$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft File: 535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft (raw, json) Hash identifier: PNnIFmHNeNHE2vKgVcdhQdEOjXPN+szOxTbYm7A89v4= Subject key identifier: 96:11:86:74:B9:0C:93:B4:79:41:77:DC:BA:F2:E8:E3:23:C5:E8:F8 Authority key identifier: 53:5C:2B:E8:C4:77:19:76:CD:35:DA:8D:0F:29:2C:8A:1E:5E:2F:99 Certificate issuer: /CN=535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99 Certificate serial: 2AF6DE253DC2AF39DEAA8F399E9348B3239A34C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 14:29:02 +0000 Manifest this update: Wed 23 Sep 2026 14:24:02 +0000 Manifest next update: Thu 24 Sep 2026 17:06:02 +0000 Files and hashes: 1: 3230332e38312e3138342e302f32312d3234203d3e203234353338.roa (hash: XHqyQLGVve3ZT8Kfh4uyyc91xlGDqpssM8vgHeuLO+M=) 2: 535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl (hash: ajF8mIvgrZN0S7L0ixAnACo7+nakrI1FZUxpBByvQkk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f6:de:25:3d:c2:af:39:de:aa:8f:39:9e:93:48:b3:23:9a:34:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99 Validity Not Before: Sep 23 14:24:02 2026 GMT Not After : Sep 24 17:06:02 2026 GMT Subject: CN=96118674B90C93B4794177DCBAF2E8E323C5E8F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:51:af:7f:9d:7f:42:45:a1:59:ef:99:36: ca:d0:c4:74:4c:9f:0a:d4:57:df:65:13:2a:fc:e8: b9:b3:38:17:23:05:bf:4f:13:06:8c:56:69:cb:b7: e1:8b:3f:78:15:9a:71:c0:e7:3e:b7:66:5f:9b:bf: 58:d0:64:28:0d:73:99:07:61:10:9d:3b:75:aa:34: f8:57:50:e5:6d:61:8c:c6:53:c2:88:d4:c1:c9:1d: 4c:79:90:a8:7d:d4:6c:9d:3c:16:33:a3:66:70:e1: dd:4b:2b:bc:e7:47:b3:8d:d3:2c:f6:63:3c:48:92: 12:bd:49:d1:7a:04:08:fd:8b:91:8b:42:1a:6c:39: 59:5f:73:02:07:3e:4e:bb:3c:60:ac:b9:a6:11:88: c7:9e:59:a5:b2:fc:ee:6e:e3:23:c2:9f:e5:2c:cb: 19:76:d2:21:3a:79:94:8c:e5:9d:8f:53:4d:bc:72: 55:37:ac:e9:b1:c7:dc:57:e6:86:8f:cd:58:77:03: 58:cb:30:51:0b:5f:12:54:55:b5:54:32:50:d0:15: 97:b9:a4:35:39:a1:36:49:ba:b1:58:86:7d:2a:38: 2b:38:da:16:e0:b8:85:64:fa:07:d0:2d:42:f7:d7: 70:65:a9:cb:b1:be:0d:a2:18:4a:f3:f6:31:a3:1a: a7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:11:86:74:B9:0C:93:B4:79:41:77:DC:BA:F2:E8:E3:23:C5:E8:F8 X509v3 Authority Key Identifier: keyid:53:5C:2B:E8:C4:77:19:76:CD:35:DA:8D:0F:29:2C:8A:1E:5E:2F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:e1:5e:23:70:9c:5b:c4:d0:6b:c7:24:e6:1a:6d:5a:e8:96: 3d:da:fb:4f:21:6a:c9:65:7e:1e:06:d7:c9:9f:6e:59:5b:2a: d3:50:9d:da:da:ee:60:12:d4:60:0b:70:c7:cf:0a:70:b6:38: b5:ad:92:25:4b:af:b9:5d:83:58:77:e8:b2:f7:31:93:ef:27: e2:3e:ab:3e:63:62:3d:84:2f:e5:c8:bc:7e:0a:3f:4d:6e:47: 80:74:08:11:d8:d6:01:0d:2d:e4:f2:5e:6c:7f:bf:94:61:cf: d6:a7:5c:68:08:02:92:c5:6f:9a:9a:14:71:bf:ef:8b:61:f1: 84:70:f0:ba:7d:88:f8:8b:c1:e5:70:b8:f1:29:82:0e:dd:b7: 34:4f:1b:7b:08:fe:6c:7e:f0:3b:03:5f:2a:4d:42:0c:0c:ea: 28:4b:93:2a:70:da:6c:40:3c:a2:0c:1e:53:d7:50:c4:eb:22: 49:21:e5:a3:54:44:1e:78:d0:65:d7:0d:bd:a0:0f:8d:ea:ee: b6:6c:16:e4:5a:26:6f:b7:f7:cf:5c:db:bb:c1:ba:18:ac:5a: 16:8b:6a:8e:8c:92:76:a1:0d:b8:25:37:af:a4:e9:bd:38:cd: d9:8d:c2:45:ef:16:d5:4f:5f:ad:5f:33:0a:f9:27:9e:7b:27: 9a:ff:24:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKvbeJT3Crzneqo85npNIsyOaNMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QzJCRThDNDc3MTk3NkNEMzVEQThEMEYyOTJDOEEx RTVFMkY5OTAeFw0yNjA5MjMxNDI0MDJaFw0yNjA5MjQxNzA2MDJaMDMxMTAvBgNV BAMTKDk2MTE4Njc0QjkwQzkzQjQ3OTQxNzdEQ0JBRjJFOEUzMjNDNUU4RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8GVGvf51/QkWhWe+ZNsrQxHRM nwrUV99lEyr86LmzOBcjBb9PEwaMVmnLt+GLP3gVmnHA5z63Zl+bv1jQZCgNc5kH YRCdO3WqNPhXUOVtYYzGU8KI1MHJHUx5kKh91GydPBYzo2Zw4d1LK7znR7ON0yz2 YzxIkhK9SdF6BAj9i5GLQhpsOVlfcwIHPk67PGCsuaYRiMeeWaWy/O5u4yPCn+Us yxl20iE6eZSM5Z2PU028clU3rOmxx9xX5oaPzVh3A1jLMFELXxJUVbVUMlDQFZe5 pDU5oTZJurFYhn0qOCs42hbguIVk+gfQLUL313Blqcuxvg2iGErz9jGjGqdFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlhGGdLkMk7R5QXfcuvLo4yPF6PgwHwYDVR0j BBgwFoAUU1wr6MR3GXbNNdqNDyksih5eL5kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFhMjlhNzUtYzViOS00NzViLTlkOTYtNmQxYTE1ZWFlMjRkLzAvNTM1QzJCRThD NDc3MTk3NkNEMzVEQThEMEYyOTJDOEExRTVFMkY5OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzVDMkJFOEM0NzcxOTc2Q0QzNURBOEQwRjI5MkM4QTFFNUUy Rjk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFhMjlhNzUtYzViOS00NzViLTlk OTYtNmQxYTE1ZWFlMjRkLzAvNTM1QzJCRThDNDc3MTk3NkNEMzVEQThEMEYyOTJD OEExRTVFMkY5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXhXiNwnFvE0GvHJOYabVrolj3a+08hasll fh4G18mfbllbKtNQndra7mAS1GALcMfPCnC2OLWtkiVLr7ldg1h36LL3MZPvJ+I+ qz5jYj2EL+XIvH4KP01uR4B0CBHY1gENLeTyXmx/v5Rhz9anXGgIApLFb5qaFHG/ 74th8YRw8Lp9iPiLweVwuPEpgg7dtzRPG3sI/mx+8DsDXypNQgwM6ihLkypw2mxA PKIMHlPXUMTrIkkh5aNURB540GXXDb2gD43q7rZsFuRaJm+3989c27vBuhisWhaL ao6MknahDbglN6+k6b04zdmNwkXvFtVPX61fMwr5J557J5r/JF8= -----END CERTIFICATE-----Generated at Wed Sep 23 20:18:17 2026 by rpki-client