$ rpki-client -vvf repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft File: 535C0FE8EE7BE7E1C8897B031858C36344038072.mft (raw, json) Hash identifier: FWUPs50hGaml5VlEB5oH8c6H+DGRuiy48iB7HKldozE= Subject key identifier: AA:B9:94:AC:B7:16:7C:FB:66:19:6F:EB:EB:82:C6:2F:C3:79:1A:F2 Authority key identifier: 53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72 Certificate issuer: /CN=535C0FE8EE7BE7E1C8897B031858C36344038072 Certificate serial: 02F4B4443ED70377B50B130C7A02D409F072099E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft Manifest number: 90 Signing time: Fri 22 Aug 2025 20:00:53 +0000 Manifest this update: Fri 22 Aug 2025 19:55:53 +0000 Manifest next update: Tue 26 Aug 2025 02:32:53 +0000 Files and hashes: 1: 3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa (hash: RrMbT80FUemGe695AxppDWAP2LkCS0fiZaNilGLH1lg=) 2: 535C0FE8EE7BE7E1C8897B031858C36344038072.crl (hash: X8U00+1bfF5Q9ZIWzEz8rERTqIaKJHt+coFnw/H38Nw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:f4:b4:44:3e:d7:03:77:b5:0b:13:0c:7a:02:d4:09:f0:72:09:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535C0FE8EE7BE7E1C8897B031858C36344038072 Validity Not Before: Aug 22 19:55:53 2025 GMT Not After : Aug 26 02:32:53 2025 GMT Subject: CN=AAB994ACB7167CFB66196FEBEB82C62FC3791AF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6d:19:93:fa:c7:41:9e:b7:0a:3a:f1:fc:45: d5:b9:b7:2f:fc:01:59:2f:ff:10:44:f2:cf:79:bb: 44:23:f9:37:ef:27:77:79:44:c4:d5:0c:e3:0e:1a: 6b:f6:b7:1f:51:17:ec:7b:73:cf:d5:57:d1:38:2e: 29:d2:f4:09:23:95:5c:0e:ba:5e:6b:b6:f3:bf:64: 4c:1b:73:8b:e8:ed:a7:a6:fc:f2:ff:68:b9:68:38: 1e:07:03:d4:f9:50:f3:52:a8:33:1b:4f:2d:18:81: 6b:3e:13:74:fe:e8:eb:c4:a3:b1:0a:04:96:2d:de: f0:58:de:ef:b4:16:36:9f:fe:0b:12:f5:e7:3b:00: bc:2c:90:42:95:97:97:0e:bb:41:8c:60:ea:df:fd: be:c7:b8:4b:47:6f:87:ea:2a:ae:29:08:8a:fe:db: 78:f5:c3:10:90:5d:f3:97:df:4d:6a:44:a3:56:1a: df:9a:91:cf:08:fa:59:7a:15:2e:ce:52:44:2a:e4: de:48:eb:cd:3e:c7:64:31:9b:d2:59:db:14:cc:f1: ca:9e:49:4a:f4:95:b9:d1:ca:79:0c:09:13:2a:09: 62:08:15:f8:00:f3:92:66:4f:20:03:5d:5a:4f:60: 36:bf:68:a7:4b:fc:a4:59:b0:88:43:67:d6:1d:ba: 7a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B9:94:AC:B7:16:7C:FB:66:19:6F:EB:EB:82:C6:2F:C3:79:1A:F2 X509v3 Authority Key Identifier: keyid:53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:d0:e9:ee:80:a0:a6:d5:0f:2a:a5:07:bc:ee:ac:cc:7e:8f: 58:97:a5:b1:52:db:c4:ea:48:50:3c:10:87:83:b2:a5:1c:21: 84:56:1e:d3:33:dc:e5:71:6d:67:79:d5:e2:ca:8b:49:90:bd: 67:eb:2e:14:8c:9e:fe:a0:60:54:e3:08:bc:4d:2a:e6:80:a5: 29:96:67:6b:11:55:61:06:18:8e:9f:e8:d3:13:78:94:3e:a3: fc:6f:ac:52:db:ab:f5:35:24:0e:da:84:9e:56:07:c1:5d:4b: 1c:67:0b:ea:b3:42:fa:84:45:05:35:9a:db:44:54:6e:66:6d: 28:60:d1:f1:eb:28:c1:00:64:20:7a:4a:27:3c:0d:25:94:6d: 8d:f3:3f:40:17:a3:17:08:d3:17:a0:f6:89:1c:c1:b0:d8:b8: b3:f5:2a:a1:97:07:2b:bc:db:42:07:12:55:e2:da:32:71:1b: 97:25:35:35:30:c0:db:60:af:bd:bc:62:70:05:6e:4a:b5:e1: 82:b9:e7:38:c3:83:ee:bb:cb:e9:14:ac:f8:6b:13:5f:93:f0: c1:01:8d:92:71:6d:63:ba:75:ab:14:cc:35:2f:cc:4a:47:c4: a8:fb:32:68:32:47:4f:db:66:84:9f:24:9b:b8:e7:2d:fa:0a: 5d:06:14:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAvS0RD7XA3e1CxMMegLUCfByCZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMzNjM0 NDAzODA3MjAeFw0yNTA4MjIxOTU1NTNaFw0yNTA4MjYwMjMyNTNaMDMxMTAvBgNV BAMTKEFBQjk5NEFDQjcxNjdDRkI2NjE5NkZFQkVCODJDNjJGQzM3OTFBRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCybRmT+sdBnrcKOvH8RdW5ty/8 AVkv/xBE8s95u0Qj+TfvJ3d5RMTVDOMOGmv2tx9RF+x7c8/VV9E4LinS9AkjlVwO ul5rtvO/ZEwbc4vo7aem/PL/aLloOB4HA9T5UPNSqDMbTy0YgWs+E3T+6OvEo7EK BJYt3vBY3u+0Fjaf/gsS9ec7ALwskEKVl5cOu0GMYOrf/b7HuEtHb4fqKq4pCIr+ 23j1wxCQXfOX301qRKNWGt+akc8I+ll6FS7OUkQq5N5I680+x2Qxm9JZ2xTM8cqe SUr0lbnRynkMCRMqCWIIFfgA85JmTyADXVpPYDa/aKdL/KRZsIhDZ9YdunpBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqrmUrLcWfPtmGW/r64LGL8N5GvIwHwYDVR0j BBgwFoAUU1wP6O575+HIiXsDGFjDY0QDgHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzQ1NGQwYi0xYWQ3LTQxZWQtOGU0MC1jY2I2NjY0M2FjZjAvMC81MzVDMEZFOEVF N0JFN0UxQzg4OTdCMDMxODU4QzM2MzQ0MDM4MDcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMzNjM0NDAz ODA3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM0NTRkMGItMWFkNy00MWVkLThl NDAtY2NiNjY2NDNhY2YwLzAvNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMz NjM0NDAzODA3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMrQ6e6AoKbVDyqlB7zurMx+j1iXpbFS28Tq SFA8EIeDsqUcIYRWHtMz3OVxbWd51eLKi0mQvWfrLhSMnv6gYFTjCLxNKuaApSmW Z2sRVWEGGI6f6NMTeJQ+o/xvrFLbq/U1JA7ahJ5WB8FdSxxnC+qzQvqERQU1mttE VG5mbShg0fHrKMEAZCB6Sic8DSWUbY3zP0AXoxcI0xeg9okcwbDYuLP1KqGXByu8 20IHElXi2jJxG5clNTUwwNtgr728YnAFbkq14YK55zjDg+67y+kUrPhrE1+T8MEB jZJxbWO6dasUzDUvzEpHxKj7MmgyR0/bZoSfJJu45y36Cl0GFHA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:21:54 2025 by rpki-client