$ rpki-client -vvf repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft File: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft (raw, json) Hash identifier: AtQKgj6Vg5LYj5xi5G1iZ3fbbzV86TIZtNCHfHybzdg= Subject key identifier: A2:46:4E:68:59:B0:C4:3E:62:AC:CF:5E:0F:47:05:D5:CA:EE:80:3F Authority key identifier: 35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E Certificate issuer: /CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Certificate serial: 1E7105D082029EBA026EB286BE59DB1C19A89DD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft Manifest number: 02B6 Signing time: Tue 24 Mar 2026 06:10:49 +0000 Manifest this update: Tue 24 Mar 2026 06:05:49 +0000 Manifest next update: Fri 27 Mar 2026 10:39:49 +0000 Files and hashes: 1: 3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa (hash: ysHwcI5ENqF/e0DNaL77TsbeGSsghP307b8/eRPgpE4=) 2: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl (hash: Bl4Kk+Puakul7oUQZo/hSFQVQMouAF9HEgaPkOY4nCs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 10:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:71:05:d0:82:02:9e:ba:02:6e:b2:86:be:59:db:1c:19:a8:9d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Validity Not Before: Mar 24 06:05:49 2026 GMT Not After : Mar 27 10:39:49 2026 GMT Subject: CN=A2464E6859B0C43E62ACCF5E0F4705D5CAEE803F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:31:da:e0:21:d4:fc:c4:83:78:a0:f6:4e: 09:f4:41:5e:68:44:f8:52:9c:82:81:0c:67:99:89: 1d:64:ad:d4:33:f2:90:ed:61:2d:19:31:fd:bf:28: 55:91:f5:92:e4:78:08:7c:18:de:5a:8f:c1:8f:fe: ac:34:43:0d:22:5c:64:be:c7:8e:1f:d9:95:4a:eb: d8:b1:de:e4:58:c1:04:93:ff:de:3b:31:5c:31:1c: fd:29:c2:f5:08:48:80:fc:5a:5a:e3:14:a2:12:7a: 70:3f:20:8a:a2:cb:e7:a6:94:d8:c3:d7:3a:07:7d: 69:fa:0f:d1:d2:40:f4:c1:12:e5:d4:72:dd:49:c3: cf:ea:13:d9:0e:7b:60:07:38:ab:75:98:6b:26:27: c2:41:c2:8c:b8:7d:43:4f:6f:74:4a:db:2e:4d:a2: fa:9a:54:08:60:a6:8b:cc:5c:1a:e8:71:1c:67:59: a1:9a:1c:9f:4a:44:8e:fb:48:13:ff:d2:73:e5:df: ea:30:71:6e:3a:97:58:5c:8c:c6:36:5e:33:7b:b3: 2f:33:d7:27:2c:80:4d:38:3d:b5:a6:9e:bd:66:00: f7:af:55:70:3e:4c:7d:bc:bd:65:9c:83:2c:70:7b: f6:a3:4e:1c:66:8d:e1:49:3e:2e:ac:e7:a9:e3:a8: 7e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:46:4E:68:59:B0:C4:3E:62:AC:CF:5E:0F:47:05:D5:CA:EE:80:3F X509v3 Authority Key Identifier: keyid:35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d4:58:85:5c:14:10:54:b7:7b:d1:31:ff:62:d7:f5:20:35: d6:e6:2c:43:9e:22:0c:03:44:83:2c:ae:77:c2:72:aa:b8:38: ac:63:25:16:6f:e3:8f:a7:b9:c3:b8:f2:46:74:a2:6c:58:0f: 57:59:f5:e0:76:ca:94:88:02:de:40:d9:3f:7e:e0:5b:3d:c4: 88:bf:6d:35:36:96:9e:2e:2d:9a:5b:d7:99:31:fc:c5:be:a9: 76:08:2e:d8:70:c5:08:26:22:e6:83:d6:e1:f7:dd:7d:74:9d: de:61:28:7f:6b:3c:27:c6:c4:cd:46:c8:d6:04:9a:a5:01:9a: 82:e9:8c:7b:78:74:04:78:04:38:c8:87:53:83:09:d3:ff:63: 4e:6d:96:ba:da:16:94:fc:14:78:72:83:a6:c5:39:9c:4c:53: 37:bd:99:18:41:60:e6:4f:fa:53:85:f9:a1:3b:f1:e3:26:12: b3:12:f0:c8:63:4f:1a:ef:0a:06:14:cb:c3:ea:ab:1b:5d:cf: 36:97:0b:8d:60:71:cb:76:8b:bc:ad:c5:51:e8:1e:97:41:a0: d3:09:20:b1:6d:45:27:3b:fa:26:c9:71:d2:5d:d1:fb:41:2c: 0e:fa:b5:05:62:3f:34:5c:08:40:42:ce:df:ed:ce:0d:cc:1c: 1b:23:6d:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHnEF0IICnroCbrKGvlnbHBmondkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1Rjkx OEQyMzY0RTAeFw0yNjAzMjQwNjA1NDlaFw0yNjAzMjcxMDM5NDlaMDMxMTAvBgNV BAMTKEEyNDY0RTY4NTlCMEM0M0U2MkFDQ0Y1RTBGNDcwNUQ1Q0FFRTgwM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCCDHa4CHU/MSDeKD2Tgn0QV5o RPhSnIKBDGeZiR1krdQz8pDtYS0ZMf2/KFWR9ZLkeAh8GN5aj8GP/qw0Qw0iXGS+ x44f2ZVK69ix3uRYwQST/947MVwxHP0pwvUISID8WlrjFKISenA/IIqiy+emlNjD 1zoHfWn6D9HSQPTBEuXUct1Jw8/qE9kOe2AHOKt1mGsmJ8JBwoy4fUNPb3RK2y5N ovqaVAhgpovMXBrocRxnWaGaHJ9KRI77SBP/0nPl3+owcW46l1hcjMY2XjN7sy8z 1ycsgE04PbWmnr1mAPevVXA+TH28vWWcgyxwe/ajThxmjeFJPi6s56njqH7zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUokZOaFmwxD5irM9eD0cF1crugD8wHwYDVR0j BBgwFoAUNcFO6yfOQt6x8zHPCA/l+RjSNk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmNjNDczNC1iZWI2LTRlMzMtOWIxYy00NmRjZDE2NDI1YTEvMC8zNUMxNEVFQjI3 Q0U0MkRFQjFGMzMxQ0YwODBGRTVGOTE4RDIzNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1RjkxOEQy MzY0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZjYzQ3MzQtYmViNi00ZTMzLTli MWMtNDZkY2QxNjQyNWExLzAvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1 RjkxOEQyMzY0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvUWIVcFBBUt3vRMf9i1/UgNdbmLEOeIgwD RIMsrnfCcqq4OKxjJRZv44+nucO48kZ0omxYD1dZ9eB2ypSIAt5A2T9+4Fs9xIi/ bTU2lp4uLZpb15kx/MW+qXYILthwxQgmIuaD1uH33X10nd5hKH9rPCfGxM1GyNYE mqUBmoLpjHt4dAR4BDjIh1ODCdP/Y05tlrraFpT8FHhyg6bFOZxMUze9mRhBYOZP +lOF+aE78eMmErMS8MhjTxrvCgYUy8PqqxtdzzaXC41gcct2i7ytxVHoHpdBoNMJ ILFtRSc7+ibJcdJd0ftBLA76tQViPzRcCEBCzt/tzg3MHBsjbYQ= -----END CERTIFICATE-----Generated at Thu Mar 26 10:14:28 2026 by rpki-client