$ rpki-client -vvf rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft File: 535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft (raw, json) Hash identifier: FVhy2rOFf4YKJlv0Wnq1gDGYRPETv4dU6ptJ9/A/ehM= Subject key identifier: A7:5F:B6:F4:C5:D5:EE:8C:19:1D:3E:16:9A:9E:96:19:90:1D:7E:D8 Authority key identifier: 53:5B:FA:76:53:1C:00:E1:FC:8B:55:4B:61:55:A1:7D:4E:3F:79:CC Certificate issuer: /CN=535BFA76531C00E1FC8B554B6155A17D4E3F79CC Certificate serial: 63871231C303F3769326F7A046DA3E4229EDB0FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 12:20:09 +0000 Manifest this update: Thu 23 Jul 2026 12:15:09 +0000 Manifest next update: Fri 24 Jul 2026 12:24:09 +0000 Files and hashes: 1: 535BFA76531C00E1FC8B554B6155A17D4E3F79CC.crl (hash: XYLj9pExR4b9g9ngLhf3pgFuLoLXNmOinyx+SUOCM/4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.crl rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:87:12:31:c3:03:f3:76:93:26:f7:a0:46:da:3e:42:29:ed:b0:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535BFA76531C00E1FC8B554B6155A17D4E3F79CC Validity Not Before: Jul 23 12:15:09 2026 GMT Not After : Jul 24 12:24:09 2026 GMT Subject: CN=A75FB6F4C5D5EE8C191D3E169A9E9619901D7ED8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2a:2a:94:13:50:42:10:f4:99:d6:94:6d:0a: 0c:0f:94:50:9d:74:2d:b0:ea:ae:9c:01:a3:2e:96: a9:ff:8b:34:56:e8:28:14:a4:e9:6d:0e:42:c9:df: e1:bf:77:54:99:38:e8:6a:79:16:9e:e7:14:e2:9e: 55:4c:cf:79:49:6d:6d:0c:8a:04:f4:a6:53:fe:23: c9:8b:71:03:20:75:e1:86:40:04:a8:43:5e:1d:5e: 4b:81:87:33:0a:f9:9e:6a:0a:d2:f8:fc:af:22:3c: b4:80:0d:d7:52:95:71:72:be:55:1c:71:77:37:da: 78:75:af:1d:be:71:0a:e0:cf:21:8f:21:6d:70:fd: f0:bc:7d:f2:9d:92:cf:45:52:47:e1:83:09:38:f3: 45:d1:2b:85:a9:9b:a5:c0:47:e3:b7:15:6c:2b:d2: 36:34:4a:c7:87:0a:31:a1:5e:2d:ca:84:8b:40:16: c4:f5:46:a3:89:52:c3:75:21:2a:9b:92:05:08:d8: 9a:6f:83:5c:c6:95:26:c3:15:94:9c:97:e0:00:72: f0:a0:bd:7e:cc:fc:a9:9a:85:87:d1:c0:66:b6:ee: 13:4a:76:63:09:27:ac:8f:44:5b:6b:b6:24:d4:fc: 66:b5:3c:ee:7a:e1:dd:17:70:7f:c7:b7:1c:d9:67: 37:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5F:B6:F4:C5:D5:EE:8C:19:1D:3E:16:9A:9E:96:19:90:1D:7E:D8 X509v3 Authority Key Identifier: keyid:53:5B:FA:76:53:1C:00:E1:FC:8B:55:4B:61:55:A1:7D:4E:3F:79:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:15:39:3a:79:f2:59:dc:86:19:0f:80:0e:52:3e:11:3a:7e: 17:bd:eb:39:fa:39:8d:43:26:c2:29:8c:57:f9:59:cc:5e:4a: 8e:c8:b5:ea:36:62:f2:bd:17:70:18:40:55:81:2c:65:2a:ee: 9f:21:64:23:e5:6c:29:3d:e5:67:f4:c3:90:e2:d4:e4:69:c5: be:8c:00:bf:91:95:d8:bb:82:95:12:b7:04:e4:2c:97:3a:6c: 9b:d4:c3:73:25:08:ee:21:59:a8:10:13:63:04:c2:c8:7e:34: 0d:0e:de:2e:fa:58:96:27:38:73:1d:c7:25:da:72:70:09:7c: e9:73:9c:b0:da:8f:b1:83:4d:29:78:9e:65:85:04:e3:83:8d: c6:72:f0:c9:eb:76:55:44:bf:88:00:ac:71:2b:19:d0:83:da: 72:42:c0:19:01:19:98:7b:2a:19:8a:e6:a8:08:7c:79:7c:19: 5b:93:4e:4f:f4:f7:74:20:10:60:08:3e:ef:86:5a:06:5e:04: 94:f7:a9:38:e6:da:bb:57:36:43:38:93:28:0d:dc:d3:63:40: 7c:8e:dc:ad:a2:cf:93:a1:81:7b:fb:6f:25:4e:60:34:4b:6e: ea:b9:72:0a:1d:f9:a8:6b:25:eb:20:a4:0c:a0:a4:6e:09:c5: d5:7b:e7:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY4cSMcMD83aTJvegRto+QintsP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QkZBNzY1MzFDMDBFMUZDOEI1NTRCNjE1NUExN0Q0 RTNGNzlDQzAeFw0yNjA3MjMxMjE1MDlaFw0yNjA3MjQxMjI0MDlaMDMxMTAvBgNV BAMTKEE3NUZCNkY0QzVENUVFOEMxOTFEM0UxNjlBOUU5NjE5OTAxRDdFRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKiqUE1BCEPSZ1pRtCgwPlFCd dC2w6q6cAaMulqn/izRW6CgUpOltDkLJ3+G/d1SZOOhqeRae5xTinlVMz3lJbW0M igT0plP+I8mLcQMgdeGGQASoQ14dXkuBhzMK+Z5qCtL4/K8iPLSADddSlXFyvlUc cXc32nh1rx2+cQrgzyGPIW1w/fC8ffKdks9FUkfhgwk480XRK4Wpm6XAR+O3FWwr 0jY0SseHCjGhXi3KhItAFsT1RqOJUsN1ISqbkgUI2Jpvg1zGlSbDFZScl+AAcvCg vX7M/KmahYfRwGa27hNKdmMJJ6yPRFtrtiTU/Ga1PO564d0XcH/HtxzZZzcrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp1+29MXV7owZHT4Wmp6WGZAdftgwHwYDVR0j BBgwFoAUU1v6dlMcAOH8i1VLYVWhfU4/ecwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDFiNmRkOWItZDE1Mi00YzhmLTg3YjctNjI5ZWI4MDhmOTExLzAvNTM1QkZBNzY1 MzFDMDBFMUZDOEI1NTRCNjE1NUExN0Q0RTNGNzlDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzVCRkE3NjUzMUMwMEUxRkM4QjU1NEI2MTU1QTE3RDRFM0Y3 OUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDFiNmRkOWItZDE1Mi00YzhmLTg3 YjctNjI5ZWI4MDhmOTExLzAvNTM1QkZBNzY1MzFDMDBFMUZDOEI1NTRCNjE1NUEx N0Q0RTNGNzlDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0VOTp58lnchhkPgA5SPhE6fhe96zn6OY1D JsIpjFf5WcxeSo7Iteo2YvK9F3AYQFWBLGUq7p8hZCPlbCk95Wf0w5Di1ORpxb6M AL+Rldi7gpUStwTkLJc6bJvUw3MlCO4hWagQE2MEwsh+NA0O3i76WJYnOHMdxyXa cnAJfOlznLDaj7GDTSl4nmWFBOODjcZy8MnrdlVEv4gArHErGdCD2nJCwBkBGZh7 KhmK5qgIfHl8GVuTTk/093QgEGAIPu+GWgZeBJT3qTjm2rtXNkM4kygN3NNjQHyO 3K2iz5OhgXv7byVOYDRLbuq5cgod+ahrJesgpAygpG4JxdV7540= -----END CERTIFICATE-----Generated at Fri Jul 24 05:16:11 2026 by rpki-client