$ rpki-client -vvf repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft File: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft (raw, json) Hash identifier: lpG5YUEV35bvTJWMXI5p/z3vNEP7pTfELxxo1arNCw4= Subject key identifier: 11:ED:4A:95:69:42:A3:D9:1B:41:DC:43:A5:71:1C:A2:5E:12:5C:B1 Authority key identifier: 35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F Certificate issuer: /CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Certificate serial: 4892239B31725DE0A08B409F6550D17A5ACEF496 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft Manifest number: 0527 Signing time: Fri 17 Apr 2026 01:02:27 +0000 Manifest this update: Fri 17 Apr 2026 00:57:27 +0000 Manifest next update: Mon 20 Apr 2026 04:50:27 +0000 Files and hashes: 1: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl (hash: KdoSUiV97l9iRbWeyckXJe9xTBNGBkwA0R0Dh3pAUxg=) 2: 323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa (hash: yO5cw9oxQ3eTkGW/vwlC8BaKdxLLFqod66n4hJAfrTM=) 3: 3130332e3130322e3135322e302f32322d3233203d3e203538343034.roa (hash: 9AwLYbWK6KWwIboQ7EFHPbMUDIfxQTg43TwmX106/HI=) 4: 3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa (hash: RgUZ5nKp1y6B4wGbZAJZc0wqoSvvaefcSdZlerUoVrA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 04:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:92:23:9b:31:72:5d:e0:a0:8b:40:9f:65:50:d1:7a:5a:ce:f4:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Validity Not Before: Apr 17 00:57:27 2026 GMT Not After : Apr 20 04:50:27 2026 GMT Subject: CN=11ED4A956942A3D91B41DC43A5711CA25E125CB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2f:ed:ec:11:f3:39:e0:33:4a:03:e5:81:1a: 5e:1a:2d:36:de:ae:fa:0d:b4:b1:f2:31:8f:3e:ff: 7b:df:33:0c:48:30:8c:6a:ba:54:fd:6f:92:fd:91: 08:3f:2e:da:42:81:33:e4:2d:c2:6d:8c:46:ca:3a: c0:01:a6:f4:17:bc:79:df:65:76:1f:ac:e6:bc:a3: 5f:8b:b9:a3:7d:54:95:a4:50:a1:49:df:97:7a:de: f9:f1:54:b6:a9:14:6c:9c:b4:dc:ee:74:dc:f6:bc: 0b:7a:d3:37:f5:ac:bd:35:07:2d:91:b2:7b:00:f7: c6:a5:aa:ce:77:d8:99:fb:22:55:0d:b9:4b:05:4c: 22:ae:39:50:46:86:53:a5:3d:75:53:7e:6a:50:6a: 9d:5e:e1:6c:b0:1c:a4:14:4a:a8:30:b0:28:45:5a: da:91:9a:90:eb:bd:90:c7:ed:b2:b6:c9:25:67:d4: 5a:33:28:35:97:ec:96:0c:47:12:2f:a1:a0:59:b1: ff:f0:a0:75:68:24:d2:6a:e5:88:f5:d0:36:43:49: 83:fe:11:b9:25:e8:6d:00:0c:c9:7e:9b:6a:bb:2e: a3:52:3e:ad:e3:20:49:39:b4:c6:ed:3f:4e:56:67: 47:41:c6:42:9c:94:66:f2:6c:9d:8e:96:3b:ee:bd: 3d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:ED:4A:95:69:42:A3:D9:1B:41:DC:43:A5:71:1C:A2:5E:12:5C:B1 X509v3 Authority Key Identifier: keyid:35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:fd:73:dc:19:7e:0c:b7:f9:19:f0:d1:33:72:1a:05:09:b8: f4:4a:b6:52:4b:d3:9c:d4:14:36:cc:4a:97:9e:5c:73:d2:67: 5e:c5:b7:6e:6d:04:4f:57:84:bc:f5:7f:eb:79:15:91:d1:1f: 0b:7f:97:26:64:d2:20:8a:33:25:9a:75:05:ab:d2:c3:29:98: a2:44:56:08:e4:54:07:03:14:6e:e3:d1:c1:32:e6:05:53:65: 35:e3:96:55:ed:69:ec:f2:ad:1d:da:ab:45:fe:ac:e6:9f:a4: d2:a1:4c:26:56:4e:36:e2:56:49:44:ad:47:71:32:3d:bb:a1: 8c:37:96:63:8d:4a:46:f9:25:a9:74:4c:27:74:05:b5:21:24: ec:16:68:73:f7:1f:e5:ff:37:9b:81:68:fb:14:4f:55:5d:d4: 17:3b:10:30:b8:26:d4:fa:e0:f4:0d:99:8d:9f:24:54:72:7c: 9b:77:50:7a:59:22:89:e3:ff:ed:fa:c8:1b:a7:10:c4:f8:0a: e0:a4:75:09:20:55:c1:8f:32:38:cb:93:4e:f3:c0:db:d1:ab: 67:85:43:6c:b6:1b:24:3a:d1:db:52:04:ad:14:99:1b:75:0f: 5d:55:ad:4e:de:e4:f3:1a:da:7a:98:1f:d0:74:ca:a0:de:97: fb:a7:c7:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSJIjmzFyXeCgi0CfZVDRelrO9JYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVC RDExODk4RjAeFw0yNjA0MTcwMDU3MjdaFw0yNjA0MjAwNDUwMjdaMDMxMTAvBgNV BAMTKDExRUQ0QTk1Njk0MkEzRDkxQjQxREM0M0E1NzExQ0EyNUUxMjVDQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3L+3sEfM54DNKA+WBGl4aLTbe rvoNtLHyMY8+/3vfMwxIMIxqulT9b5L9kQg/LtpCgTPkLcJtjEbKOsABpvQXvHnf ZXYfrOa8o1+LuaN9VJWkUKFJ35d63vnxVLapFGyctNzudNz2vAt60zf1rL01By2R snsA98alqs532Jn7IlUNuUsFTCKuOVBGhlOlPXVTfmpQap1e4WywHKQUSqgwsChF WtqRmpDrvZDH7bK2ySVn1FozKDWX7JYMRxIvoaBZsf/woHVoJNJq5Yj10DZDSYP+ Ebkl6G0ADMl+m2q7LqNSPq3jIEk5tMbtP05WZ0dBxkKclGbybJ2OljvuvT2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEe1KlWlCo9kbQdxDpXEcol4SXLEwHwYDVR0j BBgwFoAUNW6jiAG8Ue8+24cwOH+O3r0RiY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjJiNmVkMi1jYzU4LTQ1YzUtYmQ4OC1jYjk1NTA3MTZhMDQvMC8zNTZFQTM4ODAx QkM1MUVGM0VEQjg3MzAzODdGOEVERUJEMTE4OThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVCRDEx ODk4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYyYjZlZDItY2M1OC00NWM1LWJk ODgtY2I5NTUwNzE2YTA0LzAvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhF REVCRDExODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEz9c9wZfgy3+Rnw0TNyGgUJuPRKtlJL05zU FDbMSpeeXHPSZ17Ft25tBE9XhLz1f+t5FZHRHwt/lyZk0iCKMyWadQWr0sMpmKJE VgjkVAcDFG7j0cEy5gVTZTXjllXtaezyrR3aq0X+rOafpNKhTCZWTjbiVklErUdx Mj27oYw3lmONSkb5Jal0TCd0BbUhJOwWaHP3H+X/N5uBaPsUT1Vd1Bc7EDC4JtT6 4PQNmY2fJFRyfJt3UHpZIonj/+36yBunEMT4CuCkdQkgVcGPMjjLk07zwNvRq2eF Q2y2GyQ60dtSBK0UmRt1D11VrU7e5PMa2nqYH9B0yqDel/unxyY= -----END CERTIFICATE-----Generated at Fri Apr 17 22:03:26 2026 by rpki-client