$ rpki-client -vvf repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft File: 535C0FE8EE7BE7E1C8897B031858C36344038072.mft (raw, json) Hash identifier: +ZgCSCnzo/fDZI57gn37OvK4MwXcUqNQ6D7VM1PVWI8= Subject key identifier: 44:9B:E1:E6:2D:13:3A:E5:67:19:98:70:64:F1:59:35:18:92:73:12 Authority key identifier: 53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72 Certificate issuer: /CN=535C0FE8EE7BE7E1C8897B031858C36344038072 Certificate serial: 55E9A9048927800A842F39BA932FDDE74E92997C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft Manifest number: E5 Signing time: Sat 28 Feb 2026 22:10:59 +0000 Manifest this update: Sat 28 Feb 2026 22:05:58 +0000 Manifest next update: Wed 04 Mar 2026 09:35:58 +0000 Files and hashes: 1: 3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa (hash: hj7AxZha/0UMDCCJ1jFrzNiqEoW5ocfthigeLPCS3mE=) 2: 535C0FE8EE7BE7E1C8897B031858C36344038072.crl (hash: L2DKQfUyZlpPeaPeTYNc9Y7GE42+JcnuWs0+TNlQlTg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:e9:a9:04:89:27:80:0a:84:2f:39:ba:93:2f:dd:e7:4e:92:99:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535C0FE8EE7BE7E1C8897B031858C36344038072 Validity Not Before: Feb 28 22:05:58 2026 GMT Not After : Mar 4 09:35:58 2026 GMT Subject: CN=449BE1E62D133AE56719987064F1593518927312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:2e:1b:4d:50:6d:35:a5:ce:07:6e:fd:57: 85:5f:0d:77:4b:c0:48:a2:d8:dd:ce:b7:e6:05:da: a3:25:0e:ac:89:bd:ef:5a:fd:47:96:b3:4c:00:2a: 1f:bb:d3:89:49:1d:af:47:a4:91:a9:93:ce:7b:e5: 9d:48:1b:47:57:5d:33:13:4a:56:75:3e:82:ef:20: 98:5c:f6:42:9b:39:c7:f0:c8:ae:38:0d:31:84:3d: 80:fa:bc:b1:c4:c1:81:e0:33:65:7b:7d:c6:86:7c: 1a:21:46:cb:73:99:98:80:45:82:50:e6:3a:44:b0: dd:cc:6b:a0:a5:2b:9f:be:06:09:0a:dc:9b:0c:ab: 75:30:5f:5a:de:70:42:48:eb:7f:af:66:93:65:13: 62:27:86:46:02:ea:16:2d:5b:75:32:d6:07:b7:ca: 84:30:8e:21:d0:94:ef:64:b6:60:8a:55:3b:04:7c: 15:9d:d1:bb:14:f0:d7:5b:11:61:01:a0:48:06:a6: 0a:06:70:2a:e5:47:c7:10:b5:18:5b:02:f6:b0:0c: e2:92:af:05:d8:c2:b4:18:11:72:7c:20:e5:0f:9a: d1:c6:ae:06:3e:1e:83:98:68:9d:d6:46:c5:cd:5e: 15:b8:42:f4:a1:d4:fa:a8:8a:45:b8:ba:e2:98:2e: e6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9B:E1:E6:2D:13:3A:E5:67:19:98:70:64:F1:59:35:18:92:73:12 X509v3 Authority Key Identifier: keyid:53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a2:25:65:88:a0:53:d5:77:70:ab:64:fe:b5:aa:c5:b8:ef: d6:81:d0:b3:55:9b:04:4f:8d:3e:c7:47:85:96:3c:b6:b8:8c: ad:b2:8e:6a:10:77:71:fc:2c:67:c8:17:07:b1:8e:64:ab:39: 49:64:3a:36:19:94:6e:11:42:8b:d2:4a:eb:06:86:49:76:e8: 94:3a:a9:d5:9b:98:ca:5a:c5:12:ac:64:c2:44:c8:0c:d3:b4: b8:0d:ea:e0:ed:62:cf:7b:57:c7:d5:86:34:02:76:ff:d1:d6: fc:cd:43:90:a5:8e:23:ab:68:00:35:4e:ba:43:43:a9:fe:39: 95:de:53:51:32:8c:5f:54:a7:d6:e1:f4:e5:78:8c:69:4e:3d: 13:84:65:eb:48:57:bb:0e:6f:57:b2:25:39:2c:5a:d4:9c:46: e3:d9:b8:57:7e:fa:c4:e1:62:09:1e:ef:41:cf:d2:f2:82:1f: c2:23:7a:c5:27:d4:4b:34:76:73:93:9d:fc:4e:7a:c5:39:f3: b8:88:af:57:6b:c8:c1:7c:40:50:5f:24:38:74:fb:d4:7f:c9: c7:d6:a3:81:16:40:38:b1:5e:95:b9:f4:4f:81:dc:7c:12:53: 63:84:c8:24:79:bd:37:c8:05:38:46:8c:0e:e8:f8:2a:51:e6: 26:21:29:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVempBIkngAqELzm6ky/d506SmXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMzNjM0 NDAzODA3MjAeFw0yNjAyMjgyMjA1NThaFw0yNjAzMDQwOTM1NThaMDMxMTAvBgNV BAMTKDQ0OUJFMUU2MkQxMzNBRTU2NzE5OTg3MDY0RjE1OTM1MTg5MjczMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUTS4bTVBtNaXOB279V4VfDXdL wEii2N3Ot+YF2qMlDqyJve9a/UeWs0wAKh+704lJHa9HpJGpk8575Z1IG0dXXTMT SlZ1PoLvIJhc9kKbOcfwyK44DTGEPYD6vLHEwYHgM2V7fcaGfBohRstzmZiARYJQ 5jpEsN3Ma6ClK5++BgkK3JsMq3UwX1recEJI63+vZpNlE2InhkYC6hYtW3Uy1ge3 yoQwjiHQlO9ktmCKVTsEfBWd0bsU8NdbEWEBoEgGpgoGcCrlR8cQtRhbAvawDOKS rwXYwrQYEXJ8IOUPmtHGrgY+HoOYaJ3WRsXNXhW4QvSh1PqoikW4uuKYLuafAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURJvh5i0TOuVnGZhwZPFZNRiScxIwHwYDVR0j BBgwFoAUU1wP6O575+HIiXsDGFjDY0QDgHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzQ1NGQwYi0xYWQ3LTQxZWQtOGU0MC1jY2I2NjY0M2FjZjAvMC81MzVDMEZFOEVF N0JFN0UxQzg4OTdCMDMxODU4QzM2MzQ0MDM4MDcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMzNjM0NDAz ODA3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM0NTRkMGItMWFkNy00MWVkLThl NDAtY2NiNjY2NDNhY2YwLzAvNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMz NjM0NDAzODA3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGiJWWIoFPVd3CrZP61qsW479aB0LNVmwRP jT7HR4WWPLa4jK2yjmoQd3H8LGfIFwexjmSrOUlkOjYZlG4RQovSSusGhkl26JQ6 qdWbmMpaxRKsZMJEyAzTtLgN6uDtYs97V8fVhjQCdv/R1vzNQ5CljiOraAA1TrpD Q6n+OZXeU1EyjF9Up9bh9OV4jGlOPROEZetIV7sOb1eyJTksWtScRuPZuFd++sTh Ygke70HP0vKCH8IjesUn1Es0dnOTnfxOesU587iIr1dryMF8QFBfJDh0+9R/ycfW o4EWQDixXpW59E+B3HwSU2OEyCR5vTfIBThGjA7o+CpR5iYhKSE= -----END CERTIFICATE-----Generated at Mon Mar 2 12:17:54 2026 by rpki-client