$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft File: 935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft (raw, json) Hash identifier: Ytev+Lx77xd5ydOhM2/nn+Ug4XhTm50XvEcLI3dZBkA= Subject key identifier: D9:B0:59:AE:5A:16:21:D1:F0:4E:FA:54:34:8C:9F:E2:51:5A:F5:F9 Authority key identifier: 93:5F:90:BC:D1:5D:D0:7F:7A:AF:DC:21:AE:37:2B:1F:CF:50:71:7C Certificate issuer: /CN=935F90BCD15DD07F7AAFDC21AE372B1FCF50717C Certificate serial: 63978EF7D418D1B20AB7DB7EB050230A3BA18E1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 05:52:43 +0000 Manifest this update: Fri 25 Sep 2026 05:47:43 +0000 Manifest next update: Sat 26 Sep 2026 08:42:43 +0000 Files and hashes: 1: 3130332e3139312e37302e302f32332d3233203d3e20313439393134.roa (hash: QKDg88NxsGHdPaqwDjdhk2T8gJbvaIxQQY3R5hnscJY=) 2: 3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa (hash: ON1gSG84QwnmMGmDUKoxl7b2DGJGtr4oSF5KUCcnJXU=) 3: 935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl (hash: yKiCVVR46hB3lY/T57bYlpXRzd5RL9LMn3/QKD3+i7c=) 4: 3130332e3139312e37312e302f32342d3234203d3e20313439393134.roa (hash: bpEJI5kwOdxD/qKqncYynaKSifhTOw7KVCK2hYNC5Sk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 08:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:97:8e:f7:d4:18:d1:b2:0a:b7:db:7e:b0:50:23:0a:3b:a1:8e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935F90BCD15DD07F7AAFDC21AE372B1FCF50717C Validity Not Before: Sep 25 05:47:43 2026 GMT Not After : Sep 26 08:42:43 2026 GMT Subject: CN=D9B059AE5A1621D1F04EFA54348C9FE2515AF5F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dd:21:47:62:42:b8:d3:85:d5:fe:d6:6d:d3: 6b:33:34:57:2a:9e:e9:ea:cf:23:f2:cd:f4:52:47: b3:af:d6:cd:e2:a0:dd:3a:3e:80:bd:78:39:41:45: a3:9e:89:4c:00:cd:6b:8a:e4:c7:85:c0:5c:60:7b: 48:9d:43:c7:87:b8:70:4e:6f:f9:60:7d:e6:72:cf: b8:29:60:c9:42:d0:99:b1:f9:8d:20:77:b3:88:8b: 70:c1:19:d0:1e:3d:0a:68:d2:3f:f9:a5:bc:7f:0b: df:86:e5:1e:81:40:62:8a:68:d9:e2:26:7f:98:74: fc:31:36:f9:27:09:74:0a:06:1c:1a:9d:98:59:dc: e4:7b:cc:1a:8d:3c:f7:9b:2e:cc:7f:61:be:32:bf: bc:3e:8f:23:33:c2:65:91:14:25:6f:d6:43:49:fe: c1:40:c2:4b:73:1b:e3:81:3c:7f:42:4c:5d:d4:16: 30:23:47:32:0f:bc:ec:54:55:76:86:fd:2a:05:27: 98:1e:b5:21:2e:2f:f3:53:54:2b:ab:16:b8:ce:21: 64:33:63:cc:b4:65:93:e3:3c:34:dd:b0:82:c7:c5: a2:48:42:49:fd:6c:59:f3:69:04:25:da:94:a7:10: e0:2e:f0:32:52:99:71:04:dd:51:67:80:d3:8f:bd: 2b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B0:59:AE:5A:16:21:D1:F0:4E:FA:54:34:8C:9F:E2:51:5A:F5:F9 X509v3 Authority Key Identifier: keyid:93:5F:90:BC:D1:5D:D0:7F:7A:AF:DC:21:AE:37:2B:1F:CF:50:71:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:5a:38:9d:9e:20:99:4e:7f:b6:6d:f9:fb:be:c6:83:a2:ad: 67:1f:33:fd:41:5b:ef:f6:1a:b0:b4:c4:77:9e:2e:b6:dd:7f: 47:e1:61:ca:bf:28:33:84:6a:42:86:8a:13:03:7f:a8:d6:86: 61:48:d2:a0:3a:54:07:5c:24:d5:0d:88:46:79:ec:1a:cf:8a: 22:03:69:56:51:71:a1:15:d2:49:99:ef:72:99:e9:4e:b1:5f: f8:81:7a:c9:bb:31:6a:e3:c5:df:61:ff:fc:51:6f:31:56:88: dd:18:33:bd:d3:b1:17:10:c8:09:08:ad:86:1b:2d:1a:46:91: ef:93:45:d4:d7:f8:24:51:fc:53:1e:c7:3b:0a:62:99:07:21: ec:69:a9:38:f1:97:92:36:8c:5e:c0:0c:23:d2:c0:9b:d2:c7: 18:a6:0a:29:f1:d0:2a:0a:49:30:b4:32:6f:2c:c7:fe:4d:b1: 16:0e:2f:15:97:bc:b3:8d:a1:7f:34:77:e7:f6:14:67:c3:c9: 87:1d:6c:7a:cf:7c:b3:cb:d3:a8:45:8f:26:38:a3:89:7b:a5: 5d:1c:0f:96:b8:b7:65:ff:c1:c6:a9:c5:15:35:80:32:1f:18: a7:f3:f9:87:64:78:28:84:1a:21:aa:9c:ad:65:aa:4f:eb:fc: 6c:68:11:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY5eO99QY0bIKt9t+sFAjCjuhjhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1RjkwQkNEMTVERDA3RjdBQUZEQzIxQUUzNzJCMUZD RjUwNzE3QzAeFw0yNjA5MjUwNTQ3NDNaFw0yNjA5MjYwODQyNDNaMDMxMTAvBgNV BAMTKEQ5QjA1OUFFNUExNjIxRDFGMDRFRkE1NDM0OEM5RkUyNTE1QUY1RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW3SFHYkK404XV/tZt02szNFcq nunqzyPyzfRSR7Ov1s3ioN06PoC9eDlBRaOeiUwAzWuK5MeFwFxge0idQ8eHuHBO b/lgfeZyz7gpYMlC0Jmx+Y0gd7OIi3DBGdAePQpo0j/5pbx/C9+G5R6BQGKKaNni Jn+YdPwxNvknCXQKBhwanZhZ3OR7zBqNPPebLsx/Yb4yv7w+jyMzwmWRFCVv1kNJ /sFAwktzG+OBPH9CTF3UFjAjRzIPvOxUVXaG/SoFJ5getSEuL/NTVCurFrjOIWQz Y8y0ZZPjPDTdsILHxaJIQkn9bFnzaQQl2pSnEOAu8DJSmXEE3VFngNOPvSuzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2bBZrloWIdHwTvpUNIyf4lFa9fkwHwYDVR0j BBgwFoAUk1+QvNFd0H96r9whrjcrH89QcXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjQwZTFmMjAtYjBjZC00NjliLTkxMDYtMWVhMDAwNzk1ZjlmLzAvOTM1RjkwQkNE MTVERDA3RjdBQUZEQzIxQUUzNzJCMUZDRjUwNzE3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzVGOTBCQ0QxNUREMDdGN0FBRkRDMjFBRTM3MkIxRkNGNTA3 MTdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjQwZTFmMjAtYjBjZC00NjliLTkx MDYtMWVhMDAwNzk1ZjlmLzAvOTM1RjkwQkNEMTVERDA3RjdBQUZEQzIxQUUzNzJC MUZDRjUwNzE3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChaOJ2eIJlOf7Zt+fu+xoOirWcfM/1BW+/2 GrC0xHeeLrbdf0fhYcq/KDOEakKGihMDf6jWhmFI0qA6VAdcJNUNiEZ57BrPiiID aVZRcaEV0kmZ73KZ6U6xX/iBesm7MWrjxd9h//xRbzFWiN0YM73TsRcQyAkIrYYb LRpGke+TRdTX+CRR/FMexzsKYpkHIexpqTjxl5I2jF7ADCPSwJvSxximCinx0CoK STC0Mm8sx/5NsRYOLxWXvLONoX80d+f2FGfDyYcdbHrPfLPL06hFjyY4o4l7pV0c D5a4t2X/wcapxRU1gDIfGKfz+YdkeCiEGiGqnK1lqk/r/GxoEbU= -----END CERTIFICATE-----Generated at Fri Sep 25 21:47:29 2026 by rpki-client