$ rpki-client -vvvf rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft File: D35962E8F839460DC5283C472D81ADB87BBD3992.mft (raw, json) Hash identifier: /KReCpDz0xrGg74wUxuA0qv9d7dinjdSoRzEg57ypLQ= Subject key identifier: 9C:8D:ED:21:59:92:E9:22:2A:98:27:D2:D2:BC:0B:B6:8B:74:75:CB Authority key identifier: D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 Certificate issuer: /CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Certificate serial: 4DE6A19AA9DBF486FF375053D5D21D7E0131D0BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft Manifest number: BE Signing time: Mon 21 Sep 2026 09:43:37 +0000 Manifest this update: Mon 21 Sep 2026 09:38:37 +0000 Manifest next update: Tue 22 Sep 2026 10:32:37 +0000 Files and hashes: 1: 3132322e3234382e34352e302f32342d3234203d3e203435333235.roa (hash: YFkGY+wSseirD/L/4qz7sLnl/2atYUZvqHfKN+6xB9M=) 2: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (hash: LXPm+M8vAxjssdAZLO3Rx0wFITGhuZf7YIbnBsCAbss=) 3: 3132322e3234382e33382e302f32342d3234203d3e203435333235.roa (hash: O/C54fK6Fh0hkPYgUaevMk58lHbQGzg+mBNsocdzdL4=) 4: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (hash: a2g7FXBxKjJ9sPuBWUpxfzMOG1+kUNuv9IQ11Ti9Pks=) 5: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (hash: 1WM6A0xkGbon1XjjFMKySJrVDJV2Gtw2xI0n8qXoIUg=) 6: 3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (hash: eLGownyXQbAHwo7lmiV7AZcGiEJZfmA0J0Wx85SPn6A=) 7: 3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (hash: fTQwNjegjWMOzBPfeCGxyPxzuktj8uBwcPPy5ukBNDg=) 8: 3132322e3234382e33362e302f32342d3234203d3e203435333235.roa (hash: L0mPxNgbcwwNWadhYDVYcEPoRwXw/apNhz/JQNHU27s=) 9: D35962E8F839460DC5283C472D81ADB87BBD3992.crl (hash: ZSzhm/4/aRHmkEW2yOHc8zBBpLPGuCUQdzEzeEmnfNI=) 10: 3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (hash: zZKnPm65wCA/b7MgYVi6OYfLbBSyB9aR0+gTJCkjT98=) 11: 3132322e3234382e34372e302f32342d3234203d3e203435333235.roa (hash: AP1Uq+hh+Bk2TKrn6WpCz+/Kjlfl/SuzP91WxFo1LEI=) 12: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (hash: zRrlJoG5zcUtX6wFVCQMeL8cPbII1W88o2EQ5g8PVNA=) 13: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (hash: 9A3NELKN62n/Uv+kjUVb0RNEBPpV0EUgsvMetodVNuE=) 14: 3132322e3234382e33352e302f32342d3234203d3e20313431313432.roa (hash: bM/0Dm/kJz164oUyk+EyLG8dzY/v3xcPNTwfnlLmVSk=) 15: 3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (hash: KtloGbIfkKJ4NXlhmcMPxJB4OgAOFnDw3xxvTqso1no=) 16: 3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (hash: SHUyhFJkNlfUafPQZznwzypagEog72AhZ4GF3ZoArLM=) 17: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (hash: xgjDAhQZn+M5QT3iWDFTTkYvcaKaz/dtqKLQQBwYvgA=) 18: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (hash: F2/X+b+sJTBnlu6Sh9LFFYTW3UjFRRXVyNaKWEGhbhY=) 19: 3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (hash: 7PFw1XvCft2aOIZ+63/foK4bvYq8ag5iSEDET2cMWPo=) 20: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (hash: Y/DmOT1ERuXNTR9l4X0obDV2SVqxiolJs80GKn5Zz9s=) 21: 323430303a373530303a3a2f33322d3332203d3e20313431313432.roa (hash: zbddhP7SNU+N1CDEwFKRNo4Q4pKFgeqQ1pbI5rRqtBU=) 22: 3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (hash: VzZhSRiw8XBW/yDedZyS5uY03yRNTIbVc//42y9SUvw=) 23: 3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (hash: 0eliJEonh/Nebf/NJDVLw46smOx9iWVTCt/50JmdxX4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e6:a1:9a:a9:db:f4:86:ff:37:50:53:d5:d2:1d:7e:01:31:d0:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Validity Not Before: Sep 21 09:38:37 2026 GMT Not After : Sep 22 10:32:37 2026 GMT Subject: CN=9C8DED215992E9222A9827D2D2BC0BB68B7475CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8a:01:31:cf:1f:e2:38:d9:c6:23:ed:3a:68: fb:cf:16:19:7c:89:91:e5:b6:e4:6f:46:a8:05:62: 35:21:e0:94:53:02:02:38:0c:8d:d4:dd:8a:73:03: 18:8d:ea:43:80:e0:7c:c8:ad:76:0a:47:41:38:da: ed:f5:ef:b6:41:65:c1:48:80:1e:b6:59:83:6d:33: 95:8c:2d:2d:ef:30:6b:65:78:4c:f3:02:2c:3b:16: 09:18:99:b0:49:8d:93:2d:d0:86:16:54:3b:e5:3a: 53:73:91:00:e0:a9:17:f1:6e:63:a3:cb:62:49:0e: 29:15:b6:fe:e1:fd:9f:93:ef:11:2a:f9:d5:42:28: c2:17:5f:8f:76:0e:12:ad:db:62:fb:26:74:88:af: a7:19:86:de:1a:44:92:de:f0:6a:ff:96:7c:21:f5: 44:6c:7c:09:b2:53:d7:c6:9a:09:2f:d0:e9:b2:35: da:86:11:d9:8b:31:ab:15:8e:53:9d:a1:0e:33:d9: d5:ee:14:03:30:cb:d9:27:12:f5:9b:05:ab:53:e8: 7b:67:66:fa:d7:c4:ad:b5:25:fa:0e:e2:58:9c:25: 6b:44:6e:81:4d:81:e1:7b:29:f4:2e:58:c0:97:86: 1c:3c:06:b0:e3:c6:33:33:ef:54:9e:d9:8d:5e:d4: 30:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8D:ED:21:59:92:E9:22:2A:98:27:D2:D2:BC:0B:B6:8B:74:75:CB X509v3 Authority Key Identifier: keyid:D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:15:25:56:75:02:05:76:12:83:ed:93:b6:2b:16:e0:60:da: ed:de:7f:0c:2e:4d:dd:cc:68:e4:33:a1:38:10:fd:8d:65:35: ce:92:da:95:ee:b5:91:ba:e3:30:3a:72:99:9f:1e:3e:c0:87: 8e:24:76:3f:5a:a1:46:de:9d:1d:ea:44:d7:08:d9:03:5e:ca: f1:b7:1e:3d:b5:68:52:b2:03:cf:d1:b2:e4:ef:4a:57:99:25: ee:c1:00:94:e4:cf:c0:ab:fa:16:b0:fb:45:83:d0:86:ff:26: c2:b6:34:cf:a1:0c:f8:64:63:ab:83:61:b1:78:03:9d:90:aa: ba:87:ee:73:0f:ca:e0:b7:ca:5d:e4:ef:1e:2e:ba:a2:42:b2: f9:0e:08:81:5e:f1:96:b7:41:c0:16:c6:91:46:eb:a3:74:bf: 3a:1e:18:3a:2c:64:89:05:5a:85:4e:7f:09:15:db:78:9b:d9: e4:e1:41:34:bd:a6:77:33:5a:60:d0:b7:cf:e5:c5:8c:77:4e: 3e:a9:d2:dd:13:fa:1c:5d:55:f4:a5:dc:5a:8a:7b:4e:f2:85: 35:0b:51:57:c8:bc:09:72:35:c1:44:9a:c1:18:cc:0a:0d:53: 5a:79:8d:db:1a:cf:73:5f:19:59:9c:1f:a7:3f:72:3a:91:26: 76:0a:4f:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTeahmqnb9Ib/N1BT1dIdfgEx0LowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3 QkJEMzk5MjAeFw0yNjA5MjEwOTM4MzdaFw0yNjA5MjIxMDMyMzdaMDMxMTAvBgNV BAMTKDlDOERFRDIxNTk5MkU5MjIyQTk4MjdEMkQyQkMwQkI2OEI3NDc1Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVigExzx/iONnGI+06aPvPFhl8 iZHltuRvRqgFYjUh4JRTAgI4DI3U3YpzAxiN6kOA4HzIrXYKR0E42u3177ZBZcFI gB62WYNtM5WMLS3vMGtleEzzAiw7FgkYmbBJjZMt0IYWVDvlOlNzkQDgqRfxbmOj y2JJDikVtv7h/Z+T7xEq+dVCKMIXX492DhKt22L7JnSIr6cZht4aRJLe8Gr/lnwh 9URsfAmyU9fGmgkv0OmyNdqGEdmLMasVjlOdoQ4z2dXuFAMwy9knEvWbBatT6Htn ZvrXxK21JfoO4licJWtEboFNgeF7KfQuWMCXhhw8BrDjxjMz71Se2Y1e1DBHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnI3tIVmS6SIqmCfS0rwLtot0dcswHwYDVR0j BBgwFoAU01li6Pg5Rg3FKDxHLYGtuHu9OZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYyZTdmZDYtZWI1ZS00ODBhLThlOTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThG ODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3QkJEMzk5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzU5NjJFOEY4Mzk0NjBEQzUyODNDNDcyRDgxQURCODdCQkQz OTkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYyZTdmZDYtZWI1ZS00ODBhLThl OTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFE Qjg3QkJEMzk5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIVJVZ1AgV2EoPtk7YrFuBg2u3efwwuTd3M aOQzoTgQ/Y1lNc6S2pXutZG64zA6cpmfHj7Ah44kdj9aoUbenR3qRNcI2QNeyvG3 Hj21aFKyA8/RsuTvSleZJe7BAJTkz8Cr+haw+0WD0Ib/JsK2NM+hDPhkY6uDYbF4 A52QqrqH7nMPyuC3yl3k7x4uuqJCsvkOCIFe8Za3QcAWxpFG66N0vzoeGDosZIkF WoVOfwkV23ib2eThQTS9pnczWmDQt8/lxYx3Tj6p0t0T+hxdVfSl3FqKe07yhTUL UVfIvAlyNcFEmsEYzAoNU1p5jdsaz3NfGVmcH6c/cjqRJnYKT/Q= -----END CERTIFICATE-----Generated at Mon Sep 21 13:23:56 2026 by rpki-client