$ rpki-client -vvf repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft File: 535C0FE8EE7BE7E1C8897B031858C36344038072.mft (raw, json) Hash identifier: Sf3y6S2UmgYspz/6XntXdh2qKaqUf3Oy9y/7aFhENWo= Subject key identifier: A7:14:2D:AD:8B:72:6F:51:6B:52:6C:DC:89:4E:A2:17:45:28:5B:42 Authority key identifier: 53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72 Certificate issuer: /CN=535C0FE8EE7BE7E1C8897B031858C36344038072 Certificate serial: 010F5946875A50CA1FD637B39569E4EBC9B2B398 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft Manifest number: 72 Signing time: Tue 17 Jun 2025 09:40:53 +0000 Manifest this update: Tue 17 Jun 2025 09:35:53 +0000 Manifest next update: Fri 20 Jun 2025 10:16:53 +0000 Files and hashes: 1: 3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa (hash: RrMbT80FUemGe695AxppDWAP2LkCS0fiZaNilGLH1lg=) 2: 535C0FE8EE7BE7E1C8897B031858C36344038072.crl (hash: WhJKZtQRMJBjZu5gP0OjVx/lwgHFaTdFxYBNPpmuDs8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0f:59:46:87:5a:50:ca:1f:d6:37:b3:95:69:e4:eb:c9:b2:b3:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535C0FE8EE7BE7E1C8897B031858C36344038072 Validity Not Before: Jun 17 09:35:53 2025 GMT Not After : Jun 20 10:16:53 2025 GMT Subject: CN=A7142DAD8B726F516B526CDC894EA21745285B42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:59:11:e0:47:12:10:9e:af:aa:9a:34:a9:29: 45:01:02:24:d4:1a:7d:e2:1e:e4:c7:4f:81:73:d4: 94:7f:8c:e8:78:27:06:8f:c2:be:ff:35:b8:4a:38: 2a:46:36:ba:eb:cb:10:78:e7:dc:59:31:8c:ce:93: 1c:69:b6:74:5a:53:8a:23:b3:46:46:a9:44:65:41: fc:d5:52:8c:c8:40:01:91:12:58:5b:59:4f:60:1d: 6c:a8:06:48:9c:1b:b9:5e:67:16:30:b2:39:3b:d0: 2f:bb:e9:ce:77:ed:60:f9:04:df:e3:84:d6:aa:55: 5b:3e:d8:fd:24:d2:3a:44:3d:ae:e7:ff:53:73:fd: 68:02:55:d7:f5:86:d4:61:05:da:7a:f8:3e:7a:74: 8d:75:44:b1:31:37:f7:2e:c3:26:2d:f2:95:50:c8: ea:4d:e7:07:95:b0:23:3a:72:9a:18:9a:b1:40:90: 26:a8:f1:d1:49:1c:69:5c:d8:46:29:84:1e:d6:5b: 1b:90:cd:5c:9b:d3:8d:b0:85:6c:91:f6:57:70:c1: c0:59:b3:58:98:b5:e3:79:5e:84:e8:ee:65:bd:5b: c2:22:65:70:b3:27:3e:32:a3:72:32:f4:16:11:9d: c5:31:66:8f:ae:e2:07:1a:21:70:20:4c:b8:3c:b1: 1f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:14:2D:AD:8B:72:6F:51:6B:52:6C:DC:89:4E:A2:17:45:28:5B:42 X509v3 Authority Key Identifier: keyid:53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b8:0d:6e:80:0d:9c:15:37:f5:97:69:2a:22:74:89:af:a4: 58:05:af:67:35:6b:25:8c:36:51:21:dd:da:fc:89:e0:da:7e: 63:81:18:d9:ab:22:a9:6c:06:97:b0:e1:3d:72:8d:45:a1:7b: 81:8a:0c:37:96:01:5a:48:d1:ca:6f:d9:db:71:67:46:e1:51: 7a:5f:62:9c:f3:dd:64:e7:1d:0e:96:c7:ce:57:1c:dd:84:d8: 65:3d:a3:77:a1:cf:2e:8c:45:ae:d1:7a:53:89:89:f3:ae:a5: eb:db:e6:13:c6:8c:53:a3:93:e2:48:c0:21:bc:b8:50:fa:15: 63:15:02:1c:69:73:af:31:24:3b:43:0d:c2:15:f8:42:6e:47: 42:00:57:1b:99:b2:fa:0c:79:1c:a1:cd:85:2a:48:37:e5:6f: f5:59:87:2a:ef:c8:2c:5c:ce:0b:05:06:60:c5:51:5b:6d:87: 9a:76:55:18:35:e9:fe:10:22:f0:e9:83:31:7a:31:23:96:18: a9:44:2e:15:1b:7f:84:6b:0f:ad:d2:f1:8f:8c:3c:1e:35:70: 90:4d:fc:05:e9:c9:89:9e:73:99:b2:e9:04:2a:d4:7e:5e:64: c4:df:3e:dc:86:43:9a:b8:fa:97:b5:36:3a:b2:8f:3d:56:d8: c9:2c:1d:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAQ9ZRodaUMof1jezlWnk68mys5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMzNjM0 NDAzODA3MjAeFw0yNTA2MTcwOTM1NTNaFw0yNTA2MjAxMDE2NTNaMDMxMTAvBgNV BAMTKEE3MTQyREFEOEI3MjZGNTE2QjUyNkNEQzg5NEVBMjE3NDUyODVCNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsWRHgRxIQnq+qmjSpKUUBAiTU Gn3iHuTHT4Fz1JR/jOh4JwaPwr7/NbhKOCpGNrrryxB459xZMYzOkxxptnRaU4oj s0ZGqURlQfzVUozIQAGRElhbWU9gHWyoBkicG7leZxYwsjk70C+76c537WD5BN/j hNaqVVs+2P0k0jpEPa7n/1Nz/WgCVdf1htRhBdp6+D56dI11RLExN/cuwyYt8pVQ yOpN5weVsCM6cpoYmrFAkCao8dFJHGlc2EYphB7WWxuQzVyb042whWyR9ldwwcBZ s1iYteN5XoTo7mW9W8IiZXCzJz4yo3Iy9BYRncUxZo+u4gcaIXAgTLg8sR+dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpxQtrYtyb1FrUmzciU6iF0UoW0IwHwYDVR0j BBgwFoAUU1wP6O575+HIiXsDGFjDY0QDgHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzQ1NGQwYi0xYWQ3LTQxZWQtOGU0MC1jY2I2NjY0M2FjZjAvMC81MzVDMEZFOEVF N0JFN0UxQzg4OTdCMDMxODU4QzM2MzQ0MDM4MDcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMzNjM0NDAz ODA3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM0NTRkMGItMWFkNy00MWVkLThl NDAtY2NiNjY2NDNhY2YwLzAvNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMz NjM0NDAzODA3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+4DW6ADZwVN/WXaSoidImvpFgFr2c1ayWM NlEh3dr8ieDafmOBGNmrIqlsBpew4T1yjUWhe4GKDDeWAVpI0cpv2dtxZ0bhUXpf Ypzz3WTnHQ6Wx85XHN2E2GU9o3ehzy6MRa7RelOJifOupevb5hPGjFOjk+JIwCG8 uFD6FWMVAhxpc68xJDtDDcIV+EJuR0IAVxuZsvoMeRyhzYUqSDflb/VZhyrvyCxc zgsFBmDFUVtth5p2VRg16f4QIvDpgzF6MSOWGKlELhUbf4RrD63S8Y+MPB41cJBN /AXpyYmec5my6QQq1H5eZMTfPtyGQ5q4+pe1Njqyjz1W2MksHWg= -----END CERTIFICATE-----Generated at Tue Jun 17 13:02:55 2025 by rpki-client