$ rpki-client -vvf repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft File: 535C0FE8EE7BE7E1C8897B031858C36344038072.mft (raw, json) Hash identifier: 0SfGX29UOpNKuQnshp4s4JKGV/bePrNS4SSizjZ5B2w= Subject key identifier: 7C:57:6D:79:96:EF:79:F2:5B:1B:C0:22:68:0A:F3:D5:E5:41:DB:A2 Authority key identifier: 53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72 Certificate issuer: /CN=535C0FE8EE7BE7E1C8897B031858C36344038072 Certificate serial: 3C887F2F6F4D87E97C667620A2E3A619FB764BA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft Manifest number: B1 Signing time: Mon 03 Nov 2025 10:20:53 +0000 Manifest this update: Mon 03 Nov 2025 10:15:53 +0000 Manifest next update: Thu 06 Nov 2025 18:30:53 +0000 Files and hashes: 1: 3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa (hash: hj7AxZha/0UMDCCJ1jFrzNiqEoW5ocfthigeLPCS3mE=) 2: 535C0FE8EE7BE7E1C8897B031858C36344038072.crl (hash: AwEnSgOAh7w53rgXDhSwPCv69gIWp9dRW7RisLUlDLA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:88:7f:2f:6f:4d:87:e9:7c:66:76:20:a2:e3:a6:19:fb:76:4b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535C0FE8EE7BE7E1C8897B031858C36344038072 Validity Not Before: Nov 3 10:15:53 2025 GMT Not After : Nov 6 18:30:53 2025 GMT Subject: CN=7C576D7996EF79F25B1BC022680AF3D5E541DBA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c4:5e:76:c1:d1:b8:c9:e5:c5:0b:bc:62:17: 8b:37:90:ac:3a:7e:66:f7:e8:d7:95:01:d8:e5:3a: 37:12:a3:5a:44:c8:bc:c0:87:3b:bf:cb:5b:92:02: 45:66:a0:a4:de:2c:8d:b1:41:aa:51:48:b1:b1:3b: bc:58:57:14:24:73:cf:03:d7:c4:58:0b:98:e6:74: 5f:20:6c:77:1d:9f:fd:0d:3c:dd:0a:ca:b7:0f:a2: d1:28:ed:54:e7:7f:01:ab:43:17:c1:7f:ff:da:8d: fe:f4:6f:e1:d8:90:3d:e6:5a:9c:d6:81:58:07:53: ae:59:a2:75:02:81:9d:f3:99:3c:a5:08:f9:29:8b: 76:48:47:87:7e:4a:1b:85:4b:00:ac:38:1f:78:c0: b5:b8:c2:f1:77:9a:22:1a:e2:63:44:1e:31:9f:24: e5:88:4d:c9:0d:15:6d:01:37:bc:0b:02:47:9c:d2: d5:f5:38:99:01:8b:43:17:15:b6:ae:b3:56:eb:4b: 77:56:fd:15:81:36:9f:e5:13:5f:71:75:f1:c4:55: 3d:c7:8d:27:c0:a0:4f:5f:2c:13:b0:75:94:1b:66: 3a:d2:0a:d2:61:65:98:6e:d5:15:48:2a:ae:98:de: ae:d7:3b:cf:5a:3d:5f:e2:d6:01:48:98:4a:75:57: 83:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:57:6D:79:96:EF:79:F2:5B:1B:C0:22:68:0A:F3:D5:E5:41:DB:A2 X509v3 Authority Key Identifier: keyid:53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:68:d1:0a:1a:da:fd:ba:de:09:78:0b:2f:00:59:d2:2e:f5: 36:84:3e:b6:0b:66:04:77:4b:66:0d:fb:45:e8:d5:2d:ff:5e: 74:6c:15:c1:6f:c8:b1:70:90:03:7c:5a:87:26:15:8d:2b:8f: 42:dc:6c:55:83:64:3a:81:47:f1:c3:d4:d3:91:50:c2:bb:da: d0:73:d2:0a:44:a8:25:6d:7e:98:01:66:3b:1c:81:70:44:3c: 6a:56:22:0f:21:57:04:aa:ec:dc:34:c8:07:97:61:9e:ca:43: 1e:d4:12:99:74:2b:c6:a6:3b:9e:fb:a7:33:86:70:ec:df:d6: 11:93:01:37:a6:69:0a:27:24:cc:2f:8e:5c:a0:4e:80:7e:ec: 35:c9:c4:83:26:a4:99:ab:ef:79:82:d0:f2:ad:09:02:24:e2: b2:91:e5:d6:ae:e8:42:3e:94:a5:dd:bd:1f:cb:97:f4:16:8f: 5b:aa:cf:9e:37:11:57:b5:19:4e:e9:c1:14:b1:8f:71:fd:66: 6d:5f:b4:55:65:fd:c1:e7:25:fc:5b:bd:9e:a8:7b:9c:11:ba: a7:bf:61:47:2d:b6:03:25:fe:4b:21:07:f6:26:28:24:cf:52: 4f:f5:78:60:5c:79:70:11:27:1e:02:9f:e8:f6:ed:4d:12:18: d9:24:d2:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPIh/L29Nh+l8ZnYgouOmGft2S6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMzNjM0 NDAzODA3MjAeFw0yNTExMDMxMDE1NTNaFw0yNTExMDYxODMwNTNaMDMxMTAvBgNV BAMTKDdDNTc2RDc5OTZFRjc5RjI1QjFCQzAyMjY4MEFGM0Q1RTU0MURCQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2xF52wdG4yeXFC7xiF4s3kKw6 fmb36NeVAdjlOjcSo1pEyLzAhzu/y1uSAkVmoKTeLI2xQapRSLGxO7xYVxQkc88D 18RYC5jmdF8gbHcdn/0NPN0KyrcPotEo7VTnfwGrQxfBf//ajf70b+HYkD3mWpzW gVgHU65ZonUCgZ3zmTylCPkpi3ZIR4d+ShuFSwCsOB94wLW4wvF3miIa4mNEHjGf JOWITckNFW0BN7wLAkec0tX1OJkBi0MXFbaus1brS3dW/RWBNp/lE19xdfHEVT3H jSfAoE9fLBOwdZQbZjrSCtJhZZhu1RVIKq6Y3q7XO89aPV/i1gFImEp1V4NjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfFdteZbvefJbG8AiaArz1eVB26IwHwYDVR0j BBgwFoAUU1wP6O575+HIiXsDGFjDY0QDgHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzQ1NGQwYi0xYWQ3LTQxZWQtOGU0MC1jY2I2NjY0M2FjZjAvMC81MzVDMEZFOEVF N0JFN0UxQzg4OTdCMDMxODU4QzM2MzQ0MDM4MDcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMzNjM0NDAz ODA3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM0NTRkMGItMWFkNy00MWVkLThl NDAtY2NiNjY2NDNhY2YwLzAvNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMz NjM0NDAzODA3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9o0Qoa2v263gl4Cy8AWdIu9TaEPrYLZgR3 S2YN+0Xo1S3/XnRsFcFvyLFwkAN8WocmFY0rj0LcbFWDZDqBR/HD1NORUMK72tBz 0gpEqCVtfpgBZjscgXBEPGpWIg8hVwSq7Nw0yAeXYZ7KQx7UEpl0K8amO577pzOG cOzf1hGTATemaQonJMwvjlygToB+7DXJxIMmpJmr73mC0PKtCQIk4rKR5dau6EI+ lKXdvR/Ll/QWj1uqz543EVe1GU7pwRSxj3H9Zm1ftFVl/cHnJfxbvZ6oe5wRuqe/ YUcttgMl/kshB/YmKCTPUk/1eGBceXARJx4Cn+j27U0SGNkk0vM= -----END CERTIFICATE-----Generated at Tue Nov 4 21:06:35 2025 by rpki-client