$ rpki-client -vvf repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft File: 535D46F4044E2CC21293CC061A2783074BDF7AE7.mft (raw, json) Hash identifier: lwedZgWsqPtuwsh+IeXYnfxUB0g8MBmbHQl/C1/NcJw= Subject key identifier: 9F:B4:96:51:AC:91:69:1D:F7:15:C3:24:ED:A5:E8:85:0C:6A:F4:3C Authority key identifier: 53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7 Certificate issuer: /CN=535D46F4044E2CC21293CC061A2783074BDF7AE7 Certificate serial: 35D627800260C5243DB09BC2994E00BF98FB5795 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft Manifest number: F7 Signing time: Sun 29 Jun 2025 02:21:21 +0000 Manifest this update: Sun 29 Jun 2025 02:16:21 +0000 Manifest next update: Wed 02 Jul 2025 06:31:21 +0000 Files and hashes: 1: 3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa (hash: jf5znzRFy2+P6OoEH2nJsLB6FzpE4dX49Aqe9OCR/Ck=) 2: 3130332e3134332e32322e302f32332d3233203d3e20313339343331.roa (hash: O+DYiMiMwkf2fjBBi2Y0uG1bMY8o2RWfJ3yizKPcbzk=) 3: 535D46F4044E2CC21293CC061A2783074BDF7AE7.crl (hash: heVJgngyXDm2j/b1hdmYkyjPU3h9Di3NGn+xOQeS8G8=) 4: 3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa (hash: ziqyElqA9AWawQsIwtFYhW7vigptCpJYDFMjj4wIn2E=) 5: 323430353a343663303a3a2f33322d3332203d3e20313339343331.roa (hash: yq265ELsxp0oAlCM/3VQz9AgxchX8BpcvalzRZ4r8Rc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 06:31:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d6:27:80:02:60:c5:24:3d:b0:9b:c2:99:4e:00:bf:98:fb:57:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535D46F4044E2CC21293CC061A2783074BDF7AE7 Validity Not Before: Jun 29 02:16:21 2025 GMT Not After : Jul 2 06:31:21 2025 GMT Subject: CN=9FB49651AC91691DF715C324EDA5E8850C6AF43C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:34:61:29:c4:3a:eb:58:17:0e:59:54:f6:12: 88:19:cb:d0:d5:c3:13:3f:26:5c:e9:6e:00:df:b0: e0:59:99:8f:57:8e:50:ab:7a:75:d9:50:b7:4a:13: c0:42:72:cc:32:55:8f:a3:fd:d3:23:ba:5d:1c:10: 6b:2d:f2:6e:ca:c4:d2:cb:dd:dd:58:77:0f:0d:2f: 83:27:60:3f:72:3b:20:d3:7e:2f:26:12:7e:a2:d1: c7:4e:bb:dd:90:6f:11:aa:d7:b7:28:42:5a:7c:b3: 31:6a:f1:c6:77:bb:a0:a9:e4:cd:70:c9:2e:e5:74: 68:c7:26:c1:df:15:0d:fb:b4:f3:cd:cc:d4:de:72: e4:62:77:e3:d0:4c:50:18:23:a8:44:7c:75:37:47: 18:29:f9:40:79:6c:cf:ce:dc:d3:1b:13:49:a8:bd: f9:22:dc:42:2c:b6:df:55:ea:0d:51:38:8a:f5:d5: 26:ad:7a:b5:09:41:fb:9e:34:98:17:c9:e4:b5:73: 9c:fc:38:a9:83:8f:91:0a:0d:98:af:7d:86:3f:92: 72:24:f4:17:ac:2e:7d:f0:55:97:68:29:c4:dd:2b: 6a:95:72:66:d3:25:f6:4e:0b:ba:2a:16:bc:3f:ff: a5:7f:82:a6:29:56:12:fc:f1:80:40:ea:e8:bf:40: 89:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B4:96:51:AC:91:69:1D:F7:15:C3:24:ED:A5:E8:85:0C:6A:F4:3C X509v3 Authority Key Identifier: keyid:53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e8:58:3e:0e:66:9a:c0:45:89:ff:27:aa:fe:48:6e:8c:32: d8:ef:bb:da:28:63:38:59:96:11:83:5a:a5:3d:a7:f1:31:47: c0:78:9a:a7:da:f5:09:f2:47:cf:1a:23:17:05:87:73:3a:33: 98:5f:34:b4:ec:d4:69:02:e5:32:89:d9:86:ac:28:66:37:e5: a3:9b:97:ad:43:52:f0:1d:e9:f8:7b:b5:db:8b:b2:c2:2e:9f: 3e:77:e9:cb:db:a6:b1:24:85:11:f3:36:ad:69:dc:3f:0d:64: 4a:be:d7:f2:64:86:68:e8:41:6f:74:82:a2:30:1e:c4:d4:22: b9:c5:39:a5:22:83:55:d7:f0:03:7b:bf:9d:f2:df:68:15:b6: 9b:92:c5:c9:8f:32:3f:59:1c:e8:0f:1a:bf:31:a8:66:71:b5: 3f:05:09:c6:d3:6b:95:a4:56:f7:50:57:10:39:c7:ce:09:19: 89:4b:5d:56:e2:00:16:82:ed:32:40:11:0e:41:0e:be:e1:df: 1f:ff:77:bf:3b:94:8e:c4:3b:a2:5c:d2:43:a5:7a:21:7f:80: ae:f3:42:ee:c4:94:69:9e:b7:56:97:1a:08:98:6c:4d:83:dc: 76:01:40:83:c4:24:3a:2d:ff:84:cc:22:ff:01:11:f5:0a:08: 8b:6c:0a:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNdYngAJgxSQ9sJvCmU4Av5j7V5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgzMDc0 QkRGN0FFNzAeFw0yNTA2MjkwMjE2MjFaFw0yNTA3MDIwNjMxMjFaMDMxMTAvBgNV BAMTKDlGQjQ5NjUxQUM5MTY5MURGNzE1QzMyNEVEQTVFODg1MEM2QUY0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdNGEpxDrrWBcOWVT2EogZy9DV wxM/JlzpbgDfsOBZmY9XjlCrenXZULdKE8BCcswyVY+j/dMjul0cEGst8m7KxNLL 3d1Ydw8NL4MnYD9yOyDTfi8mEn6i0cdOu92QbxGq17coQlp8szFq8cZ3u6Cp5M1w yS7ldGjHJsHfFQ37tPPNzNTecuRid+PQTFAYI6hEfHU3Rxgp+UB5bM/O3NMbE0mo vfki3EIstt9V6g1ROIr11SaterUJQfueNJgXyeS1c5z8OKmDj5EKDZivfYY/knIk 9BesLn3wVZdoKcTdK2qVcmbTJfZOC7oqFrw//6V/gqYpVhL88YBA6ui/QIkdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn7SWUayRaR33FcMk7aXohQxq9DwwHwYDVR0j BBgwFoAUU11G9AROLMISk8wGGieDB0vfeucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDZmMzNmMi1mMDZlLTRlYjYtYWU2MS01NTI5YmNhMWNkY2QvMC81MzVENDZGNDA0 NEUyQ0MyMTI5M0NDMDYxQTI3ODMwNzRCREY3QUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgzMDc0QkRG N0FFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ2ZjMzZjItZjA2ZS00ZWI2LWFl NjEtNTUyOWJjYTFjZGNkLzAvNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgz MDc0QkRGN0FFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDoWD4OZprARYn/J6r+SG6MMtjvu9ooYzhZ lhGDWqU9p/ExR8B4mqfa9QnyR88aIxcFh3M6M5hfNLTs1GkC5TKJ2YasKGY35aOb l61DUvAd6fh7tduLssIunz536cvbprEkhRHzNq1p3D8NZEq+1/JkhmjoQW90gqIw HsTUIrnFOaUig1XX8AN7v53y32gVtpuSxcmPMj9ZHOgPGr8xqGZxtT8FCcbTa5Wk VvdQVxA5x84JGYlLXVbiABaC7TJAEQ5BDr7h3x//d787lI7EO6Jc0kOleiF/gK7z Qu7ElGmet1aXGgiYbE2D3HYBQIPEJDot/4TMIv8BEfUKCItsCrg= -----END CERTIFICATE-----Generated at Sun Jun 29 18:52:38 2025 by rpki-client