$ rpki-client -vvf repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft File: 535D46F4044E2CC21293CC061A2783074BDF7AE7.mft (raw, json) Hash identifier: eQnEYiix0gxrvwbykqts9pZZQyaY2IeFPVr51h7Bg4g= Subject key identifier: 2A:3B:B7:B3:1B:18:E3:83:7C:B8:52:29:7D:8F:86:AE:D1:83:04:0B Authority key identifier: 53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7 Certificate issuer: /CN=535D46F4044E2CC21293CC061A2783074BDF7AE7 Certificate serial: 096C48BBAC7C354D449C637C011745E59106E1D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft Manifest number: 010F Signing time: Fri 22 Aug 2025 17:01:22 +0000 Manifest this update: Fri 22 Aug 2025 16:56:22 +0000 Manifest next update: Mon 25 Aug 2025 19:40:22 +0000 Files and hashes: 1: 3130332e3134332e32322e302f32332d3233203d3e20313339343331.roa (hash: O+DYiMiMwkf2fjBBi2Y0uG1bMY8o2RWfJ3yizKPcbzk=) 2: 3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa (hash: ziqyElqA9AWawQsIwtFYhW7vigptCpJYDFMjj4wIn2E=) 3: 535D46F4044E2CC21293CC061A2783074BDF7AE7.crl (hash: I34c9jiuaSWFLgXlDPpcjCuAGNG7pK6UVvPmum5/KQM=) 4: 3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa (hash: jf5znzRFy2+P6OoEH2nJsLB6FzpE4dX49Aqe9OCR/Ck=) 5: 323430353a343663303a3a2f33322d3332203d3e20313339343331.roa (hash: yq265ELsxp0oAlCM/3VQz9AgxchX8BpcvalzRZ4r8Rc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 19:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:6c:48:bb:ac:7c:35:4d:44:9c:63:7c:01:17:45:e5:91:06:e1:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535D46F4044E2CC21293CC061A2783074BDF7AE7 Validity Not Before: Aug 22 16:56:22 2025 GMT Not After : Aug 25 19:40:22 2025 GMT Subject: CN=2A3BB7B31B18E3837CB852297D8F86AED183040B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3a:99:09:b5:c5:9e:df:5e:96:53:66:c4:14: 4d:3c:3e:07:8b:72:a8:29:f4:f2:99:bf:a5:69:b0: 5e:53:d4:b0:3c:b2:9d:13:e9:d0:f1:11:64:d5:fb: 21:fa:5c:12:8a:aa:e9:b5:61:5e:10:0e:65:8f:a3: d7:2f:e0:35:b1:4b:52:11:55:62:f8:bc:9b:33:9b: e5:ee:62:dd:ff:75:de:eb:f9:70:82:f2:96:fb:26: 7a:d3:87:27:45:d6:2d:4b:49:13:e2:27:a3:66:0b: d6:76:b5:38:07:cf:b9:1a:93:19:fc:61:0e:47:7e: c3:fc:95:fc:33:fd:25:f2:04:c3:2f:2b:33:40:8f: 96:50:5f:fb:91:bf:8a:7f:88:22:e9:5d:0a:d8:cc: 51:5e:70:78:24:28:4c:11:68:1a:6e:cd:85:53:b5: 80:34:f9:a6:41:5b:b2:68:1c:cd:86:a6:e8:b7:66: 53:cc:24:77:6a:fe:74:04:92:0d:6b:04:d2:45:2f: 4d:39:7c:7f:87:b8:f4:2a:6f:6a:58:be:3f:44:a9: c2:79:4e:33:88:19:da:0c:36:17:30:c8:95:d2:ec: 0f:2e:9b:70:aa:cc:e0:f3:7f:2e:46:35:c3:42:7b: 85:7c:96:8f:b5:87:95:d0:42:f8:a9:fb:ba:b6:7a: 6c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3B:B7:B3:1B:18:E3:83:7C:B8:52:29:7D:8F:86:AE:D1:83:04:0B X509v3 Authority Key Identifier: keyid:53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:26:fc:1a:6f:34:5c:76:7a:0e:1e:73:6a:d8:c0:10:a5:89: 96:21:1c:83:1e:95:e9:58:33:0b:af:90:b9:b9:48:a2:77:26: 1f:c3:b2:df:47:d5:e1:d7:07:b6:91:df:b7:22:f3:ba:cc:6c: e9:9e:eb:82:95:d4:8b:37:36:53:f6:b4:6d:26:8a:4a:6f:b2: 9d:f2:7d:35:d8:c8:1e:47:6b:20:41:f2:73:de:8e:5d:bd:5a: f3:7f:97:08:a8:a5:d2:cc:d6:47:c5:76:f9:c9:a0:04:d1:7a: 24:04:fa:ce:c0:eb:f2:8d:62:1f:13:79:29:44:87:9d:ef:8c: 88:9b:dc:a4:ee:7b:2e:af:58:ae:3f:0c:9e:2f:9c:cc:57:97: 7b:4e:f9:48:e6:7d:7d:64:fb:73:a4:1b:57:50:48:da:bf:6e: 19:ff:b9:12:6c:f3:50:d6:e6:28:b2:b2:91:58:69:01:f2:ee: 79:29:c3:7c:bf:31:6b:7b:2c:fb:3f:c9:ea:d8:94:b3:5f:fa: da:88:eb:92:ee:a2:61:9c:9e:d9:34:71:24:f2:8f:ad:48:ca: 41:37:69:12:b7:db:d4:fc:07:a7:30:3b:a2:03:10:c3:fc:87: 29:55:f3:15:1d:1e:58:c6:04:00:36:88:6d:1c:a2:12:b2:e1: d4:25:47:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCWxIu6x8NU1EnGN8ARdF5ZEG4dQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgzMDc0 QkRGN0FFNzAeFw0yNTA4MjIxNjU2MjJaFw0yNTA4MjUxOTQwMjJaMDMxMTAvBgNV BAMTKDJBM0JCN0IzMUIxOEUzODM3Q0I4NTIyOTdEOEY4NkFFRDE4MzA0MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChOpkJtcWe316WU2bEFE08PgeL cqgp9PKZv6VpsF5T1LA8sp0T6dDxEWTV+yH6XBKKqum1YV4QDmWPo9cv4DWxS1IR VWL4vJszm+XuYt3/dd7r+XCC8pb7JnrThydF1i1LSRPiJ6NmC9Z2tTgHz7kakxn8 YQ5HfsP8lfwz/SXyBMMvKzNAj5ZQX/uRv4p/iCLpXQrYzFFecHgkKEwRaBpuzYVT tYA0+aZBW7JoHM2Gpui3ZlPMJHdq/nQEkg1rBNJFL005fH+HuPQqb2pYvj9EqcJ5 TjOIGdoMNhcwyJXS7A8um3CqzODzfy5GNcNCe4V8lo+1h5XQQvip+7q2emzvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKju3sxsY44N8uFIpfY+GrtGDBAswHwYDVR0j BBgwFoAUU11G9AROLMISk8wGGieDB0vfeucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDZmMzNmMi1mMDZlLTRlYjYtYWU2MS01NTI5YmNhMWNkY2QvMC81MzVENDZGNDA0 NEUyQ0MyMTI5M0NDMDYxQTI3ODMwNzRCREY3QUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgzMDc0QkRG N0FFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ2ZjMzZjItZjA2ZS00ZWI2LWFl NjEtNTUyOWJjYTFjZGNkLzAvNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgz MDc0QkRGN0FFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUm/BpvNFx2eg4ec2rYwBCliZYhHIMelelY MwuvkLm5SKJ3Jh/Dst9H1eHXB7aR37ci87rMbOme64KV1Is3NlP2tG0mikpvsp3y fTXYyB5HayBB8nPejl29WvN/lwiopdLM1kfFdvnJoATReiQE+s7A6/KNYh8TeSlE h53vjIib3KTuey6vWK4/DJ4vnMxXl3tO+UjmfX1k+3OkG1dQSNq/bhn/uRJs81DW 5iiyspFYaQHy7nkpw3y/MWt7LPs/yerYlLNf+tqI65LuomGcntk0cSTyj61IykE3 aRK329T8B6cwO6IDEMP8hylV8xUdHljGBAA2iG0cohKy4dQlRw8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:08:02 2025 by rpki-client