$ rpki-client -vvf repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft File: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft (raw, json) Hash identifier: pWMnDgnCFTcwBxpiX9jDXwRsXQBW33SugXqkLHksmTw= Subject key identifier: 3D:99:01:69:93:BA:CD:0A:68:06:72:3B:CF:2A:7D:D8:AA:54:6E:95 Authority key identifier: 35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 Certificate issuer: /CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Certificate serial: 426C89D7F5CD8166D428C11FA6B938E75BB9DD35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft Manifest number: 0518 Signing time: Wed 25 Mar 2026 03:01:18 +0000 Manifest this update: Wed 25 Mar 2026 02:56:18 +0000 Manifest next update: Sat 28 Mar 2026 07:44:18 +0000 Files and hashes: 1: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl (hash: BHIPSvOJGiqlqgkjnNaTfrUpcd6oxLjIfgBR5UDATqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:6c:89:d7:f5:cd:81:66:d4:28:c1:1f:a6:b9:38:e7:5b:b9:dd:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Validity Not Before: Mar 25 02:56:18 2026 GMT Not After : Mar 28 07:44:18 2026 GMT Subject: CN=3D99016993BACD0A6806723BCF2A7DD8AA546E95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:80:32:bf:54:a8:bb:4c:61:8b:fc:8d:99:e8: c5:37:33:83:22:00:04:46:fb:c0:e8:22:ea:61:82: 1b:4e:09:e3:88:bf:78:cd:8a:97:2d:26:57:e5:e3: e6:42:c1:a9:ba:6d:d6:70:f6:60:f1:5c:cd:60:6f: 99:a0:ae:ae:9d:c5:a7:64:d3:57:37:f7:73:eb:53: 96:eb:de:57:22:52:f9:a7:77:a4:fd:3d:c6:cd:2a: 72:09:eb:85:ec:17:9b:0f:51:9c:51:75:66:4a:4b: 9e:e6:8a:0b:41:2b:ce:85:3f:e2:74:e1:ce:dd:ac: 3b:a4:7a:14:c5:f4:03:3b:66:cf:30:45:ba:68:50: 13:3c:44:75:2b:3c:da:a9:83:9f:a8:32:dc:c7:c6: d0:b5:17:89:40:56:bb:4c:85:82:a6:be:0d:0c:5b: c9:89:11:1c:90:ab:9b:73:61:78:e6:e3:01:da:fb: 2a:54:1d:2e:84:66:86:ec:6d:45:ff:23:ca:fb:e0: f7:ba:90:25:33:c2:6b:9b:3b:5e:e6:3e:aa:b7:30: f2:73:bd:26:6f:ad:45:17:bd:cb:43:fa:51:f6:b7: 39:d9:c6:81:37:73:c0:d4:c0:a1:b7:63:97:4d:31: 7c:fa:0c:d5:7a:05:4b:4f:95:bb:d1:0a:20:3f:17: e0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:99:01:69:93:BA:CD:0A:68:06:72:3B:CF:2A:7D:D8:AA:54:6E:95 X509v3 Authority Key Identifier: keyid:35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:46:64:fc:7f:d9:19:53:36:4a:df:50:38:23:c8:a2:0b:d3: 6c:26:9c:93:c8:4c:58:96:02:c9:a4:b0:0f:09:38:00:9e:31: c4:6b:a2:c6:0b:fa:2f:aa:c3:f7:7d:24:d6:67:7a:6b:53:77: f4:9c:35:91:06:99:fc:18:2e:bf:82:9d:f7:8a:7d:02:ba:7b: 06:e2:78:11:47:41:b2:40:16:8e:39:e3:95:29:2c:ba:6d:25: c7:aa:29:a6:a4:7d:4c:04:74:8a:1f:97:cd:f0:c7:ec:85:df: ac:1b:9b:38:c0:9f:45:6d:3f:c3:a3:62:52:fe:ff:4b:0b:1b: af:34:fc:ca:71:6b:2a:b2:6f:4f:7f:58:ab:a4:05:52:45:73: f4:03:2c:a5:bf:8f:6c:76:c9:bb:b6:0a:2d:76:dd:9d:cb:54: 19:0e:49:d3:30:4e:80:2a:b5:a6:1e:86:a2:1a:d3:11:16:0e: d7:c9:64:61:56:49:1f:2d:97:78:9f:79:34:ac:25:51:eb:c5: 9d:42:cd:58:44:dc:28:db:30:9c:4f:c9:9a:7a:93:36:a9:cb: f4:c8:2d:86:42:87:36:9d:6f:2f:ae:26:0e:63:c6:27:2c:61: 3f:0e:9d:3b:20:2f:53:f4:e4:49:82:16:b3:7d:a8:20:47:de: e1:b2:f3:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQmyJ1/XNgWbUKMEfprk451u53TUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3 NEZCNzYwNTAeFw0yNjAzMjUwMjU2MThaFw0yNjAzMjgwNzQ0MThaMDMxMTAvBgNV BAMTKDNEOTkwMTY5OTNCQUNEMEE2ODA2NzIzQkNGMkE3REQ4QUE1NDZFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNgDK/VKi7TGGL/I2Z6MU3M4Mi AARG+8DoIuphghtOCeOIv3jNipctJlfl4+ZCwam6bdZw9mDxXM1gb5mgrq6dxadk 01c393PrU5br3lciUvmnd6T9PcbNKnIJ64XsF5sPUZxRdWZKS57migtBK86FP+J0 4c7drDukehTF9AM7Zs8wRbpoUBM8RHUrPNqpg5+oMtzHxtC1F4lAVrtMhYKmvg0M W8mJERyQq5tzYXjm4wHa+ypUHS6EZobsbUX/I8r74Pe6kCUzwmubO17mPqq3MPJz vSZvrUUXvctD+lH2tznZxoE3c8DUwKG3Y5dNMXz6DNV6BUtPlbvRCiA/F+CbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPZkBaZO6zQpoBnI7zyp92KpUbpUwHwYDVR0j BBgwFoAUNXt6115uM4omwvyc5LOnonT7dgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTU1ZjVhNi1mMzc4LTQyNTItODA0Yi1iMGI5Mzg2NTRmYmYvMC8zNTdCN0FENzVF NkUzMzhBMjZDMkZDOUNFNEIzQTdBMjc0RkI3NjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3NEZC NzYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjk1NWY1YTYtZjM3OC00MjUyLTgw NGItYjBiOTM4NjU0ZmJmLzAvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3 QTI3NEZCNzYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRGZPx/2RlTNkrfUDgjyKIL02wmnJPITFiW AsmksA8JOACeMcRrosYL+i+qw/d9JNZnemtTd/ScNZEGmfwYLr+CnfeKfQK6ewbi eBFHQbJAFo4545UpLLptJceqKaakfUwEdIofl83wx+yF36wbmzjAn0VtP8OjYlL+ /0sLG680/Mpxayqyb09/WKukBVJFc/QDLKW/j2x2ybu2Ci123Z3LVBkOSdMwToAq taYehqIa0xEWDtfJZGFWSR8tl3ifeTSsJVHrxZ1CzVhE3CjbMJxPyZp6kzapy/TI LYZChzadby+uJg5jxicsYT8OnTsgL1P05EmCFrN9qCBH3uGy8x4= -----END CERTIFICATE-----Generated at Thu Mar 26 19:15:44 2026 by rpki-client