$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft File: 535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft (raw, json) Hash identifier: IiViLWsUq2+D4xUtV9mbFUipbK/LXqrUtvX/N2LmpN0= Subject key identifier: 48:53:04:78:42:AE:CB:BE:14:65:F4:8C:9E:FA:F2:1B:0C:12:82:6A Authority key identifier: 53:5C:2B:E8:C4:77:19:76:CD:35:DA:8D:0F:29:2C:8A:1E:5E:2F:99 Certificate issuer: /CN=535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99 Certificate serial: 3E7352C419845C523A672A1A9E480A3CE1D7FA9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 02:15:28 +0000 Manifest this update: Wed 17 Jun 2026 02:10:28 +0000 Manifest next update: Thu 18 Jun 2026 05:22:28 +0000 Files and hashes: 1: 535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl (hash: 2efw4rOGTU3NuKDR1L6KJU2pTWTIOsynWWQ6oSQ8ij4=) 2: 3230332e38312e3138342e302f32312d3234203d3e203234353338.roa (hash: XHqyQLGVve3ZT8Kfh4uyyc91xlGDqpssM8vgHeuLO+M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:73:52:c4:19:84:5c:52:3a:67:2a:1a:9e:48:0a:3c:e1:d7:fa:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99 Validity Not Before: Jun 17 02:10:28 2026 GMT Not After : Jun 18 05:22:28 2026 GMT Subject: CN=4853047842AECBBE1465F48C9EFAF21B0C12826A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b0:bb:aa:21:0a:9d:ad:1a:13:e1:f6:72:5e: 2c:c8:d9:13:50:e3:ab:a1:7d:bd:b9:95:be:fc:25: ef:22:4d:5c:15:1b:23:7c:b5:b4:62:4b:ae:1f:82: 8a:39:58:fe:e1:69:20:b3:20:69:05:04:ad:1a:95: 91:80:b3:6b:72:2c:f4:73:dd:17:ef:26:30:1d:ff: 00:1b:7e:65:56:8b:2a:51:3f:d7:b3:f4:f7:19:d9: b6:be:c0:2f:eb:15:6d:82:32:4a:9e:a9:fb:0b:30: 19:35:21:28:2d:7d:e1:c3:a4:9c:06:c2:48:03:df: 76:0b:17:e7:f6:06:19:fa:dc:8b:d8:0e:58:2f:b1: e5:f2:26:38:37:42:70:01:5b:31:ef:a4:cc:69:6c: 73:eb:5e:d7:e5:d0:17:76:de:ef:21:a3:81:c5:88: 1e:c4:26:58:1e:fc:2c:eb:a5:ee:58:05:67:8a:de: 70:75:53:8b:2a:b5:2b:16:89:86:b0:a0:a7:79:4d: a2:6c:13:fa:58:b5:b4:10:2b:bd:5b:ae:0e:bc:7d: 97:74:c7:1e:a0:52:fe:5c:5e:d7:b6:8a:b3:ae:2c: 80:18:f7:f5:75:3a:9c:85:ff:62:37:d9:16:fe:9f: 22:3e:60:61:a6:c1:ba:cd:bc:25:15:1d:e0:a8:db: 4d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:53:04:78:42:AE:CB:BE:14:65:F4:8C:9E:FA:F2:1B:0C:12:82:6A X509v3 Authority Key Identifier: keyid:53:5C:2B:E8:C4:77:19:76:CD:35:DA:8D:0F:29:2C:8A:1E:5E:2F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:3f:41:a9:cf:b1:2b:e9:04:97:04:8c:b0:d8:2a:3f:7d:6f: c0:85:60:7d:31:0f:52:b8:99:7e:0a:96:b1:10:25:eb:f3:f7: 56:cb:1a:33:e7:ac:41:eb:13:a3:61:3c:7b:d4:13:1d:24:52: 55:60:18:b8:5c:2d:a3:ce:ff:48:ab:90:5d:f1:11:d9:f5:ae: b1:98:38:88:ea:22:f4:12:9b:d9:db:21:eb:d9:80:21:48:dd: ed:7c:c1:7d:81:55:68:33:4d:26:85:c2:e8:86:0f:47:cf:c6: d5:a4:66:35:17:a1:ac:ce:55:4a:80:ce:2c:89:bc:29:a4:3c: eb:09:b6:a8:8e:85:b7:1a:5e:99:78:9e:58:28:48:a2:da:49: e1:b2:a7:92:b8:13:83:4d:96:c6:7f:f6:e7:0f:65:dc:8b:d0: 03:b3:1f:bf:63:03:dc:9c:1c:01:b0:5f:fc:7b:eb:83:31:66: e3:b1:8a:e6:89:38:72:81:10:69:a7:db:54:48:3c:3d:f9:ce: d0:73:9e:4b:1d:24:d5:66:29:f6:ee:75:f7:a4:7e:75:87:ad: 8d:c9:1b:89:10:5b:d4:89:e3:73:b7:64:4d:62:7b:78:71:92: a5:ff:b7:69:af:aa:c3:d1:c4:aa:b4:d7:c4:59:51:0c:54:a8: c6:4b:96:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPnNSxBmEXFI6ZyoankgKPOHX+p4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QzJCRThDNDc3MTk3NkNEMzVEQThEMEYyOTJDOEEx RTVFMkY5OTAeFw0yNjA2MTcwMjEwMjhaFw0yNjA2MTgwNTIyMjhaMDMxMTAvBgNV BAMTKDQ4NTMwNDc4NDJBRUNCQkUxNDY1RjQ4QzlFRkFGMjFCMEMxMjgyNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXsLuqIQqdrRoT4fZyXizI2RNQ 46uhfb25lb78Je8iTVwVGyN8tbRiS64fgoo5WP7haSCzIGkFBK0alZGAs2tyLPRz 3RfvJjAd/wAbfmVWiypRP9ez9PcZ2ba+wC/rFW2CMkqeqfsLMBk1ISgtfeHDpJwG wkgD33YLF+f2Bhn63IvYDlgvseXyJjg3QnABWzHvpMxpbHPrXtfl0Bd23u8ho4HF iB7EJlge/Czrpe5YBWeK3nB1U4sqtSsWiYawoKd5TaJsE/pYtbQQK71brg68fZd0 xx6gUv5cXte2irOuLIAY9/V1OpyF/2I32Rb+nyI+YGGmwbrNvCUVHeCo200vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSFMEeEKuy74UZfSMnvryGwwSgmowHwYDVR0j BBgwFoAUU1wr6MR3GXbNNdqNDyksih5eL5kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFhMjlhNzUtYzViOS00NzViLTlkOTYtNmQxYTE1ZWFlMjRkLzAvNTM1QzJCRThD NDc3MTk3NkNEMzVEQThEMEYyOTJDOEExRTVFMkY5OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzVDMkJFOEM0NzcxOTc2Q0QzNURBOEQwRjI5MkM4QTFFNUUy Rjk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFhMjlhNzUtYzViOS00NzViLTlk OTYtNmQxYTE1ZWFlMjRkLzAvNTM1QzJCRThDNDc3MTk3NkNEMzVEQThEMEYyOTJD OEExRTVFMkY5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEg/QanPsSvpBJcEjLDYKj99b8CFYH0xD1K4 mX4KlrEQJevz91bLGjPnrEHrE6NhPHvUEx0kUlVgGLhcLaPO/0irkF3xEdn1rrGY OIjqIvQSm9nbIevZgCFI3e18wX2BVWgzTSaFwuiGD0fPxtWkZjUXoazOVUqAziyJ vCmkPOsJtqiOhbcaXpl4nlgoSKLaSeGyp5K4E4NNlsZ/9ucPZdyL0AOzH79jA9yc HAGwX/x764MxZuOxiuaJOHKBEGmn21RIPD35ztBznksdJNVmKfbudfekfnWHrY3J G4kQW9SJ43O3ZE1ie3hxkqX/t2mvqsPRxKq018RZUQxUqMZLlqM= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:28 2026 by rpki-client