$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft File: 935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft (raw, json) Hash identifier: YiKBGX0OHvzYCK6B4wtpaZFZ/Ixaq0ChAF0dIhuFyIg= Subject key identifier: 45:F4:47:EE:2E:8F:EC:D5:24:3A:31:88:64:EB:9B:09:A8:23:E2:54 Authority key identifier: 93:5F:90:BC:D1:5D:D0:7F:7A:AF:DC:21:AE:37:2B:1F:CF:50:71:7C Certificate issuer: /CN=935F90BCD15DD07F7AAFDC21AE372B1FCF50717C Certificate serial: 0549B76188A3E5C74796A6343599C54C81716680 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft Manifest number: BF Signing time: Mon 21 Sep 2026 10:34:35 +0000 Manifest this update: Mon 21 Sep 2026 10:29:35 +0000 Manifest next update: Tue 22 Sep 2026 12:59:35 +0000 Files and hashes: 1: 3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa (hash: ON1gSG84QwnmMGmDUKoxl7b2DGJGtr4oSF5KUCcnJXU=) 2: 3130332e3139312e37302e302f32332d3233203d3e20313439393134.roa (hash: QKDg88NxsGHdPaqwDjdhk2T8gJbvaIxQQY3R5hnscJY=) 3: 3130332e3139312e37312e302f32342d3234203d3e20313439393134.roa (hash: bpEJI5kwOdxD/qKqncYynaKSifhTOw7KVCK2hYNC5Sk=) 4: 935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl (hash: XYrdDhmBwpeZlKmuQrec0Bl49E9nNr7UF4PigMhS1YE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 12:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:49:b7:61:88:a3:e5:c7:47:96:a6:34:35:99:c5:4c:81:71:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935F90BCD15DD07F7AAFDC21AE372B1FCF50717C Validity Not Before: Sep 21 10:29:35 2026 GMT Not After : Sep 22 12:59:35 2026 GMT Subject: CN=45F447EE2E8FECD5243A318864EB9B09A823E254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b2:6b:e2:d4:93:ad:0d:6a:89:5d:ed:72:f6: 6c:44:d9:bd:68:1b:54:73:f1:61:15:10:7f:a1:e8: db:de:07:10:6f:e8:cd:ed:c8:53:01:85:e2:45:2a: e0:a4:e3:e2:98:99:82:3c:85:be:0a:29:8c:b4:f5: 6b:6a:76:0f:cb:7e:56:d9:4f:d2:76:1b:51:58:b5: bb:1c:35:d8:fc:5f:da:50:ac:14:80:49:82:bc:26: bd:70:d5:9e:75:d8:5c:27:39:ce:8d:74:a2:eb:bc: 4f:f5:53:99:82:4e:b7:73:51:b1:6b:1d:84:c3:02: 31:d9:21:cc:81:36:39:f9:c5:f5:f7:2f:b2:4f:98: ab:97:e3:d1:56:d5:39:c6:c8:a8:5a:64:27:c0:57: bb:f5:ea:eb:65:8b:13:81:13:e3:e6:3f:2b:da:12: 80:a9:80:44:e0:b1:e3:6a:8f:6b:29:d6:e4:89:61: 3e:d6:32:43:2a:4d:2d:5d:0a:53:de:92:a1:04:e6: 8d:34:cb:7a:2a:d8:c1:65:40:76:09:31:89:93:1b: 6e:20:6c:89:a0:e7:6b:74:fd:97:cb:dc:c1:8f:86: 1f:94:95:66:09:99:26:a5:42:42:76:e4:16:98:7c: 02:0f:92:f7:74:8a:d8:5c:f4:86:d5:21:98:1b:b5: 91:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F4:47:EE:2E:8F:EC:D5:24:3A:31:88:64:EB:9B:09:A8:23:E2:54 X509v3 Authority Key Identifier: keyid:93:5F:90:BC:D1:5D:D0:7F:7A:AF:DC:21:AE:37:2B:1F:CF:50:71:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:2f:47:52:00:78:9d:83:a5:88:b9:67:a0:78:a0:b5:77:29: 96:a6:f7:40:81:0e:67:b7:ff:7e:51:7b:47:c7:96:04:71:c1: de:d9:f6:f4:95:df:74:9b:4e:9c:85:2e:25:55:d5:49:bb:b0: f7:0c:8a:29:86:9a:76:d6:2d:8a:04:15:51:a0:ba:da:96:60: 37:fb:85:dc:77:af:43:cc:bc:fd:36:97:46:63:cb:83:29:68: 7c:6a:91:04:42:6e:13:03:9d:93:f6:ce:e7:97:d5:b8:54:f2: b0:91:13:d9:91:2c:31:6c:82:a3:8c:75:68:32:29:90:9f:05: 00:71:23:ad:e1:0f:86:1c:c1:5b:55:7b:fc:eb:07:26:17:f7: 6d:d2:dd:38:83:fb:07:ae:b9:13:3f:cb:bd:97:e6:fd:70:c3: 95:90:47:5a:0b:18:ff:31:c2:60:73:2c:c7:2e:57:d4:de:31: 1a:4e:37:1c:50:c6:dd:0d:ae:81:ba:2a:b4:8c:4e:fc:a8:79: 06:af:5c:04:0f:d9:29:1f:7f:8d:96:23:fd:3e:43:0c:3b:e8: be:3a:0f:a6:d1:0e:cb:f3:f5:70:55:eb:04:6d:d6:62:e9:3e: a4:cf:4c:d4:b8:c2:a1:cc:36:ba:22:b7:bb:da:ac:63:5a:ed: 94:5b:e6:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBUm3YYij5cdHlqY0NZnFTIFxZoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1RjkwQkNEMTVERDA3RjdBQUZEQzIxQUUzNzJCMUZD RjUwNzE3QzAeFw0yNjA5MjExMDI5MzVaFw0yNjA5MjIxMjU5MzVaMDMxMTAvBgNV BAMTKDQ1RjQ0N0VFMkU4RkVDRDUyNDNBMzE4ODY0RUI5QjA5QTgyM0UyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVsmvi1JOtDWqJXe1y9mxE2b1o G1Rz8WEVEH+h6NveBxBv6M3tyFMBheJFKuCk4+KYmYI8hb4KKYy09Wtqdg/LflbZ T9J2G1FYtbscNdj8X9pQrBSASYK8Jr1w1Z512FwnOc6NdKLrvE/1U5mCTrdzUbFr HYTDAjHZIcyBNjn5xfX3L7JPmKuX49FW1TnGyKhaZCfAV7v16utlixOBE+PmPyva EoCpgETgseNqj2sp1uSJYT7WMkMqTS1dClPekqEE5o00y3oq2MFlQHYJMYmTG24g bImg52t0/ZfL3MGPhh+UlWYJmSalQkJ25BaYfAIPkvd0ithc9IbVIZgbtZGlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURfRH7i6P7NUkOjGIZOubCagj4lQwHwYDVR0j BBgwFoAUk1+QvNFd0H96r9whrjcrH89QcXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjQwZTFmMjAtYjBjZC00NjliLTkxMDYtMWVhMDAwNzk1ZjlmLzAvOTM1RjkwQkNE MTVERDA3RjdBQUZEQzIxQUUzNzJCMUZDRjUwNzE3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzVGOTBCQ0QxNUREMDdGN0FBRkRDMjFBRTM3MkIxRkNGNTA3 MTdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjQwZTFmMjAtYjBjZC00NjliLTkx MDYtMWVhMDAwNzk1ZjlmLzAvOTM1RjkwQkNEMTVERDA3RjdBQUZEQzIxQUUzNzJC MUZDRjUwNzE3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0vR1IAeJ2DpYi5Z6B4oLV3KZam90CBDme3 /35Re0fHlgRxwd7Z9vSV33SbTpyFLiVV1Um7sPcMiimGmnbWLYoEFVGgutqWYDf7 hdx3r0PMvP02l0Zjy4MpaHxqkQRCbhMDnZP2zueX1bhU8rCRE9mRLDFsgqOMdWgy KZCfBQBxI63hD4YcwVtVe/zrByYX923S3TiD+weuuRM/y72X5v1ww5WQR1oLGP8x wmBzLMcuV9TeMRpONxxQxt0NroG6KrSMTvyoeQavXAQP2Skff42WI/0+Qww76L46 D6bRDsvz9XBV6wRt1mLpPqTPTNS4wqHMNroit7varGNa7ZRb5rQ= -----END CERTIFICATE-----Generated at Tue Sep 22 01:05:15 2026 by rpki-client