$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft File: 35859E59642559AC99788C194ED55EB1548A2F1F.mft (raw, json) Hash identifier: bxIeZ2XHfoS/nZ9JeqWLAVZrW08Z6XJaUh0gaQaEnes= Subject key identifier: C9:E0:9C:70:36:86:EA:89:EF:1F:29:6D:1A:B1:2B:52:96:33:FC:28 Authority key identifier: 35:85:9E:59:64:25:59:AC:99:78:8C:19:4E:D5:5E:B1:54:8A:2F:1F Certificate issuer: /CN=35859E59642559AC99788C194ED55EB1548A2F1F Certificate serial: 0785CB6EE768EA32DAF15EAE736E4A487ABDC5F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft Manifest number: BF Signing time: Mon 21 Sep 2026 14:49:52 +0000 Manifest this update: Mon 21 Sep 2026 14:44:52 +0000 Manifest next update: Tue 22 Sep 2026 17:49:52 +0000 Files and hashes: 1: 35859E59642559AC99788C194ED55EB1548A2F1F.crl (hash: +7s8C4ZA7320gk/SfEJBdU3JSbVXyHezp15L/KibI4o=) 2: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: QBz9jVg5iA4vI0m+M7MXqbx0KDdvReCXDCkg90gY1pM=) 3: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: hFjJslECEMnx83EP1P1UtwdiCEUWwcSYSCvr4li07y4=) 4: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: itttPeBqKU49Shq/w4T47E1hAyNoebnpwqyP1PK8wLg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.crl rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:85:cb:6e:e7:68:ea:32:da:f1:5e:ae:73:6e:4a:48:7a:bd:c5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35859E59642559AC99788C194ED55EB1548A2F1F Validity Not Before: Sep 21 14:44:52 2026 GMT Not After : Sep 22 17:49:52 2026 GMT Subject: CN=C9E09C703686EA89EF1F296D1AB12B529633FC28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:47:9b:86:d0:5f:c4:c2:8c:25:32:03:e4:6b: 61:08:a9:aa:e7:0f:51:ac:be:84:8e:8c:10:2a:cd: bf:5d:a1:49:e2:5e:c8:68:22:1e:da:6d:5c:2c:12: 40:82:b4:28:44:b2:02:8d:b9:55:bb:b3:23:7d:70: d7:ac:6c:35:bf:cf:0b:18:c1:70:bd:30:68:44:ae: 0a:13:63:3d:86:5f:c0:68:af:08:5a:5a:40:2f:4e: 7b:5d:7e:b1:3e:0e:a0:f4:ad:4f:72:ba:96:b2:89: 69:3a:1b:5d:b3:38:3b:51:a9:3d:c6:9e:f5:81:df: f3:7c:71:f6:28:e8:87:54:0c:5d:45:73:8d:0c:82: b7:4d:36:64:33:c9:1e:30:69:bb:7c:44:5e:1e:fa: b6:09:05:46:20:88:b5:d6:75:98:a1:82:80:bc:72: bc:f8:cd:a6:74:d6:c5:5b:1c:38:c1:5e:27:3c:f7: 29:50:61:ec:4a:71:c5:8f:69:ab:8b:60:a4:b1:4f: 56:56:31:18:83:80:92:b3:26:b9:9e:28:30:68:94: b4:d1:41:cd:4e:aa:e2:1f:3e:12:ff:22:32:0f:b4: ba:dc:a2:a4:ec:79:f5:49:46:a2:6b:d5:09:26:a4: ac:4b:6d:7a:88:38:7d:4d:85:7d:c8:06:17:d8:b6: 3f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E0:9C:70:36:86:EA:89:EF:1F:29:6D:1A:B1:2B:52:96:33:FC:28 X509v3 Authority Key Identifier: keyid:35:85:9E:59:64:25:59:AC:99:78:8C:19:4E:D5:5E:B1:54:8A:2F:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:74:07:44:30:90:54:d0:03:07:12:7f:db:07:75:3d:3c:1c: 5d:bd:ea:ab:19:8a:b4:2e:46:3d:48:c5:b3:0a:1d:05:e1:13: 4a:62:00:cc:1f:1a:9c:41:b8:19:1c:00:7e:bc:0f:03:d1:6c: 6a:17:46:1b:71:84:b6:23:4d:c4:eb:24:6d:dc:27:c7:c5:49: bd:5b:cd:b3:df:7e:97:eb:df:22:d0:e6:27:ee:5d:e1:8c:b6: 35:7c:3c:84:be:27:79:70:04:43:54:e4:41:50:8e:c7:cc:ff: 5f:e7:21:b5:2d:3b:00:5b:d9:ca:c6:7c:c3:2c:ae:c1:7b:2a: b2:4e:41:d2:84:2a:74:ec:fa:6e:fd:88:e0:76:aa:de:a2:45: b1:54:fd:8f:d8:ed:1f:3e:b9:9a:e8:42:b0:e9:f5:f1:83:96: 4b:42:0a:20:0f:9f:0c:d5:65:0d:eb:24:15:b1:34:c5:d4:2e: 73:47:d6:bc:f7:86:14:cd:77:40:79:f5:cf:c1:a0:ff:31:ae: 15:0d:10:d4:c7:ec:99:31:9f:5e:18:12:c4:7e:b1:14:7c:f8: c9:a7:10:2d:4a:c9:42:c3:f7:4d:94:c5:75:15:a7:30:d0:5c: af:b2:27:8e:3c:98:12:be:6f:ba:dc:54:78:7f:09:2f:78:91: 7c:e1:f2:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB4XLbudo6jLa8V6uc25KSHq9xfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4NTlFNTk2NDI1NTlBQzk5Nzg4QzE5NEVENTVFQjE1 NDhBMkYxRjAeFw0yNjA5MjExNDQ0NTJaFw0yNjA5MjIxNzQ5NTJaMDMxMTAvBgNV BAMTKEM5RTA5QzcwMzY4NkVBODlFRjFGMjk2RDFBQjEyQjUyOTYzM0ZDMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCR5uG0F/EwowlMgPka2EIqarn D1GsvoSOjBAqzb9doUniXshoIh7abVwsEkCCtChEsgKNuVW7syN9cNesbDW/zwsY wXC9MGhErgoTYz2GX8BorwhaWkAvTntdfrE+DqD0rU9yupayiWk6G12zODtRqT3G nvWB3/N8cfYo6IdUDF1Fc40MgrdNNmQzyR4wabt8RF4e+rYJBUYgiLXWdZihgoC8 crz4zaZ01sVbHDjBXic89ylQYexKccWPaauLYKSxT1ZWMRiDgJKzJrmeKDBolLTR Qc1OquIfPhL/IjIPtLrcoqTsefVJRqJr1QkmpKxLbXqIOH1NhX3IBhfYtj8RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyeCccDaG6onvHyltGrErUpYz/CgwHwYDVR0j BBgwFoAUNYWeWWQlWayZeIwZTtVesVSKLx8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJlZmJmMDQtNDFiZS00OGQ3LWFjMDAtOGEzYzQ5OGNhOWFlLzAvMzU4NTlFNTk2 NDI1NTlBQzk5Nzg4QzE5NEVENTVFQjE1NDhBMkYxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNTg1OUU1OTY0MjU1OUFDOTk3ODhDMTk0RUQ1NUVCMTU0OEEy RjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWJlZmJmMDQtNDFiZS00OGQ3LWFj MDAtOGEzYzQ5OGNhOWFlLzAvMzU4NTlFNTk2NDI1NTlBQzk5Nzg4QzE5NEVENTVF QjE1NDhBMkYxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEd0B0QwkFTQAwcSf9sHdT08HF296qsZirQu Rj1IxbMKHQXhE0piAMwfGpxBuBkcAH68DwPRbGoXRhtxhLYjTcTrJG3cJ8fFSb1b zbPffpfr3yLQ5ifuXeGMtjV8PIS+J3lwBENU5EFQjsfM/1/nIbUtOwBb2crGfMMs rsF7KrJOQdKEKnTs+m79iOB2qt6iRbFU/Y/Y7R8+uZroQrDp9fGDlktCCiAPnwzV ZQ3rJBWxNMXULnNH1rz3hhTNd0B59c/BoP8xrhUNENTH7Jkxn14YEsR+sRR8+Mmn EC1KyULD902UxXUVpzDQXK+yJ448mBK+b7rcVHh/CS94kXzh8vM= -----END CERTIFICATE-----Generated at Tue Sep 22 02:22:15 2026 by rpki-client