$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft File: 535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft (raw, json) Hash identifier: A1Bb3B7VjDjjL0wAeWbxGB3HNRArd0bvosK5Fhuaj78= Subject key identifier: 68:16:CF:35:62:B0:55:91:9C:41:D6:65:47:79:C8:D6:48:94:80:C5 Authority key identifier: 53:5C:2B:E8:C4:77:19:76:CD:35:DA:8D:0F:29:2C:8A:1E:5E:2F:99 Certificate issuer: /CN=535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99 Certificate serial: 55807DCB00D420944732D52E19D77C8CD87F06FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:10:47 +0000 Manifest this update: Tue 12 May 2026 16:05:47 +0000 Manifest next update: Wed 13 May 2026 19:53:47 +0000 Files and hashes: 1: 3230332e38312e3138342e302f32312d3234203d3e203234353338.roa (hash: XHqyQLGVve3ZT8Kfh4uyyc91xlGDqpssM8vgHeuLO+M=) 2: 535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl (hash: ufHjULU4UzuIt4vqd3FO+xHh2xnGQvxwxyq5DmwiZpE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:80:7d:cb:00:d4:20:94:47:32:d5:2e:19:d7:7c:8c:d8:7f:06:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99 Validity Not Before: May 12 16:05:47 2026 GMT Not After : May 13 19:53:47 2026 GMT Subject: CN=6816CF3562B055919C41D6654779C8D6489480C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dc:b4:35:02:7f:f8:b6:44:e1:0a:51:88:17: c7:15:45:1d:ec:a3:b1:f1:5b:a5:e5:ab:a8:7f:06: e2:90:59:cc:96:37:a8:20:9c:72:66:4c:16:76:ce: 56:66:94:9c:3a:ce:53:b2:4e:e1:1d:ac:83:66:a5: 35:30:92:c4:be:eb:da:8b:b6:27:94:86:09:2f:9b: d3:cb:cd:9b:52:f0:47:e5:5f:a5:ab:22:9b:cd:1f: 46:48:9a:9b:9a:81:bf:5c:af:ab:dc:d5:35:ca:37: 58:53:70:39:f2:2b:d7:ee:68:d2:5f:fa:d6:c7:a6: d0:db:84:6a:cf:04:53:59:db:89:41:51:5c:ca:90: c4:4a:52:45:47:60:c0:7a:db:38:dd:40:9f:d8:11: 97:65:c5:56:f0:58:7b:66:6b:3c:48:91:e4:e6:e3: b7:36:24:ba:ae:6d:ad:fc:2c:70:b2:86:3d:26:b5: 6b:30:21:d6:2a:b0:07:c9:c9:d2:e4:60:60:6d:c3: cf:7b:24:d1:e3:2c:64:b9:b3:e1:d7:4e:ba:0d:25: 99:de:5a:02:d6:23:44:59:6b:52:e5:00:97:da:d3: 99:75:de:2d:8f:e7:9a:0f:04:a1:12:37:58:d1:1f: ed:75:86:60:33:cf:bd:44:ff:4b:5b:12:ed:c5:9a: 2d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:16:CF:35:62:B0:55:91:9C:41:D6:65:47:79:C8:D6:48:94:80:C5 X509v3 Authority Key Identifier: keyid:53:5C:2B:E8:C4:77:19:76:CD:35:DA:8D:0F:29:2C:8A:1E:5E:2F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:9a:fe:d0:ab:4c:30:39:d2:cc:a1:ce:0b:69:19:e5:3e:2c: b6:9f:fd:a3:81:ea:11:5c:ed:70:c2:73:6b:c0:11:13:20:c9: 4e:60:d7:81:a9:fd:33:52:6c:24:e6:88:e0:70:18:c9:73:f9: e0:8e:50:0c:a0:e2:02:ce:39:e3:bc:ca:6d:93:67:a4:08:76: 3e:03:fb:54:7f:0d:03:fe:11:52:49:50:d5:d6:18:39:37:ce: 4c:30:af:bb:0f:ff:61:6c:60:90:4f:32:32:5d:cb:c7:a2:a7: 69:be:02:48:a6:6b:ad:db:2a:08:d6:0a:f8:7c:a2:2e:15:8b: 17:42:44:86:6b:4c:04:99:31:9b:c0:62:86:0a:b2:23:d6:83: 0a:4a:cf:fc:b0:5d:f8:17:10:9a:6e:79:2b:01:7a:05:8d:90: bb:87:2e:17:5e:ac:e1:7d:92:7b:96:72:ca:96:6c:96:ac:4f: 20:34:c1:95:a2:d3:f6:41:dc:76:d5:ed:64:6c:71:19:8d:d3: 8b:c5:6f:7b:9a:06:92:5f:5c:8e:93:b1:28:b2:32:6e:7a:72: 2e:17:f5:04:8c:8f:bc:0b:b5:93:8e:f1:e6:5a:b4:67:02:07: 88:3d:58:60:27:be:57:a6:8a:08:d6:29:39:ca:19:db:6d:77: e9:af:61:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVYB9ywDUIJRHMtUuGdd8jNh/BvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QzJCRThDNDc3MTk3NkNEMzVEQThEMEYyOTJDOEEx RTVFMkY5OTAeFw0yNjA1MTIxNjA1NDdaFw0yNjA1MTMxOTUzNDdaMDMxMTAvBgNV BAMTKDY4MTZDRjM1NjJCMDU1OTE5QzQxRDY2NTQ3NzlDOEQ2NDg5NDgwQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc3LQ1An/4tkThClGIF8cVRR3s o7HxW6Xlq6h/BuKQWcyWN6ggnHJmTBZ2zlZmlJw6zlOyTuEdrINmpTUwksS+69qL tieUhgkvm9PLzZtS8EflX6WrIpvNH0ZImpuagb9cr6vc1TXKN1hTcDnyK9fuaNJf +tbHptDbhGrPBFNZ24lBUVzKkMRKUkVHYMB62zjdQJ/YEZdlxVbwWHtmazxIkeTm 47c2JLquba38LHCyhj0mtWswIdYqsAfJydLkYGBtw897JNHjLGS5s+HXTroNJZne WgLWI0RZa1LlAJfa05l13i2P55oPBKESN1jRH+11hmAzz71E/0tbEu3Fmi1/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaBbPNWKwVZGcQdZlR3nI1kiUgMUwHwYDVR0j BBgwFoAUU1wr6MR3GXbNNdqNDyksih5eL5kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFhMjlhNzUtYzViOS00NzViLTlkOTYtNmQxYTE1ZWFlMjRkLzAvNTM1QzJCRThD NDc3MTk3NkNEMzVEQThEMEYyOTJDOEExRTVFMkY5OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzVDMkJFOEM0NzcxOTc2Q0QzNURBOEQwRjI5MkM4QTFFNUUy Rjk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFhMjlhNzUtYzViOS00NzViLTlk OTYtNmQxYTE1ZWFlMjRkLzAvNTM1QzJCRThDNDc3MTk3NkNEMzVEQThEMEYyOTJD OEExRTVFMkY5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCa/tCrTDA50syhzgtpGeU+LLaf/aOB6hFc 7XDCc2vAERMgyU5g14Gp/TNSbCTmiOBwGMlz+eCOUAyg4gLOOeO8ym2TZ6QIdj4D +1R/DQP+EVJJUNXWGDk3zkwwr7sP/2FsYJBPMjJdy8eip2m+Akima63bKgjWCvh8 oi4VixdCRIZrTASZMZvAYoYKsiPWgwpKz/ywXfgXEJpueSsBegWNkLuHLhderOF9 knuWcsqWbJasTyA0wZWi0/ZB3HbV7WRscRmN04vFb3uaBpJfXI6TsSiyMm56ci4X 9QSMj7wLtZOO8eZatGcCB4g9WGAnvlemigjWKTnKGdttd+mvYZc= -----END CERTIFICATE-----Generated at Wed May 13 00:31:31 2026 by rpki-client