$ rpki-client -vvf rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft File: 935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft (raw, json) Hash identifier: F41hgFBz4Rk1Az9r+87UTQe4JFfQL2G+CqapmGPBZIg= Subject key identifier: 84:7A:A2:BB:02:6B:59:62:47:7E:9F:C7:18:39:8F:3C:BD:9D:09:DB Authority key identifier: 93:5F:90:BC:D1:5D:D0:7F:7A:AF:DC:21:AE:37:2B:1F:CF:50:71:7C Certificate issuer: /CN=935F90BCD15DD07F7AAFDC21AE372B1FCF50717C Certificate serial: 1D7C069958EE302858C868D5DD1F47127AB60FE0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:18:27 +0000 Manifest this update: Tue 02 Jun 2026 19:13:27 +0000 Manifest next update: Wed 03 Jun 2026 22:11:27 +0000 Files and hashes: 1: 3130332e3139312e37312e302f32342d3234203d3e20313439393134.roa (hash: bpEJI5kwOdxD/qKqncYynaKSifhTOw7KVCK2hYNC5Sk=) 2: 935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl (hash: /wrdGN7CLrLuxrlZD0d6r1NY5otvJ4vwkE3cafoX1Nk=) 3: 3130332e3139312e37302e302f32332d3233203d3e20313439393134.roa (hash: QKDg88NxsGHdPaqwDjdhk2T8gJbvaIxQQY3R5hnscJY=) 4: 3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa (hash: ON1gSG84QwnmMGmDUKoxl7b2DGJGtr4oSF5KUCcnJXU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:7c:06:99:58:ee:30:28:58:c8:68:d5:dd:1f:47:12:7a:b6:0f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935F90BCD15DD07F7AAFDC21AE372B1FCF50717C Validity Not Before: Jun 2 19:13:27 2026 GMT Not After : Jun 3 22:11:27 2026 GMT Subject: CN=847AA2BB026B5962477E9FC718398F3CBD9D09DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f0:5e:1c:78:7e:83:2c:af:32:a4:a6:1d:dc: e4:2c:c4:a3:8c:a3:70:2e:fe:69:d4:fb:2b:0d:50: 22:3e:89:00:d5:43:43:fe:fd:ba:4d:a0:9e:2c:51: b5:f4:9f:dc:c2:77:50:57:97:77:46:60:f5:7b:35: c8:64:75:3c:1c:55:75:9d:90:85:5f:a3:0f:45:bb: 74:c4:37:de:e1:f0:c0:78:c8:43:1f:74:f4:30:ee: 9f:6d:10:29:2d:63:96:e6:9a:dc:4b:4d:29:5a:2a: 69:db:9f:41:d2:ac:a1:37:99:49:78:e1:8b:78:50: b4:d3:13:5c:ed:11:d5:2e:38:14:9d:15:cc:83:7b: d5:67:15:f8:63:42:43:8a:cf:74:7a:49:72:26:d9: 5b:0e:7f:3a:4d:38:56:1c:16:d4:3d:b9:54:33:e0: 13:1b:7e:7a:e8:b1:80:52:c9:63:64:b5:95:71:04: d2:2e:4e:d4:ca:cd:95:72:df:2d:2f:1e:63:d1:4b: 84:00:bc:e6:ef:85:fd:90:8a:b9:0c:d7:86:0b:12: 8f:26:6d:dc:9f:f9:ff:55:e9:f8:02:5b:c1:3c:0b: 77:de:d2:39:d3:1c:92:ea:c8:37:92:cf:b7:02:98: fd:29:e3:7a:aa:f2:30:a8:4c:3c:b4:69:1e:b0:ad: e9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7A:A2:BB:02:6B:59:62:47:7E:9F:C7:18:39:8F:3C:BD:9D:09:DB X509v3 Authority Key Identifier: keyid:93:5F:90:BC:D1:5D:D0:7F:7A:AF:DC:21:AE:37:2B:1F:CF:50:71:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:9c:5c:e1:a6:32:8a:c2:92:39:34:fd:03:35:10:3f:be:5a: 29:9d:9f:bf:de:0c:99:b0:bc:13:bf:a9:28:9c:99:4d:56:ba: 01:8e:c3:7d:f3:dc:aa:d1:d2:97:18:d6:d5:11:d0:5e:4f:8c: 9e:27:c1:29:c1:17:41:92:65:d0:9c:7d:4b:4a:34:ba:a1:f8: 61:62:8b:dc:14:78:d0:b2:a2:43:e9:df:41:fe:30:c6:d9:05: d1:d0:c6:b6:6f:e5:26:b5:eb:66:d5:ea:44:72:20:08:b2:0c: cb:f2:e9:ec:db:d1:53:4a:e6:35:37:0f:ef:38:43:73:89:c4: 64:2b:e6:d6:de:20:6a:a8:14:1c:40:87:5e:39:8d:17:7b:c4: 67:0c:e4:c7:0b:1a:af:a6:e5:4e:51:c5:df:c7:ed:a4:07:fb: 31:9d:79:84:ea:4f:30:4e:a5:38:c7:b4:cd:cf:94:2a:67:25: 3b:0d:e4:3c:92:c9:4d:41:16:c0:fe:f8:df:8d:0b:4f:27:3f: e6:9b:98:87:d9:89:13:0a:1e:4d:e7:a7:46:4e:24:80:b8:19: a1:82:d9:e7:5a:0d:74:ee:36:ee:95:35:2d:e4:44:c3:e8:03: 4c:3e:0a:9f:eb:e5:54:de:a4:b3:ed:0d:f9:51:72:83:37:3d: d5:5c:06:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHXwGmVjuMChYyGjV3R9HEnq2D+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1RjkwQkNEMTVERDA3RjdBQUZEQzIxQUUzNzJCMUZD RjUwNzE3QzAeFw0yNjA2MDIxOTEzMjdaFw0yNjA2MDMyMjExMjdaMDMxMTAvBgNV BAMTKDg0N0FBMkJCMDI2QjU5NjI0NzdFOUZDNzE4Mzk4RjNDQkQ5RDA5REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR8F4ceH6DLK8ypKYd3OQsxKOM o3Au/mnU+ysNUCI+iQDVQ0P+/bpNoJ4sUbX0n9zCd1BXl3dGYPV7NchkdTwcVXWd kIVfow9Fu3TEN97h8MB4yEMfdPQw7p9tECktY5bmmtxLTSlaKmnbn0HSrKE3mUl4 4Yt4ULTTE1ztEdUuOBSdFcyDe9VnFfhjQkOKz3R6SXIm2VsOfzpNOFYcFtQ9uVQz 4BMbfnrosYBSyWNktZVxBNIuTtTKzZVy3y0vHmPRS4QAvObvhf2QirkM14YLEo8m bdyf+f9V6fgCW8E8C3fe0jnTHJLqyDeSz7cCmP0p43qq8jCoTDy0aR6wrenhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhHqiuwJrWWJHfp/HGDmPPL2dCdswHwYDVR0j BBgwFoAUk1+QvNFd0H96r9whrjcrH89QcXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjQwZTFmMjAtYjBjZC00NjliLTkxMDYtMWVhMDAwNzk1ZjlmLzAvOTM1RjkwQkNE MTVERDA3RjdBQUZEQzIxQUUzNzJCMUZDRjUwNzE3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzVGOTBCQ0QxNUREMDdGN0FBRkRDMjFBRTM3MkIxRkNGNTA3 MTdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjQwZTFmMjAtYjBjZC00NjliLTkx MDYtMWVhMDAwNzk1ZjlmLzAvOTM1RjkwQkNEMTVERDA3RjdBQUZEQzIxQUUzNzJC MUZDRjUwNzE3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2cXOGmMorCkjk0/QM1ED++Wimdn7/eDJmw vBO/qSicmU1WugGOw33z3KrR0pcY1tUR0F5PjJ4nwSnBF0GSZdCcfUtKNLqh+GFi i9wUeNCyokPp30H+MMbZBdHQxrZv5Sa162bV6kRyIAiyDMvy6ezb0VNK5jU3D+84 Q3OJxGQr5tbeIGqoFBxAh145jRd7xGcM5McLGq+m5U5Rxd/H7aQH+zGdeYTqTzBO pTjHtM3PlCpnJTsN5DySyU1BFsD++N+NC08nP+abmIfZiRMKHk3np0ZOJIC4GaGC 2edaDXTuNu6VNS3kRMPoA0w+Cp/r5VTepLPtDflRcoM3PdVcBnI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:15:51 2026 by rpki-client