$ rpki-client -vvvf rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft File: D35962E8F839460DC5283C472D81ADB87BBD3992.mft (raw, json) Hash identifier: zgGfck8sQsywX669v0uSV3xzhSeNMKJmapH3ASKL/3E= Subject key identifier: 53:A1:EB:1D:89:1A:C8:A5:98:52:50:B9:A4:89:06:BC:D1:36:CF:35 Authority key identifier: D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 Certificate issuer: /CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Certificate serial: 4132CC56F0D84EDE5FA4EE947DEF190EC8898BFA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 10:52:37 +0000 Manifest this update: Sun 15 Nov 2026 10:47:37 +0000 Manifest next update: Mon 16 Nov 2026 14:19:37 +0000 Files and hashes: 1: 3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (hash: eLGownyXQbAHwo7lmiV7AZcGiEJZfmA0J0Wx85SPn6A=) 2: 3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (hash: SHUyhFJkNlfUafPQZznwzypagEog72AhZ4GF3ZoArLM=) 3: 3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (hash: 7PFw1XvCft2aOIZ+63/foK4bvYq8ag5iSEDET2cMWPo=) 4: D35962E8F839460DC5283C472D81ADB87BBD3992.crl (hash: LgPECUVEdP/mhC8CgHgYpEzSgk+XkrueeL5mi3vlBng=) 5: 3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (hash: VzZhSRiw8XBW/yDedZyS5uY03yRNTIbVc//42y9SUvw=) 6: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (hash: F2/X+b+sJTBnlu6Sh9LFFYTW3UjFRRXVyNaKWEGhbhY=) 7: 3132322e3234382e33362e302f32342d3234203d3e203435333235.roa (hash: L0mPxNgbcwwNWadhYDVYcEPoRwXw/apNhz/JQNHU27s=) 8: 3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (hash: KtloGbIfkKJ4NXlhmcMPxJB4OgAOFnDw3xxvTqso1no=) 9: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (hash: LXPm+M8vAxjssdAZLO3Rx0wFITGhuZf7YIbnBsCAbss=) 10: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (hash: Y/DmOT1ERuXNTR9l4X0obDV2SVqxiolJs80GKn5Zz9s=) 11: 3132322e3234382e33382e302f32342d3234203d3e203435333235.roa (hash: O/C54fK6Fh0hkPYgUaevMk58lHbQGzg+mBNsocdzdL4=) 12: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (hash: 1WM6A0xkGbon1XjjFMKySJrVDJV2Gtw2xI0n8qXoIUg=) 13: 3132322e3234382e34352e302f32342d3234203d3e203435333235.roa (hash: YFkGY+wSseirD/L/4qz7sLnl/2atYUZvqHfKN+6xB9M=) 14: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (hash: zRrlJoG5zcUtX6wFVCQMeL8cPbII1W88o2EQ5g8PVNA=) 15: 3132322e3234382e34372e302f32342d3234203d3e203435333235.roa (hash: AP1Uq+hh+Bk2TKrn6WpCz+/Kjlfl/SuzP91WxFo1LEI=) 16: 3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (hash: 0eliJEonh/Nebf/NJDVLw46smOx9iWVTCt/50JmdxX4=) 17: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (hash: xgjDAhQZn+M5QT3iWDFTTkYvcaKaz/dtqKLQQBwYvgA=) 18: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (hash: 9A3NELKN62n/Uv+kjUVb0RNEBPpV0EUgsvMetodVNuE=) 19: 323430303a373530303a3a2f33322d3332203d3e20313431313432.roa (hash: zbddhP7SNU+N1CDEwFKRNo4Q4pKFgeqQ1pbI5rRqtBU=) 20: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (hash: a2g7FXBxKjJ9sPuBWUpxfzMOG1+kUNuv9IQ11Ti9Pks=) 21: 3132322e3234382e33352e302f32342d3234203d3e20313431313432.roa (hash: bM/0Dm/kJz164oUyk+EyLG8dzY/v3xcPNTwfnlLmVSk=) 22: 3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (hash: zZKnPm65wCA/b7MgYVi6OYfLbBSyB9aR0+gTJCkjT98=) 23: 3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (hash: fTQwNjegjWMOzBPfeCGxyPxzuktj8uBwcPPy5ukBNDg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:32:cc:56:f0:d8:4e:de:5f:a4:ee:94:7d:ef:19:0e:c8:89:8b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Validity Not Before: Nov 15 10:47:37 2026 GMT Not After : Nov 16 14:19:37 2026 GMT Subject: CN=53A1EB1D891AC8A5985250B9A48906BCD136CF35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:02:11:d1:9b:fd:3b:bd:50:b9:05:a4:de:b7: 34:1e:6e:e7:66:21:ea:09:15:7a:8b:8d:c0:c0:ac: d8:06:ac:3a:3e:bb:0c:73:75:16:72:57:bc:50:1a: 45:81:0c:49:08:80:ae:36:ee:8b:a8:d6:9f:fc:df: 1f:13:d3:a5:49:21:96:52:f9:61:ca:fb:a9:e5:19: 8a:79:2d:60:69:65:7f:ec:cb:ac:bb:ab:cd:a9:a3: cf:67:4a:97:c7:d9:ad:22:58:bc:f2:fe:bb:ef:17: b9:12:4a:2d:c0:8e:fc:48:46:51:ea:30:11:a5:30: 8a:8f:2f:0d:94:78:ca:c3:ab:5b:d0:25:be:d2:7a: 81:5a:8a:7f:1c:f2:69:67:40:3b:db:df:13:3b:47: 6b:75:d9:62:18:b6:22:4f:51:6f:9b:ea:53:27:bf: 49:09:71:e3:28:08:87:9d:9f:3c:db:9f:a9:36:be: 92:48:d6:f4:98:4e:ac:a6:af:92:a9:17:cd:5c:82: be:2b:82:f8:76:94:12:97:ae:31:2c:44:88:7b:9f: 00:a1:79:ae:6b:c1:26:eb:9e:ef:ce:b0:d6:07:d8: bc:62:06:6b:db:b4:7b:27:11:0d:85:df:c2:39:26: f5:58:a3:34:e5:b5:d7:97:a5:95:23:cf:b3:d2:0e: ca:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A1:EB:1D:89:1A:C8:A5:98:52:50:B9:A4:89:06:BC:D1:36:CF:35 X509v3 Authority Key Identifier: keyid:D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:8f:39:57:56:69:a3:b5:17:e7:97:fa:14:a6:77:49:0d:2b: 71:74:12:ae:1b:57:bd:02:72:e2:db:97:01:82:f0:9b:33:e7: 07:d8:af:f7:26:e9:a8:fd:8c:c0:58:c6:3c:bd:2e:a9:e1:1e: f1:eb:cc:5d:21:50:25:b0:d6:b1:77:09:7e:6a:bd:d0:ed:0e: 68:fe:3d:96:57:f2:e7:58:d1:25:57:58:6f:52:e3:19:a8:20: a2:19:4e:b7:5b:d8:e0:ea:69:0b:c6:66:de:d4:b1:f2:5a:71: da:b5:19:cd:db:ff:db:c3:e2:77:00:e8:fc:1c:b3:1f:d6:b5: b9:dc:b6:b9:51:55:8c:2a:20:9d:fc:10:9e:e9:27:2b:54:4f: 12:c3:63:fa:38:df:93:cb:aa:66:a8:6a:78:e8:84:a2:dd:23: 64:53:b1:85:4a:de:08:b5:ac:c7:bf:e0:e4:88:ab:91:10:3f: 23:2c:fd:3e:ea:94:ad:da:5c:00:8a:7c:cc:e2:e6:63:30:c7: 66:23:94:27:8f:c2:3f:d0:dd:8d:04:df:1c:eb:eb:e6:a5:a8: cf:80:ac:7b:fd:70:fd:09:c5:e1:64:ff:08:9a:de:d0:e9:87: 71:7c:f4:c3:6a:2a:7a:56:05:4f:4d:24:4b:41:a8:b4:d0:b2: db:33:58:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQTLMVvDYTt5fpO6Ufe8ZDsiJi/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3 QkJEMzk5MjAeFw0yNjExMTUxMDQ3MzdaFw0yNjExMTYxNDE5MzdaMDMxMTAvBgNV BAMTKDUzQTFFQjFEODkxQUM4QTU5ODUyNTBCOUE0ODkwNkJDRDEzNkNGMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNAhHRm/07vVC5BaTetzQebudm IeoJFXqLjcDArNgGrDo+uwxzdRZyV7xQGkWBDEkIgK427ouo1p/83x8T06VJIZZS +WHK+6nlGYp5LWBpZX/sy6y7q82po89nSpfH2a0iWLzy/rvvF7kSSi3AjvxIRlHq MBGlMIqPLw2UeMrDq1vQJb7SeoFain8c8mlnQDvb3xM7R2t12WIYtiJPUW+b6lMn v0kJceMoCIednzzbn6k2vpJI1vSYTqymr5KpF81cgr4rgvh2lBKXrjEsRIh7nwCh ea5rwSbrnu/OsNYH2LxiBmvbtHsnEQ2F38I5JvVYozTltdeXpZUjz7PSDsobAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU6HrHYkayKWYUlC5pIkGvNE2zzUwHwYDVR0j BBgwFoAU01li6Pg5Rg3FKDxHLYGtuHu9OZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYyZTdmZDYtZWI1ZS00ODBhLThlOTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThG ODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3QkJEMzk5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzU5NjJFOEY4Mzk0NjBEQzUyODNDNDcyRDgxQURCODdCQkQz OTkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYyZTdmZDYtZWI1ZS00ODBhLThl OTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFE Qjg3QkJEMzk5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOPOVdWaaO1F+eX+hSmd0kNK3F0Eq4bV70C cuLblwGC8Jsz5wfYr/cm6aj9jMBYxjy9LqnhHvHrzF0hUCWw1rF3CX5qvdDtDmj+ PZZX8udY0SVXWG9S4xmoIKIZTrdb2ODqaQvGZt7UsfJacdq1Gc3b/9vD4ncA6Pwc sx/WtbnctrlRVYwqIJ38EJ7pJytUTxLDY/o435PLqmaoanjohKLdI2RTsYVK3gi1 rMe/4OSIq5EQPyMs/T7qlK3aXACKfMzi5mMwx2YjlCePwj/Q3Y0E3xzr6+alqM+A rHv9cP0JxeFk/wia3tDph3F89MNqKnpWBU9NJEtBqLTQstszWGY= -----END CERTIFICATE-----Generated at Sun Nov 15 16:04:34 2026 by rpki-client