$ rpki-client -vvf repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft File: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft (raw, json) Hash identifier: fb2yU0Z/DYBUSRAUVx7pUAlN/XlfabHCco8rQomli+0= Subject key identifier: D5:AF:CE:D5:DB:7E:B1:9F:57:41:28:9C:26:EB:05:BC:68:7F:D6:B8 Authority key identifier: 35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F Certificate issuer: /CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Certificate serial: 5E935C6EEB0140D91398E55ED36692D751D202BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft Manifest number: 0512 Signing time: Sun 01 Mar 2026 11:52:22 +0000 Manifest this update: Sun 01 Mar 2026 11:47:22 +0000 Manifest next update: Wed 04 Mar 2026 13:07:22 +0000 Files and hashes: 1: 3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa (hash: RgUZ5nKp1y6B4wGbZAJZc0wqoSvvaefcSdZlerUoVrA=) 2: 323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa (hash: yO5cw9oxQ3eTkGW/vwlC8BaKdxLLFqod66n4hJAfrTM=) 3: 3130332e3130322e3135322e302f32322d3233203d3e203538343034.roa (hash: 9AwLYbWK6KWwIboQ7EFHPbMUDIfxQTg43TwmX106/HI=) 4: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl (hash: QJUgl80NuXMJU6BJEb04+j/1/+vnm6Xouer/ZeRu2pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:93:5c:6e:eb:01:40:d9:13:98:e5:5e:d3:66:92:d7:51:d2:02:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Validity Not Before: Mar 1 11:47:22 2026 GMT Not After : Mar 4 13:07:22 2026 GMT Subject: CN=D5AFCED5DB7EB19F5741289C26EB05BC687FD6B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:aa:c8:76:4b:eb:67:5a:f2:21:fe:c0:ae:5e: a8:f6:79:71:db:21:c7:55:83:05:a0:58:bf:43:38: 54:97:b5:b1:50:49:ee:9b:ae:34:18:fc:86:b3:10: 31:d9:57:c7:24:81:1b:66:d5:fc:eb:aa:c7:44:68: b1:51:c2:89:c9:26:fc:f7:e4:30:89:ae:f3:31:ab: a7:00:e4:a0:e3:54:f8:eb:cb:f8:ae:85:2d:26:0f: 8f:c7:ac:6a:c0:d8:8d:d1:04:18:c3:d3:e2:3f:90: d9:1b:48:12:01:ef:13:67:ed:6e:89:5b:cd:36:b6: c0:7b:b3:2e:5e:e9:6d:96:87:f6:2e:da:2b:36:a1: 47:75:29:bf:e9:b2:fb:fb:7d:8c:f5:69:38:26:e2: 16:4c:ee:6c:f3:1f:65:ad:b0:40:d2:ef:ee:ed:91: f3:b7:64:fe:17:bd:a1:6a:33:59:80:84:ff:82:fa: 13:08:e5:af:c4:48:c9:fb:d1:27:3e:d9:e8:ac:d6: 61:09:8b:dc:48:5f:64:22:8f:eb:d6:e5:78:22:ad: 80:0d:81:da:c8:0d:d5:80:ec:e3:da:b4:bf:4e:d6: 57:45:da:9c:51:89:6a:3e:9b:f1:5c:0d:66:c5:22: 36:5d:b9:47:13:5e:48:3a:30:f5:98:0f:7c:17:ae: b1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AF:CE:D5:DB:7E:B1:9F:57:41:28:9C:26:EB:05:BC:68:7F:D6:B8 X509v3 Authority Key Identifier: keyid:35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:76:d6:12:7d:23:22:e9:c1:fd:07:02:8c:f9:2f:b8:44:98: c0:59:22:4a:1d:e1:e3:be:15:ec:6b:b3:ad:c5:54:b1:5b:8a: bd:92:8a:77:e7:18:91:b1:83:87:8c:46:06:9e:ce:cb:b6:c1: af:2d:d1:da:a4:dd:d0:b2:86:51:aa:04:78:4c:b0:a6:47:fc: be:74:06:ec:57:7f:5e:bf:a6:fa:6e:e1:6a:18:ac:a3:e7:ee: c6:6d:67:fd:97:16:14:da:26:26:26:f6:0f:e2:25:a3:e3:34: 67:c9:bf:64:95:32:bf:7f:25:ad:e7:47:ed:64:98:2a:e6:02: 7d:d1:0d:39:1e:12:03:e3:e1:70:3e:10:d1:d5:a4:e5:c3:3a: 91:a5:99:31:e9:c7:2b:66:32:d6:82:b8:35:db:01:75:d4:d4: bb:3c:7c:34:20:c5:2f:e4:14:2e:e2:56:bf:b3:ff:50:31:bc: 64:fa:91:be:b1:53:e6:36:ed:35:58:90:59:57:f4:94:cd:86: 8a:c9:a4:6f:34:7a:41:58:02:d4:4f:b7:27:29:fa:9f:f1:1b: 28:5a:51:8f:37:17:b3:f7:a3:43:0c:1c:51:97:a3:cf:3f:f6: be:9f:0d:21:ae:17:f2:19:f2:f9:92:dd:01:5c:e6:c8:90:99: 6e:16:a4:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXpNcbusBQNkTmOVe02aS11HSAr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVC RDExODk4RjAeFw0yNjAzMDExMTQ3MjJaFw0yNjAzMDQxMzA3MjJaMDMxMTAvBgNV BAMTKEQ1QUZDRUQ1REI3RUIxOUY1NzQxMjg5QzI2RUIwNUJDNjg3RkQ2QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjqsh2S+tnWvIh/sCuXqj2eXHb IcdVgwWgWL9DOFSXtbFQSe6brjQY/IazEDHZV8ckgRtm1fzrqsdEaLFRwonJJvz3 5DCJrvMxq6cA5KDjVPjry/iuhS0mD4/HrGrA2I3RBBjD0+I/kNkbSBIB7xNn7W6J W802tsB7sy5e6W2Wh/Yu2is2oUd1Kb/psvv7fYz1aTgm4hZM7mzzH2WtsEDS7+7t kfO3ZP4XvaFqM1mAhP+C+hMI5a/ESMn70Sc+2eis1mEJi9xIX2Qij+vW5XgirYAN gdrIDdWA7OPatL9O1ldF2pxRiWo+m/FcDWbFIjZduUcTXkg6MPWYD3wXrrHBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1a/O1dt+sZ9XQSicJusFvGh/1rgwHwYDVR0j BBgwFoAUNW6jiAG8Ue8+24cwOH+O3r0RiY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjJiNmVkMi1jYzU4LTQ1YzUtYmQ4OC1jYjk1NTA3MTZhMDQvMC8zNTZFQTM4ODAx QkM1MUVGM0VEQjg3MzAzODdGOEVERUJEMTE4OThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVCRDEx ODk4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYyYjZlZDItY2M1OC00NWM1LWJk ODgtY2I5NTUwNzE2YTA0LzAvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhF REVCRDExODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH121hJ9IyLpwf0HAoz5L7hEmMBZIkod4eO+ Fexrs63FVLFbir2SinfnGJGxg4eMRgaezsu2wa8t0dqk3dCyhlGqBHhMsKZH/L50 BuxXf16/pvpu4WoYrKPn7sZtZ/2XFhTaJiYm9g/iJaPjNGfJv2SVMr9/Ja3nR+1k mCrmAn3RDTkeEgPj4XA+ENHVpOXDOpGlmTHpxytmMtaCuDXbAXXU1Ls8fDQgxS/k FC7iVr+z/1AxvGT6kb6xU+Y27TVYkFlX9JTNhorJpG80ekFYAtRPtycp+p/xGyha UY83F7P3o0MMHFGXo88/9r6fDSGuF/IZ8vmS3QFc5siQmW4WpGc= -----END CERTIFICATE-----Generated at Mon Mar 2 17:15:23 2026 by rpki-client