$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft File: 935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft (raw, json) Hash identifier: kkvovXy66lGKlA/NJHNDG8A8YMT13erCo2VgxRVre3Y= Subject key identifier: 96:FE:F2:A6:D3:4F:6C:A0:BA:FC:9D:36:70:07:B8:26:7C:D1:27:0E Authority key identifier: 93:5F:90:BC:D1:5D:D0:7F:7A:AF:DC:21:AE:37:2B:1F:CF:50:71:7C Certificate issuer: /CN=935F90BCD15DD07F7AAFDC21AE372B1FCF50717C Certificate serial: 0F3292C5B1CB7867635AD6DF4D4301C0C34EB90A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 20:25:06 +0000 Manifest this update: Sat 14 Nov 2026 20:20:06 +0000 Manifest next update: Sun 15 Nov 2026 22:52:06 +0000 Files and hashes: 1: 3130332e3139312e37312e302f32342d3234203d3e20313439393134.roa (hash: bpEJI5kwOdxD/qKqncYynaKSifhTOw7KVCK2hYNC5Sk=) 2: 3130332e3139312e37302e302f32332d3233203d3e20313439393134.roa (hash: QKDg88NxsGHdPaqwDjdhk2T8gJbvaIxQQY3R5hnscJY=) 3: 935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl (hash: mSRQXWpj7TmQuJYhFiWVXo9w8qAZwlO5QJXBX60RLCA=) 4: 3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa (hash: ON1gSG84QwnmMGmDUKoxl7b2DGJGtr4oSF5KUCcnJXU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 22:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:32:92:c5:b1:cb:78:67:63:5a:d6:df:4d:43:01:c0:c3:4e:b9:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935F90BCD15DD07F7AAFDC21AE372B1FCF50717C Validity Not Before: Nov 14 20:20:06 2026 GMT Not After : Nov 15 22:52:06 2026 GMT Subject: CN=96FEF2A6D34F6CA0BAFC9D367007B8267CD1270E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1e:6f:e5:05:37:64:3b:88:fd:6d:cf:78:7e: 94:95:67:b1:66:f3:76:a8:df:ff:d6:32:eb:d3:f7: 59:f0:f1:12:5e:58:0d:a1:d1:9c:0d:f5:2c:d8:f2: 53:20:3c:02:4b:6f:ee:45:37:fe:4b:a4:f2:2c:3d: d1:2c:b0:3f:66:2f:df:f2:e7:13:b4:15:d7:be:7f: 29:d8:01:68:37:c3:19:d7:fe:cd:23:73:1e:e0:7d: 55:05:93:3f:1a:74:43:79:16:1f:16:00:40:a1:f2: 35:e7:0a:48:5c:82:85:5c:19:68:42:d4:b9:6a:05: f6:1e:67:7b:b2:fb:12:83:eb:38:34:24:2c:55:97: a0:61:cc:9f:ef:8e:81:43:74:a3:a3:d4:aa:15:df: 41:c6:b7:68:e0:f0:4a:97:ca:61:a4:9c:93:4e:97: b6:78:d4:51:06:01:b2:70:e0:d4:64:15:8e:58:99: 1b:73:c5:31:e2:44:7e:d8:2e:19:23:79:5b:62:77: 06:2c:4e:b2:fb:e9:4d:1f:3e:a3:95:a9:8e:98:49: 54:12:a9:04:5b:f3:c3:2d:d5:35:92:bb:99:cc:d7: 86:cb:c8:02:d0:7b:94:6b:21:9e:ff:9b:40:0b:44: 50:19:ce:b6:f4:27:21:3d:aa:42:9d:f6:51:96:73: 68:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FE:F2:A6:D3:4F:6C:A0:BA:FC:9D:36:70:07:B8:26:7C:D1:27:0E X509v3 Authority Key Identifier: keyid:93:5F:90:BC:D1:5D:D0:7F:7A:AF:DC:21:AE:37:2B:1F:CF:50:71:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:34:4a:9d:e7:a4:62:d6:e3:2e:ca:6d:73:44:dd:0e:48:ab: 27:52:d7:7b:fb:65:d7:9c:9e:d0:15:96:ea:08:72:28:41:ca: 18:96:1a:ef:a6:d7:2a:79:2a:9b:c5:36:29:de:04:48:27:8b: 56:37:86:eb:49:ac:d3:03:f8:44:15:71:7b:3f:ca:60:d6:a5: 10:1f:17:fc:fa:e3:46:8e:e4:b1:4c:8d:fa:9f:dd:1c:b7:03: e6:09:05:f6:63:8a:89:17:33:f8:6e:3c:2b:ea:7a:8f:d2:06: 2b:d1:d7:eb:d6:d8:58:c1:91:96:43:b2:41:ec:63:38:b2:92: c1:09:31:3f:9e:87:f5:64:d9:10:94:bf:98:5d:30:0e:ee:62: 5f:f0:75:31:67:4b:09:ff:c4:6f:51:fa:e9:af:63:14:c0:0c: 81:65:6b:86:1d:8d:c5:ae:73:c3:7c:bd:f6:9f:d7:a8:0c:a4: f8:f9:03:f1:7f:3c:64:5d:fc:8e:44:74:fb:d1:a1:87:a9:8f: 0a:a0:19:03:6a:65:a9:53:20:41:c5:b5:53:59:e8:bf:9f:4d: 93:00:9e:b8:28:28:2f:5d:a0:e7:84:14:d2:e1:d7:17:0a:74: c2:bb:9d:6c:70:2b:b0:46:a0:8a:a9:fe:73:89:b3:93:73:35: 5e:63:d8:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDzKSxbHLeGdjWtbfTUMBwMNOuQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1RjkwQkNEMTVERDA3RjdBQUZEQzIxQUUzNzJCMUZD RjUwNzE3QzAeFw0yNjExMTQyMDIwMDZaFw0yNjExMTUyMjUyMDZaMDMxMTAvBgNV BAMTKDk2RkVGMkE2RDM0RjZDQTBCQUZDOUQzNjcwMDdCODI2N0NEMTI3MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBHm/lBTdkO4j9bc94fpSVZ7Fm 83ao3//WMuvT91nw8RJeWA2h0ZwN9SzY8lMgPAJLb+5FN/5LpPIsPdEssD9mL9/y 5xO0Fde+fynYAWg3wxnX/s0jcx7gfVUFkz8adEN5Fh8WAECh8jXnCkhcgoVcGWhC 1LlqBfYeZ3uy+xKD6zg0JCxVl6BhzJ/vjoFDdKOj1KoV30HGt2jg8EqXymGknJNO l7Z41FEGAbJw4NRkFY5YmRtzxTHiRH7YLhkjeVtidwYsTrL76U0fPqOVqY6YSVQS qQRb88Mt1TWSu5nM14bLyALQe5RrIZ7/m0ALRFAZzrb0JyE9qkKd9lGWc2jTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlv7yptNPbKC6/J02cAe4JnzRJw4wHwYDVR0j BBgwFoAUk1+QvNFd0H96r9whrjcrH89QcXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjQwZTFmMjAtYjBjZC00NjliLTkxMDYtMWVhMDAwNzk1ZjlmLzAvOTM1RjkwQkNE MTVERDA3RjdBQUZEQzIxQUUzNzJCMUZDRjUwNzE3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzVGOTBCQ0QxNUREMDdGN0FBRkRDMjFBRTM3MkIxRkNGNTA3 MTdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjQwZTFmMjAtYjBjZC00NjliLTkx MDYtMWVhMDAwNzk1ZjlmLzAvOTM1RjkwQkNEMTVERDA3RjdBQUZEQzIxQUUzNzJC MUZDRjUwNzE3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA40Sp3npGLW4y7KbXNE3Q5IqydS13v7Zdec ntAVluoIcihByhiWGu+m1yp5KpvFNineBEgni1Y3hutJrNMD+EQVcXs/ymDWpRAf F/z640aO5LFMjfqf3Ry3A+YJBfZjiokXM/huPCvqeo/SBivR1+vW2FjBkZZDskHs YziyksEJMT+eh/Vk2RCUv5hdMA7uYl/wdTFnSwn/xG9R+umvYxTADIFla4YdjcWu c8N8vfaf16gMpPj5A/F/PGRd/I5EdPvRoYepjwqgGQNqZalTIEHFtVNZ6L+fTZMA nrgoKC9doOeEFNLh1xcKdMK7nWxwK7BGoIqp/nOJs5NzNV5j2GA= -----END CERTIFICATE-----Generated at Sun Nov 15 15:19:12 2026 by rpki-client