$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft File: 935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft (raw, json) Hash identifier: Prjj9f34+hqCMssNHJlnE6/xPMpR5MC+fZiom9OGV2s= Subject key identifier: 2C:13:45:C2:A9:38:0E:86:F0:7F:56:92:DB:14:70:2E:48:28:6C:C5 Authority key identifier: 93:5D:D1:43:14:C9:2C:CD:3B:1B:65:E6:87:51:DA:3E:87:B1:05:7C Certificate issuer: /CN=935DD14314C92CCD3B1B65E68751DA3E87B1057C Certificate serial: 288E673DC01D580D2D6F506DF7A478F36BA41F85 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935DD14314C92CCD3B1B65E68751DA3E87B1057C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft Manifest number: BD Signing time: Sun 20 Sep 2026 20:27:08 +0000 Manifest this update: Sun 20 Sep 2026 20:22:08 +0000 Manifest next update: Mon 21 Sep 2026 22:08:08 +0000 Files and hashes: 1: 935DD14314C92CCD3B1B65E68751DA3E87B1057C.crl (hash: c4zT/xzbPZ0Cf3fv3p5rQpjQIKwcSizFafBZfTdnA2s=) 2: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: kjEpWP2mRiJBPHjX3tFZhbKjrbBSMQGM2y+PNic1u8w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.crl rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935DD14314C92CCD3B1B65E68751DA3E87B1057C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 22:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:8e:67:3d:c0:1d:58:0d:2d:6f:50:6d:f7:a4:78:f3:6b:a4:1f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935DD14314C92CCD3B1B65E68751DA3E87B1057C Validity Not Before: Sep 20 20:22:08 2026 GMT Not After : Sep 21 22:08:08 2026 GMT Subject: CN=2C1345C2A9380E86F07F5692DB14702E48286CC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:70:52:55:a0:f2:6a:a5:92:62:67:f1:97: fa:5f:c0:da:fb:22:4c:70:20:55:05:8f:a5:9b:1e: 63:25:c1:ce:34:17:c2:14:c0:0f:92:ac:fc:0c:54: c6:bd:bd:1d:2d:68:b4:16:0c:a5:79:5d:23:33:f1: 4c:a3:d3:54:39:d6:2f:eb:69:73:a0:e3:cd:5e:8b: 03:5d:96:8d:e2:3a:e9:02:c0:ca:6b:69:56:0a:e2: e6:d3:91:e7:52:33:4b:a0:35:5a:44:22:2f:a3:78: 63:37:e3:0c:80:e5:18:ac:a5:ab:a9:6b:dc:68:9a: 3d:14:3a:44:b2:f2:e9:de:e0:37:de:35:d7:5c:c0: 1f:19:eb:b8:4f:a7:45:bf:21:13:01:7d:09:d6:e8: 61:d6:e8:b7:8f:42:31:28:f7:6a:5a:5a:df:93:62: 73:b6:92:0f:02:51:69:57:a3:ee:04:d9:de:2a:b7: 4d:bb:7f:f5:2e:74:49:36:75:9a:9e:39:a9:5f:e0: 40:c1:ba:32:63:1f:cc:f6:76:b6:fe:29:f8:2f:08: d8:f4:bc:2d:db:14:f9:73:cb:3b:98:22:e0:3a:63: 63:e7:ac:13:22:3c:f1:d2:df:af:fa:8b:ae:e6:84: 66:a3:b7:da:8b:52:e3:64:ed:86:0f:35:85:9a:9c: 2d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:13:45:C2:A9:38:0E:86:F0:7F:56:92:DB:14:70:2E:48:28:6C:C5 X509v3 Authority Key Identifier: keyid:93:5D:D1:43:14:C9:2C:CD:3B:1B:65:E6:87:51:DA:3E:87:B1:05:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935DD14314C92CCD3B1B65E68751DA3E87B1057C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ce:ec:ff:75:29:6f:1f:16:b5:a0:64:28:fc:45:d1:b3:32: 88:40:ff:65:69:6f:bc:46:bd:30:73:05:85:30:c1:c0:4a:f9: c5:1c:15:61:89:9a:62:91:b1:0b:54:4c:5c:e0:72:55:63:17: 37:0f:0b:8b:7b:52:e6:18:11:68:a9:0b:30:90:e4:b7:17:33: 6a:db:ca:5b:7e:e1:93:d2:95:c2:7f:5d:aa:b8:a1:78:f6:49: cc:11:4c:e2:bd:f7:00:a6:a4:4f:2a:f3:8a:99:2a:94:1d:96: f0:59:30:25:ec:fe:23:f0:15:9d:cd:be:ee:58:91:23:91:fa: 7e:18:a5:db:bc:94:bc:ce:8d:39:e1:c8:5a:7c:22:b0:2f:96: 04:2d:44:a0:ce:f5:34:52:23:e2:a1:d3:a2:d8:e2:57:b6:8b: bd:22:25:96:65:5a:26:6a:b1:fe:a2:1e:bb:9c:76:41:76:94: eb:00:fb:25:e9:ed:73:d8:27:a3:c2:fe:35:23:08:09:53:1b: fa:2d:8a:1f:fb:ee:83:85:fc:39:09:0d:ea:01:c9:8f:0d:0f: a8:87:2d:03:c3:14:80:33:fa:c7:fb:fb:1e:48:4a:24:09:5f: 94:38:2f:82:f5:bd:ad:60:a6:e7:e2:c4:94:86:5d:d5:34:df: ef:29:40:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKI5nPcAdWA0tb1Bt96R482ukH4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1REQxNDMxNEM5MkNDRDNCMUI2NUU2ODc1MURBM0U4 N0IxMDU3QzAeFw0yNjA5MjAyMDIyMDhaFw0yNjA5MjEyMjA4MDhaMDMxMTAvBgNV BAMTKDJDMTM0NUMyQTkzODBFODZGMDdGNTY5MkRCMTQ3MDJFNDgyODZDQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt8HBSVaDyaqWSYmfxl/pfwNr7 IkxwIFUFj6WbHmMlwc40F8IUwA+SrPwMVMa9vR0taLQWDKV5XSMz8Uyj01Q51i/r aXOg481eiwNdlo3iOukCwMpraVYK4ubTkedSM0ugNVpEIi+jeGM34wyA5Rispaup a9xomj0UOkSy8une4DfeNddcwB8Z67hPp0W/IRMBfQnW6GHW6LePQjEo92paWt+T YnO2kg8CUWlXo+4E2d4qt027f/UudEk2dZqeOalf4EDBujJjH8z2drb+KfgvCNj0 vC3bFPlzyzuYIuA6Y2PnrBMiPPHS36/6i67mhGajt9qLUuNk7YYPNYWanC1hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULBNFwqk4Dobwf1aS2xRwLkgobMUwHwYDVR0j BBgwFoAUk13RQxTJLM07G2Xmh1HaPoexBXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWEzYjY4ODEtYmExMS00MzMwLWExNjQtYjU1ZjQyMDg1Yjg5LzAvOTM1REQxNDMx NEM5MkNDRDNCMUI2NUU2ODc1MURBM0U4N0IxMDU3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzVERDE0MzE0QzkyQ0NEM0IxQjY1RTY4NzUxREEzRTg3QjEw NTdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWEzYjY4ODEtYmExMS00MzMwLWEx NjQtYjU1ZjQyMDg1Yjg5LzAvOTM1REQxNDMxNEM5MkNDRDNCMUI2NUU2ODc1MURB M0U4N0IxMDU3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbO7P91KW8fFrWgZCj8RdGzMohA/2Vpb7xG vTBzBYUwwcBK+cUcFWGJmmKRsQtUTFzgclVjFzcPC4t7UuYYEWipCzCQ5LcXM2rb ylt+4ZPSlcJ/Xaq4oXj2ScwRTOK99wCmpE8q84qZKpQdlvBZMCXs/iPwFZ3Nvu5Y kSOR+n4Ypdu8lLzOjTnhyFp8IrAvlgQtRKDO9TRSI+Kh06LY4le2i70iJZZlWiZq sf6iHrucdkF2lOsA+yXp7XPYJ6PC/jUjCAlTG/otih/77oOF/DkJDeoByY8ND6iH LQPDFIAz+sf7+x5ISiQJX5Q4L4L1va1gpufixJSGXdU03+8pQKU= -----END CERTIFICATE-----Generated at Mon Sep 21 08:00:08 2026 by rpki-client