$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft File: 35859E59642559AC99788C194ED55EB1548A2F1F.mft (raw, json) Hash identifier: dXumvIYBQU3rMoCd267QpsldSB3R3+Y1whb4pm7YNMM= Subject key identifier: 81:10:54:D4:C3:C6:B8:12:79:F8:1F:4C:0D:51:96:8D:3C:BC:B4:A3 Authority key identifier: 35:85:9E:59:64:25:59:AC:99:78:8C:19:4E:D5:5E:B1:54:8A:2F:1F Certificate issuer: /CN=35859E59642559AC99788C194ED55EB1548A2F1F Certificate serial: 41896A26B06AB2F784ED03C9EDDDCA0E52528802 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 18:41:44 +0000 Manifest this update: Tue 16 Jun 2026 18:36:44 +0000 Manifest next update: Wed 17 Jun 2026 19:04:44 +0000 Files and hashes: 1: 35859E59642559AC99788C194ED55EB1548A2F1F.crl (hash: ueWi4/rTEPxVJEhfBsC5wdfO9Q2BETuimjB/1eVsUOA=) 2: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: QBz9jVg5iA4vI0m+M7MXqbx0KDdvReCXDCkg90gY1pM=) 3: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: hFjJslECEMnx83EP1P1UtwdiCEUWwcSYSCvr4li07y4=) 4: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: itttPeBqKU49Shq/w4T47E1hAyNoebnpwqyP1PK8wLg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.crl rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:89:6a:26:b0:6a:b2:f7:84:ed:03:c9:ed:dd:ca:0e:52:52:88:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35859E59642559AC99788C194ED55EB1548A2F1F Validity Not Before: Jun 16 18:36:44 2026 GMT Not After : Jun 17 19:04:44 2026 GMT Subject: CN=811054D4C3C6B81279F81F4C0D51968D3CBCB4A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7e:ee:cd:e3:d0:08:4c:93:fc:7e:c1:39:57: 24:1c:87:5e:f8:ab:e6:45:0d:53:57:b9:19:2e:b6: 95:a6:4f:37:fd:f4:31:d9:e1:99:33:3b:52:c9:96: 7e:72:a9:76:2b:5c:48:e3:a1:dc:60:89:8a:0c:20: 16:04:11:0e:d2:6d:1a:cd:d9:19:2a:e7:d9:d2:25: 28:6a:b3:54:ca:91:5c:78:e2:1c:1a:b0:4d:ac:f5: 81:bb:93:42:a2:9e:04:d4:90:90:d7:96:14:02:6c: 94:2d:0c:4f:31:36:ca:03:22:e7:be:a1:e9:ea:c2: 6b:35:fa:56:85:e4:3c:ae:ed:fd:2c:2e:b0:7d:67: 92:b7:9a:74:22:8a:3c:1e:d1:d8:ee:a5:e5:9f:8c: bd:94:a7:54:17:e4:77:b7:1b:10:fb:30:c5:00:8e: 8b:a8:04:0b:c1:ed:e8:6d:c8:bd:23:6c:68:3b:d5: d6:85:a8:bb:c8:9d:38:18:c2:42:92:f8:9a:87:2d: 5c:7e:9b:f2:24:23:75:e3:9e:bd:30:d2:2c:17:d1: 69:86:3f:46:0e:f8:f2:f6:2c:4f:11:84:03:60:65: 85:f2:52:51:57:b1:67:2e:5d:66:8c:e1:87:3d:ca: e5:ea:96:c2:0b:db:c0:dd:99:79:56:45:69:44:a5: 8c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:10:54:D4:C3:C6:B8:12:79:F8:1F:4C:0D:51:96:8D:3C:BC:B4:A3 X509v3 Authority Key Identifier: keyid:35:85:9E:59:64:25:59:AC:99:78:8C:19:4E:D5:5E:B1:54:8A:2F:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/35859E59642559AC99788C194ED55EB1548A2F1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/35859E59642559AC99788C194ED55EB1548A2F1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2b:38:5c:c3:14:3d:b7:a4:29:9a:12:98:d3:d1:27:d6:91: 70:4e:47:0d:fa:48:8a:07:58:8f:3b:56:08:56:da:95:81:ae: 57:59:75:6a:45:11:b7:9a:79:bf:28:20:c0:7c:be:61:b2:1a: cc:fc:94:cd:d2:0f:b8:a4:dc:ad:73:9c:d7:1e:8b:b2:02:0f: f3:73:23:69:71:84:14:f3:20:58:f1:e9:95:2e:0a:6a:ea:56: 09:cd:b6:26:d4:db:fe:3a:1e:d3:21:46:1d:f3:61:f6:96:df: 34:ff:ce:fa:28:cb:39:af:74:63:be:6b:5e:74:b3:ea:77:f0: 31:14:dd:63:25:7d:59:a4:91:bb:6e:ed:6b:58:22:ac:56:40: 96:b8:65:a3:ee:e6:5b:67:81:c7:7a:6e:80:43:61:02:4f:96: 76:18:62:84:a8:81:80:7e:87:99:5b:27:df:4e:96:e0:68:84: 71:e9:97:72:7a:36:0d:eb:88:01:9f:47:77:d9:b6:2b:a2:4c: b6:42:68:00:cb:2a:e0:61:d6:78:01:5a:67:35:3f:ce:db:d7: f8:61:d1:c7:af:8f:23:e1:bb:ae:e6:8c:77:b9:03:88:ca:7d: f3:1b:1f:15:20:60:66:b1:e8:99:51:0d:a0:94:7b:6a:de:b7: df:0d:0c:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQYlqJrBqsveE7QPJ7d3KDlJSiAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4NTlFNTk2NDI1NTlBQzk5Nzg4QzE5NEVENTVFQjE1 NDhBMkYxRjAeFw0yNjA2MTYxODM2NDRaFw0yNjA2MTcxOTA0NDRaMDMxMTAvBgNV BAMTKDgxMTA1NEQ0QzNDNkI4MTI3OUY4MUY0QzBENTE5NjhEM0NCQ0I0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8fu7N49AITJP8fsE5VyQch174 q+ZFDVNXuRkutpWmTzf99DHZ4ZkzO1LJln5yqXYrXEjjodxgiYoMIBYEEQ7SbRrN 2Rkq59nSJShqs1TKkVx44hwasE2s9YG7k0KingTUkJDXlhQCbJQtDE8xNsoDIue+ oenqwms1+laF5Dyu7f0sLrB9Z5K3mnQiijwe0djupeWfjL2Up1QX5He3GxD7MMUA jouoBAvB7ehtyL0jbGg71daFqLvInTgYwkKS+JqHLVx+m/IkI3Xjnr0w0iwX0WmG P0YO+PL2LE8RhANgZYXyUlFXsWcuXWaM4Yc9yuXqlsIL28DdmXlWRWlEpYwtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgRBU1MPGuBJ5+B9MDVGWjTy8tKMwHwYDVR0j BBgwFoAUNYWeWWQlWayZeIwZTtVesVSKLx8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWJlZmJmMDQtNDFiZS00OGQ3LWFjMDAtOGEzYzQ5OGNhOWFlLzAvMzU4NTlFNTk2 NDI1NTlBQzk5Nzg4QzE5NEVENTVFQjE1NDhBMkYxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNTg1OUU1OTY0MjU1OUFDOTk3ODhDMTk0RUQ1NUVCMTU0OEEy RjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWJlZmJmMDQtNDFiZS00OGQ3LWFj MDAtOGEzYzQ5OGNhOWFlLzAvMzU4NTlFNTk2NDI1NTlBQzk5Nzg4QzE5NEVENTVF QjE1NDhBMkYxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAForOFzDFD23pCmaEpjT0SfWkXBORw36SIoH WI87VghW2pWBrldZdWpFEbeaeb8oIMB8vmGyGsz8lM3SD7ik3K1znNcei7ICD/Nz I2lxhBTzIFjx6ZUuCmrqVgnNtibU2/46HtMhRh3zYfaW3zT/zvooyzmvdGO+a150 s+p38DEU3WMlfVmkkbtu7WtYIqxWQJa4ZaPu5ltngcd6boBDYQJPlnYYYoSogYB+ h5lbJ99OluBohHHpl3J6Ng3riAGfR3fZtiuiTLZCaADLKuBh1ngBWmc1P87b1/hh 0cevjyPhu67mjHe5A4jKffMbHxUgYGax6JlRDaCUe2ret98NDGA= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:25 2026 by rpki-client