$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft File: 35AF7B054A8CC95835EC5A2F9275004D39521553.mft (raw, json) Hash identifier: 1upoHLKnvmjzDj+O3380+gh+7Ad7k5ptS2kxmMn6p8c= Subject key identifier: 52:06:23:C6:FA:34:AB:9D:EC:F3:0B:76:82:8B:0A:87:DA:3E:88:E3 Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Certificate serial: 64C6838BB9FA2ABE4FFAF431BC396C75E68C2D41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft Manifest number: 01E7 Signing time: Thu 26 Mar 2026 04:11:54 +0000 Manifest this update: Thu 26 Mar 2026 04:06:54 +0000 Manifest next update: Sun 29 Mar 2026 12:40:54 +0000 Files and hashes: 1: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: Sa1fK6pgYDElHHofY035RXNXkmiq5pXQ+mZ92ple4FU=) 2: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: YPnyu3J46S+PNDfPl4x2HfdMro8qcwKYQIJNOuw7SNM=) 3: 35AF7B054A8CC95835EC5A2F9275004D39521553.crl (hash: af2m21+iUP3sto2B6QO4AUCuyUZHa1Bntmx67ofxudw=) 4: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: G5wKKP5D5NKHHIZXwfrSRRWwdWFA64K8RR4eUb7olLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 12:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c6:83:8b:b9:fa:2a:be:4f:fa:f4:31:bc:39:6c:75:e6:8c:2d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Validity Not Before: Mar 26 04:06:54 2026 GMT Not After : Mar 29 12:40:54 2026 GMT Subject: CN=520623C6FA34AB9DECF30B76828B0A87DA3E88E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ba:34:2a:dc:04:f2:27:e7:09:78:c9:ed:c2: dd:5c:b5:75:3c:84:40:49:e2:fb:aa:0b:af:40:2c: 66:2f:2d:53:39:1c:e7:03:5c:7c:5c:e7:37:d3:f1: da:0a:f5:4a:9d:c6:4a:ae:bf:1e:64:90:8e:3e:fa: 58:ab:6b:35:75:c9:8a:20:a5:2b:75:f6:19:ad:0c: df:b4:d3:7d:72:a9:7e:ca:07:88:ca:f5:e7:16:9b: 1c:7a:ba:60:57:a7:61:5a:af:1b:ca:4f:e5:e9:3e: 69:88:ac:73:f7:65:d9:be:be:d1:8e:80:a4:f5:68: 16:b6:42:4f:f1:8e:a4:cd:f6:05:b6:52:bf:1b:13: 99:d3:55:e7:2b:cf:82:a6:3c:cd:54:74:ca:f6:a6: 67:8c:ec:ba:53:df:80:fa:9e:51:6f:22:3a:ab:d0: 02:10:78:63:3b:55:1b:1e:46:b2:fe:69:55:30:2b: aa:3f:24:36:2f:db:a9:5c:a0:f4:1d:34:88:9c:63: e3:48:0b:6f:89:fd:88:c1:36:70:79:2e:00:37:33: 01:57:7e:d5:27:38:a6:f5:11:05:e3:2b:78:98:98: 86:b6:0f:ca:a2:c6:90:f3:a0:42:9d:96:77:32:d6: 2c:ec:2c:e8:43:97:e8:31:36:68:dd:58:6a:ed:92: bc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:06:23:C6:FA:34:AB:9D:EC:F3:0B:76:82:8B:0A:87:DA:3E:88:E3 X509v3 Authority Key Identifier: keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:e7:c1:c7:91:29:6f:e8:31:c6:01:b1:a2:d4:27:66:b5:2a: 07:aa:1a:d1:d4:18:41:20:97:97:5b:f2:04:87:5e:ce:db:b7: 8b:3d:2d:96:1f:24:fc:20:46:b7:92:36:c2:c3:48:68:55:80: 76:c8:54:30:3b:75:c6:3e:69:74:85:52:19:b8:ab:d9:89:83: 6c:96:c9:1e:02:28:57:9d:07:a8:bb:3e:b1:af:58:ae:a0:9a: 96:09:dc:b5:37:0f:77:d6:1f:b8:80:80:ea:8b:7c:15:09:32: a5:d3:0e:dd:d6:19:f9:c4:fc:85:9e:c7:93:25:ab:26:48:49: 20:d7:f6:3e:e4:a3:70:3d:0f:ce:57:94:10:13:05:7a:a3:0f: d7:d5:eb:5b:f2:ff:23:2f:af:04:52:8a:b0:a2:64:fd:e4:7c: 39:88:50:c3:76:19:8a:b7:61:80:bf:c4:f9:b2:c0:68:19:24: 2c:1f:a4:ec:d0:7f:c1:3b:29:a3:dd:56:ac:2e:a5:fb:ae:a4: c9:82:19:d3:4a:12:76:33:66:9a:8a:69:7c:3f:68:d7:58:f3: 84:d7:44:91:dc:ce:a5:47:bf:88:44:f8:f8:f1:99:c7:cd:92: 5a:b8:d5:21:dc:b3:c9:22:32:02:e6:8d:65:1c:0b:7b:e7:48: 38:ee:99:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZMaDi7n6Kr5P+vQxvDlsdeaMLUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQz OTUyMTU1MzAeFw0yNjAzMjYwNDA2NTRaFw0yNjAzMjkxMjQwNTRaMDMxMTAvBgNV BAMTKDUyMDYyM0M2RkEzNEFCOURFQ0YzMEI3NjgyOEIwQTg3REEzRTg4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsujQq3ATyJ+cJeMntwt1ctXU8 hEBJ4vuqC69ALGYvLVM5HOcDXHxc5zfT8doK9Uqdxkquvx5kkI4++lirazV1yYog pSt19hmtDN+0031yqX7KB4jK9ecWmxx6umBXp2FarxvKT+XpPmmIrHP3Zdm+vtGO gKT1aBa2Qk/xjqTN9gW2Ur8bE5nTVecrz4KmPM1UdMr2pmeM7LpT34D6nlFvIjqr 0AIQeGM7VRseRrL+aVUwK6o/JDYv26lcoPQdNIicY+NIC2+J/YjBNnB5LgA3MwFX ftUnOKb1EQXjK3iYmIa2D8qixpDzoEKdlncy1izsLOhDl+gxNmjdWGrtkrx/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUgYjxvo0q53s8wt2gosKh9o+iOMwHwYDVR0j BBgwFoAUNa97BUqMyVg17FovknUATTlSFVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMC8zNUFGN0IwNTRB OENDOTU4MzVFQzVBMkY5Mjc1MDA0RDM5NTIxNTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQzOTUy MTU1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAw NEQzOTUyMTU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/nwceRKW/oMcYBsaLUJ2a1KgeqGtHUGEEg l5db8gSHXs7bt4s9LZYfJPwgRreSNsLDSGhVgHbIVDA7dcY+aXSFUhm4q9mJg2yW yR4CKFedB6i7PrGvWK6gmpYJ3LU3D3fWH7iAgOqLfBUJMqXTDt3WGfnE/IWex5Ml qyZISSDX9j7ko3A9D85XlBATBXqjD9fV61vy/yMvrwRSirCiZP3kfDmIUMN2GYq3 YYC/xPmywGgZJCwfpOzQf8E7KaPdVqwupfuupMmCGdNKEnYzZpqKaXw/aNdY84TX RJHczqVHv4hE+PjxmcfNklq41SHcs8kiMgLmjWUcC3vnSDjumak= -----END CERTIFICATE-----Generated at Thu Mar 26 07:34:08 2026 by rpki-client