$ rpki-client -vvf rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft File: 535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft (raw, json) Hash identifier: snTROItPHWiTif47qy4jTaHVVvZIMzpodbeo26dC4K4= Subject key identifier: D1:FF:56:61:65:F9:9A:25:1D:C7:B1:13:EF:01:B4:B5:17:FE:60:0B Authority key identifier: 53:5B:FA:76:53:1C:00:E1:FC:8B:55:4B:61:55:A1:7D:4E:3F:79:CC Certificate issuer: /CN=535BFA76531C00E1FC8B554B6155A17D4E3F79CC Certificate serial: 3DB16D5EB5D916B1ECF25C0A4240D83EBB48C0EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft Manifest number: 0E Signing time: Tue 12 May 2026 16:36:11 +0000 Manifest this update: Tue 12 May 2026 16:31:11 +0000 Manifest next update: Wed 13 May 2026 18:18:11 +0000 Files and hashes: 1: 535BFA76531C00E1FC8B554B6155A17D4E3F79CC.crl (hash: 2dczlSPsx5AYuPQ5EgYhr0xi8zz+YAa7+G6VlyHrA/A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.crl rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b1:6d:5e:b5:d9:16:b1:ec:f2:5c:0a:42:40:d8:3e:bb:48:c0:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535BFA76531C00E1FC8B554B6155A17D4E3F79CC Validity Not Before: May 12 16:31:11 2026 GMT Not After : May 13 18:18:11 2026 GMT Subject: CN=D1FF566165F99A251DC7B113EF01B4B517FE600B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4e:e8:42:41:ba:25:2d:64:b9:f6:70:83:1e: 25:6c:64:59:f5:55:c7:bc:84:41:7b:bd:60:84:7f: 3a:ba:3f:87:54:33:ef:c9:9a:3f:fb:95:1b:3a:01: ba:6d:bb:72:05:43:9c:c2:bf:c7:10:6a:6a:15:e4: 21:a9:d7:d5:aa:8a:d5:40:5b:f5:a0:15:19:85:84: bf:72:83:9b:dc:37:b1:eb:ea:51:7a:3e:7f:04:a1: f4:48:df:ed:0b:f2:24:56:7f:f9:e2:aa:0d:bc:58: ff:4a:27:c9:de:f8:74:3e:46:15:42:00:8d:41:31: 63:aa:b7:20:72:85:57:98:9b:b5:c9:38:62:64:b6: 1d:da:9e:11:2f:30:f0:85:c4:ce:a5:2f:ed:f0:c2: ef:67:6e:77:99:d5:d6:01:8a:9d:12:d7:c9:26:8a: ef:46:98:0e:40:4b:53:20:14:bc:51:ff:69:e0:39: 3f:67:14:b4:04:55:28:70:6e:25:39:da:af:a4:65: 8f:e4:f0:9d:3b:bd:7a:52:48:60:e9:92:05:91:ae: e0:63:d8:ac:d3:6c:82:f5:79:c3:b8:84:e6:f8:f0: c0:fc:6f:a8:69:3e:b4:b2:f4:a9:f3:24:ee:b9:73: 70:c3:23:47:82:bf:d0:f6:b8:ab:46:e3:2d:a1:43: 1e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FF:56:61:65:F9:9A:25:1D:C7:B1:13:EF:01:B4:B5:17:FE:60:0B X509v3 Authority Key Identifier: keyid:53:5B:FA:76:53:1C:00:E1:FC:8B:55:4B:61:55:A1:7D:4E:3F:79:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:53:56:35:6c:5d:03:03:a1:c4:5f:2a:25:71:e7:ef:cd:97: d7:69:50:a6:32:69:2c:1e:80:3e:cf:04:b4:19:ba:56:be:9c: 6f:7c:59:eb:4a:30:24:fc:90:9c:56:91:65:dc:3a:3b:a0:73: a4:d0:4a:ea:66:6b:f0:45:3a:39:7e:47:b1:d4:30:a3:cd:e0: e8:09:5a:5a:a6:13:5c:f4:56:74:18:bf:48:2f:3f:a4:b6:c6: 54:2d:a0:ab:ce:78:c6:70:7c:ef:d5:bf:df:56:e9:a2:6f:10: 8c:54:ed:87:c4:cc:de:62:f8:ba:b4:2b:28:54:b6:df:66:fb: 32:0d:96:7a:9d:fd:97:6d:93:f9:ca:e5:8c:23:02:49:98:54: 86:68:4a:a3:9d:4e:d9:f3:8a:84:c3:7c:ee:0d:a3:cf:e2:f5: c3:4c:c3:f9:c4:79:83:5c:cc:09:1d:52:98:9a:aa:0f:86:f4: a6:12:06:f3:b5:76:11:c1:1d:5b:b8:88:21:53:80:d5:81:f4: 15:ba:bb:27:1c:88:7e:5f:74:06:8e:44:7e:e2:2a:2c:d9:b8: 96:8c:db:b4:9b:42:1d:02:2b:1e:fb:c8:76:6e:c7:96:ed:d5: ab:a4:a7:7f:d3:34:38:bc:89:c5:38:91:53:0c:46:4c:32:67: 31:b7:0d:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPbFtXrXZFrHs8lwKQkDYPrtIwO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QkZBNzY1MzFDMDBFMUZDOEI1NTRCNjE1NUExN0Q0 RTNGNzlDQzAeFw0yNjA1MTIxNjMxMTFaFw0yNjA1MTMxODE4MTFaMDMxMTAvBgNV BAMTKEQxRkY1NjYxNjVGOTlBMjUxREM3QjExM0VGMDFCNEI1MTdGRTYwMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUTuhCQbolLWS59nCDHiVsZFn1 Vce8hEF7vWCEfzq6P4dUM+/Jmj/7lRs6Abptu3IFQ5zCv8cQamoV5CGp19WqitVA W/WgFRmFhL9yg5vcN7Hr6lF6Pn8EofRI3+0L8iRWf/niqg28WP9KJ8ne+HQ+RhVC AI1BMWOqtyByhVeYm7XJOGJkth3anhEvMPCFxM6lL+3wwu9nbneZ1dYBip0S18km iu9GmA5AS1MgFLxR/2ngOT9nFLQEVShwbiU52q+kZY/k8J07vXpSSGDpkgWRruBj 2KzTbIL1ecO4hOb48MD8b6hpPrSy9KnzJO65c3DDI0eCv9D2uKtG4y2hQx55AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0f9WYWX5miUdx7ET7wG0tRf+YAswHwYDVR0j BBgwFoAUU1v6dlMcAOH8i1VLYVWhfU4/ecwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDFiNmRkOWItZDE1Mi00YzhmLTg3YjctNjI5ZWI4MDhmOTExLzAvNTM1QkZBNzY1 MzFDMDBFMUZDOEI1NTRCNjE1NUExN0Q0RTNGNzlDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzVCRkE3NjUzMUMwMEUxRkM4QjU1NEI2MTU1QTE3RDRFM0Y3 OUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDFiNmRkOWItZDE1Mi00YzhmLTg3 YjctNjI5ZWI4MDhmOTExLzAvNTM1QkZBNzY1MzFDMDBFMUZDOEI1NTRCNjE1NUEx N0Q0RTNGNzlDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlTVjVsXQMDocRfKiVx5+/Nl9dpUKYyaSwe gD7PBLQZula+nG98WetKMCT8kJxWkWXcOjugc6TQSupma/BFOjl+R7HUMKPN4OgJ WlqmE1z0VnQYv0gvP6S2xlQtoKvOeMZwfO/Vv99W6aJvEIxU7YfEzN5i+Lq0KyhU tt9m+zINlnqd/Zdtk/nK5YwjAkmYVIZoSqOdTtnzioTDfO4No8/i9cNMw/nEeYNc zAkdUpiaqg+G9KYSBvO1dhHBHVu4iCFTgNWB9BW6uycciH5fdAaORH7iKizZuJaM 27SbQh0CKx77yHZux5bt1aukp3/TNDi8icU4kVMMRkwyZzG3DWk= -----END CERTIFICATE-----Generated at Wed May 13 00:53:56 2026 by rpki-client