$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft File: 935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft (raw, json) Hash identifier: +YMjh6w1IK3tsvTjVS/vPTy4p83Ms3BSVSTRp9fXpa4= Subject key identifier: 9C:E0:93:AF:DD:64:75:7A:1B:AD:D6:B1:31:39:E9:85:D6:A5:2C:A5 Authority key identifier: 93:5D:D1:43:14:C9:2C:CD:3B:1B:65:E6:87:51:DA:3E:87:B1:05:7C Certificate issuer: /CN=935DD14314C92CCD3B1B65E68751DA3E87B1057C Certificate serial: 13CAEFC9B1E7FEE3DFB72251DC3E1B4285C603E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935DD14314C92CCD3B1B65E68751DA3E87B1057C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:10:37 +0000 Manifest this update: Tue 02 Jun 2026 21:05:37 +0000 Manifest next update: Wed 03 Jun 2026 23:48:37 +0000 Files and hashes: 1: 935DD14314C92CCD3B1B65E68751DA3E87B1057C.crl (hash: tYg66kyj79bhzQv2RIbc3MHVlRCpRfXqlMEIvnIrTHc=) 2: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: kjEpWP2mRiJBPHjX3tFZhbKjrbBSMQGM2y+PNic1u8w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.crl rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935DD14314C92CCD3B1B65E68751DA3E87B1057C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 23:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ca:ef:c9:b1:e7:fe:e3:df:b7:22:51:dc:3e:1b:42:85:c6:03:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935DD14314C92CCD3B1B65E68751DA3E87B1057C Validity Not Before: Jun 2 21:05:37 2026 GMT Not After : Jun 3 23:48:37 2026 GMT Subject: CN=9CE093AFDD64757A1BADD6B13139E985D6A52CA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:21:30:e6:25:01:b6:8f:85:bd:24:96:ff:d7: 9d:39:12:94:08:fb:d8:35:68:95:c0:10:32:d7:b5: c5:4e:74:af:5c:e3:d9:6c:9d:5c:b3:c5:88:c9:15: dc:78:7f:1b:48:e0:a9:31:ad:c3:9f:a1:fd:cd:21: 9c:87:23:60:ee:39:be:00:29:92:4a:9f:f3:e5:df: 4b:23:40:83:40:3a:85:6d:80:64:b4:00:bb:ce:10: e3:2c:41:96:c0:69:a3:a3:15:8f:ea:34:93:15:64: 15:b5:53:3d:12:4c:26:91:26:24:88:d0:81:87:e8: 9c:fb:99:ab:11:51:4c:6d:15:e5:83:ef:11:d2:f6: fe:5c:a5:3f:b8:f0:50:9e:0e:d5:71:27:ec:4d:ff: 60:cc:23:33:18:15:18:16:b6:b2:37:fb:41:36:2c: ea:5f:ea:c4:16:64:3c:93:6d:97:10:e5:98:a3:a1: cb:cc:00:eb:f5:cf:fd:26:16:f5:7a:83:97:28:96: 8b:c7:97:77:f9:0d:b5:f5:fd:fe:4e:12:dd:4d:39: 55:bc:f9:39:7a:32:f7:97:2d:36:59:04:84:23:7d: ca:dd:4b:80:e5:22:75:60:c7:b9:4a:36:1d:9b:ed: 0a:1e:dc:e2:c9:47:79:ae:cf:ec:1b:ac:bf:08:1c: 0d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E0:93:AF:DD:64:75:7A:1B:AD:D6:B1:31:39:E9:85:D6:A5:2C:A5 X509v3 Authority Key Identifier: keyid:93:5D:D1:43:14:C9:2C:CD:3B:1B:65:E6:87:51:DA:3E:87:B1:05:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935DD14314C92CCD3B1B65E68751DA3E87B1057C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/935DD14314C92CCD3B1B65E68751DA3E87B1057C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:6c:94:7e:35:51:61:a3:7e:c7:59:e2:c9:8f:65:69:8e:30: e6:19:83:59:2f:42:b0:2f:ac:c5:4a:0a:7f:3f:4e:b6:21:75: 5d:6b:7a:59:21:22:8c:e6:0f:fa:6a:bc:f8:11:f7:58:fd:6c: e7:51:4f:64:d2:0f:53:ed:d8:6f:ee:67:80:c5:a8:c0:96:1f: 25:f0:ac:26:9d:5b:b6:ae:dc:85:aa:e7:72:9e:7d:c1:41:cc: 72:86:3f:22:87:ba:30:5d:56:8d:47:bf:32:b5:46:11:34:5a: 7c:c6:e0:66:6d:63:c8:62:da:17:de:59:8b:71:28:71:23:d9: 5a:f3:e9:81:67:27:9d:16:9d:21:d0:ce:c8:48:55:72:94:29: b0:14:7f:af:b6:9b:61:7a:61:69:e7:0c:9e:81:a1:0d:40:6f: e8:e0:cf:3e:11:ee:9e:28:70:38:70:f9:de:07:ee:3a:66:cd: ff:76:d7:65:b6:d1:44:b4:e8:52:d5:30:a6:18:a3:e8:37:e1: cb:42:ee:c5:39:7d:b0:65:62:c6:e0:e3:2c:a2:a8:9b:2a:c1: 78:55:d8:0f:20:44:09:1e:c5:bc:77:09:9d:b8:c7:9a:5b:c1: d1:13:2c:da:4a:bf:45:92:ba:13:73:66:72:4c:f7:24:1b:5e: 55:b3:0b:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE8rvybHn/uPftyJR3D4bQoXGA+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1REQxNDMxNEM5MkNDRDNCMUI2NUU2ODc1MURBM0U4 N0IxMDU3QzAeFw0yNjA2MDIyMTA1MzdaFw0yNjA2MDMyMzQ4MzdaMDMxMTAvBgNV BAMTKDlDRTA5M0FGREQ2NDc1N0ExQkFERDZCMTMxMzlFOTg1RDZBNTJDQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWITDmJQG2j4W9JJb/1505EpQI +9g1aJXAEDLXtcVOdK9c49lsnVyzxYjJFdx4fxtI4KkxrcOfof3NIZyHI2DuOb4A KZJKn/Pl30sjQINAOoVtgGS0ALvOEOMsQZbAaaOjFY/qNJMVZBW1Uz0STCaRJiSI 0IGH6Jz7masRUUxtFeWD7xHS9v5cpT+48FCeDtVxJ+xN/2DMIzMYFRgWtrI3+0E2 LOpf6sQWZDyTbZcQ5ZijocvMAOv1z/0mFvV6g5colovHl3f5DbX1/f5OEt1NOVW8 +Tl6MveXLTZZBIQjfcrdS4DlInVgx7lKNh2b7Qoe3OLJR3muz+wbrL8IHA3nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnOCTr91kdXobrdaxMTnphdalLKUwHwYDVR0j BBgwFoAUk13RQxTJLM07G2Xmh1HaPoexBXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWEzYjY4ODEtYmExMS00MzMwLWExNjQtYjU1ZjQyMDg1Yjg5LzAvOTM1REQxNDMx NEM5MkNDRDNCMUI2NUU2ODc1MURBM0U4N0IxMDU3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzVERDE0MzE0QzkyQ0NEM0IxQjY1RTY4NzUxREEzRTg3QjEw NTdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWEzYjY4ODEtYmExMS00MzMwLWEx NjQtYjU1ZjQyMDg1Yjg5LzAvOTM1REQxNDMxNEM5MkNDRDNCMUI2NUU2ODc1MURB M0U4N0IxMDU3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdslH41UWGjfsdZ4smPZWmOMOYZg1kvQrAv rMVKCn8/TrYhdV1relkhIozmD/pqvPgR91j9bOdRT2TSD1Pt2G/uZ4DFqMCWHyXw rCadW7au3IWq53KefcFBzHKGPyKHujBdVo1HvzK1RhE0WnzG4GZtY8hi2hfeWYtx KHEj2Vrz6YFnJ50WnSHQzshIVXKUKbAUf6+2m2F6YWnnDJ6BoQ1Ab+jgzz4R7p4o cDhw+d4H7jpmzf9212W20US06FLVMKYYo+g34ctC7sU5fbBlYsbg4yyiqJsqwXhV 2A8gRAkexbx3CZ24x5pbwdETLNpKv0WSuhNzZnJM9yQbXlWzC24= -----END CERTIFICATE-----Generated at Wed Jun 3 04:33:38 2026 by rpki-client