$ rpki-client -vvf rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft File: 535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft (raw, json) Hash identifier: yJpiqN1v7XPPdhpp2qcTAUq9F5ZYY3o1fp5DRuXFBGs= Subject key identifier: 4F:BC:D8:29:AE:0F:9A:A0:62:BE:AF:4B:AD:12:55:82:F3:3D:59:F5 Authority key identifier: 53:5B:FA:76:53:1C:00:E1:FC:8B:55:4B:61:55:A1:7D:4E:3F:79:CC Certificate issuer: /CN=535BFA76531C00E1FC8B554B6155A17D4E3F79CC Certificate serial: 0F720C0305CE7BDB16EC026EB142A6A1107D6B3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 02:05:14 +0000 Manifest this update: Wed 17 Jun 2026 02:00:14 +0000 Manifest next update: Thu 18 Jun 2026 04:19:14 +0000 Files and hashes: 1: 535BFA76531C00E1FC8B554B6155A17D4E3F79CC.crl (hash: HJTDMXbDr3LAdHIiM7UhjJ7VB1c7X71UPg4GG9yiBic=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.crl rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:72:0c:03:05:ce:7b:db:16:ec:02:6e:b1:42:a6:a1:10:7d:6b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535BFA76531C00E1FC8B554B6155A17D4E3F79CC Validity Not Before: Jun 17 02:00:14 2026 GMT Not After : Jun 18 04:19:14 2026 GMT Subject: CN=4FBCD829AE0F9AA062BEAF4BAD125582F33D59F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:67:4a:00:ff:20:97:c8:50:da:8b:4e:1d:db: 75:1f:de:c4:ca:7b:da:72:00:14:2d:0d:ef:f8:2e: 62:4e:40:a5:26:02:d8:98:fd:ee:4f:cc:cb:20:87: fb:49:db:fd:1f:32:27:a2:a8:58:b7:d0:7c:1f:ee: 6d:04:52:42:72:0b:91:7b:c3:05:24:af:c0:20:57: 1f:7a:a1:7b:d0:f4:b0:27:47:92:5c:3b:1d:60:ff: 32:47:8f:6e:75:07:3e:9d:54:25:67:0d:0c:11:69: 6a:a5:ad:3f:08:de:7d:41:27:c8:3b:67:be:41:55: ff:51:a3:0c:e5:73:d2:45:77:8a:5e:ac:e3:5a:8b: 04:a5:61:9e:06:aa:2c:90:30:02:81:b6:ac:61:79: 58:95:56:74:6c:f8:1b:ab:d9:50:7c:d9:71:20:21: 7e:e4:d5:c8:42:66:bd:51:f3:2b:3c:52:b5:54:fa: 74:e4:dd:50:34:bd:00:65:28:07:b2:d8:26:85:64: cc:55:07:2a:e3:42:87:3e:70:ba:46:aa:10:a5:1b: 89:ef:58:1e:8c:c4:3f:48:58:c1:6e:26:7a:7f:a1: 62:e1:f8:91:a6:75:9a:d0:7f:70:1e:ad:f2:5e:58: 6a:dc:b2:52:4c:a3:f5:fb:bc:a3:6e:4e:43:46:aa: 05:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:BC:D8:29:AE:0F:9A:A0:62:BE:AF:4B:AD:12:55:82:F3:3D:59:F5 X509v3 Authority Key Identifier: keyid:53:5B:FA:76:53:1C:00:E1:FC:8B:55:4B:61:55:A1:7D:4E:3F:79:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:76:72:65:89:a4:07:1f:8f:a3:c4:d8:84:5e:21:13:bd:62: 70:fe:04:0b:59:8c:d4:ee:67:0b:19:a8:79:42:79:e1:5f:b0: 34:e9:ee:4f:53:f3:6d:7d:ee:0a:ad:2f:3c:29:c2:34:01:55: 1a:f0:c1:a8:9a:05:61:40:e5:d7:7d:f9:59:d1:dd:05:c9:78: 62:ee:4b:66:9f:7d:74:6a:24:76:42:0e:98:56:32:06:e5:50: 4b:fa:1a:31:5b:37:09:a8:d8:3e:af:78:73:e2:30:7b:46:e9: 49:17:0e:72:a3:6d:43:80:bd:25:74:b8:2f:d7:98:43:0b:74: 1f:e9:98:24:88:fb:31:58:01:1b:40:e0:8e:d8:0c:b1:8f:08: 0a:61:24:6c:63:17:ec:aa:1c:7c:40:be:6f:fb:a1:eb:5b:2e: 3e:0c:a1:68:b5:6a:41:f7:f2:1b:cd:33:62:ff:51:65:4f:29: 84:9e:cb:76:43:da:a1:eb:12:dd:64:65:a9:07:71:23:88:80: a2:26:8c:16:64:33:63:a7:6e:75:a5:0c:5f:1f:5d:9d:91:90: 39:8f:89:54:ac:e8:b5:25:70:af:c3:48:e9:8e:3e:cd:44:a3: 31:4e:56:47:fd:0f:09:75:17:a3:b9:71:91:8c:b4:9f:95:bc: a0:3a:e9:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD3IMAwXOe9sW7AJusUKmoRB9azowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QkZBNzY1MzFDMDBFMUZDOEI1NTRCNjE1NUExN0Q0 RTNGNzlDQzAeFw0yNjA2MTcwMjAwMTRaFw0yNjA2MTgwNDE5MTRaMDMxMTAvBgNV BAMTKDRGQkNEODI5QUUwRjlBQTA2MkJFQUY0QkFEMTI1NTgyRjMzRDU5RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIZ0oA/yCXyFDai04d23Uf3sTK e9pyABQtDe/4LmJOQKUmAtiY/e5PzMsgh/tJ2/0fMieiqFi30Hwf7m0EUkJyC5F7 wwUkr8AgVx96oXvQ9LAnR5JcOx1g/zJHj251Bz6dVCVnDQwRaWqlrT8I3n1BJ8g7 Z75BVf9Rowzlc9JFd4perONaiwSlYZ4GqiyQMAKBtqxheViVVnRs+Bur2VB82XEg IX7k1chCZr1R8ys8UrVU+nTk3VA0vQBlKAey2CaFZMxVByrjQoc+cLpGqhClG4nv WB6MxD9IWMFuJnp/oWLh+JGmdZrQf3AerfJeWGrcslJMo/X7vKNuTkNGqgXdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT7zYKa4PmqBivq9LrRJVgvM9WfUwHwYDVR0j BBgwFoAUU1v6dlMcAOH8i1VLYVWhfU4/ecwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDFiNmRkOWItZDE1Mi00YzhmLTg3YjctNjI5ZWI4MDhmOTExLzAvNTM1QkZBNzY1 MzFDMDBFMUZDOEI1NTRCNjE1NUExN0Q0RTNGNzlDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzVCRkE3NjUzMUMwMEUxRkM4QjU1NEI2MTU1QTE3RDRFM0Y3 OUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDFiNmRkOWItZDE1Mi00YzhmLTg3 YjctNjI5ZWI4MDhmOTExLzAvNTM1QkZBNzY1MzFDMDBFMUZDOEI1NTRCNjE1NUEx N0Q0RTNGNzlDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEF2cmWJpAcfj6PE2IReIRO9YnD+BAtZjNTu ZwsZqHlCeeFfsDTp7k9T82197gqtLzwpwjQBVRrwwaiaBWFA5dd9+VnR3QXJeGLu S2affXRqJHZCDphWMgblUEv6GjFbNwmo2D6veHPiMHtG6UkXDnKjbUOAvSV0uC/X mEMLdB/pmCSI+zFYARtA4I7YDLGPCAphJGxjF+yqHHxAvm/7oetbLj4MoWi1akH3 8hvNM2L/UWVPKYSey3ZD2qHrEt1kZakHcSOIgKImjBZkM2OnbnWlDF8fXZ2RkDmP iVSs6LUlcK/DSOmOPs1EozFOVkf9Dwl1F6O5cZGMtJ+VvKA66dc= -----END CERTIFICATE-----Generated at Wed Jun 17 10:14:14 2026 by rpki-client