$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft File: 935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft (raw, json) Hash identifier: qwhE5/pyJ3yp4InHsFZCMREzKqGQS9mX+/R43QlPW6c= Subject key identifier: 5B:04:3E:9F:93:B1:C3:6F:9F:C2:15:F2:2A:C2:AB:BE:47:4B:78:F2 Authority key identifier: 93:5D:D1:43:14:C9:2C:CD:3B:1B:65:E6:87:51:DA:3E:87:B1:05:7C Certificate issuer: /CN=935DD14314C92CCD3B1B65E68751DA3E87B1057C Certificate serial: 7D9A11094D15F800CE32AF378A3323AADFDF8A40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935DD14314C92CCD3B1B65E68751DA3E87B1057C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 04:51:25 +0000 Manifest this update: Fri 25 Sep 2026 04:46:25 +0000 Manifest next update: Sat 26 Sep 2026 06:25:25 +0000 Files and hashes: 1: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: kjEpWP2mRiJBPHjX3tFZhbKjrbBSMQGM2y+PNic1u8w=) 2: 935DD14314C92CCD3B1B65E68751DA3E87B1057C.crl (hash: NTCzrGIV4AgCriemyIve2GjcIjVYlnpbM+S2z5jVxSU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.crl rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935DD14314C92CCD3B1B65E68751DA3E87B1057C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 06:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:9a:11:09:4d:15:f8:00:ce:32:af:37:8a:33:23:aa:df:df:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935DD14314C92CCD3B1B65E68751DA3E87B1057C Validity Not Before: Sep 25 04:46:25 2026 GMT Not After : Sep 26 06:25:25 2026 GMT Subject: CN=5B043E9F93B1C36F9FC215F22AC2ABBE474B78F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:46:3b:94:0a:9e:8e:a4:04:23:db:99:a4:8b: 20:63:a9:10:55:fb:f8:03:8c:0a:09:62:66:ba:36: 8c:fd:c6:0e:53:3e:89:8f:8c:b9:79:e2:92:b8:3c: a5:83:82:d6:5e:07:40:44:7a:15:1d:60:0d:3c:92: d6:f8:43:9d:aa:8c:9e:78:8c:6f:ff:2b:66:f0:50: 8e:39:51:ab:6c:96:0e:97:6b:cd:bb:42:d4:90:f9: d2:de:10:f0:e4:f9:42:53:e9:5d:a7:c0:ff:96:bb: 8b:ed:2c:d0:84:f8:fb:86:47:e0:5c:cd:a3:44:ac: 10:21:15:7b:7c:57:96:c9:65:dc:7d:bd:4f:06:d0: b5:0a:e3:e9:3e:d6:a6:55:ef:69:e3:9d:d1:f0:e5: df:45:62:b7:bf:b8:c5:a3:a2:55:70:e3:8a:d2:ec: bc:07:99:c6:df:da:c1:c2:f7:0f:f7:86:92:11:e7: 80:4c:27:a8:ba:72:55:fc:91:5f:c7:68:d3:78:dc: cc:57:62:15:da:fd:a9:98:d1:65:6e:99:80:e3:1f: cd:c3:df:9c:34:49:61:bc:79:2b:a6:9f:f8:ce:08: ce:27:a9:bb:f2:62:38:1c:d1:7e:ef:0b:6f:8e:e0: 0b:53:c0:40:6e:d4:82:46:8e:a8:ae:74:19:72:4e: 6b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:04:3E:9F:93:B1:C3:6F:9F:C2:15:F2:2A:C2:AB:BE:47:4B:78:F2 X509v3 Authority Key Identifier: keyid:93:5D:D1:43:14:C9:2C:CD:3B:1B:65:E6:87:51:DA:3E:87:B1:05:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935DD14314C92CCD3B1B65E68751DA3E87B1057C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:94:74:4c:70:e1:8d:3e:ca:ee:9d:63:38:b5:50:5b:55:b2: f5:16:7b:7a:e1:4e:9c:77:ea:ca:12:b9:70:39:64:de:fc:5b: 01:39:70:81:35:72:2f:bb:03:1e:ca:90:26:1c:0e:c3:d0:48: 4e:fe:37:ea:ce:09:06:50:bb:e8:9d:69:11:c1:18:db:89:50: 6b:d3:79:3e:1d:af:23:37:ae:28:44:38:52:0b:15:d5:c9:18: f1:c6:83:fa:4b:f5:6f:7f:7b:26:ed:fc:2b:99:cb:d9:da:58: f8:e3:97:fe:a2:19:65:b7:09:0b:01:66:c1:61:2c:c9:e1:ca: 93:00:03:06:c2:f1:17:0a:f0:b7:d2:6a:b8:bf:0a:1f:b3:95: b3:75:f6:07:09:5c:c7:59:e1:54:9e:8d:4b:df:d6:75:0b:0d: 9f:33:30:7b:e5:23:69:7d:ac:69:11:81:29:68:c8:e3:80:e0: a9:3c:df:36:a8:6a:cd:56:1e:57:a3:02:02:b9:e8:31:33:38: 81:c0:1f:d8:5e:ea:f7:6a:5c:19:fc:a2:71:55:e0:b6:7e:cb: 93:e5:04:af:e7:1c:68:0b:ef:57:a2:04:f1:7c:57:d7:bf:78: 91:bf:38:0c:a4:9a:5b:8a:24:07:21:7e:7b:3a:f6:63:11:59: 3c:21:5d:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfZoRCU0V+ADOMq83ijMjqt/fikAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1REQxNDMxNEM5MkNDRDNCMUI2NUU2ODc1MURBM0U4 N0IxMDU3QzAeFw0yNjA5MjUwNDQ2MjVaFw0yNjA5MjYwNjI1MjVaMDMxMTAvBgNV BAMTKDVCMDQzRTlGOTNCMUMzNkY5RkMyMTVGMjJBQzJBQkJFNDc0Qjc4RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVRjuUCp6OpAQj25mkiyBjqRBV +/gDjAoJYma6Noz9xg5TPomPjLl54pK4PKWDgtZeB0BEehUdYA08ktb4Q52qjJ54 jG//K2bwUI45Uatslg6Xa827QtSQ+dLeEPDk+UJT6V2nwP+Wu4vtLNCE+PuGR+Bc zaNErBAhFXt8V5bJZdx9vU8G0LUK4+k+1qZV72njndHw5d9FYre/uMWjolVw44rS 7LwHmcbf2sHC9w/3hpIR54BMJ6i6clX8kV/HaNN43MxXYhXa/amY0WVumYDjH83D 35w0SWG8eSumn/jOCM4nqbvyYjgc0X7vC2+O4AtTwEBu1IJGjqiudBlyTmu9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWwQ+n5Oxw2+fwhXyKsKrvkdLePIwHwYDVR0j BBgwFoAUk13RQxTJLM07G2Xmh1HaPoexBXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWEzYjY4ODEtYmExMS00MzMwLWExNjQtYjU1ZjQyMDg1Yjg5LzAvOTM1REQxNDMx NEM5MkNDRDNCMUI2NUU2ODc1MURBM0U4N0IxMDU3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzVERDE0MzE0QzkyQ0NEM0IxQjY1RTY4NzUxREEzRTg3QjEw NTdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWEzYjY4ODEtYmExMS00MzMwLWEx NjQtYjU1ZjQyMDg1Yjg5LzAvOTM1REQxNDMxNEM5MkNDRDNCMUI2NUU2ODc1MURB M0U4N0IxMDU3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmUdExw4Y0+yu6dYzi1UFtVsvUWe3rhTpx3 6soSuXA5ZN78WwE5cIE1ci+7Ax7KkCYcDsPQSE7+N+rOCQZQu+idaRHBGNuJUGvT eT4dryM3rihEOFILFdXJGPHGg/pL9W9/eybt/CuZy9naWPjjl/6iGWW3CQsBZsFh LMnhypMAAwbC8RcK8LfSari/Ch+zlbN19gcJXMdZ4VSejUvf1nULDZ8zMHvlI2l9 rGkRgSloyOOA4Kk83zaoas1WHlejAgK56DEzOIHAH9he6vdqXBn8onFV4LZ+y5Pl BK/nHGgL71eiBPF8V9e/eJG/OAykmluKJAchfns69mMRWTwhXQ4= -----END CERTIFICATE-----Generated at Fri Sep 25 15:50:21 2026 by rpki-client