$ rpki-client -vvf rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft File: 935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft (raw, json) Hash identifier: oWBMqzbj4FBvM2w4tAbbI+frs1CePt9JJg84r8qe7bA= Subject key identifier: 3A:DC:C9:F6:AB:B5:0A:76:DE:81:51:2F:01:37:A3:CE:8F:3E:BC:70 Authority key identifier: 93:5F:90:BC:D1:5D:D0:7F:7A:AF:DC:21:AE:37:2B:1F:CF:50:71:7C Certificate issuer: /CN=935F90BCD15DD07F7AAFDC21AE372B1FCF50717C Certificate serial: 56A2DC7031CF591A4F35EDC086C79A2E4FC182B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 20:26:35 +0000 Manifest this update: Mon 20 Jul 2026 20:21:35 +0000 Manifest next update: Tue 21 Jul 2026 23:50:35 +0000 Files and hashes: 1: 3130332e3139312e37312e302f32342d3234203d3e20313439393134.roa (hash: bpEJI5kwOdxD/qKqncYynaKSifhTOw7KVCK2hYNC5Sk=) 2: 3130332e3139312e37302e302f32332d3233203d3e20313439393134.roa (hash: QKDg88NxsGHdPaqwDjdhk2T8gJbvaIxQQY3R5hnscJY=) 3: 935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl (hash: 3C1uY1u5PnuDFSz7CPQJneO5vD99QJzPyhtPjY3cKb8=) 4: 3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa (hash: ON1gSG84QwnmMGmDUKoxl7b2DGJGtr4oSF5KUCcnJXU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a2:dc:70:31:cf:59:1a:4f:35:ed:c0:86:c7:9a:2e:4f:c1:82:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935F90BCD15DD07F7AAFDC21AE372B1FCF50717C Validity Not Before: Jul 20 20:21:35 2026 GMT Not After : Jul 21 23:50:35 2026 GMT Subject: CN=3ADCC9F6ABB50A76DE81512F0137A3CE8F3EBC70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7d:26:9f:8b:11:83:5c:3e:16:3b:57:29:d7: 60:e1:5c:31:40:d2:78:30:52:0b:96:6f:c1:8c:fa: b6:7d:65:52:c8:dc:5e:31:43:cc:27:07:1c:95:cf: b5:be:6e:5f:11:79:1e:6a:7c:51:7e:5a:5d:f8:89: 0c:36:61:4e:47:81:26:7a:3f:5c:61:3b:37:22:c8: bf:42:1c:92:19:7f:10:8f:8e:35:73:cb:58:eb:d2: 5f:be:cb:c4:f3:2b:46:31:85:f5:46:61:3a:18:3d: 90:23:0b:58:5b:8e:cb:4a:48:62:38:69:65:35:75: 3d:bf:93:03:8d:d2:d5:02:02:6c:25:9f:c6:2c:54: 84:e8:70:52:fb:6d:69:c2:a9:a6:44:c4:f2:8c:8d: 21:09:f3:fb:0c:b5:fd:19:1c:b8:74:58:6b:53:34: 05:8e:15:52:9f:cd:c4:67:22:df:6e:d6:b7:c5:0a: bd:a6:b9:f2:21:98:53:bf:75:fb:b3:0a:fc:05:ba: e0:bf:8d:d6:9e:84:c1:0d:75:b6:f5:24:b5:ef:0b: 86:0d:0d:34:87:26:01:f3:bf:d0:b7:77:d4:ab:2f: d8:88:8c:c9:51:ce:26:58:6f:38:48:39:61:8c:83: 93:1a:f2:43:e8:83:62:ab:96:f2:d9:5b:3d:13:f3: ea:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DC:C9:F6:AB:B5:0A:76:DE:81:51:2F:01:37:A3:CE:8F:3E:BC:70 X509v3 Authority Key Identifier: keyid:93:5F:90:BC:D1:5D:D0:7F:7A:AF:DC:21:AE:37:2B:1F:CF:50:71:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f1:a8:99:50:9f:58:47:52:e4:f0:16:a8:c7:31:04:82:60: 48:75:4b:0f:7a:92:07:4f:a5:cc:28:6f:e3:c6:28:44:6f:49: a1:ca:50:1a:f8:af:b3:8b:5b:a7:ba:61:43:44:f8:c1:6a:78: 81:3d:fe:af:39:fe:77:e9:d3:8d:4b:31:48:90:0f:48:67:7b: 43:5b:31:22:e8:e5:5d:01:92:ef:7a:d1:f7:2c:da:86:a4:d6: 35:53:dd:00:82:23:9e:f1:6b:4e:69:47:25:d6:82:b0:17:21: e7:ad:6a:d9:46:7f:f0:46:26:ef:7f:58:99:87:6e:0c:bc:4e: e2:77:c9:9e:8d:2d:b3:63:79:bf:d8:32:f2:b6:db:90:aa:62: f5:10:c9:8a:15:6d:31:70:74:99:03:16:91:d5:f1:1c:c5:c2: 96:9f:13:0c:55:bf:a6:95:a2:ec:fc:0c:90:1d:a3:75:93:1b: 53:48:b2:2d:07:8e:6a:c0:02:c6:d3:cb:51:7a:98:3a:ae:df: d9:d0:e2:06:1e:ce:fd:84:1d:84:a4:6f:30:09:1b:f6:14:44: dc:b5:c4:c6:9b:67:92:76:13:58:7e:30:16:b4:8b:41:14:d4: b0:73:0c:a3:4b:e4:5d:0b:04:64:93:14:6a:28:16:cc:be:e0: aa:ef:60:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVqLccDHPWRpPNe3AhseaLk/BgrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1RjkwQkNEMTVERDA3RjdBQUZEQzIxQUUzNzJCMUZD RjUwNzE3QzAeFw0yNjA3MjAyMDIxMzVaFw0yNjA3MjEyMzUwMzVaMDMxMTAvBgNV BAMTKDNBRENDOUY2QUJCNTBBNzZERTgxNTEyRjAxMzdBM0NFOEYzRUJDNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrfSafixGDXD4WO1cp12DhXDFA 0ngwUguWb8GM+rZ9ZVLI3F4xQ8wnBxyVz7W+bl8ReR5qfFF+Wl34iQw2YU5HgSZ6 P1xhOzciyL9CHJIZfxCPjjVzy1jr0l++y8TzK0YxhfVGYToYPZAjC1hbjstKSGI4 aWU1dT2/kwON0tUCAmwln8YsVITocFL7bWnCqaZExPKMjSEJ8/sMtf0ZHLh0WGtT NAWOFVKfzcRnIt9u1rfFCr2mufIhmFO/dfuzCvwFuuC/jdaehMENdbb1JLXvC4YN DTSHJgHzv9C3d9SrL9iIjMlRziZYbzhIOWGMg5Ma8kPog2KrlvLZWz0T8+qTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOtzJ9qu1CnbegVEvATejzo8+vHAwHwYDVR0j BBgwFoAUk1+QvNFd0H96r9whrjcrH89QcXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjQwZTFmMjAtYjBjZC00NjliLTkxMDYtMWVhMDAwNzk1ZjlmLzAvOTM1RjkwQkNE MTVERDA3RjdBQUZEQzIxQUUzNzJCMUZDRjUwNzE3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzVGOTBCQ0QxNUREMDdGN0FBRkRDMjFBRTM3MkIxRkNGNTA3 MTdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjQwZTFmMjAtYjBjZC00NjliLTkx MDYtMWVhMDAwNzk1ZjlmLzAvOTM1RjkwQkNEMTVERDA3RjdBQUZEQzIxQUUzNzJC MUZDRjUwNzE3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvxqJlQn1hHUuTwFqjHMQSCYEh1Sw96kgdP pcwob+PGKERvSaHKUBr4r7OLW6e6YUNE+MFqeIE9/q85/nfp041LMUiQD0hne0Nb MSLo5V0Bku960fcs2oak1jVT3QCCI57xa05pRyXWgrAXIeetatlGf/BGJu9/WJmH bgy8TuJ3yZ6NLbNjeb/YMvK225CqYvUQyYoVbTFwdJkDFpHV8RzFwpafEwxVv6aV ouz8DJAdo3WTG1NIsi0HjmrAAsbTy1F6mDqu39nQ4gYezv2EHYSkbzAJG/YURNy1 xMabZ5J2E1h+MBa0i0EU1LBzDKNL5F0LBGSTFGooFsy+4KrvYHo= -----END CERTIFICATE-----Generated at Tue Jul 21 08:30:35 2026 by rpki-client