$ rpki-client -vvf repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft File: 535D46F4044E2CC21293CC061A2783074BDF7AE7.mft (raw, json) Hash identifier: ZhxIJOT5Wqog/ZtOL+p/ilYW/AdjBuQuiO8G0N6+mLs= Subject key identifier: F9:56:29:0A:5C:D5:C5:18:24:D2:69:E0:BF:BC:6C:F0:FE:6B:BD:6D Authority key identifier: 53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7 Certificate issuer: /CN=535D46F4044E2CC21293CC061A2783074BDF7AE7 Certificate serial: 72EB8C302BE88083D7E712716998159EB0099FA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft Manifest number: 0131 Signing time: Tue 04 Nov 2025 02:41:23 +0000 Manifest this update: Tue 04 Nov 2025 02:36:23 +0000 Manifest next update: Fri 07 Nov 2025 05:49:23 +0000 Files and hashes: 1: 3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa (hash: +6dOkqtOYym+orh3YOVIsqZdYCOBqAsCXYd1nxy46No=) 2: 3130332e3134332e32322e302f32332d3233203d3e20313339343331.roa (hash: doha74kbIgonFyPsIYU3AWrLESRigytVKDPz7Hk3URQ=) 3: 323430353a343663303a3a2f33322d3332203d3e20313339343331.roa (hash: yq265ELsxp0oAlCM/3VQz9AgxchX8BpcvalzRZ4r8Rc=) 4: 535D46F4044E2CC21293CC061A2783074BDF7AE7.crl (hash: exGYxW8KbpkpckxQ3m04vDBdV7y/Jrfui/7lv+NYKqY=) 5: 3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa (hash: mBtquOb/Z5LghTTZd9Pb+kXQ6K/DQevd9P5nIEvxaXs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:eb:8c:30:2b:e8:80:83:d7:e7:12:71:69:98:15:9e:b0:09:9f:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535D46F4044E2CC21293CC061A2783074BDF7AE7 Validity Not Before: Nov 4 02:36:23 2025 GMT Not After : Nov 7 05:49:23 2025 GMT Subject: CN=F956290A5CD5C51824D269E0BFBC6CF0FE6BBD6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a1:76:33:08:ed:e0:73:25:15:01:f2:87:cf: 3a:10:90:50:bb:0f:37:e0:59:88:cc:7f:77:80:ee: 9e:03:8e:97:af:3f:cd:c2:9d:ba:6e:aa:ed:f2:fb: 79:1a:f2:2c:0b:47:42:fa:93:cf:31:e9:2a:8a:9c: 03:b3:dc:fd:21:b5:3f:92:40:4b:e6:eb:73:bb:6f: 00:ad:85:58:7d:bb:05:35:83:c0:db:f6:2d:20:56: 96:d2:0d:2f:58:16:d2:06:5d:73:47:4e:1b:75:67: 1b:1d:4d:d0:14:2f:60:71:9e:ad:f5:3f:a6:1d:ce: fd:8b:51:1d:42:e5:09:3d:dc:a5:37:54:3f:c7:c6: 2b:b5:98:ac:82:0a:28:40:e5:56:13:76:ce:05:c4: 11:ac:8a:c2:d0:07:a7:06:42:da:57:6a:18:9f:51: 77:09:2c:49:3b:3c:ca:e8:67:19:67:d9:46:78:4c: 73:54:4a:53:23:9a:00:21:aa:ba:69:25:4e:bd:84: 10:0e:fc:56:14:4c:7e:05:40:48:4b:be:3b:39:5f: 1e:e6:b7:40:74:7c:f7:6e:39:17:a2:90:c1:16:9d: 2b:c4:b5:3a:ca:7e:0d:f9:4c:30:7b:0a:89:03:c2: 59:2a:3a:95:e4:59:7b:85:43:03:ca:5a:88:7c:99: 4d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:56:29:0A:5C:D5:C5:18:24:D2:69:E0:BF:BC:6C:F0:FE:6B:BD:6D X509v3 Authority Key Identifier: keyid:53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c8:f2:bc:e6:67:f7:a6:c4:11:65:b1:55:9e:d7:af:e9:00: 69:44:48:9f:a1:c8:01:6e:7f:34:1a:3e:7c:60:4b:ee:aa:5b: 7f:d6:a9:29:4e:bb:9c:6b:6c:f3:07:1b:3c:44:4b:98:fd:06: a9:04:2a:4a:c8:dd:b3:fe:a7:fa:1d:71:74:da:d4:15:4e:c0: e2:43:42:4f:b9:62:a9:ee:f0:5f:a0:53:63:7f:70:df:aa:e4: e4:22:49:22:d2:81:13:7c:4a:fe:3f:d9:0f:99:bb:b7:f3:13: 1e:56:5d:b8:56:ab:65:bb:77:0b:f3:90:cf:28:e5:55:c3:94: 7f:11:58:88:ae:52:00:e0:6f:d2:e5:46:f4:46:06:7a:0b:d0: 5e:29:74:e5:97:ce:71:bb:ac:c5:f8:be:10:8f:a1:90:e4:7a: b2:56:b9:06:e8:da:bd:8a:9f:f3:6e:9c:8f:f7:96:66:8f:8f: a5:13:9f:e3:87:bd:f6:95:77:0f:5d:22:7e:be:48:bd:d5:36: ad:e3:b3:f2:fb:8c:20:ec:01:84:ee:55:c9:01:73:c3:94:a1: 6b:cf:6f:6e:eb:6b:47:46:a7:80:7f:a9:f5:ae:ad:e7:04:28: de:2d:8e:e9:3e:d2:c1:0f:58:e0:53:24:9a:3a:1b:1d:8c:d7: 42:5e:d7:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcuuMMCvogIPX5xJxaZgVnrAJn6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgzMDc0 QkRGN0FFNzAeFw0yNTExMDQwMjM2MjNaFw0yNTExMDcwNTQ5MjNaMDMxMTAvBgNV BAMTKEY5NTYyOTBBNUNENUM1MTgyNEQyNjlFMEJGQkM2Q0YwRkU2QkJENkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsoXYzCO3gcyUVAfKHzzoQkFC7 DzfgWYjMf3eA7p4DjpevP83Cnbpuqu3y+3ka8iwLR0L6k88x6SqKnAOz3P0htT+S QEvm63O7bwCthVh9uwU1g8Db9i0gVpbSDS9YFtIGXXNHTht1ZxsdTdAUL2Bxnq31 P6Ydzv2LUR1C5Qk93KU3VD/Hxiu1mKyCCihA5VYTds4FxBGsisLQB6cGQtpXahif UXcJLEk7PMroZxln2UZ4THNUSlMjmgAhqrppJU69hBAO/FYUTH4FQEhLvjs5Xx7m t0B0fPduOReikMEWnSvEtTrKfg35TDB7CokDwlkqOpXkWXuFQwPKWoh8mU1HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+VYpClzVxRgk0mngv7xs8P5rvW0wHwYDVR0j BBgwFoAUU11G9AROLMISk8wGGieDB0vfeucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDZmMzNmMi1mMDZlLTRlYjYtYWU2MS01NTI5YmNhMWNkY2QvMC81MzVENDZGNDA0 NEUyQ0MyMTI5M0NDMDYxQTI3ODMwNzRCREY3QUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgzMDc0QkRG N0FFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ2ZjMzZjItZjA2ZS00ZWI2LWFl NjEtNTUyOWJjYTFjZGNkLzAvNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgz MDc0QkRGN0FFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzI8rzmZ/emxBFlsVWe16/pAGlESJ+hyAFu fzQaPnxgS+6qW3/WqSlOu5xrbPMHGzxES5j9BqkEKkrI3bP+p/odcXTa1BVOwOJD Qk+5Yqnu8F+gU2N/cN+q5OQiSSLSgRN8Sv4/2Q+Zu7fzEx5WXbhWq2W7dwvzkM8o 5VXDlH8RWIiuUgDgb9LlRvRGBnoL0F4pdOWXznG7rMX4vhCPoZDkerJWuQbo2r2K n/NunI/3lmaPj6UTn+OHvfaVdw9dIn6+SL3VNq3js/L7jCDsAYTuVckBc8OUoWvP b27ra0dGp4B/qfWurecEKN4tjuk+0sEPWOBTJJo6Gx2M10Je11Y= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:35 2025 by rpki-client