$ rpki-client -vvf repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft File: 535D46F4044E2CC21293CC061A2783074BDF7AE7.mft (raw, json) Hash identifier: Hfnx8y9q0S1TxZ9mxXLSazlQCC9YuWrgpaSU4oEyNOM= Subject key identifier: D3:00:B5:1A:6C:A6:08:16:D1:1B:A5:97:C1:A4:B2:DE:C0:54:94:D8 Authority key identifier: 53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7 Certificate issuer: /CN=535D46F4044E2CC21293CC061A2783074BDF7AE7 Certificate serial: 40308B24536C8C6ECEB0940610083E534E86B70C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft Manifest number: 0165 Signing time: Sat 28 Feb 2026 05:41:25 +0000 Manifest this update: Sat 28 Feb 2026 05:36:25 +0000 Manifest next update: Tue 03 Mar 2026 15:55:25 +0000 Files and hashes: 1: 323430353a343663303a3a2f33322d3332203d3e20313339343331.roa (hash: EwOzCmMtgubA3L7L2URI/KodC9B/ms+E2KBilH7ymAs=) 2: 3130332e3134332e32322e302f32332d3233203d3e20313339343331.roa (hash: doha74kbIgonFyPsIYU3AWrLESRigytVKDPz7Hk3URQ=) 3: 3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa (hash: mBtquOb/Z5LghTTZd9Pb+kXQ6K/DQevd9P5nIEvxaXs=) 4: 3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa (hash: +6dOkqtOYym+orh3YOVIsqZdYCOBqAsCXYd1nxy46No=) 5: 535D46F4044E2CC21293CC061A2783074BDF7AE7.crl (hash: cFgh+hQWFodQfi76R/xHEjf9IYA2ccr8EGzdtlawSyU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 15:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:30:8b:24:53:6c:8c:6e:ce:b0:94:06:10:08:3e:53:4e:86:b7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535D46F4044E2CC21293CC061A2783074BDF7AE7 Validity Not Before: Feb 28 05:36:25 2026 GMT Not After : Mar 3 15:55:25 2026 GMT Subject: CN=D300B51A6CA60816D11BA597C1A4B2DEC05494D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:56:df:b0:7f:93:18:ff:3f:3e:96:e8:2f:31: ce:d0:bc:60:44:54:dc:6a:50:ad:22:2e:bc:fe:2f: cf:fa:ce:ed:1d:46:8b:9b:4f:90:ed:93:4e:8f:d6: 19:0f:b6:d7:02:22:0d:e2:5c:eb:02:a2:0a:89:fb: ab:86:4e:ec:fc:01:d8:0a:ca:22:14:d4:5b:90:8a: a0:a4:46:9b:78:02:ba:e2:b5:ff:4b:cf:ac:6d:60: b5:62:fc:f0:f4:60:8e:a9:4a:c1:66:82:3e:0a:91: f6:4e:19:1d:03:6f:87:4e:86:7a:b7:47:ac:c2:69: 51:60:ec:f4:78:4d:8a:55:8c:d4:82:0a:24:e5:dc: 88:3a:a4:1c:d9:93:11:ca:38:14:d5:2c:2f:1b:cf: dc:ae:49:24:5f:9a:62:96:14:25:9f:89:23:4f:7a: 6c:37:b7:7c:01:e3:2e:5d:8c:0d:1e:04:73:ee:87: db:10:6a:e9:0c:63:86:7d:65:ce:75:3f:a0:6c:83: 0c:88:ab:33:a3:59:13:48:d3:2a:fb:6a:6d:9e:a7: ea:6e:a4:e5:0f:60:47:a7:f3:49:34:94:b7:81:83: f3:1d:01:4b:f5:24:6f:f2:17:91:7a:21:d3:28:dd: 7b:ee:3a:1b:be:f8:c2:e4:3e:d7:ac:e8:6e:d0:e6: 56:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:00:B5:1A:6C:A6:08:16:D1:1B:A5:97:C1:A4:B2:DE:C0:54:94:D8 X509v3 Authority Key Identifier: keyid:53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:4f:1f:38:6a:9a:64:62:f3:bd:d0:81:4f:0c:50:10:67:2c: 5f:f0:e5:0d:3b:83:5f:00:b6:55:79:0d:e1:2d:8f:26:b5:e5: 1d:6e:ba:56:fe:0a:bd:46:d2:17:1f:71:12:db:8e:73:7d:81: c0:df:20:35:cf:bd:3e:85:97:a1:ba:a6:ca:96:42:21:ed:90: 41:74:31:87:47:07:b2:85:87:a3:7d:d5:8a:b3:92:71:f3:37: d0:1a:31:c3:92:c9:77:5c:bf:72:76:dc:39:66:6a:a7:40:f6: 88:cd:a8:c5:3c:fb:c4:9c:1c:3e:40:7d:50:13:b6:dc:73:db: f7:64:9f:2b:3f:e1:5b:b9:f1:33:99:80:34:5d:93:3b:9f:e6: d1:4d:dd:9e:78:77:4e:f0:81:a9:74:44:97:67:a2:7c:19:c7: b6:6e:5a:2c:07:36:3e:e3:da:d2:27:c1:93:b6:71:3e:93:e5: 5c:d1:8d:50:4f:60:ef:b5:49:3c:71:50:4c:ce:80:9e:3a:e5: 35:e6:c2:af:35:64:78:ac:48:87:d4:f7:c0:1a:df:ad:0d:e0: f2:d4:cd:47:af:4c:b8:52:c9:55:f3:d8:7a:8d:c0:e2:90:73: f8:6f:1a:4e:83:7e:dd:c7:c8:a0:b8:cc:7c:a3:59:21:d3:da: f5:82:7d:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQDCLJFNsjG7OsJQGEAg+U06GtwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgzMDc0 QkRGN0FFNzAeFw0yNjAyMjgwNTM2MjVaFw0yNjAzMDMxNTU1MjVaMDMxMTAvBgNV BAMTKEQzMDBCNTFBNkNBNjA4MTZEMTFCQTU5N0MxQTRCMkRFQzA1NDk0RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBVt+wf5MY/z8+lugvMc7QvGBE VNxqUK0iLrz+L8/6zu0dRoubT5Dtk06P1hkPttcCIg3iXOsCogqJ+6uGTuz8AdgK yiIU1FuQiqCkRpt4Arritf9Lz6xtYLVi/PD0YI6pSsFmgj4KkfZOGR0Db4dOhnq3 R6zCaVFg7PR4TYpVjNSCCiTl3Ig6pBzZkxHKOBTVLC8bz9yuSSRfmmKWFCWfiSNP emw3t3wB4y5djA0eBHPuh9sQaukMY4Z9Zc51P6BsgwyIqzOjWRNI0yr7am2ep+pu pOUPYEen80k0lLeBg/MdAUv1JG/yF5F6IdMo3XvuOhu++MLkPtes6G7Q5lYpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0wC1GmymCBbRG6WXwaSy3sBUlNgwHwYDVR0j BBgwFoAUU11G9AROLMISk8wGGieDB0vfeucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDZmMzNmMi1mMDZlLTRlYjYtYWU2MS01NTI5YmNhMWNkY2QvMC81MzVENDZGNDA0 NEUyQ0MyMTI5M0NDMDYxQTI3ODMwNzRCREY3QUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgzMDc0QkRG N0FFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ2ZjMzZjItZjA2ZS00ZWI2LWFl NjEtNTUyOWJjYTFjZGNkLzAvNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgz MDc0QkRGN0FFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBPHzhqmmRi873QgU8MUBBnLF/w5Q07g18A tlV5DeEtjya15R1uulb+Cr1G0hcfcRLbjnN9gcDfIDXPvT6Fl6G6psqWQiHtkEF0 MYdHB7KFh6N91YqzknHzN9AaMcOSyXdcv3J23DlmaqdA9ojNqMU8+8ScHD5AfVAT ttxz2/dknys/4Vu58TOZgDRdkzuf5tFN3Z54d07wgal0RJdnonwZx7ZuWiwHNj7j 2tInwZO2cT6T5VzRjVBPYO+1STxxUEzOgJ465TXmwq81ZHisSIfU98Aa360N4PLU zUevTLhSyVXz2HqNwOKQc/hvGk6Dft3HyKC4zHyjWSHT2vWCfVc= -----END CERTIFICATE-----Generated at Mon Mar 2 12:41:23 2026 by rpki-client