$ rpki-client -vvf repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft File: 358F4D417A1317CB220BBDC982D7F35D1540D51A.mft (raw, json) Hash identifier: MkL7ea0ctzpbj9A+OnlRlC0Azu3PhTJOjZqX7LT1hWM= Subject key identifier: 2A:EE:8D:8B:64:41:41:38:53:2E:FB:6C:1A:5C:11:B1:AD:8B:A2:D1 Authority key identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A Certificate issuer: /CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Certificate serial: 75598A7D760300F129FE8838D32DB9E3F594A15F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft Manifest number: 01CF Signing time: Wed 25 Mar 2026 16:52:19 +0000 Manifest this update: Wed 25 Mar 2026 16:47:19 +0000 Manifest next update: Sun 29 Mar 2026 04:03:19 +0000 Files and hashes: 1: 358F4D417A1317CB220BBDC982D7F35D1540D51A.crl (hash: DveCrAGZTeqVd+DIxB4rJN4irbjZLRfscTNJ4IP3Ax4=) 2: 3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa (hash: DvNJ8H1CJLvMIn5Y34NSV0YQmp6wM1aq7OtPFufJmPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:59:8a:7d:76:03:00:f1:29:fe:88:38:d3:2d:b9:e3:f5:94:a1:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Validity Not Before: Mar 25 16:47:19 2026 GMT Not After : Mar 29 04:03:19 2026 GMT Subject: CN=2AEE8D8B64414138532EFB6C1A5C11B1AD8BA2D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:98:89:09:97:9d:d6:94:88:c4:2f:ae:d3:20: 16:fb:84:61:5a:57:45:6f:0c:98:51:d7:5b:97:c2: 45:9d:96:b3:dc:a5:37:96:f7:9f:08:ea:f2:28:e4: 7a:44:f3:c1:d0:f2:9b:4c:ea:23:fd:b8:ae:a0:9d: e6:12:03:51:59:8d:b5:9c:3d:0a:74:a5:c0:fa:fa: a6:93:91:9b:ed:b0:c4:8e:31:7e:55:a4:91:7d:74: c0:83:aa:83:b8:6c:ef:b9:2d:97:46:80:6f:d5:a8: 78:8d:da:2a:08:9c:37:b2:dc:b7:77:3a:c2:73:dc: 56:58:f7:3a:38:20:88:28:94:5e:fe:41:dc:c3:16: b7:90:66:4f:b0:eb:99:d4:4e:07:52:4a:4e:ee:e5: 25:53:48:4d:c9:b4:c1:f0:12:cf:e9:da:b4:7a:5f: f3:36:c6:43:e2:36:73:46:72:a1:53:fb:93:54:b7: 10:45:50:a1:8b:7b:7f:d2:74:a0:26:fa:df:9e:2b: c4:92:c7:7c:b8:7a:4f:f5:b2:3a:fc:62:cc:b7:8f: 67:ef:95:d4:0a:b3:ef:51:29:5b:6b:ab:74:59:bc: 61:81:30:0e:1a:da:20:68:a5:f7:b9:c0:aa:dd:c0: f9:f1:e4:68:86:ae:0f:36:66:39:7f:bc:d5:f5:ff: e5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EE:8D:8B:64:41:41:38:53:2E:FB:6C:1A:5C:11:B1:AD:8B:A2:D1 X509v3 Authority Key Identifier: keyid:35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:23:50:6b:2f:b8:02:1d:47:a0:72:9b:1a:21:7b:fe:65:bf: ea:12:b8:08:87:fd:98:f5:1e:aa:04:8f:62:c3:40:96:08:45: 4f:bf:11:6a:af:3c:66:5e:bc:53:b8:ca:0f:eb:26:69:e1:7b: 41:96:93:1a:31:12:08:eb:a6:1b:34:b7:ba:9c:a0:7e:39:33: aa:64:99:b0:e9:9b:b4:64:39:27:b2:df:20:9a:c9:df:ce:d3: 60:7b:93:cd:cd:0f:43:ad:c1:70:27:15:32:ca:78:ab:8e:fd: 83:a1:46:e2:71:3c:c4:0e:06:c5:17:d0:63:39:d7:eb:d5:3f: b7:ed:0b:b1:f7:0b:b8:e6:56:21:f6:15:84:04:17:f9:17:d5: 3a:ec:25:e7:37:1f:63:7d:46:aa:3a:14:34:51:d1:25:6d:11: 02:77:35:5d:2c:9e:32:24:cb:eb:9b:0e:56:29:fc:d4:aa:43: 99:9b:87:2e:2b:8e:24:cb:b9:57:d2:05:29:ca:22:1f:80:35: 0b:56:23:17:5e:bd:ab:ea:8d:a6:29:0d:b9:7b:46:2e:ce:41: fa:68:7a:b3:2c:f9:8a:af:de:f0:3e:63:f1:75:79:f6:12:4b: c2:84:e2:75:98:ed:ac:c4:1d:5a:d1:07:da:ba:b8:78:08:a2: ce:07:f1:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdVmKfXYDAPEp/og40y254/WUoV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQx NTQwRDUxQTAeFw0yNjAzMjUxNjQ3MTlaFw0yNjAzMjkwNDAzMTlaMDMxMTAvBgNV BAMTKDJBRUU4RDhCNjQ0MTQxMzg1MzJFRkI2QzFBNUMxMUIxQUQ4QkEyRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgmIkJl53WlIjEL67TIBb7hGFa V0VvDJhR11uXwkWdlrPcpTeW958I6vIo5HpE88HQ8ptM6iP9uK6gneYSA1FZjbWc PQp0pcD6+qaTkZvtsMSOMX5VpJF9dMCDqoO4bO+5LZdGgG/VqHiN2ioInDey3Ld3 OsJz3FZY9zo4IIgolF7+QdzDFreQZk+w65nUTgdSSk7u5SVTSE3JtMHwEs/p2rR6 X/M2xkPiNnNGcqFT+5NUtxBFUKGLe3/SdKAm+t+eK8SSx3y4ek/1sjr8Ysy3j2fv ldQKs+9RKVtrq3RZvGGBMA4a2iBopfe5wKrdwPnx5GiGrg82Zjl/vNX1/+VVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKu6Ni2RBQThTLvtsGlwRsa2LotEwHwYDVR0j BBgwFoAUNY9NQXoTF8siC73JgtfzXRVA1RowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDM4YzE5NS00OTRhLTQ2YTItYjkzYy04ZTE1NjY4ZjA1YjIvMC8zNThGNEQ0MTdB MTMxN0NCMjIwQkJEQzk4MkQ3RjM1RDE1NDBENTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQxNTQw RDUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQzOGMxOTUtNDk0YS00NmEyLWI5 M2MtOGUxNTY2OGYwNWIyLzAvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0Yz NUQxNTQwRDUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwjUGsvuAIdR6Bymxohe/5lv+oSuAiH/Zj1 HqoEj2LDQJYIRU+/EWqvPGZevFO4yg/rJmnhe0GWkxoxEgjrphs0t7qcoH45M6pk mbDpm7RkOSey3yCayd/O02B7k83ND0OtwXAnFTLKeKuO/YOhRuJxPMQOBsUX0GM5 1+vVP7ftC7H3C7jmViH2FYQEF/kX1TrsJec3H2N9Rqo6FDRR0SVtEQJ3NV0snjIk y+ubDlYp/NSqQ5mbhy4rjiTLuVfSBSnKIh+ANQtWIxdevavqjaYpDbl7Ri7OQfpo erMs+Yqv3vA+Y/F1efYSS8KE4nWY7azEHVrRB9q6uHgIos4H8YE= -----END CERTIFICATE-----Generated at Thu Mar 26 17:44:35 2026 by rpki-client