$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft File: 935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft (raw, json) Hash identifier: uR7YyJ0NZ5q92fGClGP0dZUOAV3JOx3jeEaCHLiTXFw= Subject key identifier: C5:E6:0D:02:4C:17:A6:FF:0E:89:BD:2D:7B:78:01:67:7B:5F:CB:27 Authority key identifier: 93:5F:90:BC:D1:5D:D0:7F:7A:AF:DC:21:AE:37:2B:1F:CF:50:71:7C Certificate issuer: /CN=935F90BCD15DD07F7AAFDC21AE372B1FCF50717C Certificate serial: 346982928DE7BE8392CBFB1A3E1D57CDBE93D0E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 23:33:04 +0000 Manifest this update: Wed 16 Sep 2026 23:28:04 +0000 Manifest next update: Fri 18 Sep 2026 02:08:04 +0000 Files and hashes: 1: 3130332e3139312e37302e302f32332d3233203d3e20313439393134.roa (hash: QKDg88NxsGHdPaqwDjdhk2T8gJbvaIxQQY3R5hnscJY=) 2: 3130332e3139312e37312e302f32342d3234203d3e20313439393134.roa (hash: bpEJI5kwOdxD/qKqncYynaKSifhTOw7KVCK2hYNC5Sk=) 3: 3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa (hash: ON1gSG84QwnmMGmDUKoxl7b2DGJGtr4oSF5KUCcnJXU=) 4: 935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl (hash: ZX5s3VzhM11uhz2kXMFkKkpWThamMoZT5jf3Q8Owi8g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:69:82:92:8d:e7:be:83:92:cb:fb:1a:3e:1d:57:cd:be:93:d0:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935F90BCD15DD07F7AAFDC21AE372B1FCF50717C Validity Not Before: Sep 16 23:28:04 2026 GMT Not After : Sep 18 02:08:04 2026 GMT Subject: CN=C5E60D024C17A6FF0E89BD2D7B7801677B5FCB27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5b:ad:de:d1:89:40:31:57:6b:ec:b9:6d:d0: c4:2c:1e:41:03:c6:66:bc:73:19:33:f1:86:3c:d0: 7a:74:57:40:0f:b9:8d:75:2e:7b:c0:f6:cd:3e:f1: 33:c8:20:e8:d2:32:cd:12:69:58:0a:34:9a:05:42: 20:4c:e6:ec:f6:b7:45:9f:2d:09:e8:a0:c8:97:4a: 56:59:5e:85:07:2e:db:e5:bf:74:99:4f:3b:53:20: 2d:50:9f:57:6b:61:ca:86:d4:93:17:a9:66:33:42: ce:29:b0:be:40:50:69:04:ce:7d:26:0a:60:9a:44: 76:69:7d:28:9e:90:33:f3:52:7b:2b:ce:f6:51:56: 7e:71:02:83:9c:4f:5c:b3:2c:78:2e:ef:a3:4c:97: 57:4c:7c:ab:48:a7:76:88:23:2c:d4:71:84:fd:4f: cd:9e:fd:d4:6a:1a:98:b8:d2:b7:3e:ec:a8:d1:e0: c2:82:41:ba:5a:97:70:3b:f3:f6:64:27:4e:69:74: a7:92:f2:1b:16:41:49:a3:79:94:4b:38:41:bd:1a: 3d:a0:3a:fd:2c:5c:f4:94:9e:54:54:a6:4e:91:b1: 5e:37:3b:5c:0f:76:1a:9d:36:85:07:9a:8d:66:c6: cc:25:6a:d3:da:71:a8:08:22:b0:af:eb:30:35:cf: ce:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E6:0D:02:4C:17:A6:FF:0E:89:BD:2D:7B:78:01:67:7B:5F:CB:27 X509v3 Authority Key Identifier: keyid:93:5F:90:BC:D1:5D:D0:7F:7A:AF:DC:21:AE:37:2B:1F:CF:50:71:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:4b:8e:99:e8:35:ac:7c:aa:2c:84:7f:71:89:5e:85:eb:80: be:ef:69:5c:90:e6:00:6b:a8:31:5f:b4:77:82:35:60:01:62: f2:d5:75:7c:41:ab:57:16:43:23:8f:95:c5:e0:63:8e:ca:ce: 69:1d:3b:15:55:03:4e:f4:f5:4c:94:44:89:2c:bc:9d:09:69: 1c:54:c9:9f:be:b3:2a:e9:1e:1c:b1:31:dd:cd:de:13:1e:0e: 2f:6b:fe:7a:99:e7:8c:ac:5d:b7:9d:2a:7a:dd:69:59:ef:dc: 9c:8f:75:82:c0:85:51:31:36:5e:39:21:16:93:9b:d4:89:f1: 9b:9f:eb:bf:96:82:0a:d9:8f:a3:2a:28:a6:1c:21:d8:5e:db: b7:c1:56:68:ba:0f:b0:cb:a0:d4:44:69:31:ee:d5:11:e5:5f: cb:c3:39:dd:9d:0a:5a:81:72:ab:cc:c0:b2:1a:34:49:c7:be: 2f:b5:2e:51:c4:f3:02:1b:42:79:9b:b6:ac:9e:d3:d5:05:10: f1:1e:84:dc:b9:ef:ef:b8:0e:c3:8e:b1:11:ca:82:44:81:79: dc:1a:b1:35:2e:2f:05:e8:04:b0:bf:b4:d6:cb:ab:81:eb:f9: 3b:de:d8:a6:6e:25:41:d4:4d:da:2d:fd:f1:f5:e0:b7:67:8a: 97:ad:bd:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNGmCko3nvoOSy/saPh1Xzb6T0OEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1RjkwQkNEMTVERDA3RjdBQUZEQzIxQUUzNzJCMUZD RjUwNzE3QzAeFw0yNjA5MTYyMzI4MDRaFw0yNjA5MTgwMjA4MDRaMDMxMTAvBgNV BAMTKEM1RTYwRDAyNEMxN0E2RkYwRTg5QkQyRDdCNzgwMTY3N0I1RkNCMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLW63e0YlAMVdr7Llt0MQsHkED xma8cxkz8YY80Hp0V0APuY11LnvA9s0+8TPIIOjSMs0SaVgKNJoFQiBM5uz2t0Wf LQnooMiXSlZZXoUHLtvlv3SZTztTIC1Qn1drYcqG1JMXqWYzQs4psL5AUGkEzn0m CmCaRHZpfSiekDPzUnsrzvZRVn5xAoOcT1yzLHgu76NMl1dMfKtIp3aIIyzUcYT9 T82e/dRqGpi40rc+7KjR4MKCQbpal3A78/ZkJ05pdKeS8hsWQUmjeZRLOEG9Gj2g Ov0sXPSUnlRUpk6RsV43O1wPdhqdNoUHmo1mxswlatPacagIIrCv6zA1z877AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxeYNAkwXpv8Oib0te3gBZ3tfyycwHwYDVR0j BBgwFoAUk1+QvNFd0H96r9whrjcrH89QcXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjQwZTFmMjAtYjBjZC00NjliLTkxMDYtMWVhMDAwNzk1ZjlmLzAvOTM1RjkwQkNE MTVERDA3RjdBQUZEQzIxQUUzNzJCMUZDRjUwNzE3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MzVGOTBCQ0QxNUREMDdGN0FBRkRDMjFBRTM3MkIxRkNGNTA3 MTdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjQwZTFmMjAtYjBjZC00NjliLTkx MDYtMWVhMDAwNzk1ZjlmLzAvOTM1RjkwQkNEMTVERDA3RjdBQUZEQzIxQUUzNzJC MUZDRjUwNzE3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtLjpnoNax8qiyEf3GJXoXrgL7vaVyQ5gBr qDFftHeCNWABYvLVdXxBq1cWQyOPlcXgY47KzmkdOxVVA0709UyURIksvJ0JaRxU yZ++syrpHhyxMd3N3hMeDi9r/nqZ54ysXbedKnrdaVnv3JyPdYLAhVExNl45IRaT m9SJ8Zuf67+WggrZj6MqKKYcIdhe27fBVmi6D7DLoNREaTHu1RHlX8vDOd2dClqB cqvMwLIaNEnHvi+1LlHE8wIbQnmbtqye09UFEPEehNy57++4DsOOsRHKgkSBedwa sTUuLwXoBLC/tNbLq4Hr+Tve2KZuJUHUTdot/fH14LdnipetveM= -----END CERTIFICATE-----Generated at Thu Sep 17 12:40:22 2026 by rpki-client