$ rpki-client -vvvf rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft File: 535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft (raw, json) Hash identifier: DS8fUROW2UnPutuMXLa6JqcitRRTohAEK+r2RR00FnQ= Subject key identifier: 8F:E4:CE:58:57:7D:0D:72:7F:01:DD:63:BF:46:F9:76:19:B9:E4:0D Authority key identifier: 53:5B:FA:76:53:1C:00:E1:FC:8B:55:4B:61:55:A1:7D:4E:3F:79:CC Certificate issuer: /CN=535BFA76531C00E1FC8B554B6155A17D4E3F79CC Certificate serial: 33A5C3182F09F71080247C6BC516818A62A327A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 05:45:35 +0000 Manifest this update: Thu 17 Sep 2026 05:40:35 +0000 Manifest next update: Fri 18 Sep 2026 09:11:35 +0000 Files and hashes: 1: 535BFA76531C00E1FC8B554B6155A17D4E3F79CC.crl (hash: dtNb3lPbK+J/K1oU+F9IrXQ5cwoVuy1mNh/wBbGcBXI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.crl rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a5:c3:18:2f:09:f7:10:80:24:7c:6b:c5:16:81:8a:62:a3:27:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535BFA76531C00E1FC8B554B6155A17D4E3F79CC Validity Not Before: Sep 17 05:40:35 2026 GMT Not After : Sep 18 09:11:35 2026 GMT Subject: CN=8FE4CE58577D0D727F01DD63BF46F97619B9E40D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:18:aa:f8:77:cf:60:2f:8a:1e:50:60:11:d6: 58:1f:e5:f1:4e:e0:f1:72:a4:f8:29:71:73:da:a3: ca:3d:57:61:31:9b:1b:79:a4:af:bb:2d:4b:8e:80: 45:e4:5b:07:98:71:6e:b8:b8:d3:fe:0a:9a:72:ad: b7:ac:0f:9f:f5:b7:70:21:df:e5:3e:7c:ef:73:5c: 3a:ce:04:f9:3e:5c:b6:50:bb:66:31:84:f9:d4:19: c5:ca:50:71:e1:98:ce:cc:06:5c:b9:be:fb:7d:49: 23:de:74:d8:20:73:e8:5a:32:a7:8f:cb:81:3b:cc: e1:27:e2:4d:2b:d5:39:24:71:b3:38:1f:97:1b:cd: 9c:2f:b6:d7:9e:9e:1d:e8:46:d4:07:d1:d6:24:3e: f4:ff:02:5a:0d:f8:56:19:59:e0:5d:aa:b4:27:27: 07:b7:de:91:18:9e:30:27:73:aa:4a:66:3c:dc:6f: 35:d2:91:78:1d:40:cd:c9:18:a1:10:56:ab:d9:e5: 0c:d2:7e:12:d6:f0:a7:ce:81:3a:5b:3e:30:a6:40: ea:b3:bb:80:c0:06:eb:da:c9:88:d8:16:31:34:db: 78:80:cb:62:a7:dc:40:58:56:44:c7:f0:f5:e1:d8: 9e:e6:4b:e4:07:7e:7f:10:89:2b:fb:4e:7e:fb:65: 34:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E4:CE:58:57:7D:0D:72:7F:01:DD:63:BF:46:F9:76:19:B9:E4:0D X509v3 Authority Key Identifier: keyid:53:5B:FA:76:53:1C:00:E1:FC:8B:55:4B:61:55:A1:7D:4E:3F:79:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:ab:8c:c7:2a:7d:ff:7b:26:87:e3:b5:17:49:cb:29:a8:bc: d1:8d:8a:64:eb:35:77:3b:5e:50:d4:64:15:1a:7c:1e:a2:9c: 08:86:65:08:ec:ff:7a:90:a9:0a:01:d2:18:be:18:20:44:5b: 03:9b:d5:1e:23:87:a3:8e:b8:7f:d9:4d:7d:bb:1c:ce:5c:43: b6:58:86:16:fc:9a:3d:28:4c:7e:53:c5:b2:76:d4:a4:f5:3c: 1e:1a:76:79:0e:86:98:5a:a6:4b:a5:90:9e:df:f8:d5:bd:48: 73:b6:9b:4b:67:26:be:92:58:49:c3:07:48:0b:a4:78:32:be: 64:39:5e:01:23:07:bf:cb:75:f8:e7:d9:7a:5e:ca:37:e6:00: 1f:33:04:28:cd:48:76:69:c6:2b:71:9f:d6:50:c1:15:20:d7: 42:ff:57:c5:b5:3f:15:27:9d:34:61:06:5a:b2:3c:d2:e8:0b: 5f:9b:0a:fb:63:9c:45:63:43:20:cb:27:a0:db:ab:1b:77:39: 1e:83:24:44:23:4d:3c:16:3b:31:fa:04:da:f5:aa:0c:5b:dc: 23:5f:d1:67:8d:41:0f:08:30:f7:61:ae:f7:a1:c8:ee:16:e2: b6:e3:22:eb:0e:11:70:88:d3:ca:d6:b5:e0:6b:96:41:0a:bd: 5c:b1:cc:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM6XDGC8J9xCAJHxrxRaBimKjJ6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QkZBNzY1MzFDMDBFMUZDOEI1NTRCNjE1NUExN0Q0 RTNGNzlDQzAeFw0yNjA5MTcwNTQwMzVaFw0yNjA5MTgwOTExMzVaMDMxMTAvBgNV BAMTKDhGRTRDRTU4NTc3RDBENzI3RjAxREQ2M0JGNDZGOTc2MTlCOUU0MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTGKr4d89gL4oeUGAR1lgf5fFO 4PFypPgpcXPao8o9V2Exmxt5pK+7LUuOgEXkWweYcW64uNP+CppyrbesD5/1t3Ah 3+U+fO9zXDrOBPk+XLZQu2YxhPnUGcXKUHHhmM7MBly5vvt9SSPedNggc+haMqeP y4E7zOEn4k0r1TkkcbM4H5cbzZwvtteenh3oRtQH0dYkPvT/AloN+FYZWeBdqrQn Jwe33pEYnjAnc6pKZjzcbzXSkXgdQM3JGKEQVqvZ5QzSfhLW8KfOgTpbPjCmQOqz u4DABuvayYjYFjE023iAy2Kn3EBYVkTH8PXh2J7mS+QHfn8QiSv7Tn77ZTSDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj+TOWFd9DXJ/Ad1jv0b5dhm55A0wHwYDVR0j BBgwFoAUU1v6dlMcAOH8i1VLYVWhfU4/ecwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDFiNmRkOWItZDE1Mi00YzhmLTg3YjctNjI5ZWI4MDhmOTExLzAvNTM1QkZBNzY1 MzFDMDBFMUZDOEI1NTRCNjE1NUExN0Q0RTNGNzlDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzVCRkE3NjUzMUMwMEUxRkM4QjU1NEI2MTU1QTE3RDRFM0Y3 OUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDFiNmRkOWItZDE1Mi00YzhmLTg3 YjctNjI5ZWI4MDhmOTExLzAvNTM1QkZBNzY1MzFDMDBFMUZDOEI1NTRCNjE1NUEx N0Q0RTNGNzlDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGerjMcqff97JofjtRdJyymovNGNimTrNXc7 XlDUZBUafB6inAiGZQjs/3qQqQoB0hi+GCBEWwOb1R4jh6OOuH/ZTX27HM5cQ7ZY hhb8mj0oTH5TxbJ21KT1PB4adnkOhphapkulkJ7f+NW9SHO2m0tnJr6SWEnDB0gL pHgyvmQ5XgEjB7/Ldfjn2XpeyjfmAB8zBCjNSHZpxitxn9ZQwRUg10L/V8W1PxUn nTRhBlqyPNLoC1+bCvtjnEVjQyDLJ6Dbqxt3OR6DJEQjTTwWOzH6BNr1qgxb3CNf 0WeNQQ8IMPdhrvehyO4W4rbjIusOEXCI08rWteBrlkEKvVyxzDw= -----END CERTIFICATE-----Generated at Thu Sep 17 11:04:29 2026 by rpki-client