$ rpki-client -vvf repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft File: 535C0FE8EE7BE7E1C8897B031858C36344038072.mft (raw, json) Hash identifier: jZN4YEWETD8ZaUhx+ABR/PPlvL2oVcOr2hY4HV8cg2U= Subject key identifier: 76:50:0A:F6:F3:7D:39:F5:79:85:28:16:59:41:32:B2:2E:0D:97:F1 Authority key identifier: 53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72 Certificate issuer: /CN=535C0FE8EE7BE7E1C8897B031858C36344038072 Certificate serial: 29B748002A7455B456BC745207546488B12F9813 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft Manifest number: F0 Signing time: Thu 26 Mar 2026 01:31:00 +0000 Manifest this update: Thu 26 Mar 2026 01:26:00 +0000 Manifest next update: Sun 29 Mar 2026 03:44:00 +0000 Files and hashes: 1: 3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa (hash: hj7AxZha/0UMDCCJ1jFrzNiqEoW5ocfthigeLPCS3mE=) 2: 535C0FE8EE7BE7E1C8897B031858C36344038072.crl (hash: wFa5VY8XrFn+EzqgSKOkAS1ZPXWtnjhljjVpX1D1yNM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b7:48:00:2a:74:55:b4:56:bc:74:52:07:54:64:88:b1:2f:98:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535C0FE8EE7BE7E1C8897B031858C36344038072 Validity Not Before: Mar 26 01:26:00 2026 GMT Not After : Mar 29 03:44:00 2026 GMT Subject: CN=76500AF6F37D39F579852816594132B22E0D97F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:46:02:65:00:0b:e8:38:16:12:fd:2c:17:f0: 16:f2:cc:3e:b9:82:b0:f4:86:b2:c9:99:2d:d5:04: 51:21:99:57:f3:67:a9:59:72:e4:78:f0:e3:0b:ae: 78:4e:0e:f6:58:8d:51:0e:12:81:b4:a7:c4:b6:c9: de:a5:8b:11:c7:e2:4f:2f:a3:c9:d5:dd:f2:77:ed: f6:35:1e:af:7f:a9:2e:d1:22:96:32:f9:75:d3:ff: 31:2c:58:c7:0e:10:27:ce:f2:09:24:59:cd:97:73: 67:d9:1f:79:4f:31:3f:bc:48:5c:cd:a6:c3:8c:7b: 49:af:a2:66:d4:0c:ca:b1:f9:72:5d:49:bd:8a:a0: 53:1f:ed:a2:ac:fa:78:00:b0:43:06:d4:99:48:95: 0e:4e:f8:ca:7d:1e:68:4d:14:08:16:a0:87:bc:52: ea:4d:d2:6a:16:3b:38:6b:6d:96:29:ca:b7:a3:18: 14:ec:2b:ba:7f:89:26:3d:5a:98:4d:e2:7e:88:72: 90:fa:a3:b1:b0:1a:91:b3:5e:21:c6:8d:ac:82:e3: ca:4b:1b:f5:94:63:85:0d:84:5c:c7:20:fb:38:1d: 73:1d:41:d3:64:2f:57:63:0a:18:ff:d0:e4:56:46: c6:8f:41:bc:2a:07:69:d9:f1:ac:b4:a2:89:4e:09: 5a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:50:0A:F6:F3:7D:39:F5:79:85:28:16:59:41:32:B2:2E:0D:97:F1 X509v3 Authority Key Identifier: keyid:53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:b1:bc:eb:43:0f:7f:60:df:b5:83:a6:4b:cc:aa:8c:8d:9e: 43:be:2b:84:88:d7:b9:07:6a:d6:72:26:93:07:5b:97:11:fe: 04:47:d5:7e:ab:5f:cf:06:e0:37:79:95:0e:d9:6d:8c:db:9c: 2b:86:28:c5:05:08:e0:a3:68:1a:9e:de:7d:09:3e:8a:21:84: d9:61:39:c2:00:c2:f6:66:d9:c9:61:51:c1:b6:d7:20:b9:99: 3d:61:e2:8f:54:9f:27:3e:80:3a:d3:4c:86:58:29:74:1e:0a: 67:ef:2b:07:c8:81:95:1d:c0:81:b8:cb:aa:d0:e0:4b:26:8b: 1a:f4:e6:a6:1e:84:17:e1:c7:fb:33:1a:af:99:be:f9:66:96: 63:f2:49:95:3c:2e:84:39:6f:a0:6d:af:74:85:b3:03:d5:f9: 08:1e:8f:3f:de:c1:c9:1c:63:7e:42:2d:71:19:0d:f3:08:cc: 2a:77:72:0a:a5:2c:47:90:7e:e0:9b:c7:38:7f:8c:50:28:6b: 13:9f:03:46:43:af:b2:bd:e8:bd:f0:c7:5a:5d:91:27:28:9d: 41:75:ac:4b:72:7b:f5:65:ea:0c:6f:3b:16:9b:ec:18:d2:2c: 82:dc:3e:cd:74:4c:d6:ba:b3:e5:76:28:b0:cc:6a:8a:41:94: 05:d6:27:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKbdIACp0VbRWvHRSB1RkiLEvmBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMzNjM0 NDAzODA3MjAeFw0yNjAzMjYwMTI2MDBaFw0yNjAzMjkwMzQ0MDBaMDMxMTAvBgNV BAMTKDc2NTAwQUY2RjM3RDM5RjU3OTg1MjgxNjU5NDEzMkIyMkUwRDk3RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrRgJlAAvoOBYS/SwX8BbyzD65 grD0hrLJmS3VBFEhmVfzZ6lZcuR48OMLrnhODvZYjVEOEoG0p8S2yd6lixHH4k8v o8nV3fJ37fY1Hq9/qS7RIpYy+XXT/zEsWMcOECfO8gkkWc2Xc2fZH3lPMT+8SFzN psOMe0mvombUDMqx+XJdSb2KoFMf7aKs+ngAsEMG1JlIlQ5O+Mp9HmhNFAgWoIe8 UupN0moWOzhrbZYpyrejGBTsK7p/iSY9WphN4n6IcpD6o7GwGpGzXiHGjayC48pL G/WUY4UNhFzHIPs4HXMdQdNkL1djChj/0ORWRsaPQbwqB2nZ8ay0oolOCVpLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdlAK9vN9OfV5hSgWWUEysi4Nl/EwHwYDVR0j BBgwFoAUU1wP6O575+HIiXsDGFjDY0QDgHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzQ1NGQwYi0xYWQ3LTQxZWQtOGU0MC1jY2I2NjY0M2FjZjAvMC81MzVDMEZFOEVF N0JFN0UxQzg4OTdCMDMxODU4QzM2MzQ0MDM4MDcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMzNjM0NDAz ODA3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM0NTRkMGItMWFkNy00MWVkLThl NDAtY2NiNjY2NDNhY2YwLzAvNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMz NjM0NDAzODA3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKxvOtDD39g37WDpkvMqoyNnkO+K4SI17kH atZyJpMHW5cR/gRH1X6rX88G4Dd5lQ7ZbYzbnCuGKMUFCOCjaBqe3n0JPoohhNlh OcIAwvZm2clhUcG21yC5mT1h4o9Unyc+gDrTTIZYKXQeCmfvKwfIgZUdwIG4y6rQ 4Esmixr05qYehBfhx/szGq+ZvvlmlmPySZU8LoQ5b6Btr3SFswPV+Qgejz/ewckc Y35CLXEZDfMIzCp3cgqlLEeQfuCbxzh/jFAoaxOfA0ZDr7K96L3wx1pdkSconUF1 rEtye/Vl6gxvOxab7BjSLILcPs10TNa6s+V2KLDMaopBlAXWJ/Y= -----END CERTIFICATE-----Generated at Thu Mar 26 14:34:14 2026 by rpki-client