$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft File: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft (raw, json) Hash identifier: A6Jyh7sBFbWUiGbrv75W30Qn7stiQ+vhxScVb26QYSI= Subject key identifier: C5:2D:FB:2C:08:0A:DD:E5:65:FE:4E:3F:E5:B8:CA:57:29:E1:D8:83 Authority key identifier: CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F Certificate issuer: /CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Certificate serial: 254CD61B3929087C3485A5D2730019E94DABC484 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft Manifest number: 057E Signing time: Sun 01 Mar 2026 07:00:52 +0000 Manifest this update: Sun 01 Mar 2026 06:55:52 +0000 Manifest next update: Wed 04 Mar 2026 15:29:52 +0000 Files and hashes: 1: 3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa (hash: 8QPIleK9jMxRrZo8MGpSwWvTnJ7WLwlPDZ1i0haixbA=) 2: 3130332e3130312e3133362e302f32342d3234203d3e203538353030.roa (hash: 6WhqetXB0Qru1Hk4/GxM3BsbsVKsqVduKrzOxiby6RM=) 3: 3230322e36352e3131322e302f32342d3234203d3e203233393531.roa (hash: PLDNLWRC4Np5IJQ9gJkzQFwg5d2Imd+U4PVSM94Wh9c=) 4: 3230322e36352e3132322e302f32332d3233203d3e203233393531.roa (hash: uySOy+S8Xsy4H4ygVfn9FFZSJNP2ZKNqDsizB5B+qv8=) 5: 3230322e36352e3132302e302f32322d3233203d3e203233393531.roa (hash: bHw7ucEbh58xjruyf4VXXtftgFiKqgJhqbjayjPsTrs=) 6: 3230322e36352e3132302e302f32342d3234203d3e203233393531.roa (hash: HWfHUrPU0i0A++2BYGkQMMOMjrzhDkKb6wybSU/0t9A=) 7: 3130332e3130312e3133362e302f32332d3233203d3e203538353030.roa (hash: iGsP4VUogsadbwnWd/AM/1aXy+hpua+BCk1eWXzoRzA=) 8: 323430313a656530303a3a2f33322d3438203d3e203233393531.roa (hash: NzMEm3c3sVacQZSWsj7eCdzP+65DR1/M0h04y+5YJYE=) 9: 3130332e3130312e3133382e302f32332d3234203d3e203233393531.roa (hash: gYdjbrllcxVsFjz+69ccDbd/xh/3XuSos0MpuObt62I=) 10: 3230322e36352e3131322e302f32312d3231203d3e203233393531.roa (hash: hfhM/jWQ9jt+ZUHNnJtrtoOuudPpKc+J350QWYXtC40=) 11: 3230322e36352e3132332e302f32342d3234203d3e203233393531.roa (hash: uYljhWPFI38b1Nx1UtlQJyqp8X7WWWNXDKkB58nW4HI=) 12: 3130332e3130312e3133372e302f32342d3234203d3e203538353030.roa (hash: SHObZCSyQ759rOoQJ/JZR3beQgRHBAmiHG/b7NwBiWM=) 13: 3230322e36352e3132302e302f32332d3234203d3e203233393531.roa (hash: C1WvxvbH5IPUep7eQYoHGhXLqRMtWOqOKZMr05i/OjU=) 14: 3230322e36352e3132322e302f32342d3234203d3e203233393531.roa (hash: 09wWxPVAnpsug3YZq5fezhFaG7QDA9T1Mjs7NiJLE+g=) 15: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl (hash: UGG59C9Ty9IjZ+DcHLbIgPGVOeslFcnMhwAve4Wy10g=) 16: 3230322e36352e3132342e302f32322d3234203d3e203436303531.roa (hash: nCRffZlynF4CiEOh2iuotIMhJ1K47T3UdPYWHYFk4iY=) 17: 3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa (hash: L+cExX3/7uWr/hDyt2UkMn9zUU41LC6rMVWy+5SJhTc=) 18: 3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa (hash: 0r1qT8I3KYKeRC/g+vu3+beTQV2dYBEegiYAXFw3fs8=) 19: 3230322e36352e3131322e302f32302d3231203d3e203233393531.roa (hash: la3Lo26Aa17Lz+dfnwUc2WZ/Zq7gWX7qsfEvtWc9abY=) 20: 3230322e36352e3131322e302f32312d3234203d3e203233393531.roa (hash: 42OUxulwbAB1CTRXrAGVc4itTg6RD7nCc12Z/wbxKk0=) 21: 3131372e32302e34382e302f32302d3234203d3e203233393531.roa (hash: jzYSflbMwJIU7OJmfhxLLNRmLBX8xfDaE+EvcpXWcPM=) 22: 3230322e36352e3132312e302f32342d3234203d3e203233393531.roa (hash: W+avD/27cuz8u7PAdTFS+byjySE6cCdTL/goNcaSuQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:4c:d6:1b:39:29:08:7c:34:85:a5:d2:73:00:19:e9:4d:ab:c4:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Validity Not Before: Mar 1 06:55:52 2026 GMT Not After : Mar 4 15:29:52 2026 GMT Subject: CN=C52DFB2C080ADDE565FE4E3FE5B8CA5729E1D883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2d:0f:44:56:0a:7c:49:40:46:7d:79:29:b2: b4:ef:54:d7:b4:91:f2:da:3e:b9:66:0d:b4:bc:d4: b4:db:34:b4:9c:c8:0d:ef:0f:cf:72:11:8e:29:2b: 87:3e:4f:d4:80:92:53:49:52:74:48:3a:c0:f3:10: 73:4b:34:15:48:7c:6b:5c:a1:42:c2:97:6b:d6:c5: f0:44:63:5c:6e:24:1b:74:87:c3:ea:dd:25:f7:e8: aa:5d:84:5f:f0:c6:5e:86:9a:f7:f9:77:ab:15:dc: 77:fd:d7:ce:65:57:a1:c7:9a:f3:d0:bc:a7:1c:1b: 7f:2b:be:b4:90:8a:33:bc:b5:ad:09:6e:2d:f6:7c: 5f:a8:bb:0d:ac:64:cf:5d:6c:86:ca:04:e9:86:37: 16:e4:94:c0:14:32:48:6f:ab:20:be:7d:d0:db:d0: 3b:60:ed:fd:5b:b3:1b:6f:bc:cd:1f:86:1c:65:66: a6:74:e2:fc:a7:7f:ff:2b:05:65:6d:e2:6b:0e:b6: 1e:97:b8:4f:d2:62:2a:8d:a8:b5:f0:24:0e:eb:49: 71:be:e4:87:91:7b:d9:8a:d8:f7:71:67:b4:c6:00: c8:f6:c6:55:d8:74:57:51:cc:59:04:93:94:b1:28: 7f:7d:8f:ad:ae:02:b4:fd:70:5a:1d:33:1a:4a:6c: 0d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2D:FB:2C:08:0A:DD:E5:65:FE:4E:3F:E5:B8:CA:57:29:E1:D8:83 X509v3 Authority Key Identifier: keyid:CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:35:0f:08:81:d5:ff:d4:da:e6:e7:ad:e9:37:dc:4b:bb:e2: 7e:07:f2:b8:49:2a:96:dd:a9:d1:c4:88:40:0b:8c:94:7f:2a: 15:81:9e:74:d5:8f:3d:04:14:2b:b4:2c:49:bd:5e:2b:f2:b5: a3:8e:d9:ac:71:56:b9:6b:11:a4:87:c1:46:be:e6:85:2b:12: 57:21:21:ce:5f:8d:f9:ea:fb:8b:87:a6:6a:47:f8:ed:73:4d: d8:0f:52:c1:4c:0f:72:f9:46:e6:99:2b:19:27:5e:0a:e2:29: 44:17:26:f9:ea:1a:bc:73:bb:85:f4:aa:37:74:48:81:a7:64: 79:90:45:c3:35:80:a1:3d:b9:97:70:66:d4:4d:13:8e:b4:d6: 2e:ad:08:39:42:2e:75:e8:ee:45:c6:e4:70:a4:c2:4e:bb:39: 69:4c:1d:b3:19:3d:fa:6b:31:fe:47:53:44:2c:0c:bf:70:a3: 3b:e3:26:10:81:3d:b4:d0:59:af:49:ac:6e:06:70:f2:45:24: 08:bb:fb:19:22:df:81:45:61:23:24:8b:1b:46:2d:02:d3:fe: b7:70:01:ce:f7:14:c4:82:eb:84:f6:65:5e:19:df:85:c1:48: f9:25:ba:23:59:22:84:bd:f1:7d:76:95:99:75:03:48:68:34: d9:6f:ca:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJUzWGzkpCHw0haXScwAZ6U2rxIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUx NDNDOEU4RjAeFw0yNjAzMDEwNjU1NTJaFw0yNjAzMDQxNTI5NTJaMDMxMTAvBgNV BAMTKEM1MkRGQjJDMDgwQURERTU2NUZFNEUzRkU1QjhDQTU3MjlFMUQ4ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeLQ9EVgp8SUBGfXkpsrTvVNe0 kfLaPrlmDbS81LTbNLScyA3vD89yEY4pK4c+T9SAklNJUnRIOsDzEHNLNBVIfGtc oULCl2vWxfBEY1xuJBt0h8Pq3SX36KpdhF/wxl6Gmvf5d6sV3Hf9185lV6HHmvPQ vKccG38rvrSQijO8ta0Jbi32fF+ouw2sZM9dbIbKBOmGNxbklMAUMkhvqyC+fdDb 0Dtg7f1bsxtvvM0fhhxlZqZ04vynf/8rBWVt4msOth6XuE/SYiqNqLXwJA7rSXG+ 5IeRe9mK2PdxZ7TGAMj2xlXYdFdRzFkEk5SxKH99j62uArT9cFodMxpKbA1VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxS37LAgK3eVl/k4/5bjKVynh2IMwHwYDVR0j BBgwFoAUyjW6x6QF3x7Z7WLwnS9PLhQ8jo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZhN2U0Ni1iNmFkLTRhN2QtYjkzMC0xYWIwYmYwMmRkNWQvMC9DQTM1QkFDN0E0 MDVERjFFRDlFRDYyRjA5RDJGNEYyRTE0M0M4RThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUxNDND OEU4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2YTdlNDYtYjZhZC00YTdkLWI5 MzAtMWFiMGJmMDJkZDVkLzAvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRG MkUxNDNDOEU4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKE1DwiB1f/U2ubnrek33Eu74n4H8rhJKpbd qdHEiEALjJR/KhWBnnTVjz0EFCu0LEm9XivytaOO2axxVrlrEaSHwUa+5oUrElch Ic5fjfnq+4uHpmpH+O1zTdgPUsFMD3L5RuaZKxknXgriKUQXJvnqGrxzu4X0qjd0 SIGnZHmQRcM1gKE9uZdwZtRNE4601i6tCDlCLnXo7kXG5HCkwk67OWlMHbMZPfpr Mf5HU0QsDL9wozvjJhCBPbTQWa9JrG4GcPJFJAi7+xki34FFYSMkixtGLQLT/rdw Ac73FMSC64T2ZV4Z34XBSPkluiNZIoS98X12lZl1A0hoNNlvyk4= -----END CERTIFICATE-----Generated at Sun Mar 1 23:58:06 2026 by rpki-client