$ rpki-client -vvf repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft File: 35E6B2357C98B974C14BA8A5DE46B519083666C6.mft (raw, json) Hash identifier: TavjDjLsk8urn0/a8vgJxWfsGVUitbRBqmFXt8yPYz0= Subject key identifier: 6C:2C:5C:B0:B8:03:E0:A7:BE:89:07:54:CF:BC:FB:7C:D6:A3:CB:E2 Authority key identifier: 35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6 Certificate issuer: /CN=35E6B2357C98B974C14BA8A5DE46B519083666C6 Certificate serial: 28B0BBE026F5D035C2F9C940E904CC25D08A7943 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft Manifest number: 021D Signing time: Tue 24 Mar 2026 16:32:02 +0000 Manifest this update: Tue 24 Mar 2026 16:27:02 +0000 Manifest next update: Sat 28 Mar 2026 02:32:02 +0000 Files and hashes: 1: 3130332e3134302e37362e302f32342d3234203d3e203535363636.roa (hash: GLppbahQizSwOWwKriMc4uG3htQlLQar3GU+UJJemeo=) 2: 3130332e3134302e37372e302f32342d3234203d3e203535363636.roa (hash: lKrNBKuDZS/ipiNlTaiA44F8MyhuWOX6AJpZ28duXRw=) 3: 35E6B2357C98B974C14BA8A5DE46B519083666C6.crl (hash: vfXfC/mq7FZwr9DOG8BZ1hvtMaP0UBx/f1CcdvY69E0=) 4: 3130332e3134302e37362e302f32332d3234203d3e203535363636.roa (hash: VrC0pE6ywJ4SpMSp1FoGXZj0toTtd8RroZm7PaGXQLI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b0:bb:e0:26:f5:d0:35:c2:f9:c9:40:e9:04:cc:25:d0:8a:79:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35E6B2357C98B974C14BA8A5DE46B519083666C6 Validity Not Before: Mar 24 16:27:02 2026 GMT Not After : Mar 28 02:32:02 2026 GMT Subject: CN=6C2C5CB0B803E0A7BE890754CFBCFB7CD6A3CBE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:04:26:d8:73:98:94:7e:eb:9b:48:da:89:4b: cb:5c:0f:09:be:0a:99:2d:2a:fa:b2:95:a1:00:4a: 09:3f:d3:3f:24:02:88:a9:9c:d9:64:be:af:60:66: 17:3e:d5:e9:47:c8:0f:0e:7c:1a:83:29:27:2f:3c: 77:01:3a:be:18:b4:42:7e:ee:b6:8b:c5:0d:30:d0: 37:11:38:79:ab:8d:36:88:a7:a7:9c:4e:97:33:b6: d4:85:11:72:4a:b7:04:f6:33:ab:0e:0a:86:29:7e: d9:4c:4d:ea:7f:44:17:29:9a:b4:c7:e0:db:19:f3: 5b:40:97:62:a9:f6:46:49:5a:58:07:ce:14:aa:66: 9f:02:49:2f:6f:8d:d6:71:2a:72:42:b5:b1:bf:26: 24:f1:61:8e:41:bd:5b:b2:c0:1a:33:46:91:d3:38: 0c:58:48:19:3e:37:f4:58:af:93:32:1d:65:a2:d5: 91:4d:19:7c:ad:f7:4d:b6:b2:50:d8:f6:f4:a3:b0: e6:bd:e3:59:da:39:c7:94:2d:1b:92:47:d4:18:68: 2b:a1:fd:9a:5d:f8:13:28:a3:d2:59:66:7f:90:d4: 84:6f:54:3a:68:9c:6e:bd:f3:b4:81:4d:5b:e8:4e: 92:c0:a1:22:0a:8a:36:a8:b9:af:f2:cb:a3:4f:3e: ea:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2C:5C:B0:B8:03:E0:A7:BE:89:07:54:CF:BC:FB:7C:D6:A3:CB:E2 X509v3 Authority Key Identifier: keyid:35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:14:47:a9:14:83:02:af:3a:bd:ee:1c:72:46:2f:5d:ee:6b: 41:bf:91:32:49:0c:e5:e1:ea:a8:47:51:8e:24:fc:e8:c3:a3: d1:72:42:25:92:88:e4:f2:4f:81:be:80:1c:41:18:0d:76:92: 4b:14:21:5a:23:97:0f:3a:5d:d0:ab:33:8b:f2:97:1f:69:17: 63:b9:9b:50:39:ef:d6:cd:17:d6:6a:0b:1f:d5:c0:01:ed:b7: 07:fc:14:85:f3:04:07:24:b5:af:99:49:56:68:c2:a4:32:a3: 74:f0:69:80:09:66:0d:66:d0:67:2f:12:90:ec:1d:85:51:a6: ca:e5:7f:8a:5f:0d:bb:11:13:dc:37:44:43:9f:be:e2:00:31: af:be:64:07:67:d4:3d:21:c6:2b:bd:89:27:e0:3a:de:c4:57: 36:9a:8a:a3:32:11:27:97:13:43:9b:6a:0f:c1:84:65:21:3c: 88:08:af:45:34:19:ac:3f:9d:d8:c0:fd:b3:03:c4:e8:a4:c9: c9:ab:50:e2:a7:e2:73:25:e8:59:a0:a2:0e:9f:05:21:70:26: ae:e2:22:9e:86:39:1b:28:1b:bf:42:13:58:71:b4:94:d4:1f: 72:98:b6:0b:82:f9:01:af:a5:6c:3a:ac:61:33:a7:32:20:ab: 95:55:91:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKLC74Cb10DXC+clA6QTMJdCKeUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVFNkIyMzU3Qzk4Qjk3NEMxNEJBOEE1REU0NkI1MTkw ODM2NjZDNjAeFw0yNjAzMjQxNjI3MDJaFw0yNjAzMjgwMjMyMDJaMDMxMTAvBgNV BAMTKDZDMkM1Q0IwQjgwM0UwQTdCRTg5MDc1NENGQkNGQjdDRDZBM0NCRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhBCbYc5iUfuubSNqJS8tcDwm+ CpktKvqylaEASgk/0z8kAoipnNlkvq9gZhc+1elHyA8OfBqDKScvPHcBOr4YtEJ+ 7raLxQ0w0DcROHmrjTaIp6ecTpczttSFEXJKtwT2M6sOCoYpftlMTep/RBcpmrTH 4NsZ81tAl2Kp9kZJWlgHzhSqZp8CSS9vjdZxKnJCtbG/JiTxYY5BvVuywBozRpHT OAxYSBk+N/RYr5MyHWWi1ZFNGXyt9022slDY9vSjsOa941naOceULRuSR9QYaCuh /Zpd+BMoo9JZZn+Q1IRvVDponG6987SBTVvoTpLAoSIKijaoua/yy6NPPuodAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbCxcsLgD4Ke+iQdUz7z7fNajy+IwHwYDVR0j BBgwFoAUNeayNXyYuXTBS6il3ka1GQg2ZsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDA3MzE2NC04MDA4LTQ5YzYtYjE4Ni0zYzdmZTliODBhMTcvMC8zNUU2QjIzNTdD OThCOTc0QzE0QkE4QTVERTQ2QjUxOTA4MzY2NkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVFNkIyMzU3Qzk4Qjk3NEMxNEJBOEE1REU0NkI1MTkwODM2 NjZDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAwNzMxNjQtODAwOC00OWM2LWIx ODYtM2M3ZmU5YjgwYTE3LzAvMzVFNkIyMzU3Qzk4Qjk3NEMxNEJBOEE1REU0NkI1 MTkwODM2NjZDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKoUR6kUgwKvOr3uHHJGL13ua0G/kTJJDOXh 6qhHUY4k/OjDo9FyQiWSiOTyT4G+gBxBGA12kksUIVojlw86XdCrM4vylx9pF2O5 m1A579bNF9ZqCx/VwAHttwf8FIXzBAckta+ZSVZowqQyo3TwaYAJZg1m0GcvEpDs HYVRpsrlf4pfDbsRE9w3REOfvuIAMa++ZAdn1D0hxiu9iSfgOt7EVzaaiqMyESeX E0Obag/BhGUhPIgIr0U0Gaw/ndjA/bMDxOikycmrUOKn4nMl6Fmgog6fBSFwJq7i Ip6GORsoG79CE1hxtJTUH3KYtguC+QGvpWw6rGEzpzIgq5VVkfQ= -----END CERTIFICATE-----Generated at Thu Mar 26 21:19:40 2026 by rpki-client