$ rpki-client -vvf repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft File: 535D46F4044E2CC21293CC061A2783074BDF7AE7.mft (raw, json) Hash identifier: uL7pkbZLOIRJkjIWXXdkGN3yFOeg2cMeKLhKk7Agvrk= Subject key identifier: 04:CA:C9:B0:92:2E:3E:75:F6:65:F6:02:78:EA:9C:49:D9:12:50:5A Authority key identifier: 53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7 Certificate issuer: /CN=535D46F4044E2CC21293CC061A2783074BDF7AE7 Certificate serial: 4E1170337C114A798D8739B6F3117EBC0ACBBC46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft Manifest number: 0170 Signing time: Tue 24 Mar 2026 23:11:33 +0000 Manifest this update: Tue 24 Mar 2026 23:06:33 +0000 Manifest next update: Sat 28 Mar 2026 05:44:33 +0000 Files and hashes: 1: 3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa (hash: +6dOkqtOYym+orh3YOVIsqZdYCOBqAsCXYd1nxy46No=) 2: 323430353a343663303a3a2f33322d3332203d3e20313339343331.roa (hash: EwOzCmMtgubA3L7L2URI/KodC9B/ms+E2KBilH7ymAs=) 3: 3130332e3134332e32322e302f32332d3233203d3e20313339343331.roa (hash: doha74kbIgonFyPsIYU3AWrLESRigytVKDPz7Hk3URQ=) 4: 3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa (hash: mBtquOb/Z5LghTTZd9Pb+kXQ6K/DQevd9P5nIEvxaXs=) 5: 535D46F4044E2CC21293CC061A2783074BDF7AE7.crl (hash: Nk+UNmkMKA3EdLzBXZmjOwaIB0kTTs+x9YoyDc9kSGQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:11:70:33:7c:11:4a:79:8d:87:39:b6:f3:11:7e:bc:0a:cb:bc:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535D46F4044E2CC21293CC061A2783074BDF7AE7 Validity Not Before: Mar 24 23:06:33 2026 GMT Not After : Mar 28 05:44:33 2026 GMT Subject: CN=04CAC9B0922E3E75F665F60278EA9C49D912505A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:19:4f:a9:64:07:7f:15:e1:d8:eb:e7:99:ac: 55:07:b4:11:c2:bc:04:63:cb:ab:05:b5:5a:de:c4: 3e:47:76:e8:58:f7:4d:aa:29:8f:a9:d2:af:dd:4e: a8:3a:f1:a4:6d:72:84:30:7f:69:18:37:96:34:a2: ac:63:c4:7c:f2:5c:53:d2:7a:29:ee:35:20:1c:04: 4e:bc:02:cb:2c:9e:9a:0f:53:20:e8:ad:13:b2:4f: 66:31:32:bf:72:3f:e6:2f:ed:bd:d5:89:dc:85:d2: 0c:8c:df:e6:23:7f:4c:3e:a4:51:52:a7:ae:e9:29: 69:10:43:fb:f5:c5:69:9b:65:aa:c0:fa:03:98:07: d7:88:43:70:97:1d:f2:a8:5c:68:ca:cb:f3:74:0f: ba:5c:aa:f4:2c:42:85:0c:14:29:1b:52:fd:05:01: e8:ba:19:05:62:34:00:38:2a:19:29:3a:9d:c4:aa: 2f:ac:2b:17:94:4e:63:ad:0a:d9:37:8a:aa:fd:81: 29:38:8a:98:6a:0d:ab:b3:23:90:ea:cf:ed:0f:dd: 19:d9:8e:51:13:e7:0f:38:40:1c:18:1e:4e:7b:4b: 58:72:ec:3c:51:bd:b2:13:69:ab:aa:82:51:ab:bf: 7f:56:30:62:53:71:49:f2:a4:e5:53:17:d6:85:17: 54:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CA:C9:B0:92:2E:3E:75:F6:65:F6:02:78:EA:9C:49:D9:12:50:5A X509v3 Authority Key Identifier: keyid:53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:3a:5b:34:86:f4:64:e9:d0:1f:f9:c4:35:f3:80:fe:18:90: f7:1a:b2:17:b1:df:70:3b:42:b8:28:11:e5:b3:80:5c:c6:31: 12:b2:b5:2e:06:a8:7b:4a:c1:ed:e3:ea:a0:98:94:4c:be:99: c9:bc:11:ab:59:b0:a4:a4:a7:6e:36:40:10:f3:72:53:ea:54: cc:f3:ae:05:56:9a:46:22:50:49:68:4c:fd:40:cf:a2:be:ac: 06:0a:23:75:f4:98:a3:3c:15:e2:4c:04:77:ed:34:f9:02:f0: 03:39:69:1e:6c:a0:ac:62:54:1e:6a:01:00:24:9e:54:5e:b5: da:ff:db:02:12:7e:b5:c0:40:58:3b:ab:43:70:73:5e:90:c1: 3a:36:22:b5:c8:c3:5e:58:44:43:ee:e2:09:f5:c1:89:88:20: cd:f1:c9:6a:b6:ea:c7:45:61:e8:bf:0f:91:40:3e:d8:e5:7a: b8:02:34:19:dd:e1:c0:75:86:71:56:6f:ec:d1:68:c2:08:b3: b8:5f:b8:ca:88:44:f6:86:b4:55:fc:15:89:ce:e5:bd:5c:26: fa:85:b8:cf:f6:04:70:f0:31:74:6b:7f:de:44:99:81:8f:c4: da:0c:37:9d:ef:77:07:e8:07:c8:be:12:e8:32:ca:02:2a:78: 57:e0:0b:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUThFwM3wRSnmNhzm28xF+vArLvEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgzMDc0 QkRGN0FFNzAeFw0yNjAzMjQyMzA2MzNaFw0yNjAzMjgwNTQ0MzNaMDMxMTAvBgNV BAMTKDA0Q0FDOUIwOTIyRTNFNzVGNjY1RjYwMjc4RUE5QzQ5RDkxMjUwNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXGU+pZAd/FeHY6+eZrFUHtBHC vARjy6sFtVrexD5HduhY902qKY+p0q/dTqg68aRtcoQwf2kYN5Y0oqxjxHzyXFPS einuNSAcBE68AsssnpoPUyDorROyT2YxMr9yP+Yv7b3VidyF0gyM3+Yjf0w+pFFS p67pKWkQQ/v1xWmbZarA+gOYB9eIQ3CXHfKoXGjKy/N0D7pcqvQsQoUMFCkbUv0F Aei6GQViNAA4KhkpOp3Eqi+sKxeUTmOtCtk3iqr9gSk4iphqDauzI5Dqz+0P3RnZ jlET5w84QBwYHk57S1hy7DxRvbITaauqglGrv39WMGJTcUnypOVTF9aFF1QDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBMrJsJIuPnX2ZfYCeOqcSdkSUFowHwYDVR0j BBgwFoAUU11G9AROLMISk8wGGieDB0vfeucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDZmMzNmMi1mMDZlLTRlYjYtYWU2MS01NTI5YmNhMWNkY2QvMC81MzVENDZGNDA0 NEUyQ0MyMTI5M0NDMDYxQTI3ODMwNzRCREY3QUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgzMDc0QkRG N0FFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ2ZjMzZjItZjA2ZS00ZWI2LWFl NjEtNTUyOWJjYTFjZGNkLzAvNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgz MDc0QkRGN0FFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ86WzSG9GTp0B/5xDXzgP4YkPcashex33A7 QrgoEeWzgFzGMRKytS4GqHtKwe3j6qCYlEy+mcm8EatZsKSkp242QBDzclPqVMzz rgVWmkYiUEloTP1Az6K+rAYKI3X0mKM8FeJMBHftNPkC8AM5aR5soKxiVB5qAQAk nlRetdr/2wISfrXAQFg7q0Nwc16QwTo2IrXIw15YREPu4gn1wYmIIM3xyWq26sdF Yei/D5FAPtjlergCNBnd4cB1hnFWb+zRaMIIs7hfuMqIRPaGtFX8FYnO5b1cJvqF uM/2BHDwMXRrf95EmYGPxNoMN53vdwfoB8i+EugyygIqeFfgCwU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:19:39 2026 by rpki-client