$ rpki-client -vvf rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft File: D35962E8F839460DC5283C472D81ADB87BBD3992.mft (raw, json) Hash identifier: A3ZQJJ/9FLZxwYFD0QDGCvoDks3eAWk8T3U4GuPSgkM= Subject key identifier: 0D:5D:37:CA:96:7C:53:7D:70:BF:28:FC:F7:1C:16:61:33:44:35:C3 Authority key identifier: D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 Certificate issuer: /CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Certificate serial: 3A7E572874E5AD25CD70DEEA5CD11E52C9916C84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft Manifest number: 3C Signing time: Mon 15 Jun 2026 11:34:58 +0000 Manifest this update: Mon 15 Jun 2026 11:29:58 +0000 Manifest next update: Tue 16 Jun 2026 15:14:58 +0000 Files and hashes: 1: 3132322e3234382e33362e302f32342d3234203d3e203435333235.roa (hash: L0mPxNgbcwwNWadhYDVYcEPoRwXw/apNhz/JQNHU27s=) 2: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (hash: LXPm+M8vAxjssdAZLO3Rx0wFITGhuZf7YIbnBsCAbss=) 3: 3132322e3234382e33382e302f32342d3234203d3e203435333235.roa (hash: O/C54fK6Fh0hkPYgUaevMk58lHbQGzg+mBNsocdzdL4=) 4: 3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (hash: 0eliJEonh/Nebf/NJDVLw46smOx9iWVTCt/50JmdxX4=) 5: 3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (hash: VzZhSRiw8XBW/yDedZyS5uY03yRNTIbVc//42y9SUvw=) 6: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (hash: 1WM6A0xkGbon1XjjFMKySJrVDJV2Gtw2xI0n8qXoIUg=) 7: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (hash: xgjDAhQZn+M5QT3iWDFTTkYvcaKaz/dtqKLQQBwYvgA=) 8: 3132322e3234382e34372e302f32342d3234203d3e203435333235.roa (hash: AP1Uq+hh+Bk2TKrn6WpCz+/Kjlfl/SuzP91WxFo1LEI=) 9: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (hash: F2/X+b+sJTBnlu6Sh9LFFYTW3UjFRRXVyNaKWEGhbhY=) 10: D35962E8F839460DC5283C472D81ADB87BBD3992.crl (hash: I1bQD7oVTKuqe42naDk81kF9FpXvj3KHP2b+Z9yX/tY=) 11: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (hash: Y/DmOT1ERuXNTR9l4X0obDV2SVqxiolJs80GKn5Zz9s=) 12: 3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (hash: fTQwNjegjWMOzBPfeCGxyPxzuktj8uBwcPPy5ukBNDg=) 13: 3132322e3234382e33352e302f32342d3234203d3e20313431313432.roa (hash: bM/0Dm/kJz164oUyk+EyLG8dzY/v3xcPNTwfnlLmVSk=) 14: 3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (hash: 7PFw1XvCft2aOIZ+63/foK4bvYq8ag5iSEDET2cMWPo=) 15: 3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (hash: eLGownyXQbAHwo7lmiV7AZcGiEJZfmA0J0Wx85SPn6A=) 16: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (hash: zRrlJoG5zcUtX6wFVCQMeL8cPbII1W88o2EQ5g8PVNA=) 17: 3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (hash: zZKnPm65wCA/b7MgYVi6OYfLbBSyB9aR0+gTJCkjT98=) 18: 323430303a373530303a3a2f33322d3332203d3e20313431313432.roa (hash: zbddhP7SNU+N1CDEwFKRNo4Q4pKFgeqQ1pbI5rRqtBU=) 19: 3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (hash: KtloGbIfkKJ4NXlhmcMPxJB4OgAOFnDw3xxvTqso1no=) 20: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (hash: a2g7FXBxKjJ9sPuBWUpxfzMOG1+kUNuv9IQ11Ti9Pks=) 21: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (hash: 9A3NELKN62n/Uv+kjUVb0RNEBPpV0EUgsvMetodVNuE=) 22: 3132322e3234382e34352e302f32342d3234203d3e203435333235.roa (hash: YFkGY+wSseirD/L/4qz7sLnl/2atYUZvqHfKN+6xB9M=) 23: 3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (hash: SHUyhFJkNlfUafPQZznwzypagEog72AhZ4GF3ZoArLM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 03:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:7e:57:28:74:e5:ad:25:cd:70:de:ea:5c:d1:1e:52:c9:91:6c:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35962E8F839460DC5283C472D81ADB87BBD3992 Validity Not Before: Jun 15 11:29:58 2026 GMT Not After : Jun 16 15:14:58 2026 GMT Subject: CN=0D5D37CA967C537D70BF28FCF71C1661334435C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0a:2d:bc:f4:7b:6b:a3:e2:29:14:5e:65:56: 4e:d7:d3:c5:3c:3c:e8:5d:27:ae:03:d1:00:f6:da: b9:9d:7f:6a:e7:26:70:f5:70:4b:87:b2:77:a4:9d: 0d:7f:6d:e2:cd:28:2f:49:70:15:75:08:16:c1:36: 97:63:fe:10:79:c3:35:fb:73:98:d1:77:61:1a:f8: 5f:ef:90:49:4a:b3:0b:f0:55:86:6e:a4:dc:04:40: 2b:59:b7:5b:7f:79:20:dd:91:f9:63:6b:f4:5b:97: 91:98:f0:7c:95:68:4d:45:a8:a9:a4:d1:38:85:3c: c4:ea:9b:76:42:c3:f5:3d:28:fe:36:49:e9:49:c6: 42:c5:4e:37:1f:f0:58:a6:b4:18:1b:94:ed:4f:e2: ef:29:65:09:df:74:a6:c5:19:b4:2e:00:7c:1e:05: ef:c6:45:f7:04:29:ad:5d:23:30:08:64:6e:9f:e1: ae:e9:aa:04:86:57:36:8f:f7:08:c5:0a:0a:6a:32: a0:8d:20:28:4b:8c:c8:69:67:02:ed:0b:f5:e5:b5: c3:09:31:85:29:c5:cb:9f:a6:70:e5:b0:d4:00:8c: 59:90:95:f3:0e:4e:16:d0:04:86:a9:60:c1:40:ed: e9:2a:d7:99:a4:16:27:8c:3b:a9:81:6b:cb:94:aa: 3c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5D:37:CA:96:7C:53:7D:70:BF:28:FC:F7:1C:16:61:33:44:35:C3 X509v3 Authority Key Identifier: keyid:D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:86:35:e2:6f:28:b3:54:88:11:d3:70:1e:28:29:4e:8e:c8: 47:00:6a:51:82:dd:bf:fc:f5:42:c0:96:8d:2a:40:67:b1:25: 34:ef:53:fa:ad:c9:b3:fa:90:a4:18:ce:5f:05:62:c9:98:17: 22:fc:cc:02:f1:5c:1f:5d:23:ba:75:a3:41:c2:ba:71:2b:66: 7a:8b:b3:c0:a5:57:d5:ad:35:0a:a3:83:cd:a7:94:0f:fb:40: b3:b7:13:6d:fb:f0:ab:b5:69:8c:01:d2:aa:9c:21:66:8a:66: 2c:13:72:2f:fa:c3:7a:46:86:a3:13:ff:90:0c:53:e8:6e:a9: 4c:27:2e:a6:51:98:7a:90:1e:21:ef:57:e0:46:45:9c:a5:4b: 1f:88:32:0d:e5:0a:15:4c:8a:46:a2:00:77:b1:81:91:d3:88: 5a:60:17:8c:bd:f8:a4:e4:d8:2c:bf:8f:90:36:cf:98:f4:83: 41:90:6a:40:e8:7f:0a:70:49:fd:94:0f:e5:a4:63:a2:45:d7: 14:be:a4:3c:d6:9f:44:e2:f7:51:56:9f:64:ca:42:0d:a3:69: 34:df:1d:47:2b:8f:4b:5a:1d:45:27:00:fb:48:3a:cf:ee:91: 58:66:7e:ef:80:f3:5e:76:f9:ba:99:8b:2a:f6:06:59:54:62: c1:2c:40:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOn5XKHTlrSXNcN7qXNEeUsmRbIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3 QkJEMzk5MjAeFw0yNjA2MTUxMTI5NThaFw0yNjA2MTYxNTE0NThaMDMxMTAvBgNV BAMTKDBENUQzN0NBOTY3QzUzN0Q3MEJGMjhGQ0Y3MUMxNjYxMzM0NDM1QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Ci289Htro+IpFF5lVk7X08U8 POhdJ64D0QD22rmdf2rnJnD1cEuHsneknQ1/beLNKC9JcBV1CBbBNpdj/hB5wzX7 c5jRd2Ea+F/vkElKswvwVYZupNwEQCtZt1t/eSDdkflja/Rbl5GY8HyVaE1FqKmk 0TiFPMTqm3ZCw/U9KP42SelJxkLFTjcf8FimtBgblO1P4u8pZQnfdKbFGbQuAHwe Be/GRfcEKa1dIzAIZG6f4a7pqgSGVzaP9wjFCgpqMqCNIChLjMhpZwLtC/XltcMJ MYUpxcufpnDlsNQAjFmQlfMOThbQBIapYMFA7ekq15mkFieMO6mBa8uUqjxnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDV03ypZ8U31wvyj89xwWYTNENcMwHwYDVR0j BBgwFoAU01li6Pg5Rg3FKDxHLYGtuHu9OZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYyZTdmZDYtZWI1ZS00ODBhLThlOTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThG ODM5NDYwREM1MjgzQzQ3MkQ4MUFEQjg3QkJEMzk5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMzU5NjJFOEY4Mzk0NjBEQzUyODNDNDcyRDgxQURCODdCQkQz OTkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGYyZTdmZDYtZWI1ZS00ODBhLThl OTctYzU1ZjY4ZTA1ODlhLzAvRDM1OTYyRThGODM5NDYwREM1MjgzQzQ3MkQ4MUFE Qjg3QkJEMzk5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaGNeJvKLNUiBHTcB4oKU6OyEcAalGC3b/8 9ULAlo0qQGexJTTvU/qtybP6kKQYzl8FYsmYFyL8zALxXB9dI7p1o0HCunErZnqL s8ClV9WtNQqjg82nlA/7QLO3E2378Ku1aYwB0qqcIWaKZiwTci/6w3pGhqMT/5AM U+huqUwnLqZRmHqQHiHvV+BGRZylSx+IMg3lChVMikaiAHexgZHTiFpgF4y9+KTk 2Cy/j5A2z5j0g0GQakDofwpwSf2UD+WkY6JF1xS+pDzWn0Ti91FWn2TKQg2jaTTf HUcrj0taHUUnAPtIOs/ukVhmfu+A8152+bqZiyr2BllUYsEsQPU= -----END CERTIFICATE-----Generated at Mon Jun 15 14:09:26 2026 by rpki-client