$ rpki-client -vvvf rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft File: 535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft (raw, json) Hash identifier: 3uaUMEa+acQ95OlhMaHwZWvTZrO8ROmgOoRk+1IMq2A= Subject key identifier: 2C:23:04:20:DE:17:6F:BB:E9:7F:77:08:4D:04:72:DD:19:AD:DD:93 Authority key identifier: 53:5B:FA:76:53:1C:00:E1:FC:8B:55:4B:61:55:A1:7D:4E:3F:79:CC Certificate issuer: /CN=535BFA76531C00E1FC8B554B6155A17D4E3F79CC Certificate serial: 75C0BA0ACCA758A9BA4797437A5EFF4F52A5E464 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 19:24:35 +0000 Manifest this update: Thu 24 Sep 2026 19:19:35 +0000 Manifest next update: Fri 25 Sep 2026 19:37:35 +0000 Files and hashes: 1: 535BFA76531C00E1FC8B554B6155A17D4E3F79CC.crl (hash: Bx8FPwAC9q1WRwObhRgWg6/PvSyVPh04M8rT14sLCvg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.crl rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c0:ba:0a:cc:a7:58:a9:ba:47:97:43:7a:5e:ff:4f:52:a5:e4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535BFA76531C00E1FC8B554B6155A17D4E3F79CC Validity Not Before: Sep 24 19:19:35 2026 GMT Not After : Sep 25 19:37:35 2026 GMT Subject: CN=2C230420DE176FBBE97F77084D0472DD19ADDD93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1d:27:8b:52:c2:01:ce:32:8a:17:96:18:c0: 25:97:74:df:57:2d:10:b0:09:28:b9:ae:0b:be:54: f2:61:21:4b:28:bb:8e:73:83:9d:c5:74:44:c5:9a: ad:d1:b6:a0:1c:72:2a:be:ac:8d:cd:23:54:b1:a5: df:c1:3d:b6:d8:f5:55:47:57:dd:d8:97:31:39:db: c1:ce:4c:8d:39:c9:42:5a:1d:c3:7d:ee:a9:fa:38: 5f:80:94:bb:b4:14:14:7f:14:52:36:d3:cc:f6:88: 97:3a:ce:3d:80:57:3c:5b:ec:d8:f0:c3:a3:e5:75: f4:9a:fd:ea:62:d6:1f:1a:40:86:f1:ec:df:0b:dc: fa:0c:84:db:9a:2d:55:dd:c6:4f:4c:87:8b:1b:35: 6e:ca:4f:1b:5c:20:af:3c:c0:33:78:08:83:c1:db: c3:ce:88:60:48:97:2d:13:77:65:88:6c:3c:6d:88: f0:ed:e6:93:57:f5:23:9c:fc:34:40:9a:c9:0e:c1: 00:17:18:5d:a3:07:af:49:90:86:9a:af:d9:72:88: f2:8f:92:d5:38:b3:d0:94:b9:2b:3c:f8:8b:df:4b: d0:32:da:91:97:ce:71:cf:bf:36:e5:6a:2f:e4:1f: 91:75:97:8a:8e:b4:bb:f8:ae:8a:cc:f6:29:84:d5: 6b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:23:04:20:DE:17:6F:BB:E9:7F:77:08:4D:04:72:DD:19:AD:DD:93 X509v3 Authority Key Identifier: keyid:53:5B:FA:76:53:1C:00:E1:FC:8B:55:4B:61:55:A1:7D:4E:3F:79:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:4a:c9:dc:7a:82:27:7a:a2:55:e7:a9:be:e3:90:35:39:d5: 09:97:13:db:fe:18:49:95:c8:a0:31:87:42:02:21:af:73:f0: bd:e4:3b:89:aa:cd:93:d9:f6:78:35:06:e1:39:fc:3b:1e:30: fc:b2:5f:89:89:63:80:ab:d0:83:5d:73:eb:6d:32:e4:91:85: 7c:15:49:40:77:c6:31:e9:f4:21:92:d3:59:3e:cd:f3:3e:9a: ec:d0:d1:72:bd:3c:c7:eb:5c:34:b6:19:76:3b:af:1b:14:84: 45:a5:f3:1f:ee:97:4e:bc:e0:40:d5:6e:3b:1c:f6:4e:33:3d: 35:67:95:92:e1:3b:09:41:8a:58:2a:f6:77:e8:21:0b:9d:fb: 7c:76:17:a8:93:b4:2f:18:3c:78:ba:23:dc:88:68:06:13:17: 60:ff:1b:61:78:21:c4:89:df:76:7a:0a:92:13:fa:4a:c5:8f: 6b:be:46:41:86:2c:7d:ed:bc:79:e8:bf:a4:db:f2:e0:65:88: 12:70:07:af:08:49:1a:f0:78:85:a8:54:78:98:1f:2c:10:1a: b1:9b:ff:78:b4:ca:6d:44:ab:58:ac:5c:40:aa:9f:fc:b3:cc: 95:50:e5:e1:73:59:5e:80:c3:f2:f7:b7:10:3b:34:b4:e4:af: 0f:53:82:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdcC6CsynWKm6R5dDel7/T1Kl5GQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QkZBNzY1MzFDMDBFMUZDOEI1NTRCNjE1NUExN0Q0 RTNGNzlDQzAeFw0yNjA5MjQxOTE5MzVaFw0yNjA5MjUxOTM3MzVaMDMxMTAvBgNV BAMTKDJDMjMwNDIwREUxNzZGQkJFOTdGNzcwODREMDQ3MkREMTlBREREOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdHSeLUsIBzjKKF5YYwCWXdN9X LRCwCSi5rgu+VPJhIUsou45zg53FdETFmq3RtqAcciq+rI3NI1Sxpd/BPbbY9VVH V93YlzE528HOTI05yUJaHcN97qn6OF+AlLu0FBR/FFI208z2iJc6zj2AVzxb7Njw w6PldfSa/epi1h8aQIbx7N8L3PoMhNuaLVXdxk9Mh4sbNW7KTxtcIK88wDN4CIPB 28POiGBIly0Td2WIbDxtiPDt5pNX9SOc/DRAmskOwQAXGF2jB69JkIaar9lyiPKP ktU4s9CUuSs8+IvfS9Ay2pGXznHPvzblai/kH5F1l4qOtLv4rorM9imE1WsHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULCMEIN4Xb7vpf3cITQRy3Rmt3ZMwHwYDVR0j BBgwFoAUU1v6dlMcAOH8i1VLYVWhfU4/ecwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDFiNmRkOWItZDE1Mi00YzhmLTg3YjctNjI5ZWI4MDhmOTExLzAvNTM1QkZBNzY1 MzFDMDBFMUZDOEI1NTRCNjE1NUExN0Q0RTNGNzlDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzVCRkE3NjUzMUMwMEUxRkM4QjU1NEI2MTU1QTE3RDRFM0Y3 OUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDFiNmRkOWItZDE1Mi00YzhmLTg3 YjctNjI5ZWI4MDhmOTExLzAvNTM1QkZBNzY1MzFDMDBFMUZDOEI1NTRCNjE1NUEx N0Q0RTNGNzlDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1Kydx6gid6olXnqb7jkDU51QmXE9v+GEmV yKAxh0ICIa9z8L3kO4mqzZPZ9ng1BuE5/DseMPyyX4mJY4Cr0INdc+ttMuSRhXwV SUB3xjHp9CGS01k+zfM+muzQ0XK9PMfrXDS2GXY7rxsUhEWl8x/ul0684EDVbjsc 9k4zPTVnlZLhOwlBilgq9nfoIQud+3x2F6iTtC8YPHi6I9yIaAYTF2D/G2F4IcSJ 33Z6CpIT+krFj2u+RkGGLH3tvHnov6Tb8uBliBJwB68ISRrweIWoVHiYHywQGrGb /3i0ym1Eq1isXECqn/yzzJVQ5eFzWV6Aw/L3txA7NLTkrw9TglU= -----END CERTIFICATE-----Generated at Fri Sep 25 02:52:25 2026 by rpki-client