$ rpki-client -vvf repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft File: 535D46F4044E2CC21293CC061A2783074BDF7AE7.mft (raw, json) Hash identifier: 1x9+96f4mB/0Wq9YQKUI2lL0n9dqMhApB00sNJ010Xc= Subject key identifier: BE:37:90:5A:CA:7E:C8:DB:06:E1:F3:39:14:28:60:9C:8C:A4:79:9E Authority key identifier: 53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7 Certificate issuer: /CN=535D46F4044E2CC21293CC061A2783074BDF7AE7 Certificate serial: 77E69BA0BCF9252210BE992A147876072EDE5A9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft Manifest number: 0128 Signing time: Sat 18 Oct 2025 13:41:21 +0000 Manifest this update: Sat 18 Oct 2025 13:36:21 +0000 Manifest next update: Tue 21 Oct 2025 20:02:21 +0000 Files and hashes: 1: 3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa (hash: ziqyElqA9AWawQsIwtFYhW7vigptCpJYDFMjj4wIn2E=) 2: 535D46F4044E2CC21293CC061A2783074BDF7AE7.crl (hash: h7WnV6mqJkPJKT70/2WVi8akNJ4XcuFj3aIVP+bsmoQ=) 3: 3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa (hash: jf5znzRFy2+P6OoEH2nJsLB6FzpE4dX49Aqe9OCR/Ck=) 4: 323430353a343663303a3a2f33322d3332203d3e20313339343331.roa (hash: yq265ELsxp0oAlCM/3VQz9AgxchX8BpcvalzRZ4r8Rc=) 5: 3130332e3134332e32322e302f32332d3233203d3e20313339343331.roa (hash: O+DYiMiMwkf2fjBBi2Y0uG1bMY8o2RWfJ3yizKPcbzk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:e6:9b:a0:bc:f9:25:22:10:be:99:2a:14:78:76:07:2e:de:5a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535D46F4044E2CC21293CC061A2783074BDF7AE7 Validity Not Before: Oct 18 13:36:21 2025 GMT Not After : Oct 21 20:02:21 2025 GMT Subject: CN=BE37905ACA7EC8DB06E1F3391428609C8CA4799E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:d3:ad:c0:d2:c6:81:c4:86:96:73:74:ea: 62:ab:d2:7e:c0:c0:e0:3a:03:b2:88:0d:c9:ee:11: 51:5d:f6:fd:0d:ac:1b:f2:5b:83:dc:0a:ed:8e:64: 82:ca:69:a2:fc:96:e2:b8:19:3e:0b:13:a4:9f:a6: 28:40:d6:8f:76:04:f2:b6:ed:ac:c9:e4:d9:9a:02: 5f:55:5a:cb:76:e2:73:cc:55:2e:f2:28:93:84:1c: 4d:06:3b:3c:41:b0:f3:07:c5:3c:24:11:12:ba:3d: 79:82:ca:9e:63:6d:36:8d:cf:21:47:0b:06:b8:c7: 4f:8c:a7:46:04:7d:ff:2a:ac:d6:e7:2a:4f:61:3b: 3f:f7:4e:fd:95:30:93:88:5a:fd:90:d8:6d:ad:dc: 6a:f6:52:8e:8d:e3:f5:03:a6:47:a8:e6:8b:76:04: 03:36:ad:44:78:46:8d:61:4d:a1:bb:87:1b:e4:5f: 48:de:00:03:fc:36:44:81:f9:46:04:ea:02:cf:2a: 04:e5:59:d4:a7:32:64:ba:f2:50:37:17:5a:f2:ce: 7a:5d:8c:8c:99:6e:99:93:5f:df:17:26:c2:f3:0d: 06:3a:2b:a6:26:72:ad:1c:d5:5b:11:e5:7c:bc:dc: 74:b0:49:c4:50:fd:f8:19:8f:a7:97:2f:0c:ff:49: 6a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:37:90:5A:CA:7E:C8:DB:06:E1:F3:39:14:28:60:9C:8C:A4:79:9E X509v3 Authority Key Identifier: keyid:53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:d3:fa:b8:b2:b6:4f:5f:27:4b:18:7b:89:8a:b6:29:00:9f: 9e:da:7a:00:18:79:4d:46:74:c9:04:ff:87:36:dc:83:aa:55: ea:15:ea:c9:c9:1a:f7:60:66:1d:59:df:af:77:3f:db:a4:4e: 62:e9:36:5b:20:13:03:ec:92:80:69:6a:63:a6:7d:f8:06:df: 6d:e8:8b:64:c7:53:64:6a:92:d1:0a:27:a9:4f:f7:48:5c:95: b0:4f:f5:73:19:ae:f2:8d:b3:0a:b2:21:07:d4:78:33:6c:da: f1:26:01:ea:62:59:a6:f1:2b:ee:5f:a4:57:eb:62:0b:a8:d0: 97:3b:ad:1b:0d:7b:1b:79:43:74:11:e4:1e:84:66:72:7a:53: 4b:d4:42:b1:5c:a4:c1:60:2e:58:93:62:7d:fa:66:7c:78:22: ab:a1:12:a8:95:5b:53:20:25:a1:9a:da:96:93:6d:20:f2:41: 70:a0:f9:54:14:f2:02:9f:e6:cc:00:e9:03:81:59:73:0b:72: 89:89:5a:50:95:fd:92:09:14:c7:5c:00:1b:97:6f:82:e2:03: 7f:80:39:dc:4d:ea:20:7d:50:1e:50:20:4d:f5:13:15:d6:b7: bd:4d:b6:73:32:17:77:59:8c:04:84:a9:fd:fc:06:b1:d3:5c: 04:42:aa:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd+aboLz5JSIQvpkqFHh2By7eWp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgzMDc0 QkRGN0FFNzAeFw0yNTEwMTgxMzM2MjFaFw0yNTEwMjEyMDAyMjFaMDMxMTAvBgNV BAMTKEJFMzc5MDVBQ0E3RUM4REIwNkUxRjMzOTE0Mjg2MDlDOENBNDc5OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3EdOtwNLGgcSGlnN06mKr0n7A wOA6A7KIDcnuEVFd9v0NrBvyW4PcCu2OZILKaaL8luK4GT4LE6SfpihA1o92BPK2 7azJ5NmaAl9VWst24nPMVS7yKJOEHE0GOzxBsPMHxTwkERK6PXmCyp5jbTaNzyFH Cwa4x0+Mp0YEff8qrNbnKk9hOz/3Tv2VMJOIWv2Q2G2t3Gr2Uo6N4/UDpkeo5ot2 BAM2rUR4Ro1hTaG7hxvkX0jeAAP8NkSB+UYE6gLPKgTlWdSnMmS68lA3F1ryznpd jIyZbpmTX98XJsLzDQY6K6Ymcq0c1VsR5Xy83HSwScRQ/fgZj6eXLwz/SWqDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvjeQWsp+yNsG4fM5FChgnIykeZ4wHwYDVR0j BBgwFoAUU11G9AROLMISk8wGGieDB0vfeucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDZmMzNmMi1mMDZlLTRlYjYtYWU2MS01NTI5YmNhMWNkY2QvMC81MzVENDZGNDA0 NEUyQ0MyMTI5M0NDMDYxQTI3ODMwNzRCREY3QUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgzMDc0QkRG N0FFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ2ZjMzZjItZjA2ZS00ZWI2LWFl NjEtNTUyOWJjYTFjZGNkLzAvNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgz MDc0QkRGN0FFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbT+riytk9fJ0sYe4mKtikAn57aegAYeU1G dMkE/4c23IOqVeoV6snJGvdgZh1Z3693P9ukTmLpNlsgEwPskoBpamOmffgG323o i2THU2RqktEKJ6lP90hclbBP9XMZrvKNswqyIQfUeDNs2vEmAepiWabxK+5fpFfr Yguo0Jc7rRsNext5Q3QR5B6EZnJ6U0vUQrFcpMFgLliTYn36Znx4IquhEqiVW1Mg JaGa2paTbSDyQXCg+VQU8gKf5swA6QOBWXMLcomJWlCV/ZIJFMdcABuXb4LiA3+A OdxN6iB9UB5QIE31ExXWt71NtnMyF3dZjASEqf38BrHTXARCqgA= -----END CERTIFICATE-----Generated at Mon Oct 20 18:04:08 2025 by rpki-client