$ rpki-client -vvf repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft File: 535C0FE8EE7BE7E1C8897B031858C36344038072.mft (raw, json) Hash identifier: RhtNb5HYfE0bpV4qlMDZv+Fg8MFmKYEMeL+jgc/QQ/k= Subject key identifier: FD:DD:63:90:94:F9:EE:34:11:7E:43:BA:F4:26:E6:F0:A2:4B:00:17 Authority key identifier: 53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72 Certificate issuer: /CN=535C0FE8EE7BE7E1C8897B031858C36344038072 Certificate serial: 3FFE13EE88ECD551238D8D54296FE538AAA5ACF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft Manifest number: FA Signing time: Fri 17 Apr 2026 12:41:12 +0000 Manifest this update: Fri 17 Apr 2026 12:36:12 +0000 Manifest next update: Mon 20 Apr 2026 21:18:12 +0000 Files and hashes: 1: 3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa (hash: hj7AxZha/0UMDCCJ1jFrzNiqEoW5ocfthigeLPCS3mE=) 2: 535C0FE8EE7BE7E1C8897B031858C36344038072.crl (hash: 1kUXMzjkV0Qe8WFwIiBPkXUyVFVPwu3c3K2dvyISgGQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:fe:13:ee:88:ec:d5:51:23:8d:8d:54:29:6f:e5:38:aa:a5:ac:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535C0FE8EE7BE7E1C8897B031858C36344038072 Validity Not Before: Apr 17 12:36:12 2026 GMT Not After : Apr 20 21:18:12 2026 GMT Subject: CN=FDDD639094F9EE34117E43BAF426E6F0A24B0017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ce:53:14:1d:ee:8f:7d:a5:47:7e:ca:0e:cd: 94:2d:6e:78:96:b5:d0:0c:89:a0:98:a4:ac:3d:f4: ef:d1:c2:dd:48:16:06:6b:9b:c0:cf:0d:04:a0:d2: b5:f0:37:28:27:a1:45:4d:ff:52:56:d9:4f:5d:af: fe:74:1c:e7:3f:c2:6f:00:31:f4:99:0b:94:1d:ea: c8:af:54:46:2c:4a:a1:9e:81:58:e0:30:31:cb:18: de:7b:36:03:d1:5b:a3:d9:bb:5b:0c:e9:63:f9:bb: cd:f7:e8:54:0d:82:c1:bb:33:ee:3d:63:2b:d0:f7: 84:ed:ad:52:15:7a:44:b3:84:9d:75:92:12:8e:8d: f1:dd:08:95:a2:46:88:4f:7d:76:19:ed:51:25:91: cb:a8:55:c9:5d:ac:f3:4a:b4:7c:dc:66:12:91:10: 22:83:e0:2e:6a:dd:a6:e4:f0:91:07:7e:05:f8:32: c0:65:28:a5:8a:61:3a:b6:36:d9:0c:22:1b:95:18: 25:22:b9:0e:7d:a2:38:69:83:b6:7f:e1:91:ca:3e: ff:3f:eb:eb:4f:65:41:8a:a4:ea:4c:88:11:0f:db: e9:ba:32:4a:3a:b3:de:54:df:20:4e:c8:75:47:3a: 75:a8:26:c1:4e:2c:2a:d0:27:35:7e:a2:e8:df:2f: 9a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DD:63:90:94:F9:EE:34:11:7E:43:BA:F4:26:E6:F0:A2:4B:00:17 X509v3 Authority Key Identifier: keyid:53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:1d:d3:f2:8d:7c:30:e1:c2:b4:4d:00:db:44:02:d1:71:06: 66:73:c0:1e:8c:f8:a0:ed:18:2a:39:4a:c3:ca:42:99:8e:c5: 3f:41:56:08:62:35:30:81:83:43:9b:6b:6b:8a:78:af:28:67: 50:16:67:1f:e1:2b:5f:58:20:a9:76:cf:7a:9d:d8:c5:3a:82: 7c:81:c9:db:64:c9:7a:ef:63:c0:70:38:ff:02:0c:42:f6:cf: 3c:58:b0:62:46:d6:54:3c:33:6c:4d:1b:9e:22:84:f9:23:56: 7a:c6:ac:56:66:00:58:43:f3:1b:e9:64:87:47:24:8a:86:6b: c0:40:45:68:28:da:09:8f:e4:1a:d6:0a:7c:8a:c7:30:f6:5b: 36:f9:77:9b:6d:28:04:7c:c1:4d:d8:d4:8c:ff:d2:2c:d0:2e: dc:c6:29:6d:8d:e1:c6:4e:fe:5a:b5:e4:45:c9:7a:5c:dd:04: 2d:fd:74:57:df:e9:0a:5c:8e:cb:43:3f:79:3a:26:a5:74:12: c3:3e:a3:57:26:f4:8e:8a:e4:93:89:5a:89:3b:51:68:0d:be: 03:59:1a:55:e2:d0:6e:98:25:91:c6:19:6a:8b:ce:17:21:23: c5:4c:cc:7a:9b:a2:1a:56:64:b2:e1:4b:86:40:03:11:05:9f: 8d:4b:d0:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP/4T7ojs1VEjjY1UKW/lOKqlrPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMzNjM0 NDAzODA3MjAeFw0yNjA0MTcxMjM2MTJaFw0yNjA0MjAyMTE4MTJaMDMxMTAvBgNV BAMTKEZEREQ2MzkwOTRGOUVFMzQxMTdFNDNCQUY0MjZFNkYwQTI0QjAwMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXzlMUHe6PfaVHfsoOzZQtbniW tdAMiaCYpKw99O/Rwt1IFgZrm8DPDQSg0rXwNygnoUVN/1JW2U9dr/50HOc/wm8A MfSZC5Qd6sivVEYsSqGegVjgMDHLGN57NgPRW6PZu1sM6WP5u8336FQNgsG7M+49 YyvQ94TtrVIVekSzhJ11khKOjfHdCJWiRohPfXYZ7VElkcuoVcldrPNKtHzcZhKR ECKD4C5q3abk8JEHfgX4MsBlKKWKYTq2NtkMIhuVGCUiuQ59ojhpg7Z/4ZHKPv8/ 6+tPZUGKpOpMiBEP2+m6Mko6s95U3yBOyHVHOnWoJsFOLCrQJzV+oujfL5ofAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/d1jkJT57jQRfkO69Cbm8KJLABcwHwYDVR0j BBgwFoAUU1wP6O575+HIiXsDGFjDY0QDgHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzQ1NGQwYi0xYWQ3LTQxZWQtOGU0MC1jY2I2NjY0M2FjZjAvMC81MzVDMEZFOEVF N0JFN0UxQzg4OTdCMDMxODU4QzM2MzQ0MDM4MDcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMzNjM0NDAz ODA3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM0NTRkMGItMWFkNy00MWVkLThl NDAtY2NiNjY2NDNhY2YwLzAvNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMz NjM0NDAzODA3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUd0/KNfDDhwrRNANtEAtFxBmZzwB6M+KDt GCo5SsPKQpmOxT9BVghiNTCBg0Oba2uKeK8oZ1AWZx/hK19YIKl2z3qd2MU6gnyB ydtkyXrvY8BwOP8CDEL2zzxYsGJG1lQ8M2xNG54ihPkjVnrGrFZmAFhD8xvpZIdH JIqGa8BARWgo2gmP5BrWCnyKxzD2Wzb5d5ttKAR8wU3Y1Iz/0izQLtzGKW2N4cZO /lq15EXJelzdBC39dFff6QpcjstDP3k6JqV0EsM+o1cm9I6K5JOJWok7UWgNvgNZ GlXi0G6YJZHGGWqLzhchI8VMzHqbohpWZLLhS4ZAAxEFn41L0Ec= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:19 2026 by rpki-client