$ rpki-client -vvf repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft File: E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft (raw, json) Hash identifier: iKxsJNfJp6asTGTkqVCLaWur9qxS/BIg8Mf8Pmyt18M= Subject key identifier: F6:BD:7D:F4:C4:33:CA:2A:97:F9:ED:35:44:DF:C6:12:15:67:8F:02 Authority key identifier: E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 Certificate issuer: /CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Certificate serial: 2629513A5322A1F6080A0C74F3596E8AC5FF241D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft Manifest number: 0396 Signing time: Wed 25 Mar 2026 19:11:04 +0000 Manifest this update: Wed 25 Mar 2026 19:06:04 +0000 Manifest next update: Sat 28 Mar 2026 20:34:04 +0000 Files and hashes: 1: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (hash: P9ZT0gx4PZCiyvKWCx2aRwpm5VsSmy2L7+39A7JpiDw=) 2: E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl (hash: uQ7KyxaivfUNWmWJNCubuSSdG1h78uTUfHuVz+P/x3E=) 3: 3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa (hash: hFHJ4kS9GUwE2b+g6TQ3uI/zzh5E5E9pR8UEKQtLf9c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:29:51:3a:53:22:a1:f6:08:0a:0c:74:f3:59:6e:8a:c5:ff:24:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Validity Not Before: Mar 25 19:06:04 2026 GMT Not After : Mar 28 20:34:04 2026 GMT Subject: CN=F6BD7DF4C433CA2A97F9ED3544DFC61215678F02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a3:f8:1c:8c:e7:2e:5f:52:73:c6:aa:a3:28: 59:42:0e:b1:22:81:83:0e:73:c9:92:16:e1:a9:cd: 2c:54:38:26:4d:6b:42:f4:71:10:a4:90:c0:d9:b1: 4e:bc:4f:ab:83:61:41:6c:2e:97:3b:c9:a8:27:ec: 4d:25:15:07:5a:8a:3a:52:3f:96:3d:da:cc:00:8f: e3:d7:8c:6e:a2:52:fe:b0:38:c6:4b:a2:5f:3b:ef: 7b:62:ab:34:e8:3a:83:39:c2:8c:d8:65:f2:dc:e9: 1c:7a:36:18:84:86:eb:88:ec:66:59:ed:fc:bf:72: 99:25:0a:8e:6c:fb:21:31:06:fc:8e:d8:14:09:d4: 10:58:f4:b5:fd:fa:5f:38:ec:34:3f:2a:de:d9:3b: a5:9e:32:9f:03:87:72:ba:7d:60:c5:16:a3:86:fd: 99:e5:79:2a:2a:34:8b:52:f7:0c:f7:29:77:fb:d2: 07:3a:53:fc:ca:84:46:ad:29:87:3d:ae:2f:36:d6: 76:24:71:9f:05:82:97:5e:3f:f3:11:b0:50:3c:4e: 82:f8:71:c5:5c:a2:09:a5:34:a9:60:ea:15:47:f4: de:d5:f6:a1:a9:52:38:85:c0:1c:11:9c:7c:ec:61: d2:55:95:d6:ee:98:b1:41:2a:aa:35:3f:46:c2:6b: dd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BD:7D:F4:C4:33:CA:2A:97:F9:ED:35:44:DF:C6:12:15:67:8F:02 X509v3 Authority Key Identifier: keyid:E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:53:5d:b9:34:36:47:87:03:98:be:9c:48:06:98:5a:01:df: b3:23:7d:27:c1:06:e4:3a:c4:00:f5:2a:4c:04:59:2d:4d:cf: 53:75:ef:ec:fd:a5:43:b9:2a:4b:2a:e6:65:c7:35:ca:f6:64: 37:e1:d3:66:30:10:0b:04:cf:08:bd:c2:61:00:eb:f9:34:cb: 33:f9:a2:de:8a:b4:a7:69:83:a4:cf:65:cb:f4:67:6d:c2:3a: 6b:b4:a7:6e:60:9f:2c:62:d2:6f:7c:61:98:4a:c8:5e:b3:56: 4b:4c:90:3b:49:14:92:27:2c:f6:61:7f:c7:2b:06:3c:56:7d: 50:f6:d8:0e:29:68:48:94:20:f0:15:fb:61:2c:a1:48:9d:db: 27:df:0f:8c:53:8a:ee:b9:c8:8a:31:18:82:bb:bf:20:9a:f4: a1:39:c4:6c:23:8c:fc:ed:b6:53:86:c3:47:d8:4e:ee:ee:6e: a4:af:10:72:d0:fc:7f:1e:3b:98:14:ac:a0:cc:a9:80:a9:b7: 7e:12:8a:e8:00:c3:94:5f:85:e1:52:09:18:40:f2:3d:0f:82: 27:6d:16:c4:67:2c:e3:00:a8:3e:9f:07:80:6d:cb:42:cc:b8: 41:0a:6b:cf:db:b7:a3:60:e3:cf:ba:ce:82:a9:1a:40:69:c1: d0:cb:f5:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJilROlMiofYICgx081luisX/JB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1 RTJFNDQzMzAeFw0yNjAzMjUxOTA2MDRaFw0yNjAzMjgyMDM0MDRaMDMxMTAvBgNV BAMTKEY2QkQ3REY0QzQzM0NBMkE5N0Y5RUQzNTQ0REZDNjEyMTU2NzhGMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVo/gcjOcuX1JzxqqjKFlCDrEi gYMOc8mSFuGpzSxUOCZNa0L0cRCkkMDZsU68T6uDYUFsLpc7yagn7E0lFQdaijpS P5Y92swAj+PXjG6iUv6wOMZLol8773tiqzToOoM5wozYZfLc6Rx6NhiEhuuI7GZZ 7fy/cpklCo5s+yExBvyO2BQJ1BBY9LX9+l847DQ/Kt7ZO6WeMp8Dh3K6fWDFFqOG /ZnleSoqNItS9wz3KXf70gc6U/zKhEatKYc9ri821nYkcZ8FgpdeP/MRsFA8ToL4 ccVcogmlNKlg6hVH9N7V9qGpUjiFwBwRnHzsYdJVldbumLFBKqo1P0bCa92BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9r199MQzyiqX+e01RN/GEhVnjwIwHwYDVR0j BBgwFoAU412gexFL1CkB98HbjmhOmV4uRDMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWFiYjU3OC1iOWRiLTRhNDctOGQ3ZS0xMWE2MzQyODkwMTgvMC9FMzVEQTA3QjEx NEJENDI5MDFGN0MxREI4RTY4NEU5OTVFMkU0NDMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1RTJF NDQzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhYmI1NzgtYjlkYi00YTQ3LThk N2UtMTFhNjM0Mjg5MDE4LzAvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRF OTk1RTJFNDQzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtTXbk0NkeHA5i+nEgGmFoB37MjfSfBBuQ6 xAD1KkwEWS1Nz1N17+z9pUO5Kksq5mXHNcr2ZDfh02YwEAsEzwi9wmEA6/k0yzP5 ot6KtKdpg6TPZcv0Z23COmu0p25gnyxi0m98YZhKyF6zVktMkDtJFJInLPZhf8cr BjxWfVD22A4paEiUIPAV+2EsoUid2yffD4xTiu65yIoxGIK7vyCa9KE5xGwjjPzt tlOGw0fYTu7ubqSvEHLQ/H8eO5gUrKDMqYCpt34SiugAw5RfheFSCRhA8j0Pgidt FsRnLOMAqD6fB4Bty0LMuEEKa8/bt6Ng48+6zoKpGkBpwdDL9ZU= -----END CERTIFICATE-----Generated at Thu Mar 26 18:31:24 2026 by rpki-client