$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft File: 535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft (raw, json) Hash identifier: GKsx6v+QtLH5IZ6t8gohT+ohxEyEIu1/IFXCsRv+Eeo= Subject key identifier: 2C:C1:79:36:88:9A:2C:EC:25:A2:57:41:C8:F5:25:9A:E0:F6:5C:46 Authority key identifier: 53:5C:2B:E8:C4:77:19:76:CD:35:DA:8D:0F:29:2C:8A:1E:5E:2F:99 Certificate issuer: /CN=535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99 Certificate serial: 67593AB8FCFA432D18ABA4C12C69C2839DACD23A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 02:31:13 +0000 Manifest this update: Wed 04 Nov 2026 02:26:13 +0000 Manifest next update: Thu 05 Nov 2026 03:03:13 +0000 Files and hashes: 1: 3230332e38312e3138342e302f32312d3234203d3e203234353338.roa (hash: XHqyQLGVve3ZT8Kfh4uyyc91xlGDqpssM8vgHeuLO+M=) 2: 535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl (hash: JhyLg73gu/XfUH4goHJPrAKxONiF5iaCs/0kBekIW8M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 03:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:59:3a:b8:fc:fa:43:2d:18:ab:a4:c1:2c:69:c2:83:9d:ac:d2:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99 Validity Not Before: Nov 4 02:26:13 2026 GMT Not After : Nov 5 03:03:13 2026 GMT Subject: CN=2CC17936889A2CEC25A25741C8F5259AE0F65C46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6f:42:33:12:c2:9c:a2:b2:8a:1b:86:5c:30: 76:5d:13:37:5f:d9:9c:9e:4f:d8:b4:59:34:e2:38: 0b:09:cf:f9:4b:7b:18:03:f4:8a:27:cf:31:d8:68: b6:02:c6:ec:36:5d:a8:1a:d6:58:96:da:d3:22:f7: 8d:5a:ac:c5:4d:4a:32:30:b1:13:c2:98:e0:bc:38: 79:62:c1:be:89:d1:0e:71:7d:99:48:21:aa:2a:73: e3:4d:f5:3c:95:32:2a:71:e6:f6:cf:a3:eb:9e:e3: ba:9c:77:0f:a2:90:cd:7e:49:e6:52:53:bf:bd:9d: aa:c9:b7:3a:00:03:cf:d3:09:31:f6:50:07:79:bf: 82:fd:ca:50:e2:ef:23:2c:48:89:8e:f1:00:c9:27: d1:2c:c3:54:85:c5:d6:1c:01:78:9f:5f:3e:ee:57: e0:2c:b6:57:ba:dd:87:47:53:42:62:d1:5d:6a:28: eb:0c:1a:0f:e1:c0:aa:c1:45:1b:ca:a4:bc:ee:0c: 2d:d3:bb:43:f4:ef:f7:f1:5a:24:60:fd:f5:61:ab: 8d:8f:14:e0:e5:a5:6a:e2:3b:a3:f4:ec:e6:4a:f9: bd:83:1f:f5:19:cc:20:41:c8:28:ff:42:85:55:9c: 3f:a6:73:63:72:21:bd:34:86:b2:bb:3b:a8:a5:d3: fe:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C1:79:36:88:9A:2C:EC:25:A2:57:41:C8:F5:25:9A:E0:F6:5C:46 X509v3 Authority Key Identifier: keyid:53:5C:2B:E8:C4:77:19:76:CD:35:DA:8D:0F:29:2C:8A:1E:5E:2F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:8d:d8:cb:9f:10:4c:c4:70:07:2f:47:66:3e:a4:fe:13:8f: 40:b4:55:6e:79:8e:eb:66:3d:57:02:74:8f:bc:76:fb:d3:44: 37:6b:7a:25:55:2a:de:29:11:29:e5:74:41:1e:51:fa:e9:e9: 33:cb:b6:0b:3b:b3:13:46:07:e7:10:14:35:33:fc:a7:12:65: af:ee:0c:16:77:10:7e:b3:a3:10:13:69:43:53:ee:94:40:35: c9:dc:3d:91:6b:4d:59:26:27:55:bd:6e:ac:0f:74:4b:d7:58: f6:cd:f3:b5:1d:b1:03:22:ab:48:2e:ce:01:dc:ec:dd:de:8f: 41:c4:8c:d1:3e:bf:0f:13:3d:1b:ec:ed:c9:57:74:8c:3c:2b: 2d:5a:a8:25:5f:61:07:c4:fe:e2:f9:74:2c:1d:de:7f:d1:ec: 9c:99:c8:44:75:23:a7:d6:22:5f:4b:38:de:c3:91:f6:3b:0c: c0:e8:16:a3:69:e7:a3:76:56:1d:df:88:fe:cc:60:20:2c:77: 17:d0:7b:82:c8:81:11:92:31:aa:6b:6d:5b:6c:9c:7a:ad:e0: e9:d1:7c:d0:e5:1b:b1:14:78:43:98:79:d9:c3:16:0d:c3:c8: 1f:6c:58:b7:d5:09:d6:ef:ef:fc:1c:3a:7d:d2:a1:6b:af:8e: c2:4e:7b:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ1k6uPz6Qy0Yq6TBLGnCg52s0jowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QzJCRThDNDc3MTk3NkNEMzVEQThEMEYyOTJDOEEx RTVFMkY5OTAeFw0yNjExMDQwMjI2MTNaFw0yNjExMDUwMzAzMTNaMDMxMTAvBgNV BAMTKDJDQzE3OTM2ODg5QTJDRUMyNUEyNTc0MUM4RjUyNTlBRTBGNjVDNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKb0IzEsKcorKKG4ZcMHZdEzdf 2ZyeT9i0WTTiOAsJz/lLexgD9IonzzHYaLYCxuw2Xaga1liW2tMi941arMVNSjIw sRPCmOC8OHliwb6J0Q5xfZlIIaoqc+NN9TyVMipx5vbPo+ue47qcdw+ikM1+SeZS U7+9narJtzoAA8/TCTH2UAd5v4L9ylDi7yMsSImO8QDJJ9Esw1SFxdYcAXifXz7u V+Astle63YdHU0Ji0V1qKOsMGg/hwKrBRRvKpLzuDC3Tu0P07/fxWiRg/fVhq42P FODlpWriO6P07OZK+b2DH/UZzCBByCj/QoVVnD+mc2NyIb00hrK7O6il0/7TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULMF5NoiaLOwloldByPUlmuD2XEYwHwYDVR0j BBgwFoAUU1wr6MR3GXbNNdqNDyksih5eL5kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFhMjlhNzUtYzViOS00NzViLTlkOTYtNmQxYTE1ZWFlMjRkLzAvNTM1QzJCRThD NDc3MTk3NkNEMzVEQThEMEYyOTJDOEExRTVFMkY5OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzVDMkJFOEM0NzcxOTc2Q0QzNURBOEQwRjI5MkM4QTFFNUUy Rjk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFhMjlhNzUtYzViOS00NzViLTlk OTYtNmQxYTE1ZWFlMjRkLzAvNTM1QzJCRThDNDc3MTk3NkNEMzVEQThEMEYyOTJD OEExRTVFMkY5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaN2MufEEzEcAcvR2Y+pP4Tj0C0VW55jutm PVcCdI+8dvvTRDdreiVVKt4pESnldEEeUfrp6TPLtgs7sxNGB+cQFDUz/KcSZa/u DBZ3EH6zoxATaUNT7pRANcncPZFrTVkmJ1W9bqwPdEvXWPbN87UdsQMiq0guzgHc 7N3ej0HEjNE+vw8TPRvs7clXdIw8Ky1aqCVfYQfE/uL5dCwd3n/R7JyZyER1I6fW Il9LON7DkfY7DMDoFqNp56N2Vh3fiP7MYCAsdxfQe4LIgRGSMaprbVtsnHqt4OnR fNDlG7EUeEOYednDFg3DyB9sWLfVCdbv7/wcOn3SoWuvjsJOexs= -----END CERTIFICATE-----Generated at Wed Nov 4 21:21:29 2026 by rpki-client