$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft File: 535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft (raw, json) Hash identifier: QFKfgWBo6dmZgIoIVdVMJyVvxSlF/jrA+znKjczrEnM= Subject key identifier: BF:D5:85:6A:10:0F:4C:61:5F:26:28:92:26:F2:0A:A2:A1:9D:0D:A3 Authority key identifier: 53:5C:2B:E8:C4:77:19:76:CD:35:DA:8D:0F:29:2C:8A:1E:5E:2F:99 Certificate issuer: /CN=535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99 Certificate serial: 261E6B93A4A073EE67198BDA0358199061BFF68F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:32:28 +0000 Manifest this update: Tue 02 Jun 2026 18:27:28 +0000 Manifest next update: Wed 03 Jun 2026 19:27:28 +0000 Files and hashes: 1: 3230332e38312e3138342e302f32312d3234203d3e203234353338.roa (hash: XHqyQLGVve3ZT8Kfh4uyyc91xlGDqpssM8vgHeuLO+M=) 2: 535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl (hash: +hNXc7rYTRHv4paEhYFh2VrXYbcE+/W+iP5rGN01+q0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:1e:6b:93:a4:a0:73:ee:67:19:8b:da:03:58:19:90:61:bf:f6:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99 Validity Not Before: Jun 2 18:27:28 2026 GMT Not After : Jun 3 19:27:28 2026 GMT Subject: CN=BFD5856A100F4C615F26289226F20AA2A19D0DA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:03:e1:b9:b5:c6:74:96:68:b7:32:cd:73:34: 8e:73:5d:3b:48:f6:81:ca:68:60:c4:90:a6:de:68: da:fe:58:63:50:17:57:a3:fd:a7:00:a3:4d:ad:19: 9d:fb:35:a1:a7:f9:ba:bd:69:12:59:e4:c0:de:9a: 30:54:67:04:c6:80:0c:7c:38:cf:df:e1:60:5f:03: 40:73:a8:7d:e5:68:16:81:be:a1:5c:48:63:56:e4: 80:7b:5b:67:77:32:c1:64:bf:36:d3:44:d7:4d:b4: b1:d8:fe:5b:2b:fd:9d:d3:80:9f:21:be:b6:46:c8: 5c:8b:e2:e0:18:1e:28:5f:44:84:1d:b2:01:20:dd: 06:7d:1a:a8:82:e4:bc:83:2d:8b:bc:54:51:58:67: e8:f0:44:70:67:e0:e2:35:0c:c8:eb:f6:e6:aa:f4: 2f:8f:51:35:29:5c:98:49:08:9f:52:55:2e:66:51: cd:e5:b2:42:26:69:d6:ac:e9:85:1d:a4:ae:1b:be: 15:c5:0e:56:b0:f7:70:15:34:1e:fa:b6:ae:a5:05: 83:95:dc:56:ae:54:a4:b8:bc:50:25:b5:4d:1b:5a: fb:84:67:d3:62:c5:38:23:f5:d0:c4:11:ca:9a:ac: b0:09:ca:a1:3f:02:89:62:39:ef:88:cb:cd:32:e4: 9d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D5:85:6A:10:0F:4C:61:5F:26:28:92:26:F2:0A:A2:A1:9D:0D:A3 X509v3 Authority Key Identifier: keyid:53:5C:2B:E8:C4:77:19:76:CD:35:DA:8D:0F:29:2C:8A:1E:5E:2F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:71:42:7e:7d:fd:73:1f:f0:9e:a8:75:68:57:cf:6b:4b:6c: ff:ee:85:8e:f0:36:74:6f:cb:b9:47:19:7f:4e:fd:07:54:63: b9:3d:53:f4:41:5e:f6:db:4b:b4:c4:9c:87:5c:6b:41:d5:b3: 6c:40:3c:3f:37:63:53:1e:3c:b3:ac:8f:b4:d2:0c:ea:b4:17: 5d:6e:68:1d:15:73:7e:6f:38:d1:e6:58:95:cd:ff:71:ce:13: 79:b5:b6:ed:86:31:6b:be:dc:37:c1:64:aa:08:03:88:fb:30: 04:8b:92:44:f1:91:99:00:c8:3c:fe:25:e9:e0:ed:89:3a:8d: d6:86:1f:64:7c:88:ca:8c:0f:d7:ab:fd:7e:ad:fc:c3:7c:f6: 12:f1:2f:3e:3c:fa:bf:e0:da:35:40:ca:85:40:40:98:3b:b2: c1:2c:a1:42:7b:9d:e6:87:27:16:80:20:f3:10:ba:59:46:ba: c6:16:6d:b0:f3:56:5c:5e:70:d2:2e:1e:48:d2:9d:42:35:7b: 99:5a:bd:09:fc:7a:14:30:08:98:da:2f:bc:80:de:a9:48:2a: d3:1f:e6:d2:28:ca:6e:4e:1b:d4:cc:77:6a:1f:9d:6f:dd:5f: 93:b6:a3:1b:c2:a1:d1:d6:dc:fb:54:c3:67:4a:98:79:56:74: 20:91:58:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJh5rk6Sgc+5nGYvaA1gZkGG/9o8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QzJCRThDNDc3MTk3NkNEMzVEQThEMEYyOTJDOEEx RTVFMkY5OTAeFw0yNjA2MDIxODI3MjhaFw0yNjA2MDMxOTI3MjhaMDMxMTAvBgNV BAMTKEJGRDU4NTZBMTAwRjRDNjE1RjI2Mjg5MjI2RjIwQUEyQTE5RDBEQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwA+G5tcZ0lmi3Ms1zNI5zXTtI 9oHKaGDEkKbeaNr+WGNQF1ej/acAo02tGZ37NaGn+bq9aRJZ5MDemjBUZwTGgAx8 OM/f4WBfA0BzqH3laBaBvqFcSGNW5IB7W2d3MsFkvzbTRNdNtLHY/lsr/Z3TgJ8h vrZGyFyL4uAYHihfRIQdsgEg3QZ9GqiC5LyDLYu8VFFYZ+jwRHBn4OI1DMjr9uaq 9C+PUTUpXJhJCJ9SVS5mUc3lskImadas6YUdpK4bvhXFDlaw93AVNB76tq6lBYOV 3FauVKS4vFAltU0bWvuEZ9NixTgj9dDEEcqarLAJyqE/AoliOe+Iy80y5J29AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv9WFahAPTGFfJiiSJvIKoqGdDaMwHwYDVR0j BBgwFoAUU1wr6MR3GXbNNdqNDyksih5eL5kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFhMjlhNzUtYzViOS00NzViLTlkOTYtNmQxYTE1ZWFlMjRkLzAvNTM1QzJCRThD NDc3MTk3NkNEMzVEQThEMEYyOTJDOEExRTVFMkY5OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzVDMkJFOEM0NzcxOTc2Q0QzNURBOEQwRjI5MkM4QTFFNUUy Rjk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFhMjlhNzUtYzViOS00NzViLTlk OTYtNmQxYTE1ZWFlMjRkLzAvNTM1QzJCRThDNDc3MTk3NkNEMzVEQThEMEYyOTJD OEExRTVFMkY5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhxQn59/XMf8J6odWhXz2tLbP/uhY7wNnRv y7lHGX9O/QdUY7k9U/RBXvbbS7TEnIdca0HVs2xAPD83Y1MePLOsj7TSDOq0F11u aB0Vc35vONHmWJXN/3HOE3m1tu2GMWu+3DfBZKoIA4j7MASLkkTxkZkAyDz+Jeng 7Yk6jdaGH2R8iMqMD9er/X6t/MN89hLxLz48+r/g2jVAyoVAQJg7ssEsoUJ7neaH JxaAIPMQullGusYWbbDzVlxecNIuHkjSnUI1e5lavQn8ehQwCJjaL7yA3qlIKtMf 5tIoym5OG9TMd2ofnW/dX5O2oxvCodHW3PtUw2dKmHlWdCCRWC8= -----END CERTIFICATE-----Generated at Wed Jun 3 03:42:49 2026 by rpki-client