$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft File: 35369AC685201508541197F86A8FDAC2375BE30A.mft (raw, json) Hash identifier: DFVHPV5A6RoegG9FPrR0hi1f/v6rWDAKDXUejWAHvNA= Subject key identifier: 9E:27:7E:C7:41:BD:1D:9F:15:8E:38:CD:C1:1B:95:78:6F:03:C5:62 Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A Certificate issuer: /CN=35369AC685201508541197F86A8FDAC2375BE30A Certificate serial: 1CD47C553D9872C4FA8C5329E9AC7D8FB6F3288B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft Manifest number: 01F3 Signing time: Wed 25 Mar 2026 09:42:31 +0000 Manifest this update: Wed 25 Mar 2026 09:37:31 +0000 Manifest next update: Sat 28 Mar 2026 11:15:31 +0000 Files and hashes: 1: 323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (hash: nASP1+s5Yr02DageTGdazoA9xc6IABPGa5gu3FsZO/s=) 2: 3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa (hash: ovmFPVguepwh1KZwLVmisbEmSv3ixrZq0Db1FT9lUSk=) 3: 3130332e3131312e38362e302f32342d3234203d3e20313331373639.roa (hash: 9+Mv4cEtMbH5KopkzgQCoNSpTRV8G99XXR57cTSgvOU=) 4: 35369AC685201508541197F86A8FDAC2375BE30A.crl (hash: rb/8pXSkODkmygmSRsnKLveH/sXJP6D4E0d8i3bRJ2Q=) 5: 3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa (hash: 3VX7SmRrNhkZ2gYSECqjxxiOqtU2CUq75Ny0SNZjNIo=) 6: 3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa (hash: PlQgzB/cRsoh7ZWV0eeB0CCERK7vc0F8oX5TvclNELU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 11:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d4:7c:55:3d:98:72:c4:fa:8c:53:29:e9:ac:7d:8f:b6:f3:28:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A Validity Not Before: Mar 25 09:37:31 2026 GMT Not After : Mar 28 11:15:31 2026 GMT Subject: CN=9E277EC741BD1D9F158E38CDC11B95786F03C562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:71:4a:05:13:24:65:86:82:06:22:00:3f:ed: 61:0d:d4:4c:70:81:de:5a:85:dd:b8:bc:e7:a8:83: f2:59:4c:ea:82:a9:4e:85:f4:1f:8d:23:8c:bd:4a: 52:85:60:c1:56:28:36:e7:58:1b:85:df:5a:ac:3b: 85:87:6e:77:fa:e5:67:3a:b4:67:62:af:04:57:1e: 75:02:92:22:55:65:63:66:18:b7:10:0e:3d:76:2d: 4c:89:05:07:7d:47:59:b6:0a:fb:32:0c:60:4e:16: 44:d1:ef:88:ba:86:08:69:f6:c7:e9:f6:a7:4e:9b: 6e:77:1c:09:70:52:70:eb:b7:95:01:b8:8c:4a:0b: c1:17:6f:a2:0a:f3:06:a0:08:36:ae:08:b7:8b:d1: 54:a2:3a:07:10:64:93:2f:3a:69:6f:e5:a2:8d:84: 9c:d1:68:fc:fc:73:de:f6:30:fc:17:bd:bf:c1:f4: 06:5e:04:f0:02:62:76:48:7b:6c:ac:a4:0e:01:86: 71:02:78:d3:8a:b5:c6:e4:62:ab:63:c6:74:a8:ee: ef:32:37:5a:44:52:16:40:b2:e6:5a:8b:72:e6:ef: 34:b4:e2:c7:b7:53:8b:a1:4e:08:bc:6d:d2:28:3b: 7e:bc:d1:7e:0a:03:7d:18:33:f0:43:01:c3:6e:0d: fe:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:27:7E:C7:41:BD:1D:9F:15:8E:38:CD:C1:1B:95:78:6F:03:C5:62 X509v3 Authority Key Identifier: keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:00:02:d0:f2:9a:08:35:65:18:11:1c:b9:8b:37:8d:b4:4d: 93:ec:5d:06:40:8c:c7:46:d8:f1:3a:78:46:3f:c9:f1:ea:83: ad:e8:ff:95:d5:52:79:ce:65:0c:4c:ac:92:25:db:fd:1c:27: 9e:bb:0e:ac:c3:d1:fc:b4:f8:af:e4:89:d1:3a:bb:73:89:27: 3c:af:d9:03:c9:7c:ed:00:13:7f:40:12:a6:4f:4a:c0:ab:b5: 3d:a3:aa:9b:c2:8e:07:96:a9:55:78:e0:5b:0f:47:23:32:98: 74:67:48:b1:aa:e9:5f:3a:1c:42:41:42:96:2a:22:6d:5a:2c: ac:49:63:31:be:91:f2:68:52:7c:de:af:d6:6c:ca:8e:f3:6e: 72:62:03:64:45:fd:ef:13:88:aa:4b:c0:34:30:40:50:84:04: 73:22:89:34:af:d8:7d:6b:84:e5:08:ea:03:71:ab:53:6b:37: 5d:a7:eb:10:be:e0:0d:82:4e:91:bb:d6:df:37:d7:28:85:04: 55:e8:02:6c:0a:17:38:af:01:09:e8:3e:78:4b:c2:1e:81:df: 62:8f:f8:02:af:88:c1:5d:0e:85:d8:8e:13:fa:5c:ca:5b:a1: ec:58:c8:3f:34:01:28:f6:f9:69:47:95:62:18:da:83:82:6d: 55:f5:d6:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHNR8VT2YcsT6jFMp6ax9j7bzKIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIz NzVCRTMwQTAeFw0yNjAzMjUwOTM3MzFaFw0yNjAzMjgxMTE1MzFaMDMxMTAvBgNV BAMTKDlFMjc3RUM3NDFCRDFEOUYxNThFMzhDREMxMUI5NTc4NkYwM0M1NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClcUoFEyRlhoIGIgA/7WEN1Exw gd5ahd24vOeog/JZTOqCqU6F9B+NI4y9SlKFYMFWKDbnWBuF31qsO4WHbnf65Wc6 tGdirwRXHnUCkiJVZWNmGLcQDj12LUyJBQd9R1m2CvsyDGBOFkTR74i6hghp9sfp 9qdOm253HAlwUnDrt5UBuIxKC8EXb6IK8wagCDauCLeL0VSiOgcQZJMvOmlv5aKN hJzRaPz8c972MPwXvb/B9AZeBPACYnZIe2yspA4BhnECeNOKtcbkYqtjxnSo7u8y N1pEUhZAsuZai3Lm7zS04se3U4uhTgi8bdIoO3680X4KA30YM/BDAcNuDf5FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnid+x0G9HZ8VjjjNwRuVeG8DxWIwHwYDVR0j BBgwFoAUNTaaxoUgFQhUEZf4ao/awjdb4wowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTRhY2EzYy02M2RjLTRjMWItYTdlOC1hY2JhZTgyMWNkZTUvMC8zNTM2OUFDNjg1 MjAxNTA4NTQxMTk3Rjg2QThGREFDMjM3NUJFMzBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIzNzVC RTMwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0YWNhM2MtNjNkYy00YzFiLWE3 ZTgtYWNiYWU4MjFjZGU1LzAvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRB QzIzNzVCRTMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQAAtDymgg1ZRgRHLmLN420TZPsXQZAjMdG 2PE6eEY/yfHqg63o/5XVUnnOZQxMrJIl2/0cJ567DqzD0fy0+K/kidE6u3OJJzyv 2QPJfO0AE39AEqZPSsCrtT2jqpvCjgeWqVV44FsPRyMymHRnSLGq6V86HEJBQpYq Im1aLKxJYzG+kfJoUnzer9Zsyo7zbnJiA2RF/e8TiKpLwDQwQFCEBHMiiTSv2H1r hOUI6gNxq1NrN12n6xC+4A2CTpG71t831yiFBFXoAmwKFzivAQnoPnhLwh6B32KP +AKviMFdDoXYjhP6XMpboexYyD80ASj2+WlHlWIY2oOCbVX11uM= -----END CERTIFICATE-----Generated at Thu Mar 26 05:50:00 2026 by rpki-client