$ rpki-client -vvf repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft File: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft (raw, json) Hash identifier: F2sb9rDPAGPo4uv0STaSxAnCOj5vrw27gM9QCY1xTYY= Subject key identifier: A3:7D:10:A0:D4:D5:5C:AD:66:65:C0:DF:22:72:55:24:0E:39:C2:31 Authority key identifier: 35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B Certificate issuer: /CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Certificate serial: 133A61457A0D757A2E0AEC3D7D821C1F1BD06017 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft Manifest number: 033C Signing time: Thu 26 Mar 2026 01:40:04 +0000 Manifest this update: Thu 26 Mar 2026 01:35:04 +0000 Manifest next update: Sun 29 Mar 2026 07:22:04 +0000 Files and hashes: 1: 3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa (hash: Kzzs0ztzcR23r39ht+5Psv7618tFzduqtiaoQQ3t1Z0=) 2: 3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa (hash: 8HhI26rXh/jjcFdNc40xKLKoLxJCht2FMFxSJPngPR0=) 3: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl (hash: fEEzsBNiDyrU2LdqZeG6QbhPOa+BhLSNt+ht1+s++3A=) 4: 3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa (hash: /6Bl69u1CgUC488n3C0LoD1UwiEDNUgl9lr41NkrxCQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:3a:61:45:7a:0d:75:7a:2e:0a:ec:3d:7d:82:1c:1f:1b:d0:60:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Validity Not Before: Mar 26 01:35:04 2026 GMT Not After : Mar 29 07:22:04 2026 GMT Subject: CN=A37D10A0D4D55CAD6665C0DF227255240E39C231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a3:34:c1:bb:23:5a:fc:c7:72:6f:21:80:82: bd:69:f2:af:26:42:e1:97:28:2d:1f:15:38:47:c8: 19:74:62:35:4e:bf:b2:4f:65:c4:10:59:e2:6a:47: 8d:9d:05:67:cb:22:44:a9:01:d0:26:94:ca:08:67: 83:3a:2f:85:7a:bc:94:b4:a0:3d:f4:56:f2:07:37: ed:f8:04:87:92:82:0e:c8:6e:48:ad:b0:4a:cd:00: 8b:4d:0e:6e:b8:5a:f2:4c:b9:f1:b9:07:84:27:b0: 90:4e:3f:df:69:d8:a0:9f:e4:7b:c4:2f:54:14:24: 02:54:b6:b2:33:41:97:c4:a5:13:5a:fb:f1:50:c6: be:cb:b0:af:07:ac:00:53:88:b2:5f:a5:9d:33:30: 55:98:52:19:4e:0d:1c:42:72:54:45:af:fa:8e:8a: 93:04:dc:a8:b1:d3:78:ec:ae:48:fe:e3:d6:12:98: bf:51:e9:5c:15:b7:9c:9f:55:2b:91:0f:21:61:0c: 57:49:6e:e1:5e:f2:0e:8f:8c:54:17:13:1a:50:12: 7c:4a:71:01:43:90:9f:4f:be:92:5f:ca:4f:66:87: 4d:62:33:00:d8:06:3f:d8:8f:e1:ef:ff:be:96:f3: b4:28:7c:ef:1d:fe:da:b3:96:ad:4f:00:12:bd:64: 82:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7D:10:A0:D4:D5:5C:AD:66:65:C0:DF:22:72:55:24:0E:39:C2:31 X509v3 Authority Key Identifier: keyid:35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e4:e7:c1:ac:00:07:eb:ad:b6:bc:c0:c6:c6:0d:1c:d8:29: 1a:eb:29:6f:cd:eb:e1:19:96:3c:6e:25:65:2c:2f:5d:5a:d6: 1e:8d:f3:e4:2d:ec:8c:2e:0f:1c:51:d5:78:03:00:cc:5d:b4: 37:44:d4:a8:ff:a9:ad:c8:4f:d8:19:02:04:9e:b4:1e:6e:13: 6b:68:90:e2:fa:0b:34:9a:66:ca:8a:9c:f8:54:d9:24:d3:34: 15:43:0f:9e:c9:32:46:6f:52:05:83:19:42:5b:7e:ec:6a:f8: c8:b0:1e:8d:c5:1c:90:5f:03:13:bb:23:fa:34:0f:92:17:d3: 11:b3:24:79:04:ec:c7:78:58:67:af:b7:2e:25:bd:f0:2d:d4: d8:77:ed:bc:5c:98:58:27:0d:df:1e:29:23:3d:a3:19:48:94: de:2b:eb:02:2c:07:53:91:f0:75:aa:4e:67:0b:a9:a0:d7:ca: a0:3b:34:00:bd:bc:e1:93:69:57:5c:92:33:e1:6f:12:09:08: 04:e5:1e:7e:ee:49:4d:e4:05:df:de:f6:c3:e8:59:07:c3:73: 1e:df:19:8d:bb:00:be:f0:ec:ad:6b:14:33:4a:20:04:1f:ee: 11:5f:9a:11:f8:f8:d9:84:3f:eb:19:03:2e:d7:9a:d4:6f:3b: ec:eb:23:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEzphRXoNdXouCuw9fYIcHxvQYBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1 RUE0M0UyQjAeFw0yNjAzMjYwMTM1MDRaFw0yNjAzMjkwNzIyMDRaMDMxMTAvBgNV BAMTKEEzN0QxMEEwRDRENTVDQUQ2NjY1QzBERjIyNzI1NTI0MEUzOUMyMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ozTBuyNa/MdybyGAgr1p8q8m QuGXKC0fFThHyBl0YjVOv7JPZcQQWeJqR42dBWfLIkSpAdAmlMoIZ4M6L4V6vJS0 oD30VvIHN+34BIeSgg7IbkitsErNAItNDm64WvJMufG5B4QnsJBOP99p2KCf5HvE L1QUJAJUtrIzQZfEpRNa+/FQxr7LsK8HrABTiLJfpZ0zMFWYUhlODRxCclRFr/qO ipME3Kix03jsrkj+49YSmL9R6VwVt5yfVSuRDyFhDFdJbuFe8g6PjFQXExpQEnxK cQFDkJ9PvpJfyk9mh01iMwDYBj/Yj+Hv/76W87QofO8d/tqzlq1PABK9ZILvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo30QoNTVXK1mZcDfInJVJA45wjEwHwYDVR0j BBgwFoAUNX3qxebBGzw+FS1aJPjYMV6kPiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDRiNjEyZi1mOTI0LTRlYzItYjFmMS1hMTMwNWQyM2Q1M2EvMC8zNTdERUFDNUU2 QzExQjNDM0UxNTJENUEyNEY4RDgzMTVFQTQzRTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1RUE0 M0UyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q0YjYxMmYtZjkyNC00ZWMyLWIx ZjEtYTEzMDVkMjNkNTNhLzAvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4 MzE1RUE0M0UyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7k58GsAAfrrba8wMbGDRzYKRrrKW/N6+EZ ljxuJWUsL11a1h6N8+Qt7IwuDxxR1XgDAMxdtDdE1Kj/qa3IT9gZAgSetB5uE2to kOL6CzSaZsqKnPhU2STTNBVDD57JMkZvUgWDGUJbfuxq+MiwHo3FHJBfAxO7I/o0 D5IX0xGzJHkE7Md4WGevty4lvfAt1Nh37bxcmFgnDd8eKSM9oxlIlN4r6wIsB1OR 8HWqTmcLqaDXyqA7NAC9vOGTaVdckjPhbxIJCATlHn7uSU3kBd/e9sPoWQfDcx7f GY27AL7w7K1rFDNKIAQf7hFfmhH4+NmEP+sZAy7XmtRvO+zrI7c= -----END CERTIFICATE-----Generated at Thu Mar 26 20:45:31 2026 by rpki-client