$ rpki-client -vvvf rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft File: 2535F6A9A65395B5881ADB0B432A16679C88CC60.mft (raw, json) Hash identifier: 0OpNyEktUMNDwma8QxintXOnwR4fiQq9FyL9Tjr/B/M= Subject key identifier: 4F:54:EA:F7:6B:DF:85:9D:98:34:D3:81:72:2E:8D:AD:30:1C:89:B0 Authority key identifier: 25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60 Certificate issuer: /CN=2535F6A9A65395B5881ADB0B432A16679C88CC60 Certificate serial: 28F5B4F606AAE18D9E5BFD6C39C339C069AEAE3B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft Manifest number: E2 Signing time: Sun 11 Oct 2026 10:35:39 +0000 Manifest this update: Sun 11 Oct 2026 10:30:39 +0000 Manifest next update: Mon 12 Oct 2026 11:22:39 +0000 Files and hashes: 1: 2535F6A9A65395B5881ADB0B432A16679C88CC60.crl (hash: ozRYN4QyKp9MsnVhnCRb91DV0WdLtdG3HgxoBfbJEUc=) 2: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (hash: zWsBUB0EsryhwZbrxTe3du0LXbDcYqcCoZB7f/2SeQs=) 3: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (hash: +tQQrL91DKY3GF87Bol7tPaM5Rdp2tOqyU/y9K8IpU4=) 4: 323430333a316130303a343a3a2f34372d3437203d3e203435373233.roa (hash: kVXs9OKO5SWhYY8QAUmq6Wo0PmjBkNXoXhlgjZszj5Q=) 5: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (hash: LXt8OGULAdQpoNoWK4gxLrA5MzZUVnNwkr0fY1oAkvc=) 6: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (hash: umYqwo2FiD8e3UtdgPNaP9b6kDv065RdUn/kTf3EPuQ=) 7: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (hash: 5nElrE2bFD3jeHzGP2EqItlqHxQy+rl4TSko98reQ+k=) 8: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (hash: 9IugcQnlhS8YqjpFiHIRL3UozLXDJSvET54UoliRNtA=) 9: 3230322e312e3233362e302f32342d3234203d3e203435373233.roa (hash: E2CZqc55ytVQ+gL56PQklO6/e15IEHDs3ZeA7hBho40=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:f5:b4:f6:06:aa:e1:8d:9e:5b:fd:6c:39:c3:39:c0:69:ae:ae:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2535F6A9A65395B5881ADB0B432A16679C88CC60 Validity Not Before: Oct 11 10:30:39 2026 GMT Not After : Oct 12 11:22:39 2026 GMT Subject: CN=4F54EAF76BDF859D9834D381722E8DAD301C89B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bd:48:af:52:17:a3:32:5b:51:38:52:8e:bf: 82:89:88:b0:34:a7:1f:3e:b6:f8:e1:29:92:b4:cb: 48:62:48:29:4e:39:1d:00:f5:a8:07:30:ad:28:6a: 22:66:6a:08:a4:9a:62:5c:78:a2:56:49:8c:fa:a1: b2:8e:b5:eb:4d:c0:ea:12:98:23:57:32:f9:9a:6c: e6:7b:cc:92:7e:ea:27:3f:c5:51:f4:6a:15:c4:18: 2d:05:21:46:83:df:54:fd:4c:c0:23:65:3b:aa:6d: 30:49:35:88:9e:c6:bc:ba:5f:f3:da:8c:19:13:96: 70:46:e7:15:6a:bb:ad:36:67:ed:2c:59:33:17:0a: 03:a0:9b:d3:c2:b1:b7:32:6a:69:a8:49:a1:a3:db: 04:e7:db:02:e3:46:20:6b:78:72:1d:9f:87:d8:99: ca:45:62:ae:bd:89:e8:c7:0d:87:49:c7:76:11:92: 97:3d:d2:e8:11:ef:5c:02:e7:78:22:57:83:4a:3b: 01:17:a7:b7:e8:75:9c:8a:d3:c8:36:4e:4b:35:b1: db:78:af:ca:0a:fd:34:02:06:86:84:6e:bf:00:fb: cc:c3:7e:a7:eb:fd:f2:de:91:c6:4c:a0:65:81:09: f1:ac:3a:07:c5:32:27:d9:b2:52:21:b0:ec:4c:49: 14:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:54:EA:F7:6B:DF:85:9D:98:34:D3:81:72:2E:8D:AD:30:1C:89:B0 X509v3 Authority Key Identifier: keyid:25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:e8:8b:37:6f:9b:67:1c:58:bd:7d:77:f2:41:65:9b:a1:89: 6f:c8:cd:1b:87:68:e1:8e:b9:9a:58:f3:90:64:56:c6:c5:39: b2:a0:2b:fa:7c:80:8a:df:a2:b5:fe:fa:00:95:2d:25:2a:c8: 30:7a:50:88:eb:23:f9:d1:18:ce:96:61:a8:86:f6:fc:8c:18: 5a:9f:ab:36:6f:d4:c0:7d:e3:c5:83:49:73:1b:65:21:3e:d8: 2f:8b:d6:17:2c:63:a6:e0:3f:18:d2:97:c7:8d:53:67:0d:d5: 4a:09:9b:09:d6:dd:2c:66:b6:80:ed:b5:8d:3a:cb:0c:16:43: 10:22:bc:9d:c2:72:a8:b3:ac:7c:23:b5:1e:90:7e:1e:ca:a9: 1a:54:c7:84:44:31:e1:8b:b0:74:82:28:2a:54:ed:a1:c2:40: e3:3d:c4:22:71:71:d2:3f:c5:51:27:41:75:c4:c4:88:c1:25: 12:7d:40:c8:34:72:16:ca:17:61:f5:52:e4:e3:2c:54:c5:3a: 54:ed:34:57:c3:f2:59:fc:1c:d7:a4:ca:f0:79:d5:09:65:ef: 16:5f:0b:9f:7f:44:a3:ff:0e:d1:ac:f8:d2:8d:35:53:af:1c: 98:82:da:bb:48:d0:b9:2b:89:e0:57:74:0e:cf:7f:d0:fa:4b: 72:a3:15:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKPW09gaq4Y2eW/1sOcM5wGmurjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzNUY2QTlBNjUzOTVCNTg4MUFEQjBCNDMyQTE2Njc5 Qzg4Q0M2MDAeFw0yNjEwMTExMDMwMzlaFw0yNjEwMTIxMTIyMzlaMDMxMTAvBgNV BAMTKDRGNTRFQUY3NkJERjg1OUQ5ODM0RDM4MTcyMkU4REFEMzAxQzg5QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCvUivUhejMltROFKOv4KJiLA0 px8+tvjhKZK0y0hiSClOOR0A9agHMK0oaiJmagikmmJceKJWSYz6obKOtetNwOoS mCNXMvmabOZ7zJJ+6ic/xVH0ahXEGC0FIUaD31T9TMAjZTuqbTBJNYiexry6X/Pa jBkTlnBG5xVqu602Z+0sWTMXCgOgm9PCsbcyammoSaGj2wTn2wLjRiBreHIdn4fY mcpFYq69iejHDYdJx3YRkpc90ugR71wC53giV4NKOwEXp7fodZyK08g2Tks1sdt4 r8oK/TQCBoaEbr8A+8zDfqfr/fLekcZMoGWBCfGsOgfFMifZslIhsOxMSRTzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT1Tq92vfhZ2YNNOBci6NrTAcibAwHwYDVR0j BBgwFoAUJTX2qaZTlbWIGtsLQyoWZ5yIzGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDFkYjM3MzAtZjQ5OS00NDlmLWI2ZjItN2E1ZGViNTMyYjBjLzAvMjUzNUY2QTlB NjUzOTVCNTg4MUFEQjBCNDMyQTE2Njc5Qzg4Q0M2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTM1RjZBOUE2NTM5NUI1ODgxQURCMEI0MzJBMTY2NzlDODhD QzYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDFkYjM3MzAtZjQ5OS00NDlmLWI2 ZjItN2E1ZGViNTMyYjBjLzAvMjUzNUY2QTlBNjUzOTVCNTg4MUFEQjBCNDMyQTE2 Njc5Qzg4Q0M2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACboizdvm2ccWL19d/JBZZuhiW/IzRuHaOGO uZpY85BkVsbFObKgK/p8gIrforX++gCVLSUqyDB6UIjrI/nRGM6WYaiG9vyMGFqf qzZv1MB948WDSXMbZSE+2C+L1hcsY6bgPxjSl8eNU2cN1UoJmwnW3SxmtoDttY06 ywwWQxAivJ3CcqizrHwjtR6Qfh7KqRpUx4REMeGLsHSCKCpU7aHCQOM9xCJxcdI/ xVEnQXXExIjBJRJ9QMg0chbKF2H1UuTjLFTFOlTtNFfD8ln8HNekyvB51Qll7xZf C59/RKP/DtGs+NKNNVOvHJiC2rtI0LkrieBXdA7Pf9D6S3KjFZM= -----END CERTIFICATE-----Generated at Sun Oct 11 23:48:37 2026 by rpki-client