$ rpki-client -vvf repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft File: 35603F2919BB405970CB4BAB181C2B63764E0771.mft (raw, json) Hash identifier: 1yhcQ6ABTBNRa5Igw1gErH1ED/moE2tcnGuC6RpZRfE= Subject key identifier: C7:9C:B1:2D:F8:3A:90:32:59:A8:D0:63:8A:51:15:1B:B5:BB:99:0B Authority key identifier: 35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71 Certificate issuer: /CN=35603F2919BB405970CB4BAB181C2B63764E0771 Certificate serial: 5871735862771FCD8A0479B77512FEEDA00EE59D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft Manifest number: 0137 Signing time: Thu 26 Mar 2026 05:51:43 +0000 Manifest this update: Thu 26 Mar 2026 05:46:43 +0000 Manifest next update: Sun 29 Mar 2026 09:21:43 +0000 Files and hashes: 1: 3130332e36372e38342e302f32332d3234203d3e20313532303034.roa (hash: //9lWx4cBEsK8GvhY07w0NWWTilIihQkc5cHdXmaYJs=) 2: 35603F2919BB405970CB4BAB181C2B63764E0771.crl (hash: c490nXNA+giuikWKxPHri+X4SGALH5OXdnB9g1Hbpqk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:71:73:58:62:77:1f:cd:8a:04:79:b7:75:12:fe:ed:a0:0e:e5:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35603F2919BB405970CB4BAB181C2B63764E0771 Validity Not Before: Mar 26 05:46:43 2026 GMT Not After : Mar 29 09:21:43 2026 GMT Subject: CN=C79CB12DF83A903259A8D0638A51151BB5BB990B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a8:2d:28:5e:57:d5:8d:a9:83:ab:f9:6e:e7: a4:68:f4:2e:12:12:ce:e8:7d:0f:7b:d8:38:9c:02: b8:c7:bf:b7:03:c1:a4:40:f6:30:c4:a2:6c:f9:e5: ef:d3:1f:e9:89:d8:51:d5:9c:9c:fb:79:21:33:78: dc:20:93:23:0a:f2:f6:38:32:91:6e:d2:5a:4e:53: 1f:f2:48:06:31:c8:85:8c:1a:43:5f:2d:ef:a8:77: 8e:11:82:ae:db:19:59:47:38:1b:10:c0:41:00:30: 2c:e0:a4:1d:4a:85:72:22:c6:17:66:45:f2:85:ce: bf:82:fa:ee:fb:d0:08:d0:00:e2:52:7b:32:01:9d: b2:eb:24:b1:57:50:4d:82:1d:3e:ba:b7:2e:2b:ef: 51:06:14:f0:3d:c1:d2:26:e2:1f:81:9b:53:df:47: 75:a8:20:72:97:d4:ec:b1:1c:3a:5d:9c:8e:20:ee: 73:4d:35:3b:53:a6:6a:ae:cd:76:aa:4d:5a:07:10: 06:40:c1:4c:fb:3e:96:87:27:2d:5e:1f:22:ea:77: 72:8e:f9:51:2e:e4:57:59:7f:8c:d4:01:1d:0b:ce: 33:98:96:67:de:d9:ed:05:e5:2c:33:cf:83:bb:c4: 2c:f0:ce:c5:e4:98:5f:94:f6:6d:86:5a:9b:2a:82: 4e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9C:B1:2D:F8:3A:90:32:59:A8:D0:63:8A:51:15:1B:B5:BB:99:0B X509v3 Authority Key Identifier: keyid:35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:78:52:fd:5c:6c:2c:3f:00:31:a7:6d:bf:6c:38:a8:48:0e: 0b:af:f7:53:c1:f0:f9:ef:f4:3c:da:a3:55:47:6f:c7:0e:02: d0:d2:64:08:9c:b9:77:f2:7c:5e:75:af:1d:20:0a:37:87:27: 61:d5:d0:50:64:64:62:68:33:56:44:cf:dc:af:e4:59:f0:0e: d7:75:28:81:2f:11:75:50:76:e7:e6:e5:8d:f8:59:7c:e3:b4: 66:a6:ad:a8:06:82:a4:4d:d1:75:81:f4:df:19:6e:40:ec:25: ff:a0:d9:ef:a4:6b:0e:a5:0e:4e:29:78:ca:32:6c:cf:cb:89: 69:23:69:2e:a9:8e:63:a4:3f:b4:17:e7:15:3c:7a:33:dc:27: 71:68:6f:5f:19:d7:7b:1c:13:bd:70:a1:af:5c:cb:1b:59:a1: d7:6f:6e:1d:e6:8c:ba:45:29:ff:e8:dd:cf:5c:0d:78:16:fe: f2:0a:24:e2:90:dd:e5:08:f5:7f:bd:fc:43:de:8b:24:86:99: 22:60:a7:af:10:c5:73:8a:e1:ba:2a:cc:95:4c:f4:63:5e:cc: 91:cd:45:4d:e4:e5:b8:c8:42:6d:31:7d:bc:1c:4d:6c:85:13: a6:39:b1:d3:d3:d0:c4:6f:6f:91:3d:15:61:bc:f1:21:ef:8c: af:fd:b0:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWHFzWGJ3H82KBHm3dRL+7aAO5Z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3 NjRFMDc3MTAeFw0yNjAzMjYwNTQ2NDNaFw0yNjAzMjkwOTIxNDNaMDMxMTAvBgNV BAMTKEM3OUNCMTJERjgzQTkwMzI1OUE4RDA2MzhBNTExNTFCQjVCQjk5MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyqC0oXlfVjamDq/lu56Ro9C4S Es7ofQ972DicArjHv7cDwaRA9jDEomz55e/TH+mJ2FHVnJz7eSEzeNwgkyMK8vY4 MpFu0lpOUx/ySAYxyIWMGkNfLe+od44Rgq7bGVlHOBsQwEEAMCzgpB1KhXIixhdm RfKFzr+C+u770AjQAOJSezIBnbLrJLFXUE2CHT66ty4r71EGFPA9wdIm4h+Bm1Pf R3WoIHKX1OyxHDpdnI4g7nNNNTtTpmquzXaqTVoHEAZAwUz7PpaHJy1eHyLqd3KO +VEu5FdZf4zUAR0LzjOYlmfe2e0F5Swzz4O7xCzwzsXkmF+U9m2GWpsqgk4xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx5yxLfg6kDJZqNBjilEVG7W7mQswHwYDVR0j BBgwFoAUNWA/KRm7QFlwy0urGBwrY3ZOB3EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWQzOTQ1MC00NTg0LTQ4ODItYjVhNy0yY2JjMGU1Nzc0NzQvMC8zNTYwM0YyOTE5 QkI0MDU5NzBDQjRCQUIxODFDMkI2Mzc2NEUwNzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3NjRF MDc3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFkMzk0NTAtNDU4NC00ODgyLWI1 YTctMmNiYzBlNTc3NDc0LzAvMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJC NjM3NjRFMDc3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABB4Uv1cbCw/ADGnbb9sOKhIDguv91PB8Pnv 9Dzao1VHb8cOAtDSZAicuXfyfF51rx0gCjeHJ2HV0FBkZGJoM1ZEz9yv5FnwDtd1 KIEvEXVQdufm5Y34WXzjtGamragGgqRN0XWB9N8ZbkDsJf+g2e+kaw6lDk4peMoy bM/LiWkjaS6pjmOkP7QX5xU8ejPcJ3Fob18Z13scE71woa9cyxtZoddvbh3mjLpF Kf/o3c9cDXgW/vIKJOKQ3eUI9X+9/EPeiySGmSJgp68QxXOK4boqzJVM9GNezJHN RU3k5bjIQm0xfbwcTWyFE6Y5sdPT0MRvb5E9FWG88SHvjK/9sL8= -----END CERTIFICATE-----Generated at Thu Mar 26 17:37:23 2026 by rpki-client