$ rpki-client -vvvf rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft File: 535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft (raw, json) Hash identifier: mYNKYKPifaCCT9qnzqlxhzOVS2hDAqA8+Kwg7SR4aIs= Subject key identifier: 1A:12:A6:39:7F:1E:39:CA:FD:A2:9E:74:03:DF:39:4D:9C:2D:A0:6A Authority key identifier: 53:5B:FA:76:53:1C:00:E1:FC:8B:55:4B:61:55:A1:7D:4E:3F:79:CC Certificate issuer: /CN=535BFA76531C00E1FC8B554B6155A17D4E3F79CC Certificate serial: 7C0BC614A5CDF889447828FE93A647E47EF16FB9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft Manifest number: BD Signing time: Mon 21 Sep 2026 21:48:37 +0000 Manifest this update: Mon 21 Sep 2026 21:43:37 +0000 Manifest next update: Tue 22 Sep 2026 22:41:37 +0000 Files and hashes: 1: 535BFA76531C00E1FC8B554B6155A17D4E3F79CC.crl (hash: kETMM147eQ/WWrdR+buEl/nAGVBr6LX+qEqHGyJDBjQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.crl rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:41:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:0b:c6:14:a5:cd:f8:89:44:78:28:fe:93:a6:47:e4:7e:f1:6f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535BFA76531C00E1FC8B554B6155A17D4E3F79CC Validity Not Before: Sep 21 21:43:37 2026 GMT Not After : Sep 22 22:41:37 2026 GMT Subject: CN=1A12A6397F1E39CAFDA29E7403DF394D9C2DA06A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:96:a1:11:ba:7c:98:73:4d:1f:19:a1:52:2d: 31:7c:ce:0b:dc:83:0d:59:bc:4c:8d:9d:5e:15:0d: a0:d3:48:02:c1:c0:cc:e1:27:be:02:2b:65:2e:d5: bd:8e:6a:6a:5f:fe:cd:03:81:0e:e1:b2:c5:e7:ea: b2:f9:48:8e:8f:ea:61:dd:35:42:ec:63:61:5c:d9: 62:6f:4a:cb:17:51:c7:51:81:de:d1:c4:13:14:8d: d5:cf:4e:13:47:02:8e:06:cd:f9:34:f4:23:e7:f8: d0:f7:2d:c2:3e:bc:d5:3a:42:d7:10:02:cc:83:cc: 93:5e:95:16:f2:d5:42:ac:b7:0f:0e:c4:2f:f2:c9: 2b:75:5d:51:41:4b:50:45:41:78:55:5d:c4:91:bb: 81:66:44:6b:00:bc:c2:af:de:6c:9f:d4:50:19:e2: db:f2:16:bb:90:01:06:66:69:73:81:ac:17:9d:d4: 2d:fc:30:c3:bd:45:df:c0:1f:20:46:ba:3c:97:87: 4b:17:14:0c:de:1f:90:66:b8:e6:70:f6:4d:a0:6e: 0e:3a:87:8c:bc:38:f9:1c:3f:82:e7:33:96:8f:01: 9d:06:b5:ff:09:d7:97:d9:ad:9a:c7:72:81:bd:98: b6:26:07:9a:e9:92:91:02:dc:06:34:7e:1b:70:bc: 63:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:12:A6:39:7F:1E:39:CA:FD:A2:9E:74:03:DF:39:4D:9C:2D:A0:6A X509v3 Authority Key Identifier: keyid:53:5B:FA:76:53:1C:00:E1:FC:8B:55:4B:61:55:A1:7D:4E:3F:79:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:45:db:0e:be:c4:c1:48:da:ca:1f:19:fe:e7:32:74:98:79: df:5e:02:aa:5f:4a:83:64:87:c4:22:5a:5d:17:19:13:2f:56: 79:0c:ea:6a:e2:ab:c9:90:75:93:c3:8c:c4:4f:5a:7d:84:ce: 6d:25:e2:18:3c:ad:41:b8:b7:23:3e:01:22:4c:a2:06:95:4f: e3:4b:48:71:08:1a:cb:9e:30:d8:17:10:cf:99:5e:9b:5f:4f: c5:07:17:79:bd:8e:bb:c5:37:11:e4:c4:1e:dc:46:cf:5a:5f: bd:3d:ec:6a:12:e4:cb:36:35:79:ee:80:bf:68:09:ef:31:e9: e3:a2:46:5f:4b:05:95:a7:ef:42:c2:62:76:10:a2:28:37:0c: 39:47:20:d2:ea:f3:30:f5:e1:e2:1c:fd:41:5b:a0:12:51:98: 04:e7:36:6d:97:df:95:56:db:2d:cb:41:f8:f7:01:e2:57:7c: 9e:31:e2:55:43:e4:5f:f0:36:31:61:41:29:c1:4d:5b:73:77: 05:9f:6f:57:7d:b6:ce:cf:4d:a8:38:7a:ed:01:2e:6d:47:4a: 9e:88:df:ec:d9:ca:09:31:64:85:80:23:71:e8:5b:72:67:52: 4c:3b:ea:41:58:42:f9:60:ee:63:28:8c:e5:04:0b:0c:32:0c: 05:2a:ef:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfAvGFKXN+IlEeCj+k6ZH5H7xb7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QkZBNzY1MzFDMDBFMUZDOEI1NTRCNjE1NUExN0Q0 RTNGNzlDQzAeFw0yNjA5MjEyMTQzMzdaFw0yNjA5MjIyMjQxMzdaMDMxMTAvBgNV BAMTKDFBMTJBNjM5N0YxRTM5Q0FGREEyOUU3NDAzREYzOTREOUMyREEwNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDolqERunyYc00fGaFSLTF8zgvc gw1ZvEyNnV4VDaDTSALBwMzhJ74CK2Uu1b2Oampf/s0DgQ7hssXn6rL5SI6P6mHd NULsY2Fc2WJvSssXUcdRgd7RxBMUjdXPThNHAo4Gzfk09CPn+ND3LcI+vNU6QtcQ AsyDzJNelRby1UKstw8OxC/yySt1XVFBS1BFQXhVXcSRu4FmRGsAvMKv3myf1FAZ 4tvyFruQAQZmaXOBrBed1C38MMO9Rd/AHyBGujyXh0sXFAzeH5BmuOZw9k2gbg46 h4y8OPkcP4LnM5aPAZ0Gtf8J15fZrZrHcoG9mLYmB5rpkpEC3AY0fhtwvGN5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGhKmOX8eOcr9op50A985TZwtoGowHwYDVR0j BBgwFoAUU1v6dlMcAOH8i1VLYVWhfU4/ecwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDFiNmRkOWItZDE1Mi00YzhmLTg3YjctNjI5ZWI4MDhmOTExLzAvNTM1QkZBNzY1 MzFDMDBFMUZDOEI1NTRCNjE1NUExN0Q0RTNGNzlDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzVCRkE3NjUzMUMwMEUxRkM4QjU1NEI2MTU1QTE3RDRFM0Y3 OUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDFiNmRkOWItZDE1Mi00YzhmLTg3 YjctNjI5ZWI4MDhmOTExLzAvNTM1QkZBNzY1MzFDMDBFMUZDOEI1NTRCNjE1NUEx N0Q0RTNGNzlDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZF2w6+xMFI2sofGf7nMnSYed9eAqpfSoNk h8QiWl0XGRMvVnkM6mriq8mQdZPDjMRPWn2Ezm0l4hg8rUG4tyM+ASJMogaVT+NL SHEIGsueMNgXEM+ZXptfT8UHF3m9jrvFNxHkxB7cRs9aX7097GoS5Ms2NXnugL9o Ce8x6eOiRl9LBZWn70LCYnYQoig3DDlHINLq8zD14eIc/UFboBJRmATnNm2X35VW 2y3LQfj3AeJXfJ4x4lVD5F/wNjFhQSnBTVtzdwWfb1d9ts7PTag4eu0BLm1HSp6I 3+zZygkxZIWAI3HoW3JnUkw76kFYQvlg7mMojOUECwwyDAUq7wU= -----END CERTIFICATE-----Generated at Tue Sep 22 18:05:45 2026 by rpki-client