$ rpki-client -vvf repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft File: 353E665549A5A245D363BD0DCEA20282E562E909.mft (raw, json) Hash identifier: 6qwiOqOa5FmoJBs9uEGgh9Df/cO0EbbNTEN7UwMC4Ww= Subject key identifier: B0:3D:0F:F8:B2:AC:04:FF:3B:84:1C:33:A7:CC:D9:92:20:66:6B:9D Authority key identifier: 35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 Certificate issuer: /CN=353E665549A5A245D363BD0DCEA20282E562E909 Certificate serial: 0500721A303782FAEC636BD30D5960BCAAC86FDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft Manifest number: EA Signing time: Wed 25 Mar 2026 06:21:19 +0000 Manifest this update: Wed 25 Mar 2026 06:16:19 +0000 Manifest next update: Sat 28 Mar 2026 10:36:19 +0000 Files and hashes: 1: 353E665549A5A245D363BD0DCEA20282E562E909.crl (hash: M6sivV8f0HJUNXVj2oyC/u64v4gOJP5KeXMu86sLywI=) 2: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: RLs7YWOLxdLtlrs9K05DQU0Ui1dbjVBI2I7ZQMJjIGM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:00:72:1a:30:37:82:fa:ec:63:6b:d3:0d:59:60:bc:aa:c8:6f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353E665549A5A245D363BD0DCEA20282E562E909 Validity Not Before: Mar 25 06:16:19 2026 GMT Not After : Mar 28 10:36:19 2026 GMT Subject: CN=B03D0FF8B2AC04FF3B841C33A7CCD99220666B9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:73:de:82:f2:72:58:43:0c:c8:41:5f:91:a5: 3b:25:0e:4f:37:c7:06:c7:35:8a:36:90:65:b9:a6: e9:ce:41:65:9c:4d:fb:68:fd:f4:f5:76:bd:5e:5e: c8:68:3b:41:aa:b4:8c:dc:5b:f1:26:d7:7f:64:0a: 17:6d:9a:9a:af:ad:ba:bb:b2:0a:78:6f:f2:6b:70: 35:d1:e6:35:3b:76:48:52:94:8d:6a:3d:40:58:e0: a5:29:83:c0:e4:f3:02:66:80:3a:ca:4a:48:e6:8d: e3:1d:e1:2f:e2:41:8b:31:80:29:6d:ac:99:4e:f4: 58:06:8f:da:b8:fe:13:ba:cf:1d:35:e7:20:52:e9: 67:83:8a:13:bf:9a:69:a9:d9:8d:10:85:27:ab:a6: a9:6e:38:1d:96:f8:96:a8:af:c0:e9:03:c9:92:42: 16:b9:17:0a:f8:f8:83:09:5a:fd:c0:3c:f2:b4:9a: ff:f4:54:1c:2d:bd:c0:1c:f5:17:9d:70:be:78:b6: 20:c4:83:e1:60:5f:01:fb:4f:34:1f:b3:25:db:33: 05:06:74:8a:81:3c:3d:9e:b0:95:bc:1d:13:12:23: bc:1d:f7:b3:f5:79:f0:a4:09:60:18:df:7c:7e:a2: a1:cf:09:51:d6:4c:46:1f:4c:f6:cf:0f:c3:0a:09: b6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3D:0F:F8:B2:AC:04:FF:3B:84:1C:33:A7:CC:D9:92:20:66:6B:9D X509v3 Authority Key Identifier: keyid:35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:62:d6:8d:85:6a:fd:56:2c:a1:5c:d5:3b:79:61:04:46:04: 2f:bb:76:3a:4c:29:7b:77:2f:2c:8b:5c:b5:a0:fa:d8:bb:95: db:7e:67:b3:52:a0:c0:de:9f:4c:a1:74:2d:81:b1:56:19:e8: 03:e4:44:cd:45:38:04:75:5f:f5:35:d0:d6:a1:6a:83:c6:65: 30:07:e7:c2:f8:6e:0a:47:aa:d2:82:34:15:67:2b:9c:07:47: a9:d7:b7:cd:7d:2c:73:a9:0c:ec:33:4b:ed:63:9d:8f:f2:72: 4a:ec:22:d8:33:ac:d6:f0:78:55:fc:33:89:b0:fd:bd:93:47: 00:b2:6d:c2:b5:eb:20:bf:20:4d:7c:e0:b3:99:40:7c:7e:8a: 77:97:20:55:f5:27:a9:37:19:42:b5:db:12:a8:5f:46:91:0d: 4b:18:f8:29:4f:c0:6f:44:47:5d:8e:e9:0b:e7:85:d1:21:81: 44:2e:54:8f:bc:7b:48:62:7b:9d:bb:92:1e:d6:53:3f:0e:5d: 00:c4:96:31:6c:e5:8d:1f:8d:a3:80:11:f7:32:c5:ee:64:5c: 09:2b:e4:38:d1:6c:f3:be:90:09:ea:17:53:91:f1:19:d0:5f: 69:e6:14:fe:7f:e9:a2:6c:36:bd:8c:41:a4:28:53:9d:8b:63: d2:5f:d7:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBQByGjA3gvrsY2vTDVlgvKrIb9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJF NTYyRTkwOTAeFw0yNjAzMjUwNjE2MTlaFw0yNjAzMjgxMDM2MTlaMDMxMTAvBgNV BAMTKEIwM0QwRkY4QjJBQzA0RkYzQjg0MUMzM0E3Q0NEOTkyMjA2NjZCOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfc96C8nJYQwzIQV+RpTslDk83 xwbHNYo2kGW5punOQWWcTfto/fT1dr1eXshoO0GqtIzcW/Em139kChdtmpqvrbq7 sgp4b/JrcDXR5jU7dkhSlI1qPUBY4KUpg8Dk8wJmgDrKSkjmjeMd4S/iQYsxgClt rJlO9FgGj9q4/hO6zx015yBS6WeDihO/mmmp2Y0QhSerpqluOB2W+Jaor8DpA8mS Qha5Fwr4+IMJWv3APPK0mv/0VBwtvcAc9RedcL54tiDEg+FgXwH7TzQfsyXbMwUG dIqBPD2esJW8HRMSI7wd97P1efCkCWAY33x+oqHPCVHWTEYfTPbPD8MKCbaFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsD0P+LKsBP87hBwzp8zZkiBma50wHwYDVR0j BBgwFoAUNT5mVUmlokXTY70NzqICguVi6QkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQxMWIwNS1jNThhLTQyMDYtYjdhYi1jMjUwYzE0NjU1NTAvMC8zNTNFNjY1NTQ5 QTVBMjQ1RDM2M0JEMERDRUEyMDI4MkU1NjJFOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJFNTYy RTkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MTFiMDUtYzU4YS00MjA2LWI3 YWItYzI1MGMxNDY1NTUwLzAvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAy ODJFNTYyRTkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRi1o2Fav1WLKFc1Tt5YQRGBC+7djpMKXt3 LyyLXLWg+ti7ldt+Z7NSoMDen0yhdC2BsVYZ6APkRM1FOAR1X/U10NahaoPGZTAH 58L4bgpHqtKCNBVnK5wHR6nXt819LHOpDOwzS+1jnY/yckrsItgzrNbweFX8M4mw /b2TRwCybcK16yC/IE184LOZQHx+ineXIFX1J6k3GUK12xKoX0aRDUsY+ClPwG9E R12O6QvnhdEhgUQuVI+8e0hie527kh7WUz8OXQDEljFs5Y0fjaOAEfcyxe5kXAkr 5DjRbPO+kAnqF1OR8RnQX2nmFP5/6aJsNr2MQaQoU52LY9Jf10w= -----END CERTIFICATE-----Generated at Thu Mar 26 23:08:17 2026 by rpki-client