$ rpki-client -vvf rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft File: 935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft (raw, json) Hash identifier: BKJpss0p8XwGfYR2PsAZZ0itEWB7Ayctvwwqo+AuPWU= Subject key identifier: AF:51:C8:F6:41:16:F8:5D:BD:34:9F:0E:7D:B5:5E:19:A6:4A:56:68 Authority key identifier: 93:5F:90:BC:D1:5D:D0:7F:7A:AF:DC:21:AE:37:2B:1F:CF:50:71:7C Certificate issuer: /CN=935F90BCD15DD07F7AAFDC21AE372B1FCF50717C Certificate serial: 319076DEAB60333CDA88AE940990367477D667DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:15:30 +0000 Manifest this update: Wed 17 Jun 2026 06:10:30 +0000 Manifest next update: Thu 18 Jun 2026 10:02:30 +0000 Files and hashes: 1: 935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl (hash: GUdTOnro0Cozo0xRTleEeDdzL0Biu8nOLjiSJ7Rv87E=) 2: 3130332e3139312e37312e302f32342d3234203d3e20313439393134.roa (hash: bpEJI5kwOdxD/qKqncYynaKSifhTOw7KVCK2hYNC5Sk=) 3: 3130332e3139312e37302e302f32332d3233203d3e20313439393134.roa (hash: QKDg88NxsGHdPaqwDjdhk2T8gJbvaIxQQY3R5hnscJY=) 4: 3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa (hash: ON1gSG84QwnmMGmDUKoxl7b2DGJGtr4oSF5KUCcnJXU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:90:76:de:ab:60:33:3c:da:88:ae:94:09:90:36:74:77:d6:67:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935F90BCD15DD07F7AAFDC21AE372B1FCF50717C Validity Not Before: Jun 17 06:10:30 2026 GMT Not After : Jun 18 10:02:30 2026 GMT Subject: CN=AF51C8F64116F85DBD349F0E7DB55E19A64A5668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e6:63:d9:b9:d3:50:8a:26:7d:9a:7f:b8:79: fa:cb:6d:82:7a:bb:0b:51:4f:c8:e2:2c:d1:dd:cf: 56:09:59:a4:03:cd:4a:3b:f2:7c:c0:d5:8a:21:cd: fd:f7:c4:70:bd:4f:50:4d:2b:a1:45:41:0c:1d:46: 37:73:6e:09:b1:b1:0d:5c:dd:55:4d:00:ac:44:07: e8:7a:31:72:fd:53:63:84:ae:4e:e7:83:3c:95:4a: 7c:08:ac:65:4e:23:84:fc:a9:52:7b:41:a3:9c:f7: 23:36:34:9a:83:d9:35:19:78:39:fd:2c:96:74:4b: 63:6d:77:0a:19:66:a6:42:f0:ac:26:f6:43:68:7e: a0:06:24:f6:6c:b7:4e:af:f5:a2:b4:d8:ee:f6:bf: db:de:ae:42:02:d1:e7:3b:1f:e7:c3:26:c5:74:15: a4:89:91:fc:7f:c1:d5:f1:6c:d6:26:d9:14:51:51: 25:bc:fb:58:6d:11:5b:5c:3e:d6:50:4c:d6:12:62: fb:a9:5d:58:df:c0:f8:7d:80:7b:ec:2c:b3:aa:f2: a0:1e:9a:36:f9:72:d2:3f:d7:3f:53:a0:6e:8a:32: 85:17:41:6a:3a:7b:84:32:02:81:bd:00:78:66:47: f3:37:5b:a0:d2:4f:58:56:9f:c0:d8:6c:19:7d:81: 78:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:51:C8:F6:41:16:F8:5D:BD:34:9F:0E:7D:B5:5E:19:A6:4A:56:68 X509v3 Authority Key Identifier: keyid:93:5F:90:BC:D1:5D:D0:7F:7A:AF:DC:21:AE:37:2B:1F:CF:50:71:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:be:50:70:9e:3e:6d:cb:70:80:56:3e:a2:e9:60:04:5c:e1: e5:3e:29:10:4c:60:27:b3:cf:1a:2d:17:84:f0:c0:34:73:10: f1:ac:ea:55:c6:cd:af:43:f7:69:61:87:f1:4c:08:c4:91:1e: 7e:1a:b9:14:1f:6b:8d:72:71:5c:b5:98:67:6d:d3:1b:5d:ea: 19:b3:f9:77:8c:81:3a:27:ff:f8:fe:d4:d0:de:02:43:b3:cd: 4b:89:62:a0:30:d5:2e:33:f7:cc:44:67:3a:bd:43:27:fb:60: 70:33:d8:9c:88:9e:01:1d:28:d4:b6:72:80:91:fa:1e:be:ae: 75:8d:28:f1:e9:aa:24:cf:0e:76:fa:7f:02:4d:fd:4f:37:32: 4e:c8:b0:4e:28:6b:0f:e7:6d:82:bb:18:a9:9d:93:cf:21:d0: 7c:03:37:dc:e2:88:c3:1d:df:8d:23:e8:72:ef:f7:3e:16:03: 7e:b5:39:f6:ce:6b:3b:75:4a:56:18:60:70:39:05:17:6c:c7: c1:61:6a:90:86:08:54:8c:40:e2:b5:c1:7f:c9:9e:e3:dc:55: d5:05:c2:8f:91:1c:56:13:07:d8:fd:0a:19:77:26:b6:9c:3a: cf:62:4c:f1:43:7b:dc:83:53:b6:6b:ab:91:8e:42:b2:fb:bc: 07:84:02:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMZB23qtgMzzaiK6UCZA2dHfWZ9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1RjkwQkNEMTVERDA3RjdBQUZEQzIxQUUzNzJCMUZD RjUwNzE3QzAeFw0yNjA2MTcwNjEwMzBaFw0yNjA2MTgxMDAyMzBaMDMxMTAvBgNV BAMTKEFGNTFDOEY2NDExNkY4NURCRDM0OUYwRTdEQjU1RTE5QTY0QTU2NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi5mPZudNQiiZ9mn+4efrLbYJ6 uwtRT8jiLNHdz1YJWaQDzUo78nzA1Yohzf33xHC9T1BNK6FFQQwdRjdzbgmxsQ1c 3VVNAKxEB+h6MXL9U2OErk7ngzyVSnwIrGVOI4T8qVJ7QaOc9yM2NJqD2TUZeDn9 LJZ0S2NtdwoZZqZC8Kwm9kNofqAGJPZst06v9aK02O72v9verkIC0ec7H+fDJsV0 FaSJkfx/wdXxbNYm2RRRUSW8+1htEVtcPtZQTNYSYvupXVjfwPh9gHvsLLOq8qAe mjb5ctI/1z9ToG6KMoUXQWo6e4QyAoG9AHhmR/M3W6DST1hWn8DYbBl9gXijAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr1HI9kEW+F29NJ8OfbVeGaZKVmgwHwYDVR0j BBgwFoAUk1+QvNFd0H96r9whrjcrH89QcXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjQwZTFmMjAtYjBjZC00NjliLTkxMDYtMWVhMDAwNzk1ZjlmLzAvOTM1RjkwQkNE MTVERDA3RjdBQUZEQzIxQUUzNzJCMUZDRjUwNzE3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzVGOTBCQ0QxNUREMDdGN0FBRkRDMjFBRTM3MkIxRkNGNTA3 MTdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjQwZTFmMjAtYjBjZC00NjliLTkx MDYtMWVhMDAwNzk1ZjlmLzAvOTM1RjkwQkNEMTVERDA3RjdBQUZEQzIxQUUzNzJC MUZDRjUwNzE3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC++UHCePm3LcIBWPqLpYARc4eU+KRBMYCez zxotF4TwwDRzEPGs6lXGza9D92lhh/FMCMSRHn4auRQfa41ycVy1mGdt0xtd6hmz +XeMgTon//j+1NDeAkOzzUuJYqAw1S4z98xEZzq9Qyf7YHAz2JyIngEdKNS2coCR +h6+rnWNKPHpqiTPDnb6fwJN/U83Mk7IsE4oaw/nbYK7GKmdk88h0HwDN9ziiMMd 340j6HLv9z4WA361OfbOazt1SlYYYHA5BRdsx8FhapCGCFSMQOK1wX/JnuPcVdUF wo+RHFYTB9j9Chl3JracOs9iTPFDe9yDU7Zrq5GOQrL7vAeEAg4= -----END CERTIFICATE-----Generated at Wed Jun 17 10:42:33 2026 by rpki-client