$ rpki-client -vvf repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft File: 35603F2919BB405970CB4BAB181C2B63764E0771.mft (raw, json) Hash identifier: F0xOT5THnUYKpI1lkH7Z5if2qNgmheYzpBjAIxK4VBk= Subject key identifier: 7D:F2:C4:8C:E9:B8:D1:8B:BA:03:E4:38:E8:88:F1:D4:A9:5C:9A:88 Authority key identifier: 35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71 Certificate issuer: /CN=35603F2919BB405970CB4BAB181C2B63764E0771 Certificate serial: 2A3C1DB16EC09F4B7E6D2CDAB72F422003360438 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft Manifest number: 012B Signing time: Sun 01 Mar 2026 04:11:40 +0000 Manifest this update: Sun 01 Mar 2026 04:06:40 +0000 Manifest next update: Wed 04 Mar 2026 11:02:40 +0000 Files and hashes: 1: 3130332e36372e38342e302f32332d3234203d3e20313532303034.roa (hash: ujKy4y6eTgCx3koB4L5AzxCnHk5i7qlGXSpQBRXv4Eg=) 2: 35603F2919BB405970CB4BAB181C2B63764E0771.crl (hash: MhQr8VdLMp+/E++3tiQLjRJW1EbnJtUCwrh/aFpPjqk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:3c:1d:b1:6e:c0:9f:4b:7e:6d:2c:da:b7:2f:42:20:03:36:04:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35603F2919BB405970CB4BAB181C2B63764E0771 Validity Not Before: Mar 1 04:06:40 2026 GMT Not After : Mar 4 11:02:40 2026 GMT Subject: CN=7DF2C48CE9B8D18BBA03E438E888F1D4A95C9A88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3a:c3:dc:5e:76:bb:1b:3b:2a:d8:50:19:e2: 35:20:ea:2b:9c:15:a4:0c:c8:3f:5a:e4:04:4f:b1: ee:17:91:32:8e:7f:04:96:2b:76:e5:f7:f4:4a:8c: 93:39:00:0d:25:16:cd:38:ad:a9:07:41:6d:83:e4: a4:c3:fd:15:ff:16:3d:f1:e6:f1:11:ad:c4:a1:2b: 06:c9:1e:fd:e0:fc:7a:19:53:67:72:fe:07:19:2d: e5:37:5a:51:82:a8:1a:3a:e9:4d:3c:f3:c5:bf:f4: 10:cd:d4:52:e1:81:aa:89:fa:b6:14:99:41:d4:b5: ac:1f:1a:15:cc:57:cc:d4:61:af:5e:f3:c1:86:09: da:8e:64:36:97:ff:cc:1a:c4:a9:5d:61:d9:8b:24: 72:cf:0a:4d:f6:58:b6:0f:c5:db:b5:d6:3b:9b:8b: 4f:63:b6:a1:c5:28:8b:d0:48:66:2d:69:fb:39:d8: 98:f3:be:d2:23:af:18:8c:fa:54:e9:70:84:cc:ff: d6:68:14:8a:c5:9c:71:dd:f8:a7:67:28:95:5d:ec: 37:5c:c6:c9:d0:17:2f:8c:7f:ce:0f:f4:d0:74:1e: e2:56:f3:3b:02:d1:63:d1:f9:dd:da:7d:46:93:4a: 3c:43:d9:0c:1c:f2:84:a4:11:b2:99:8a:39:f1:71: 72:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F2:C4:8C:E9:B8:D1:8B:BA:03:E4:38:E8:88:F1:D4:A9:5C:9A:88 X509v3 Authority Key Identifier: keyid:35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:40:b1:f3:8a:91:98:75:8f:a8:13:4d:51:f8:f9:ee:59:2d: a0:ee:b9:e3:c4:e4:64:6e:b2:76:34:2b:fa:3a:72:2d:87:c6: df:ea:ba:e2:e0:a0:c0:14:f0:e1:bd:65:e3:17:fb:d0:8b:d2: 86:ec:30:54:9d:bb:af:d6:95:37:ad:17:80:ee:63:18:f0:ec: 8f:11:15:e4:58:9d:14:af:56:a3:9e:6b:ac:76:92:19:32:50: bb:c5:83:09:41:71:36:98:ff:c0:1d:7b:48:aa:d3:80:4a:f9: 44:f0:2b:54:02:a3:e3:5a:3b:b6:67:11:37:dd:87:5f:88:66: f3:f3:69:7e:ef:c7:e0:ab:1a:0d:6b:e3:61:f1:89:d6:19:a4: 94:e5:00:ad:0a:ee:a9:3f:58:20:6e:b9:51:6f:18:fe:c2:f2: 09:63:fa:b2:57:c4:ea:e3:70:c5:f4:ef:15:fb:03:44:58:72: a6:55:70:ae:00:72:8b:ba:cc:60:78:e0:cb:43:8e:e0:93:17: 72:4d:cf:36:68:cb:8b:d1:1b:ed:2a:33:7c:0c:39:13:fe:16: 6d:e8:6d:5b:41:09:8e:1e:d6:b0:23:01:f1:44:bd:19:70:dc: ae:70:00:e5:e4:40:39:e2:35:aa:b3:65:42:6a:9d:46:f9:39: 37:7e:57:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKjwdsW7An0t+bSzaty9CIAM2BDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3 NjRFMDc3MTAeFw0yNjAzMDEwNDA2NDBaFw0yNjAzMDQxMTAyNDBaMDMxMTAvBgNV BAMTKDdERjJDNDhDRTlCOEQxOEJCQTAzRTQzOEU4ODhGMUQ0QTk1QzlBODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcOsPcXna7Gzsq2FAZ4jUg6iuc FaQMyD9a5ARPse4XkTKOfwSWK3bl9/RKjJM5AA0lFs04rakHQW2D5KTD/RX/Fj3x 5vERrcShKwbJHv3g/HoZU2dy/gcZLeU3WlGCqBo66U0888W/9BDN1FLhgaqJ+rYU mUHUtawfGhXMV8zUYa9e88GGCdqOZDaX/8waxKldYdmLJHLPCk32WLYPxdu11jub i09jtqHFKIvQSGYtafs52JjzvtIjrxiM+lTpcITM/9ZoFIrFnHHd+KdnKJVd7Ddc xsnQFy+Mf84P9NB0HuJW8zsC0WPR+d3afUaTSjxD2Qwc8oSkEbKZijnxcXLRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUffLEjOm40Yu6A+Q46Ijx1KlcmogwHwYDVR0j BBgwFoAUNWA/KRm7QFlwy0urGBwrY3ZOB3EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWQzOTQ1MC00NTg0LTQ4ODItYjVhNy0yY2JjMGU1Nzc0NzQvMC8zNTYwM0YyOTE5 QkI0MDU5NzBDQjRCQUIxODFDMkI2Mzc2NEUwNzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJCNjM3NjRF MDc3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFkMzk0NTAtNDU4NC00ODgyLWI1 YTctMmNiYzBlNTc3NDc0LzAvMzU2MDNGMjkxOUJCNDA1OTcwQ0I0QkFCMTgxQzJC NjM3NjRFMDc3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9AsfOKkZh1j6gTTVH4+e5ZLaDuuePE5GRu snY0K/o6ci2Hxt/quuLgoMAU8OG9ZeMX+9CL0obsMFSdu6/WlTetF4DuYxjw7I8R FeRYnRSvVqOea6x2khkyULvFgwlBcTaY/8Ade0iq04BK+UTwK1QCo+NaO7ZnETfd h1+IZvPzaX7vx+CrGg1r42HxidYZpJTlAK0K7qk/WCBuuVFvGP7C8glj+rJXxOrj cMX07xX7A0RYcqZVcK4Acou6zGB44MtDjuCTF3JNzzZoy4vRG+0qM3wMORP+Fm3o bVtBCY4e1rAjAfFEvRlw3K5wAOXkQDniNaqzZUJqnUb5OTd+V00= -----END CERTIFICATE-----Generated at Mon Mar 2 13:54:52 2026 by rpki-client