$ rpki-client -vvf repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft File: 535D46F4044E2CC21293CC061A2783074BDF7AE7.mft (raw, json) Hash identifier: JJo5uP8gqxw6lLtGF36EKUIAXX+PTGTjsRMPtFCch5U= Subject key identifier: 85:08:6C:05:84:1C:D5:75:1F:3F:27:A9:1D:9A:A6:C5:74:DA:F0:E6 Authority key identifier: 53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7 Certificate issuer: /CN=535D46F4044E2CC21293CC061A2783074BDF7AE7 Certificate serial: 3B87A97D56B641E20E903995EFC36DD20848142B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft Manifest number: 017A Signing time: Thu 16 Apr 2026 23:21:34 +0000 Manifest this update: Thu 16 Apr 2026 23:16:34 +0000 Manifest next update: Mon 20 Apr 2026 10:10:34 +0000 Files and hashes: 1: 3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa (hash: mBtquOb/Z5LghTTZd9Pb+kXQ6K/DQevd9P5nIEvxaXs=) 2: 3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa (hash: +6dOkqtOYym+orh3YOVIsqZdYCOBqAsCXYd1nxy46No=) 3: 535D46F4044E2CC21293CC061A2783074BDF7AE7.crl (hash: zMgEH3RZhNibnvkdHDBDPdB+nHzjIrIeBb7FiEEtAkY=) 4: 323430353a343663303a3a2f33322d3332203d3e20313339343331.roa (hash: EwOzCmMtgubA3L7L2URI/KodC9B/ms+E2KBilH7ymAs=) 5: 3130332e3134332e32322e302f32332d3233203d3e20313339343331.roa (hash: doha74kbIgonFyPsIYU3AWrLESRigytVKDPz7Hk3URQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:87:a9:7d:56:b6:41:e2:0e:90:39:95:ef:c3:6d:d2:08:48:14:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535D46F4044E2CC21293CC061A2783074BDF7AE7 Validity Not Before: Apr 16 23:16:34 2026 GMT Not After : Apr 20 10:10:34 2026 GMT Subject: CN=85086C05841CD5751F3F27A91D9AA6C574DAF0E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fd:11:ad:23:47:b0:5e:c0:f2:c7:4c:97:ed: fe:dd:ba:61:cf:56:32:85:51:3a:b0:0a:81:e4:f4: ed:0f:f8:8f:3e:d0:80:bb:c8:e7:f2:a9:b0:66:cd: 08:f5:93:45:12:1e:a0:13:ad:15:14:94:2e:4f:56: 49:df:3c:46:e8:de:05:49:f2:07:d5:dc:d7:bc:71: 2f:2f:d3:aa:c6:ec:83:36:c6:f3:03:0e:16:3c:64: 7b:b9:16:81:54:16:ff:2f:86:d2:a3:24:30:09:1c: aa:b3:ef:3c:8a:03:02:33:05:f8:3a:b6:79:6d:13: cc:3d:59:21:e9:38:24:cb:5f:6c:3e:86:bc:df:e7: 9e:20:56:ff:7e:13:a1:e9:1c:55:4d:f4:c0:84:b3: 8b:7c:d8:d2:e0:08:54:b7:df:48:63:2a:ab:ee:fb: 49:91:fb:c3:94:81:22:0f:be:dd:25:87:aa:f4:66: d5:1f:91:6f:12:b3:ca:34:80:13:a4:94:dc:23:32: d4:db:80:73:a7:9e:5d:e8:c9:ae:2c:a7:96:3d:16: d5:66:88:f1:02:c1:81:ea:7e:15:5c:17:ba:4c:f7: 74:a2:99:0f:13:fa:df:e3:3a:77:b9:ef:c5:87:2a: 43:ad:1f:ae:3d:86:23:c4:dd:94:16:72:dc:bc:65: 36:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:08:6C:05:84:1C:D5:75:1F:3F:27:A9:1D:9A:A6:C5:74:DA:F0:E6 X509v3 Authority Key Identifier: keyid:53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f7:0d:46:0a:7d:e1:48:c8:26:41:fe:ba:ec:9b:71:ca:87: cc:bc:71:a0:1e:51:4f:35:50:cf:55:09:bb:31:a8:91:45:c7: ed:91:57:a0:45:18:b5:c1:50:b1:2f:71:7e:3a:d7:f6:63:12: e3:cd:9a:a0:71:14:12:d0:51:30:7c:3e:e4:46:86:9f:e9:5b: 03:91:09:b7:d5:38:8c:e2:a8:02:fd:1c:9e:e6:1b:7c:91:3e: 64:18:eb:ea:c9:a6:04:75:45:53:22:6c:3a:39:f1:03:fe:14: fd:bf:b4:49:13:68:cf:76:10:30:dd:8f:67:b3:78:1d:41:6a: 7f:99:c6:30:c4:29:fe:c2:5e:be:d4:34:70:db:6b:df:f3:fd: 89:3e:c7:2e:05:21:20:67:e9:27:a0:08:ea:34:e2:23:89:00: 93:30:76:f7:23:58:aa:d1:df:51:8b:2f:91:34:ed:6a:d0:fd: 77:36:31:65:36:3e:d3:3b:91:31:b3:91:3a:e2:b1:45:a8:1c: c3:6a:23:20:1e:f2:bf:f4:b9:8b:bf:bb:68:f0:43:25:1e:18: 7c:58:a6:7a:4f:06:a7:19:5e:82:68:c2:93:43:77:51:48:2f: 91:77:ab:68:f8:83:b5:8d:f4:31:a2:49:1a:75:f9:01:3e:66: 5c:19:a7:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO4epfVa2QeIOkDmV78Nt0ghIFCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgzMDc0 QkRGN0FFNzAeFw0yNjA0MTYyMzE2MzRaFw0yNjA0MjAxMDEwMzRaMDMxMTAvBgNV BAMTKDg1MDg2QzA1ODQxQ0Q1NzUxRjNGMjdBOTFEOUFBNkM1NzREQUYwRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/RGtI0ewXsDyx0yX7f7dumHP VjKFUTqwCoHk9O0P+I8+0IC7yOfyqbBmzQj1k0USHqATrRUUlC5PVknfPEbo3gVJ 8gfV3Ne8cS8v06rG7IM2xvMDDhY8ZHu5FoFUFv8vhtKjJDAJHKqz7zyKAwIzBfg6 tnltE8w9WSHpOCTLX2w+hrzf554gVv9+E6HpHFVN9MCEs4t82NLgCFS330hjKqvu +0mR+8OUgSIPvt0lh6r0ZtUfkW8Ss8o0gBOklNwjMtTbgHOnnl3oya4sp5Y9FtVm iPECwYHqfhVcF7pM93SimQ8T+t/jOne578WHKkOtH649hiPE3ZQWcty8ZTY3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhQhsBYQc1XUfPyepHZqmxXTa8OYwHwYDVR0j BBgwFoAUU11G9AROLMISk8wGGieDB0vfeucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDZmMzNmMi1mMDZlLTRlYjYtYWU2MS01NTI5YmNhMWNkY2QvMC81MzVENDZGNDA0 NEUyQ0MyMTI5M0NDMDYxQTI3ODMwNzRCREY3QUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgzMDc0QkRG N0FFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ2ZjMzZjItZjA2ZS00ZWI2LWFl NjEtNTUyOWJjYTFjZGNkLzAvNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgz MDc0QkRGN0FFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHr3DUYKfeFIyCZB/rrsm3HKh8y8caAeUU81 UM9VCbsxqJFFx+2RV6BFGLXBULEvcX461/ZjEuPNmqBxFBLQUTB8PuRGhp/pWwOR CbfVOIziqAL9HJ7mG3yRPmQY6+rJpgR1RVMibDo58QP+FP2/tEkTaM92EDDdj2ez eB1Ban+ZxjDEKf7CXr7UNHDba9/z/Yk+xy4FISBn6SegCOo04iOJAJMwdvcjWKrR 31GLL5E07WrQ/Xc2MWU2PtM7kTGzkTrisUWoHMNqIyAe8r/0uYu/u2jwQyUeGHxY pnpPBqcZXoJowpNDd1FIL5F3q2j4g7WN9DGiSRp1+QE+ZlwZp8k= -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:55 2026 by rpki-client