHKFWOzv/zoKd6 OwmbX9vjumqpKKCXDF18ZQcqzgy6t28ipJT+0JxRlm4HpZ1Fe6fIs5EnkIe4L8Bd rY4mj047eZ0b/TEit9DGawIbZO/dNbnV3Es3V3iZ6zebpVjQOy/4dhs4mPVIMyMV ukowA1lvGnJYv6hMnc16w7M+GwWK+OlrKrFdOJJfCGwW3guEyk4= -----END CERTIFICATE-----Generated at Thu Sep 17 15:07:38 2026 by rpki-client