$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft File: 535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft (raw, json) Hash identifier: 2u6D5VQEfiSSz3yP4anxqTU7hFqzjt36uk99xeHmm/8= Subject key identifier: 12:23:F2:4A:5C:C4:61:D6:B7:67:66:FF:0F:D9:C7:C5:96:FD:B0:A3 Authority key identifier: 53:5C:2B:E8:C4:77:19:76:CD:35:DA:8D:0F:29:2C:8A:1E:5E:2F:99 Certificate issuer: /CN=535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99 Certificate serial: 5A89306511530B5D5DAB8D7C6E6CBB9027DD1666 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 19:35:35 +0000 Manifest this update: Mon 20 Jul 2026 19:30:35 +0000 Manifest next update: Tue 21 Jul 2026 22:50:35 +0000 Files and hashes: 1: 3230332e38312e3138342e302f32312d3234203d3e203234353338.roa (hash: XHqyQLGVve3ZT8Kfh4uyyc91xlGDqpssM8vgHeuLO+M=) 2: 535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl (hash: v76KdlZvkLeh1LLvJ6ND3G1zXXs4mwVlVIVVdWfXpl0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 22:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:89:30:65:11:53:0b:5d:5d:ab:8d:7c:6e:6c:bb:90:27:dd:16:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99 Validity Not Before: Jul 20 19:30:35 2026 GMT Not After : Jul 21 22:50:35 2026 GMT Subject: CN=1223F24A5CC461D6B76766FF0FD9C7C596FDB0A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:31:c8:6d:10:71:7b:06:cb:e7:33:92:3e:07: b3:53:38:77:32:40:77:dd:59:91:4e:67:74:29:d5: cb:68:83:a0:c2:b7:72:c7:f3:da:31:43:9e:7a:2b: a6:84:ec:9c:c0:38:47:73:bc:ba:fd:c7:0f:01:9a: d3:14:92:96:eb:c1:18:06:99:e3:ad:21:2c:e3:8c: f3:3e:4b:63:f8:bd:21:09:d6:d4:fb:72:71:fb:e7: d4:eb:96:06:56:19:a6:88:b0:b8:aa:94:1e:73:32: 62:a1:69:ab:f4:2e:79:1e:c5:0b:d1:c6:e3:98:ea: ce:7a:c2:c5:0e:3d:a4:a5:40:a3:98:bc:cd:49:ed: 2b:de:f8:30:ed:41:1c:d3:e9:79:61:87:b5:db:ad: d3:1f:b3:c0:64:6e:97:c0:af:17:67:4e:89:0f:2d: de:c8:46:bd:b9:23:ab:74:50:c8:c7:24:cf:8c:72: d6:9f:d3:f5:b8:8b:7b:42:65:fc:09:c8:43:09:24: ab:3e:3d:65:6b:a2:b1:f0:b2:cf:6b:11:8d:01:73: ee:92:e7:3c:73:02:ec:50:82:ed:16:c2:ad:71:9c: f5:83:fc:f1:22:e2:3a:ba:0a:46:ad:9a:17:3d:81: 09:af:1a:8e:9d:33:c3:49:6c:d5:33:13:ae:0a:dd: e2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:23:F2:4A:5C:C4:61:D6:B7:67:66:FF:0F:D9:C7:C5:96:FD:B0:A3 X509v3 Authority Key Identifier: keyid:53:5C:2B:E8:C4:77:19:76:CD:35:DA:8D:0F:29:2C:8A:1E:5E:2F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c2:39:2e:eb:6d:1d:90:9d:3a:d5:3d:25:71:8f:70:fd:bc: 5f:b3:d9:57:44:84:0b:71:6b:4e:81:85:b8:75:2a:a6:dd:22: 68:43:e3:f4:6a:5d:fc:67:83:c5:23:4c:23:0b:83:e1:e1:71: 38:03:ae:9b:4f:3d:e0:1d:75:2a:27:73:c7:d8:de:9c:07:b5: 6f:96:c3:c9:f7:c2:89:e2:3b:f0:4e:af:34:5e:6b:1e:00:3c: 73:92:64:71:c1:e6:25:6a:01:9b:1a:6d:72:49:7e:fc:cc:dc: f8:84:cd:f7:7a:21:9e:b4:bc:40:50:2f:69:ab:ad:49:b2:d2: 05:c1:e9:13:c5:68:79:aa:ed:ca:55:25:3f:6c:b3:6c:20:fd: c9:6b:57:95:50:96:d9:a3:1f:cb:05:ce:2c:f4:f0:7d:d6:37: e9:c3:84:10:61:f0:8b:06:34:e2:1b:15:5e:61:2c:6d:3b:fc: 4b:5b:21:82:8b:53:4c:16:8d:8d:e7:cd:67:62:0c:eb:9b:2d: 6d:6c:1c:c2:06:32:c9:3c:f7:70:d5:15:ff:a1:17:0c:35:0b: 66:39:86:2a:68:63:48:5a:b4:31:7a:08:37:24:b0:1c:31:d8: 1d:2a:4f:f5:b6:b1:99:43:d1:fb:35:76:16:07:fa:b2:73:0c: 0e:b2:a4:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWokwZRFTC11dq418bmy7kCfdFmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QzJCRThDNDc3MTk3NkNEMzVEQThEMEYyOTJDOEEx RTVFMkY5OTAeFw0yNjA3MjAxOTMwMzVaFw0yNjA3MjEyMjUwMzVaMDMxMTAvBgNV BAMTKDEyMjNGMjRBNUNDNDYxRDZCNzY3NjZGRjBGRDlDN0M1OTZGREIwQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChMchtEHF7BsvnM5I+B7NTOHcy QHfdWZFOZ3Qp1ctog6DCt3LH89oxQ556K6aE7JzAOEdzvLr9xw8BmtMUkpbrwRgG meOtISzjjPM+S2P4vSEJ1tT7cnH759TrlgZWGaaIsLiqlB5zMmKhaav0LnkexQvR xuOY6s56wsUOPaSlQKOYvM1J7Sve+DDtQRzT6Xlhh7XbrdMfs8BkbpfArxdnTokP Ld7IRr25I6t0UMjHJM+Mctaf0/W4i3tCZfwJyEMJJKs+PWVrorHwss9rEY0Bc+6S 5zxzAuxQgu0Wwq1xnPWD/PEi4jq6Ckatmhc9gQmvGo6dM8NJbNUzE64K3eLbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEiPySlzEYda3Z2b/D9nHxZb9sKMwHwYDVR0j BBgwFoAUU1wr6MR3GXbNNdqNDyksih5eL5kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFhMjlhNzUtYzViOS00NzViLTlkOTYtNmQxYTE1ZWFlMjRkLzAvNTM1QzJCRThD NDc3MTk3NkNEMzVEQThEMEYyOTJDOEExRTVFMkY5OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzVDMkJFOEM0NzcxOTc2Q0QzNURBOEQwRjI5MkM4QTFFNUUy Rjk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFhMjlhNzUtYzViOS00NzViLTlk OTYtNmQxYTE1ZWFlMjRkLzAvNTM1QzJCRThDNDc3MTk3NkNEMzVEQThEMEYyOTJD OEExRTVFMkY5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfCOS7rbR2QnTrVPSVxj3D9vF+z2VdEhAtx a06Bhbh1KqbdImhD4/RqXfxng8UjTCMLg+HhcTgDrptPPeAddSonc8fY3pwHtW+W w8n3woniO/BOrzReax4APHOSZHHB5iVqAZsabXJJfvzM3PiEzfd6IZ60vEBQL2mr rUmy0gXB6RPFaHmq7cpVJT9ss2wg/clrV5VQltmjH8sFziz08H3WN+nDhBBh8IsG NOIbFV5hLG07/EtbIYKLU0wWjY3nzWdiDOubLW1sHMIGMsk893DVFf+hFww1C2Y5 hipoY0hatDF6CDcksBwx2B0qT/W2sZlD0fs1dhYH+rJzDA6ypBk= -----END CERTIFICATE-----Generated at Tue Jul 21 07:02:08 2026 by rpki-client