$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft File: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft (raw, json) Hash identifier: OfAuEVzEPx/zRFKDax7BqV688N0JICHTMFzPuQxH0dY= Subject key identifier: DB:03:1C:0B:9F:AF:D2:BF:34:1D:F4:A9:73:64:FE:CD:94:16:6B:A4 Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B Certificate issuer: /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Certificate serial: 10565A735AE7A20CE1ABDA95CCDFE44B1809481F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft Manifest number: 0158 Signing time: Tue 24 Mar 2026 13:02:02 +0000 Manifest this update: Tue 24 Mar 2026 12:57:02 +0000 Manifest next update: Fri 27 Mar 2026 21:36:02 +0000 Files and hashes: 1: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: f0fqku3cp8Vbd07DCJqQWFOyK/wwGkwlAr8Blz5N69c=) 2: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: GCsQ/doYvtKedc1SH/YhKj811ehkroOqTsancOtufMM=) 3: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl (hash: JmhUvL6OXtGqBrhAlDJ8f20tGVFLcvr1+pswyuBLIgU=) 4: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: fxONR0UgQfuA8uLufmdVhYcok48YZDVOTWo+bGUHEd4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:56:5a:73:5a:e7:a2:0c:e1:ab:da:95:cc:df:e4:4b:18:09:48:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Validity Not Before: Mar 24 12:57:02 2026 GMT Not After : Mar 27 21:36:02 2026 GMT Subject: CN=DB031C0B9FAFD2BF341DF4A97364FECD94166BA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ba:64:8b:69:3a:89:11:97:94:df:10:31:eb: 51:03:28:54:b8:89:a7:00:d4:c4:93:84:47:82:49: bb:84:36:f8:ee:c8:a8:df:17:c1:68:91:e3:36:d0: 88:2f:6c:cf:ff:7b:13:7a:e3:c2:c2:ad:03:01:9f: 5b:9d:2b:1a:03:8c:f0:4f:e4:46:ed:b8:8f:d6:64: a6:62:33:70:91:bd:97:17:5e:b0:60:70:90:7c:d0: 05:1f:71:f1:df:7b:e6:4b:68:36:ca:04:2e:81:b6: c1:ac:d2:a4:75:55:98:cb:b1:50:be:39:59:2e:d7: 00:58:bb:05:b8:4a:98:c9:00:42:03:5f:27:3f:f0: b3:e7:e6:96:44:ff:85:51:27:92:56:66:79:75:6f: 16:ba:d9:9b:9f:f1:53:88:be:e7:39:96:7d:91:03: e9:fb:69:34:ad:f2:b7:82:8d:27:c1:5a:f1:5f:ae: 30:d9:50:07:44:49:62:dd:76:ef:ae:18:e2:e1:56: 35:c4:63:ee:43:48:46:ac:b5:50:3b:77:d3:f0:04: ec:42:c6:c5:ab:48:fe:14:f8:54:25:32:5e:f7:f3: 5e:5b:5e:13:95:8f:ed:d7:4f:d7:21:1b:f5:a3:a6: 0d:e7:18:70:fc:dc:1f:39:0c:8e:c0:69:39:7f:64: 3f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:03:1C:0B:9F:AF:D2:BF:34:1D:F4:A9:73:64:FE:CD:94:16:6B:A4 X509v3 Authority Key Identifier: keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:35:ae:2f:c9:ec:d3:4d:85:40:54:f2:67:36:6e:03:0e:08: 74:b2:ce:33:d3:0f:d2:c9:f6:70:21:d6:df:1e:3f:dc:7a:3d: 2d:13:f8:03:03:ca:79:d5:a4:62:b6:8b:08:00:23:5e:99:dc: cf:c2:e2:b3:af:1a:4e:dc:5d:65:b6:d5:f7:6d:b4:9e:09:b1: 25:94:69:69:1c:ba:7a:fb:79:d9:9b:b8:51:1d:1e:0d:b3:4b: e5:07:81:75:1c:9c:81:1c:52:7f:83:03:6c:f1:68:db:e7:f3: 93:a8:77:4d:a1:ea:1b:9e:ad:4a:10:58:58:de:92:94:fe:65: cb:55:e3:50:14:77:26:83:45:df:46:1e:f8:c7:c9:cb:9a:01: 67:90:d2:1c:c5:12:ed:1d:bf:cf:27:2d:17:65:7c:b9:ae:ca: 00:64:1f:d1:e9:41:4c:ce:5a:d9:76:7e:48:c6:cf:0c:71:e5: 27:72:73:6f:fa:c4:b0:3b:98:18:36:3a:a9:cb:24:3e:11:96: 83:fd:83:05:fa:81:69:43:eb:7a:b0:71:67:76:83:fd:03:0f: b5:78:e6:45:3a:f5:1d:24:26:f2:24:32:e3:2a:50:66:39:9c: 71:38:81:9e:78:fe:a3:d3:a3:0a:58:c0:b3:c1:06:32:59:5a: 92:f7:f5:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEFZac1rnogzhq9qVzN/kSxgJSB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx NTYzRjY3QjAeFw0yNjAzMjQxMjU3MDJaFw0yNjAzMjcyMTM2MDJaMDMxMTAvBgNV BAMTKERCMDMxQzBCOUZBRkQyQkYzNDFERjRBOTczNjRGRUNEOTQxNjZCQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6umSLaTqJEZeU3xAx61EDKFS4 iacA1MSThEeCSbuENvjuyKjfF8FokeM20IgvbM//exN648LCrQMBn1udKxoDjPBP 5EbtuI/WZKZiM3CRvZcXXrBgcJB80AUfcfHfe+ZLaDbKBC6BtsGs0qR1VZjLsVC+ OVku1wBYuwW4SpjJAEIDXyc/8LPn5pZE/4VRJ5JWZnl1bxa62Zuf8VOIvuc5ln2R A+n7aTSt8reCjSfBWvFfrjDZUAdESWLddu+uGOLhVjXEY+5DSEastVA7d9PwBOxC xsWrSP4U+FQlMl73815bXhOVj+3XT9chG/Wjpg3nGHD83B85DI7AaTl/ZD9xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2wMcC5+v0r80HfSpc2T+zZQWa6QwHwYDVR0j BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz RjY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJB QTUxNTYzRjY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHM1ri/J7NNNhUBU8mc2bgMOCHSyzjPTD9LJ 9nAh1t8eP9x6PS0T+AMDynnVpGK2iwgAI16Z3M/C4rOvGk7cXWW21fdttJ4JsSWU aWkcunr7edmbuFEdHg2zS+UHgXUcnIEcUn+DA2zxaNvn85Ood02h6huerUoQWFje kpT+ZctV41AUdyaDRd9GHvjHycuaAWeQ0hzFEu0dv88nLRdlfLmuygBkH9HpQUzO Wtl2fkjGzwxx5Sdyc2/6xLA7mBg2OqnLJD4RloP9gwX6gWlD63qwcWd2g/0DD7V4 5kU69R0kJvIkMuMqUGY5nHE4gZ54/qPTowpYwLPBBjJZWpL39Wo= -----END CERTIFICATE-----Generated at Thu Mar 26 12:19:29 2026 by rpki-client