$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft File: 535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft (raw, json) Hash identifier: 5Bt+LB5hchgxOh5OISjNLG6zNwDHUKf45j3CBLnB/mI= Subject key identifier: 96:17:D1:B3:7E:66:D7:55:81:F9:93:2A:D1:6A:E9:68:25:67:FF:68 Authority key identifier: 53:5C:2B:E8:C4:77:19:76:CD:35:DA:8D:0F:29:2C:8A:1E:5E:2F:99 Certificate issuer: /CN=535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99 Certificate serial: 2CFAEAD6634D52AF8C6349C619D7F591F0E3621A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 22:06:18 +0000 Manifest this update: Wed 16 Sep 2026 22:01:18 +0000 Manifest next update: Thu 17 Sep 2026 22:50:18 +0000 Files and hashes: 1: 535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl (hash: 41cLWOCECjfKHDPvaerGYzP5CbGKKTZQGFklBbGvMiI=) 2: 3230332e38312e3138342e302f32312d3234203d3e203234353338.roa (hash: XHqyQLGVve3ZT8Kfh4uyyc91xlGDqpssM8vgHeuLO+M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:fa:ea:d6:63:4d:52:af:8c:63:49:c6:19:d7:f5:91:f0:e3:62:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99 Validity Not Before: Sep 16 22:01:18 2026 GMT Not After : Sep 17 22:50:18 2026 GMT Subject: CN=9617D1B37E66D75581F9932AD16AE9682567FF68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:19:80:b3:36:99:1d:5b:95:6c:86:47:83:48: c4:44:4e:2b:bb:2f:90:62:e1:ae:74:ca:ea:3a:15: 74:fd:6d:c6:38:b3:f7:85:89:87:11:70:50:b8:28: 9f:5a:2d:eb:5e:ac:3e:f0:b4:8b:96:2a:27:e9:08: 75:7d:02:fa:db:e8:79:29:99:7f:ac:8d:6a:6a:36: a4:54:e6:f1:37:40:10:c0:b3:93:71:47:12:58:9a: 88:bb:86:59:3c:b3:85:7f:b4:ac:93:66:21:1e:a6: 11:b9:c7:3a:92:bc:a3:f1:35:95:33:06:c5:95:92: 27:10:a0:c6:43:18:fd:10:74:87:29:1b:42:0f:9c: d9:0e:8b:5b:dd:ae:26:cb:b2:0c:74:ca:6e:6c:61: 17:c7:5e:01:e5:a6:6c:92:83:07:59:b4:70:07:08: d2:09:f9:3c:9a:f6:15:6e:9e:a6:4d:ac:21:97:60: c7:d0:f1:16:ec:dd:62:df:d0:0b:12:b6:f9:d8:fe: f4:d8:d3:6f:d7:e4:71:c8:0c:6e:4e:a7:6b:ec:56: c7:03:94:f7:e6:ba:ba:1d:d4:a0:e8:03:93:48:4f: fc:02:ad:b9:75:3c:60:c4:4e:4c:e4:fb:7d:24:4c: 43:93:77:aa:1b:03:26:83:91:78:b4:ce:ba:0c:30: d3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:17:D1:B3:7E:66:D7:55:81:F9:93:2A:D1:6A:E9:68:25:67:FF:68 X509v3 Authority Key Identifier: keyid:53:5C:2B:E8:C4:77:19:76:CD:35:DA:8D:0F:29:2C:8A:1E:5E:2F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/535C2BE8C4771976CD35DA8D0F292C8A1E5E2F99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:81:60:88:1c:46:44:0d:72:6a:ec:96:22:1c:8c:fb:19:4a: c2:ef:b1:37:d7:71:12:d1:2e:88:0d:af:4a:a0:cf:d3:a5:56: d7:ef:3f:74:3c:cb:70:30:8d:8c:fa:10:32:7f:91:b8:e4:6a: cc:f0:60:00:2c:21:2d:6d:52:68:b5:12:20:ec:85:0f:b4:87: 84:e7:67:53:55:46:33:9f:46:ef:2e:30:9e:f5:03:a0:88:9e: cb:6b:ae:d8:32:21:a4:e5:c1:62:b4:42:8e:df:72:58:08:c5: db:32:b7:ab:84:51:54:93:f2:75:9d:7d:8f:58:b5:ba:52:ec: b5:b8:c1:1c:85:9f:14:bc:8d:c6:00:59:81:90:0f:15:f7:00: 85:c7:cf:a3:f3:e1:bc:16:d7:b7:2d:74:bb:43:65:e5:d7:1d: a3:5c:a1:77:91:59:62:8d:db:e9:5e:fe:fe:b1:92:c2:6a:d5: 94:b2:60:ce:ed:73:62:62:15:fa:39:b7:70:be:6f:7a:4f:a0: d4:ab:3e:05:1f:59:93:1f:dc:d2:d9:e6:58:52:a0:c9:be:d6: df:f1:10:6b:79:ea:fe:9c:27:21:a1:d8:39:9e:e9:7d:10:4d: c4:27:fb:3c:4b:87:d0:53:7d:1b:5c:16:51:2a:c1:f3:92:d8: a5:c8:b7:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULPrq1mNNUq+MY0nGGdf1kfDjYhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QzJCRThDNDc3MTk3NkNEMzVEQThEMEYyOTJDOEEx RTVFMkY5OTAeFw0yNjA5MTYyMjAxMThaFw0yNjA5MTcyMjUwMThaMDMxMTAvBgNV BAMTKDk2MTdEMUIzN0U2NkQ3NTU4MUY5OTMyQUQxNkFFOTY4MjU2N0ZGNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcGYCzNpkdW5VshkeDSMRETiu7 L5Bi4a50yuo6FXT9bcY4s/eFiYcRcFC4KJ9aLeterD7wtIuWKifpCHV9Avrb6Hkp mX+sjWpqNqRU5vE3QBDAs5NxRxJYmoi7hlk8s4V/tKyTZiEephG5xzqSvKPxNZUz BsWVkicQoMZDGP0QdIcpG0IPnNkOi1vdribLsgx0ym5sYRfHXgHlpmySgwdZtHAH CNIJ+Tya9hVunqZNrCGXYMfQ8Rbs3WLf0AsStvnY/vTY02/X5HHIDG5Op2vsVscD lPfmurod1KDoA5NIT/wCrbl1PGDETkzk+30kTEOTd6obAyaDkXi0zroMMNM1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlhfRs35m11WB+ZMq0WrpaCVn/2gwHwYDVR0j BBgwFoAUU1wr6MR3GXbNNdqNDyksih5eL5kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFhMjlhNzUtYzViOS00NzViLTlkOTYtNmQxYTE1ZWFlMjRkLzAvNTM1QzJCRThD NDc3MTk3NkNEMzVEQThEMEYyOTJDOEExRTVFMkY5OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MzVDMkJFOEM0NzcxOTc2Q0QzNURBOEQwRjI5MkM4QTFFNUUy Rjk5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFhMjlhNzUtYzViOS00NzViLTlk OTYtNmQxYTE1ZWFlMjRkLzAvNTM1QzJCRThDNDc3MTk3NkNEMzVEQThEMEYyOTJD OEExRTVFMkY5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKBYIgcRkQNcmrsliIcjPsZSsLvsTfXcRLR LogNr0qgz9OlVtfvP3Q8y3AwjYz6EDJ/kbjkaszwYAAsIS1tUmi1EiDshQ+0h4Tn Z1NVRjOfRu8uMJ71A6CInstrrtgyIaTlwWK0Qo7fclgIxdsyt6uEUVST8nWdfY9Y tbpS7LW4wRyFnxS8jcYAWYGQDxX3AIXHz6Pz4bwW17ctdLtDZeXXHaNcoXeRWWKN 2+le/v6xksJq1ZSyYM7tc2JiFfo5t3C+b3pPoNSrPgUfWZMf3NLZ5lhSoMm+1t/x EGt56v6cJyGh2Dme6X0QTcQn+zxLh9BTfRtcFlEqwfOS2KXItys= -----END CERTIFICATE-----Generated at Thu Sep 17 10:04:02 2026 by rpki-client