$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft File: 935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft (raw, json) Hash identifier: P1JMRGZCGVAKnpCehayqQj9/CXen3NVdhxLxWiUcPXw= Subject key identifier: F7:D9:E9:DA:91:D5:2C:0B:6B:E6:06:3D:7F:CB:20:5B:80:D7:5F:38 Authority key identifier: 93:5D:D1:43:14:C9:2C:CD:3B:1B:65:E6:87:51:DA:3E:87:B1:05:7C Certificate issuer: /CN=935DD14314C92CCD3B1B65E68751DA3E87B1057C Certificate serial: 40EEB0F3A5E3968859DF6D607C742AF71D090CB9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935DD14314C92CCD3B1B65E68751DA3E87B1057C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 14:29:32 +0000 Manifest this update: Mon 20 Jul 2026 14:24:32 +0000 Manifest next update: Tue 21 Jul 2026 15:02:32 +0000 Files and hashes: 1: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: kjEpWP2mRiJBPHjX3tFZhbKjrbBSMQGM2y+PNic1u8w=) 2: 935DD14314C92CCD3B1B65E68751DA3E87B1057C.crl (hash: WpkYyOS3WRU2cPP9BXGiE7Yy3aHrm7Q0lCHmXVtrpuM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.crl rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935DD14314C92CCD3B1B65E68751DA3E87B1057C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ee:b0:f3:a5:e3:96:88:59:df:6d:60:7c:74:2a:f7:1d:09:0c:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935DD14314C92CCD3B1B65E68751DA3E87B1057C Validity Not Before: Jul 20 14:24:32 2026 GMT Not After : Jul 21 15:02:32 2026 GMT Subject: CN=F7D9E9DA91D52C0B6BE6063D7FCB205B80D75F38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:52:b1:de:d3:a8:63:0d:10:93:70:2d:71:84: 9e:00:7c:4c:89:6c:c3:4a:07:67:99:d2:32:5a:a1: 61:37:fc:3a:34:6b:01:ef:fb:77:05:5e:59:92:53: 00:9b:5a:dc:8d:56:e1:44:1f:3e:2a:11:22:d9:0d: 81:0f:ce:f2:69:4d:7c:f4:f1:8d:17:58:8d:cb:91: ab:85:bd:85:e9:25:ce:3d:42:93:a7:30:83:7a:c4: 91:00:37:6b:e5:75:bc:b9:a5:fd:d1:89:c2:78:33: fd:25:f7:0f:10:35:8f:3a:d3:94:4e:49:01:9d:90: 3e:32:54:e0:6f:7a:1b:de:0c:66:ba:ca:db:34:a6: 99:63:24:83:83:95:cf:4a:ea:6d:a1:e4:70:4e:d3: cb:cd:7f:d9:1c:40:68:07:30:9a:80:91:1e:1c:2a: 07:cd:9d:cc:fb:81:61:b4:b8:50:0c:93:70:96:25: b5:6d:99:02:cd:0d:4a:a7:13:b9:1d:74:1f:4d:01: 0b:27:dc:62:a1:50:88:ff:06:46:b6:85:75:ef:fa: a5:5d:69:7c:94:2b:ea:60:62:48:60:d1:dd:33:8a: a2:3f:00:6f:16:63:81:a0:56:50:0f:64:be:60:67: 34:08:3c:83:87:be:05:8b:e7:6d:41:ca:08:1d:20: 5c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D9:E9:DA:91:D5:2C:0B:6B:E6:06:3D:7F:CB:20:5B:80:D7:5F:38 X509v3 Authority Key Identifier: keyid:93:5D:D1:43:14:C9:2C:CD:3B:1B:65:E6:87:51:DA:3E:87:B1:05:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935DD14314C92CCD3B1B65E68751DA3E87B1057C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:4e:f0:67:07:2e:c6:1b:8d:fd:7b:56:ad:b2:bf:04:bb:85: 8f:d0:9f:5a:2b:85:6d:97:3d:97:ee:f9:1b:10:ac:26:75:f6: 17:45:58:45:ba:b5:23:fc:3e:13:44:c1:6a:eb:78:79:62:e8: ce:a6:fa:eb:5b:7e:57:98:34:d3:df:06:c5:d5:09:8e:40:19: 98:d8:5f:3c:b2:e1:39:b7:fb:9f:05:96:e8:4a:3a:30:9d:8d: 0a:5c:f5:b9:3b:fe:88:77:02:20:7c:19:62:40:8a:a5:d8:0e: db:71:81:7d:9d:ef:08:15:8c:e0:3b:73:d9:0c:f9:49:02:fc: 04:8c:4b:38:eb:46:5f:01:09:31:ad:46:66:48:94:75:8f:35: 76:7f:71:6c:45:5b:98:08:d6:aa:27:d0:25:a0:02:7e:c1:04: 87:b9:8a:7a:92:77:fd:b1:07:0b:d1:e2:c7:3c:b4:44:63:80: ba:c5:45:23:59:5c:d4:ff:03:c7:11:b9:30:e6:14:d1:ab:6b: b8:6d:12:e0:4b:f1:19:9a:d1:d2:2e:4c:d9:cb:e6:61:43:52: 39:cf:b0:3f:b8:f4:27:e0:f0:19:4b:1d:ef:49:bd:7b:b7:bd: 03:cc:c6:f8:9a:80:c8:6b:42:ea:0a:e3:af:ab:e1:dd:7a:b1: d1:2d:8b:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQO6w86XjlohZ321gfHQq9x0JDLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1REQxNDMxNEM5MkNDRDNCMUI2NUU2ODc1MURBM0U4 N0IxMDU3QzAeFw0yNjA3MjAxNDI0MzJaFw0yNjA3MjExNTAyMzJaMDMxMTAvBgNV BAMTKEY3RDlFOURBOTFENTJDMEI2QkU2MDYzRDdGQ0IyMDVCODBENzVGMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqUrHe06hjDRCTcC1xhJ4AfEyJ bMNKB2eZ0jJaoWE3/Do0awHv+3cFXlmSUwCbWtyNVuFEHz4qESLZDYEPzvJpTXz0 8Y0XWI3LkauFvYXpJc49QpOnMIN6xJEAN2vldby5pf3RicJ4M/0l9w8QNY8605RO SQGdkD4yVOBvehveDGa6yts0ppljJIODlc9K6m2h5HBO08vNf9kcQGgHMJqAkR4c KgfNncz7gWG0uFAMk3CWJbVtmQLNDUqnE7kddB9NAQsn3GKhUIj/Bka2hXXv+qVd aXyUK+pgYkhg0d0ziqI/AG8WY4GgVlAPZL5gZzQIPIOHvgWL521ByggdIFyRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU99np2pHVLAtr5gY9f8sgW4DXXzgwHwYDVR0j BBgwFoAUk13RQxTJLM07G2Xmh1HaPoexBXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWEzYjY4ODEtYmExMS00MzMwLWExNjQtYjU1ZjQyMDg1Yjg5LzAvOTM1REQxNDMx NEM5MkNDRDNCMUI2NUU2ODc1MURBM0U4N0IxMDU3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzVERDE0MzE0QzkyQ0NEM0IxQjY1RTY4NzUxREEzRTg3QjEw NTdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWEzYjY4ODEtYmExMS00MzMwLWEx NjQtYjU1ZjQyMDg1Yjg5LzAvOTM1REQxNDMxNEM5MkNDRDNCMUI2NUU2ODc1MURB M0U4N0IxMDU3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlO8GcHLsYbjf17Vq2yvwS7hY/Qn1orhW2X PZfu+RsQrCZ19hdFWEW6tSP8PhNEwWrreHli6M6m+utbfleYNNPfBsXVCY5AGZjY Xzyy4Tm3+58FluhKOjCdjQpc9bk7/oh3AiB8GWJAiqXYDttxgX2d7wgVjOA7c9kM +UkC/ASMSzjrRl8BCTGtRmZIlHWPNXZ/cWxFW5gI1qon0CWgAn7BBIe5inqSd/2x BwvR4sc8tERjgLrFRSNZXNT/A8cRuTDmFNGra7htEuBL8Rma0dIuTNnL5mFDUjnP sD+49Cfg8BlLHe9JvXu3vQPMxviagMhrQuoK46+r4d16sdEti5g= -----END CERTIFICATE-----Generated at Tue Jul 21 07:06:32 2026 by rpki-client