$ rpki-client -vvf rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft File: 535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft (raw, json) Hash identifier: Wcmahi5wOcJyjsjc8AGCbko88YgvF02DIkS+w3+684M= Subject key identifier: BE:A8:A4:0E:AE:86:E3:46:B1:D5:1A:0F:FA:D3:21:42:E8:E6:3A:FC Authority key identifier: 53:5B:FA:76:53:1C:00:E1:FC:8B:55:4B:61:55:A1:7D:4E:3F:79:CC Certificate issuer: /CN=535BFA76531C00E1FC8B554B6155A17D4E3F79CC Certificate serial: 20532963C0AA4D78704DB98DCEF6352B155238BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 04:40:25 +0000 Manifest this update: Sat 20 Jun 2026 04:35:25 +0000 Manifest next update: Sun 21 Jun 2026 07:54:25 +0000 Files and hashes: 1: 535BFA76531C00E1FC8B554B6155A17D4E3F79CC.crl (hash: gat5ySRwJmy9XTf57G/JOqzbsbMqH3ZlzKJK+hjf5D8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.crl rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:53:29:63:c0:aa:4d:78:70:4d:b9:8d:ce:f6:35:2b:15:52:38:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535BFA76531C00E1FC8B554B6155A17D4E3F79CC Validity Not Before: Jun 20 04:35:25 2026 GMT Not After : Jun 21 07:54:25 2026 GMT Subject: CN=BEA8A40EAE86E346B1D51A0FFAD32142E8E63AFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ee:4c:32:21:c9:80:4f:51:81:bb:05:9d:c1: 14:15:66:8d:d8:17:08:76:c1:c1:9b:9b:51:38:cf: ec:83:6a:fb:83:77:4f:0d:a9:99:c2:8b:68:f8:c3: 3a:2d:2a:31:cd:53:c4:37:c1:32:97:5b:62:8c:95: 85:80:0d:f2:7b:e3:b2:c1:af:1c:23:00:bd:23:a5: 45:43:bd:31:5c:40:99:61:7b:52:b5:e0:8d:5f:41: a4:1f:73:dc:fc:01:1d:fb:9b:60:71:9d:e7:3a:d6: a5:e0:b8:be:2b:70:e8:58:47:1b:2a:f4:66:0e:15: 7c:36:7c:8b:52:d9:d2:58:72:0c:05:2a:2e:d0:db: ab:7f:6e:39:e9:98:89:f1:5f:b0:8f:75:5e:fa:9d: af:21:02:ff:72:3a:c4:91:ee:db:a9:00:21:27:52: 24:a8:f9:37:30:16:d5:23:cb:8c:36:1d:8f:c6:63: 76:11:03:c4:f6:4d:b7:2b:6e:c7:eb:48:ff:d5:18: 2a:a0:1f:0c:e3:69:55:92:b8:bd:ee:51:d2:8e:20: 1d:1b:a6:6c:f0:9d:41:43:22:36:91:85:04:90:55: 7c:8b:77:4d:01:ad:4f:37:48:1a:6c:66:14:36:21: ed:48:a0:2c:cb:fa:0a:8e:9c:c9:e5:d4:b6:d1:53: c5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A8:A4:0E:AE:86:E3:46:B1:D5:1A:0F:FA:D3:21:42:E8:E6:3A:FC X509v3 Authority Key Identifier: keyid:53:5B:FA:76:53:1C:00:E1:FC:8B:55:4B:61:55:A1:7D:4E:3F:79:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/535BFA76531C00E1FC8B554B6155A17D4E3F79CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:4e:05:a5:84:05:45:aa:61:9f:82:aa:04:23:2c:00:90:b4: 0d:e3:98:34:fc:9a:d8:2c:b6:99:25:f9:01:bd:d8:dd:c8:35: b0:b9:2a:0c:5e:bb:28:43:69:68:36:9b:e7:b8:44:d0:2e:5c: d0:91:ec:6c:b0:75:de:aa:4c:64:87:49:d3:07:5c:6f:3a:e5: e5:b7:29:fe:af:b1:d4:90:70:6b:f3:c2:a9:4b:96:17:c7:3a: 6e:c2:05:a6:cd:71:c6:24:3b:d2:40:56:bb:28:cc:bd:84:3a: 4f:fd:23:5a:29:13:f1:ba:f0:c8:6e:a6:1a:00:6a:76:4e:b4: 6d:8e:58:34:37:69:17:64:89:12:21:ec:d1:8c:a3:b9:74:4b: 2b:c4:4e:83:bb:db:5c:f3:57:17:10:ba:49:21:2a:fc:94:28: 49:b6:7a:7d:ea:31:9c:b9:b1:08:86:82:2f:c5:55:3f:de:8c: c2:7d:e3:98:47:0c:5a:c2:96:a3:76:d4:4c:f4:7d:c8:c8:cb: 24:b8:79:29:8c:f0:be:6c:32:11:ac:87:84:fa:1e:de:76:74: 16:24:43:b9:c0:12:ef:ea:73:e1:73:01:26:48:4b:4a:14:a2: 45:df:c9:5a:1a:56:b8:2c:b2:6c:e2:2a:5c:38:8e:0a:49:04: dd:6e:c7:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIFMpY8CqTXhwTbmNzvY1KxVSOL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QkZBNzY1MzFDMDBFMUZDOEI1NTRCNjE1NUExN0Q0 RTNGNzlDQzAeFw0yNjA2MjAwNDM1MjVaFw0yNjA2MjEwNzU0MjVaMDMxMTAvBgNV BAMTKEJFQThBNDBFQUU4NkUzNDZCMUQ1MUEwRkZBRDMyMTQyRThFNjNBRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg7kwyIcmAT1GBuwWdwRQVZo3Y Fwh2wcGbm1E4z+yDavuDd08NqZnCi2j4wzotKjHNU8Q3wTKXW2KMlYWADfJ747LB rxwjAL0jpUVDvTFcQJlhe1K14I1fQaQfc9z8AR37m2Bxnec61qXguL4rcOhYRxsq 9GYOFXw2fItS2dJYcgwFKi7Q26t/bjnpmInxX7CPdV76na8hAv9yOsSR7tupACEn UiSo+TcwFtUjy4w2HY/GY3YRA8T2TbcrbsfrSP/VGCqgHwzjaVWSuL3uUdKOIB0b pmzwnUFDIjaRhQSQVXyLd00BrU83SBpsZhQ2Ie1IoCzL+gqOnMnl1LbRU8WtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvqikDq6G40ax1RoP+tMhQujmOvwwHwYDVR0j BBgwFoAUU1v6dlMcAOH8i1VLYVWhfU4/ecwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDFiNmRkOWItZDE1Mi00YzhmLTg3YjctNjI5ZWI4MDhmOTExLzAvNTM1QkZBNzY1 MzFDMDBFMUZDOEI1NTRCNjE1NUExN0Q0RTNGNzlDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzVCRkE3NjUzMUMwMEUxRkM4QjU1NEI2MTU1QTE3RDRFM0Y3 OUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDFiNmRkOWItZDE1Mi00YzhmLTg3 YjctNjI5ZWI4MDhmOTExLzAvNTM1QkZBNzY1MzFDMDBFMUZDOEI1NTRCNjE1NUEx N0Q0RTNGNzlDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBOBaWEBUWqYZ+CqgQjLACQtA3jmDT8mtgs tpkl+QG92N3INbC5KgxeuyhDaWg2m+e4RNAuXNCR7Gywdd6qTGSHSdMHXG865eW3 Kf6vsdSQcGvzwqlLlhfHOm7CBabNccYkO9JAVrsozL2EOk/9I1opE/G68MhuphoA anZOtG2OWDQ3aRdkiRIh7NGMo7l0SyvEToO721zzVxcQukkhKvyUKEm2en3qMZy5 sQiGgi/FVT/ejMJ945hHDFrClqN21Ez0fcjIyyS4eSmM8L5sMhGsh4T6Ht52dBYk Q7nAEu/qc+FzASZIS0oUokXfyVoaVrgssmziKlw4jgpJBN1ux9E= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:16 2026 by rpki-client