$ rpki-client -vvf repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft File: 535D46F4044E2CC21293CC061A2783074BDF7AE7.mft (raw, json) Hash identifier: q0D8tfZCo+AucDjvkQzN4RINV7Y8qYwt5jB9daP7U+4= Subject key identifier: A2:7A:33:D8:92:C5:F5:DD:58:67:B0:5F:CB:E8:AE:C4:8A:CF:3E:E8 Authority key identifier: 53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7 Certificate issuer: /CN=535D46F4044E2CC21293CC061A2783074BDF7AE7 Certificate serial: 0EA8376FAC915BA8E105842240AD397215EE85F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft Manifest number: 016D Signing time: Wed 18 Mar 2026 06:21:32 +0000 Manifest this update: Wed 18 Mar 2026 06:16:32 +0000 Manifest next update: Sat 21 Mar 2026 15:03:32 +0000 Files and hashes: 1: 3130332e3134332e32322e302f32332d3233203d3e20313339343331.roa (hash: doha74kbIgonFyPsIYU3AWrLESRigytVKDPz7Hk3URQ=) 2: 535D46F4044E2CC21293CC061A2783074BDF7AE7.crl (hash: 08ejGQliZngvUYWBHHo2ZlBE0oq/ON9/L76iNn0AmWU=) 3: 323430353a343663303a3a2f33322d3332203d3e20313339343331.roa (hash: EwOzCmMtgubA3L7L2URI/KodC9B/ms+E2KBilH7ymAs=) 4: 3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa (hash: mBtquOb/Z5LghTTZd9Pb+kXQ6K/DQevd9P5nIEvxaXs=) 5: 3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa (hash: +6dOkqtOYym+orh3YOVIsqZdYCOBqAsCXYd1nxy46No=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 15:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a8:37:6f:ac:91:5b:a8:e1:05:84:22:40:ad:39:72:15:ee:85:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535D46F4044E2CC21293CC061A2783074BDF7AE7 Validity Not Before: Mar 18 06:16:32 2026 GMT Not After : Mar 21 15:03:32 2026 GMT Subject: CN=A27A33D892C5F5DD5867B05FCBE8AEC48ACF3EE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ac:21:25:c2:d0:a7:2e:b5:25:c5:b0:0a:54: 72:b7:3e:99:97:74:49:d6:76:11:ff:4f:0a:16:8a: a2:de:d7:83:cd:02:d3:bd:6a:af:19:a1:e3:81:4a: 79:69:18:39:5e:88:c1:8d:de:6b:29:ea:02:82:1d: 51:9e:a8:7f:c0:a6:26:48:f8:eb:e3:3b:d7:05:6e: 31:e0:fe:15:2c:fd:f0:83:c5:ca:44:15:d8:b3:0b: 2a:ea:18:06:40:f7:19:4b:7b:60:03:0e:98:3d:35: 57:cf:36:ef:fe:f5:66:26:19:a9:43:6b:d2:98:c8: 86:81:1d:e9:5e:39:7f:2a:be:d3:5d:ab:41:2c:49: 5a:2b:b3:e9:56:c8:95:83:ea:4d:75:cd:b0:b9:ab: f4:e8:e0:86:45:aa:14:22:54:55:fc:72:ce:0f:22: c9:f9:11:b3:63:90:63:57:28:5b:ac:dc:c9:9e:7d: 28:7d:23:e5:c8:01:10:bb:43:fc:3b:23:ed:f6:6c: c5:17:06:5c:6c:c1:2e:a4:b8:fc:e3:f1:9c:84:92: a0:d3:fa:10:6b:ad:f3:d6:5f:92:a8:3e:04:81:1a: 79:8c:6e:3c:73:37:66:7a:61:84:4e:d3:5a:2d:87: 69:bf:e0:1f:0b:ec:96:20:67:61:0e:6c:88:a2:6f: 48:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7A:33:D8:92:C5:F5:DD:58:67:B0:5F:CB:E8:AE:C4:8A:CF:3E:E8 X509v3 Authority Key Identifier: keyid:53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:e0:46:86:e2:a0:6b:ed:ad:5d:db:ff:bc:08:41:7a:a5:b5: 5f:9d:17:05:47:15:b2:19:ee:c9:c2:37:80:9f:76:4b:f1:27: ac:85:f5:e9:40:da:05:0a:fd:0b:bc:d4:49:cf:48:8e:c2:57: 21:e7:1a:d9:9d:a8:2f:d8:24:03:ab:a2:38:80:9b:ef:b6:02: b3:c5:91:b0:d7:e0:3a:7a:1d:bc:70:6f:a5:68:7f:d1:90:ae: ff:9d:e1:83:32:89:ba:e9:78:e2:dd:d1:15:82:1c:1b:73:e6: a8:66:42:92:64:81:70:22:f5:3f:29:0b:d2:0c:94:53:91:64: 94:ab:67:42:3c:9d:44:b2:cf:d8:76:39:87:40:92:94:c9:0e: bd:fb:e3:d2:a1:c6:61:b8:97:59:a9:67:e5:15:20:36:e7:c7: 3f:3d:2a:69:82:e4:94:2f:3c:48:d0:9d:77:aa:39:1b:a4:40: b1:15:eb:73:df:0e:da:be:8f:a7:10:3c:2e:b0:82:a8:9a:f5: 52:ad:8f:50:33:18:04:17:94:60:c0:79:6d:5e:c6:dc:2f:8f: 9f:3c:8b:52:12:a5:84:d8:6f:b8:b8:bf:15:e1:3b:6e:85:c8: 0f:3d:b0:33:ef:aa:3a:96:0b:ed:26:e2:24:f9:1d:01:0c:09: ce:da:60:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDqg3b6yRW6jhBYQiQK05chXuhfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgzMDc0 QkRGN0FFNzAeFw0yNjAzMTgwNjE2MzJaFw0yNjAzMjExNTAzMzJaMDMxMTAvBgNV BAMTKEEyN0EzM0Q4OTJDNUY1REQ1ODY3QjA1RkNCRThBRUM0OEFDRjNFRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2rCElwtCnLrUlxbAKVHK3PpmX dEnWdhH/TwoWiqLe14PNAtO9aq8ZoeOBSnlpGDleiMGN3msp6gKCHVGeqH/ApiZI +OvjO9cFbjHg/hUs/fCDxcpEFdizCyrqGAZA9xlLe2ADDpg9NVfPNu/+9WYmGalD a9KYyIaBHeleOX8qvtNdq0EsSVors+lWyJWD6k11zbC5q/To4IZFqhQiVFX8cs4P Isn5EbNjkGNXKFus3MmefSh9I+XIARC7Q/w7I+32bMUXBlxswS6kuPzj8ZyEkqDT +hBrrfPWX5KoPgSBGnmMbjxzN2Z6YYRO01oth2m/4B8L7JYgZ2EObIiib0hbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUonoz2JLF9d1YZ7Bfy+iuxIrPPugwHwYDVR0j BBgwFoAUU11G9AROLMISk8wGGieDB0vfeucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDZmMzNmMi1mMDZlLTRlYjYtYWU2MS01NTI5YmNhMWNkY2QvMC81MzVENDZGNDA0 NEUyQ0MyMTI5M0NDMDYxQTI3ODMwNzRCREY3QUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgzMDc0QkRG N0FFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ2ZjMzZjItZjA2ZS00ZWI2LWFl NjEtNTUyOWJjYTFjZGNkLzAvNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgz MDc0QkRGN0FFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDgRobioGvtrV3b/7wIQXqltV+dFwVHFbIZ 7snCN4CfdkvxJ6yF9elA2gUK/Qu81EnPSI7CVyHnGtmdqC/YJAOrojiAm++2ArPF kbDX4Dp6Hbxwb6Vof9GQrv+d4YMyibrpeOLd0RWCHBtz5qhmQpJkgXAi9T8pC9IM lFORZJSrZ0I8nUSyz9h2OYdAkpTJDr3749KhxmG4l1mpZ+UVIDbnxz89KmmC5JQv PEjQnXeqORukQLEV63PfDtq+j6cQPC6wgqia9VKtj1AzGAQXlGDAeW1extwvj588 i1ISpYTYb7i4vxXhO26FyA89sDPvqjqWC+0m4iT5HQEMCc7aYAw= -----END CERTIFICATE-----Generated at Thu Mar 19 09:40:04 2026 by rpki-client