$ rpki-client -vvf repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft File: 35526D55C5F4431129EA7CE9304705CE395693D9.mft (raw, json) Hash identifier: 5foIJex2tvhNpcH/6VtZX2qykxrqkGZ4hKtwJGpGkSc= Subject key identifier: A8:62:0C:E2:06:8A:46:37:04:B7:20:E0:6B:EA:00:A9:4E:A4:55:68 Authority key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 Certificate issuer: /CN=35526D55C5F4431129EA7CE9304705CE395693D9 Certificate serial: 2559AC5908CA5E8C21C6248EF1858F915B1E2930 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft Manifest number: 0282 Signing time: Wed 25 Mar 2026 16:31:21 +0000 Manifest this update: Wed 25 Mar 2026 16:26:21 +0000 Manifest next update: Sun 29 Mar 2026 02:18:21 +0000 Files and hashes: 1: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: xmE/JEyhXthuYU++MAzsO/GoVJLu7FXPu8oedNkxkIE=) 2: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: RTuAe01oZKcYw+JAnijcOaMyxK0mUgunx1L/6+eOJW8=) 3: 35526D55C5F4431129EA7CE9304705CE395693D9.crl (hash: beQ3SxO37+/otueswhfb6LP6Gu5Z6UUD4++6JkVr9hg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:59:ac:59:08:ca:5e:8c:21:c6:24:8e:f1:85:8f:91:5b:1e:29:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35526D55C5F4431129EA7CE9304705CE395693D9 Validity Not Before: Mar 25 16:26:21 2026 GMT Not After : Mar 29 02:18:21 2026 GMT Subject: CN=A8620CE2068A463704B720E06BEA00A94EA45568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9b:11:2c:1f:5f:42:b7:0d:c5:1a:1f:bd:8d: 72:b0:ed:ac:6f:73:53:24:1f:f7:3b:11:f9:f4:63: df:95:77:df:a9:fd:14:ef:47:07:1b:ed:4f:da:3b: c3:d9:a5:c5:a3:88:b2:e0:45:b0:ef:c8:b6:1a:e8: b7:c4:a4:9c:24:3f:e8:93:c3:96:3a:8f:94:19:3c: 22:8c:c6:3a:09:f9:74:ee:6c:ac:7e:d6:c7:04:05: 07:df:4c:c7:af:db:f1:bb:94:8b:95:36:bb:1a:89: 3b:38:e3:36:b0:ad:b0:ef:86:c9:ba:90:00:7f:af: f8:bc:87:ad:a0:7f:37:07:83:6f:e1:16:2b:69:ec: 35:0f:3a:18:ba:3d:0c:a4:2b:1e:56:5f:ff:54:a2: 1c:39:fa:11:4e:e5:33:4c:a8:39:1f:7a:f6:5e:f2: 48:b9:fa:29:5f:1e:ea:f7:ae:b4:a9:23:93:d6:69: 6b:1a:c3:63:6a:3b:51:61:44:09:ba:d6:d4:a5:1e: 89:7a:33:ea:3f:43:e9:7b:53:81:c4:52:56:6b:d1: 2d:c5:b1:6a:e2:29:54:ae:24:28:be:09:b5:e8:56: 88:bd:84:68:da:1d:43:f0:4c:00:72:2f:c3:f4:d6: 6b:5f:91:ea:ab:4b:36:21:ab:e1:7f:09:7d:e9:14: 63:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:62:0C:E2:06:8A:46:37:04:B7:20:E0:6B:EA:00:A9:4E:A4:55:68 X509v3 Authority Key Identifier: keyid:35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:71:5e:52:f7:45:c7:d0:b9:67:47:5f:b8:fe:f7:25:d1:4c: 8a:a5:e9:de:43:60:fb:0c:91:48:bf:92:11:39:d7:11:22:da: 4d:d2:b0:7f:bd:8e:77:1e:09:34:f0:6d:f2:28:6c:ba:7e:db: e3:ab:81:a5:a4:ba:2b:c0:b9:05:0a:1e:a1:58:2d:ea:7e:65: d8:4a:8a:14:dd:9a:d4:5d:4a:63:77:a4:1e:66:47:50:ec:89: 2f:9b:09:91:0d:17:5b:bc:fd:02:e3:b1:80:4a:cb:29:1b:6b: 33:a9:a4:6f:dc:a9:a4:3d:08:d6:04:e8:c2:5f:fc:e5:e0:47: 73:52:1b:82:f9:10:9d:90:e3:b3:6f:2e:fb:f3:a1:f7:a8:ec: 6c:9e:b3:2d:6b:8e:00:76:99:ae:e2:f8:17:78:df:e1:67:d2: a7:bd:0a:83:67:13:43:68:b9:59:79:fb:4a:25:b8:50:15:e4: 90:5b:6c:10:e6:6c:61:01:10:fe:38:46:50:5d:34:87:80:7d: 77:cc:d8:48:f5:5f:77:80:a6:70:6e:b1:fe:ce:2b:d8:ab:ea: 08:2e:22:d4:30:bf:1d:0d:58:0d:7b:4c:f8:cd:63:b1:90:47: cf:7c:c1:93:aa:fa:ea:d5:a0:4e:9e:d5:aa:91:93:61:aa:c0: 48:f6:d1:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJVmsWQjKXowhxiSO8YWPkVseKTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0Uz OTU2OTNEOTAeFw0yNjAzMjUxNjI2MjFaFw0yNjAzMjkwMjE4MjFaMDMxMTAvBgNV BAMTKEE4NjIwQ0UyMDY4QTQ2MzcwNEI3MjBFMDZCRUEwMEE5NEVBNDU1NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8mxEsH19Ctw3FGh+9jXKw7axv c1MkH/c7Efn0Y9+Vd9+p/RTvRwcb7U/aO8PZpcWjiLLgRbDvyLYa6LfEpJwkP+iT w5Y6j5QZPCKMxjoJ+XTubKx+1scEBQffTMev2/G7lIuVNrsaiTs44zawrbDvhsm6 kAB/r/i8h62gfzcHg2/hFitp7DUPOhi6PQykKx5WX/9Uohw5+hFO5TNMqDkfevZe 8ki5+ilfHur3rrSpI5PWaWsaw2NqO1FhRAm61tSlHol6M+o/Q+l7U4HEUlZr0S3F sWriKVSuJCi+CbXoVoi9hGjaHUPwTAByL8P01mtfkeqrSzYhq+F/CX3pFGOjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqGIM4gaKRjcEtyDga+oAqU6kVWgwHwYDVR0j BBgwFoAUNVJtVcX0QxEp6nzpMEcFzjlWk9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGIwYmY1Yi00NTZkLTRlNjItOWY0OC02MTkyMTQ5ZDUyYzIvMC8zNTUyNkQ1NUM1 RjQ0MzExMjlFQTdDRTkzMDQ3MDVDRTM5NTY5M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0UzOTU2 OTNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1 Q0UzOTU2OTNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBxXlL3RcfQuWdHX7j+9yXRTIql6d5DYPsM kUi/khE51xEi2k3SsH+9jnceCTTwbfIobLp+2+OrgaWkuivAuQUKHqFYLep+ZdhK ihTdmtRdSmN3pB5mR1DsiS+bCZENF1u8/QLjsYBKyykbazOppG/cqaQ9CNYE6MJf /OXgR3NSG4L5EJ2Q47NvLvvzofeo7Gyesy1rjgB2ma7i+Bd43+Fn0qe9CoNnE0No uVl5+0oluFAV5JBbbBDmbGEBEP44RlBdNIeAfXfM2Ej1X3eApnBusf7OK9ir6ggu ItQwvx0NWA17TPjNY7GQR898wZOq+urVoE6e1aqRk2GqwEj20T8= -----END CERTIFICATE-----Generated at Thu Mar 26 18:18:02 2026 by rpki-client