$ rpki-client -vvf repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft File: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft (raw, json) Hash identifier: doGJAC5Xa0RO1ep85DJhaBEUBS8nEG6/6e1KWlbdvEY= Subject key identifier: 25:92:9A:DD:64:2E:80:F1:B4:FE:24:C0:5E:F3:76:89:90:44:B2:F7 Authority key identifier: C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 Certificate issuer: /CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Certificate serial: 1D6E1B50BF3E5245E7560DF141A78D37212B6453 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft Manifest number: 0164 Signing time: Wed 25 Mar 2026 11:01:51 +0000 Manifest this update: Wed 25 Mar 2026 10:56:51 +0000 Manifest next update: Sat 28 Mar 2026 21:17:51 +0000 Files and hashes: 1: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl (hash: e8gbEoGTMOaJFX93ICsNAfqSCIkTtdpAtS3i4U+OZ+g=) 2: 3230332e31342e31382e302f32342d3234203d3e20313532303834.roa (hash: XcDiOJhAR1vd2U+Ewn3aHsLFKLuGOijteolk93wlaIY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:6e:1b:50:bf:3e:52:45:e7:56:0d:f1:41:a7:8d:37:21:2b:64:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Validity Not Before: Mar 25 10:56:51 2026 GMT Not After : Mar 28 21:17:51 2026 GMT Subject: CN=25929ADD642E80F1B4FE24C05EF376899044B2F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9a:5e:1e:ee:fb:55:c5:c8:3a:9a:01:f5:7a: 8c:01:05:80:f9:30:96:fa:b3:c4:f3:67:9a:ca:70: 78:bd:d2:88:24:43:a3:0c:bd:8f:9f:a7:2c:d1:ba: 1e:14:db:46:93:eb:ef:33:2c:a4:07:6b:ab:61:f6: 10:eb:93:bf:55:fe:17:80:97:cd:01:c1:54:7c:fc: 2f:cf:4f:3c:e0:20:ee:64:c7:30:e3:c5:52:34:c7: 6f:19:ef:9c:7c:e3:66:24:b6:d2:59:d8:e7:ef:c6: 2f:80:70:f8:fa:ab:d3:79:67:ba:2d:db:e8:71:0a: f4:d3:2a:de:94:25:33:ee:22:b6:bc:1b:97:9d:81: dc:48:aa:d4:8b:48:03:42:8e:4d:f4:e9:0a:4b:0e: ad:af:d5:1e:d5:db:26:46:4d:d9:0c:3c:45:eb:b1: 22:66:7b:f3:a9:c7:0c:1a:18:ec:ee:d2:29:c5:6d: 70:ea:a5:78:b3:86:32:57:05:83:db:b5:6f:90:05: 5a:ed:f3:f3:fc:aa:cc:31:9d:77:40:4c:13:3c:76: 2d:ae:a6:d2:2c:e4:de:cf:a7:9d:e5:4a:62:52:3a: ec:92:29:1e:ba:91:18:ee:45:5d:9e:38:9f:14:2b: 41:fa:f6:f4:fb:10:92:92:56:47:de:eb:54:5c:14: 0a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:92:9A:DD:64:2E:80:F1:B4:FE:24:C0:5E:F3:76:89:90:44:B2:F7 X509v3 Authority Key Identifier: keyid:C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:45:98:48:1e:76:f5:10:2e:a8:01:1a:81:9d:8c:cf:6a:95: 5e:70:ca:a2:ff:8d:22:b2:c4:e2:cb:61:ad:89:ea:e4:87:8d: 76:67:bf:d8:18:2a:31:3c:8c:6d:0c:ea:ac:25:0b:1b:32:c0: 5f:c9:fc:a8:f7:bd:16:df:63:5e:56:23:b8:5a:ea:33:39:3e: d5:dd:0c:a3:a5:e7:00:d1:ee:0d:2e:8e:2c:8c:1c:33:eb:9a: c0:4c:80:a2:2f:65:a4:ad:aa:57:22:d7:a0:1f:49:08:ab:39: 89:38:3f:d2:6c:b1:07:da:9c:14:51:c3:19:8a:a8:f9:5e:19: a3:14:d9:00:91:f6:45:5b:73:d9:e2:ef:4e:99:76:c5:7c:74: 36:9f:39:53:a2:68:2c:28:46:58:2e:56:48:d9:11:9e:8e:ee: ad:60:74:a0:a5:2b:d5:67:bf:d2:c6:57:ca:a4:25:7f:8d:32: 1e:91:c2:84:7f:ee:86:c8:5e:a8:61:14:c7:d8:2b:b4:2a:61: 70:e1:e6:39:8d:fc:d6:e8:47:3d:c6:6f:fc:a4:03:9b:2b:ff: 3d:05:72:85:75:90:5e:0b:e1:10:3e:5f:35:a7:19:fa:0e:60: 7c:86:9f:44:08:ca:32:54:03:88:66:01:4a:ff:c0:eb:8c:49: d4:51:d4:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHW4bUL8+UkXnVg3xQaeNNyErZFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNG NDlBN0U0NzAeFw0yNjAzMjUxMDU2NTFaFw0yNjAzMjgyMTE3NTFaMDMxMTAvBgNV BAMTKDI1OTI5QURENjQyRTgwRjFCNEZFMjRDMDVFRjM3Njg5OTA0NEIyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdml4e7vtVxcg6mgH1eowBBYD5 MJb6s8TzZ5rKcHi90ogkQ6MMvY+fpyzRuh4U20aT6+8zLKQHa6th9hDrk79V/heA l80BwVR8/C/PTzzgIO5kxzDjxVI0x28Z75x842YkttJZ2Ofvxi+AcPj6q9N5Z7ot 2+hxCvTTKt6UJTPuIra8G5edgdxIqtSLSANCjk306QpLDq2v1R7V2yZGTdkMPEXr sSJme/OpxwwaGOzu0inFbXDqpXizhjJXBYPbtW+QBVrt8/P8qswxnXdATBM8di2u ptIs5N7Pp53lSmJSOuySKR66kRjuRV2eOJ8UK0H69vT7EJKSVkfe61RcFAq/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJZKa3WQugPG0/iTAXvN2iZBEsvcwHwYDVR0j BBgwFoAUw17YWzb11RnSzR1HS+UcE/SafkcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTM2NjZlMS0xZTQxLTQyZWQtYWJiYy1hOGMwODdmM2YzMzkvMC9DMzVFRDg1QjM2 RjVENTE5RDJDRDFENDc0QkU1MUMxM0Y0OUE3RTQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNGNDlB N0U0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTUzNjY2ZTEtMWU0MS00MmVkLWFi YmMtYThjMDg3ZjNmMzM5LzAvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFD MTNGNDlBN0U0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxFmEgedvUQLqgBGoGdjM9qlV5wyqL/jSKy xOLLYa2J6uSHjXZnv9gYKjE8jG0M6qwlCxsywF/J/Kj3vRbfY15WI7ha6jM5PtXd DKOl5wDR7g0ujiyMHDPrmsBMgKIvZaStqlci16AfSQirOYk4P9JssQfanBRRwxmK qPleGaMU2QCR9kVbc9ni706ZdsV8dDafOVOiaCwoRlguVkjZEZ6O7q1gdKClK9Vn v9LGV8qkJX+NMh6RwoR/7obIXqhhFMfYK7QqYXDh5jmN/NboRz3Gb/ykA5sr/z0F coV1kF4L4RA+XzWnGfoOYHyGn0QIyjJUA4hmAUr/wOuMSdRR1PM= -----END CERTIFICATE-----Generated at Thu Mar 26 14:28:29 2026 by rpki-client