$ rpki-client -vvf repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft File: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft (raw, json) Hash identifier: jEvy/+QGavwQooGTbYMuT3W1dT1Yer82mJDvtU/0Wng= Subject key identifier: E1:49:D1:37:31:D6:F4:3B:53:4D:89:90:FE:D9:97:BF:41:8B:86:9D Authority key identifier: 35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 Certificate issuer: /CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Certificate serial: 4729AFCFA540A5C352670D3A86549173BA6CFA67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft Manifest number: 0523 Signing time: Sat 18 Apr 2026 05:21:19 +0000 Manifest this update: Sat 18 Apr 2026 05:16:19 +0000 Manifest next update: Tue 21 Apr 2026 07:16:19 +0000 Files and hashes: 1: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl (hash: F+egjxdv/xDrdO+bCs2goNmeR4OLvj5tzORiHWM8doQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 07:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:29:af:cf:a5:40:a5:c3:52:67:0d:3a:86:54:91:73:ba:6c:fa:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Validity Not Before: Apr 18 05:16:19 2026 GMT Not After : Apr 21 07:16:19 2026 GMT Subject: CN=E149D13731D6F43B534D8990FED997BF418B869D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2f:78:e0:d1:de:3f:36:0d:4c:8d:19:d2:08: ea:08:4d:2c:5c:33:18:68:87:00:9d:9e:50:41:5d: 30:6b:9a:43:35:98:dc:5a:88:bf:80:82:7a:b7:ef: 56:d8:55:cc:99:f1:80:ce:cc:47:a7:2c:04:84:b4: 5e:ea:f4:72:c6:bf:3c:12:36:fe:64:86:0d:09:b3: 96:5e:14:7c:f3:83:85:07:47:fc:b0:8c:6a:ea:e7: 0a:e6:4f:ec:f8:29:8f:7e:75:9d:fe:20:eb:e9:d3: 3e:8d:c1:d3:e7:be:b0:00:cd:be:17:53:05:12:7d: 7c:a1:12:fe:7c:69:e7:52:31:f6:3b:f5:f8:03:10: 25:00:60:3f:4b:d9:d2:09:b8:c6:29:a1:8f:01:4f: eb:64:dc:e0:5c:a2:3b:d8:b3:2b:98:56:d6:56:2d: 1e:69:5d:5c:78:7d:d8:30:b4:0c:ac:2d:3d:ed:87: da:b8:9c:5a:72:39:56:fa:78:62:49:59:d9:73:78: 31:dd:ee:43:f6:7d:ed:9c:0a:00:33:ac:ea:94:8e: c1:f3:95:2b:e4:cd:33:0c:dc:1b:58:d8:f9:db:e8: a3:cc:f7:b8:89:60:5d:eb:69:5f:17:7f:90:b6:2c: 13:60:85:38:b7:e1:13:c8:1a:69:6d:ca:4e:89:0c: e3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:49:D1:37:31:D6:F4:3B:53:4D:89:90:FE:D9:97:BF:41:8B:86:9D X509v3 Authority Key Identifier: keyid:35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:12:e6:33:30:a4:2d:21:cc:e5:98:d6:77:d8:94:43:7b:23: de:ce:41:94:a0:38:63:60:c7:39:a1:20:04:35:05:6e:f4:65: fb:d2:92:e5:44:55:d6:ed:e5:bd:89:b1:91:15:fb:f1:a1:62: 0a:32:a3:2c:06:a0:e9:c9:25:4c:d6:25:ce:ab:39:a4:1d:3f: 3c:f2:10:19:41:3a:78:0b:c8:9f:71:00:9a:b1:91:7e:09:94: 29:42:c1:b2:62:38:a3:87:cc:47:f2:4c:69:25:c6:a6:aa:e9: da:3b:15:b9:95:83:63:e6:6c:2f:27:93:18:e6:fb:98:80:96: 96:27:32:20:f8:e5:c5:59:4a:33:d4:d4:45:05:6a:54:73:8f: 31:91:79:44:c6:c1:88:42:0a:5b:3a:62:32:e9:55:e8:c6:3f: 3b:31:70:54:6c:a4:3b:0c:9f:93:68:55:c8:f5:de:0c:bd:bb: eb:00:e1:88:c4:1a:bb:38:52:e1:74:47:81:ca:93:97:88:47: 32:a5:b6:28:e9:c5:57:f9:a9:95:63:c6:1a:24:a0:a0:4b:ec: d1:e2:39:0b:5e:e2:75:25:bb:8e:52:bc:15:fe:58:c5:51:b1: a3:04:1d:b6:26:b3:01:b2:39:ee:80:4b:02:43:8d:75:58:b8: c2:57:50:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURymvz6VApcNSZw06hlSRc7ps+mcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3 NEZCNzYwNTAeFw0yNjA0MTgwNTE2MTlaFw0yNjA0MjEwNzE2MTlaMDMxMTAvBgNV BAMTKEUxNDlEMTM3MzFENkY0M0I1MzREODk5MEZFRDk5N0JGNDE4Qjg2OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsL3jg0d4/Ng1MjRnSCOoITSxc MxhohwCdnlBBXTBrmkM1mNxaiL+Agnq371bYVcyZ8YDOzEenLASEtF7q9HLGvzwS Nv5khg0Js5ZeFHzzg4UHR/ywjGrq5wrmT+z4KY9+dZ3+IOvp0z6NwdPnvrAAzb4X UwUSfXyhEv58aedSMfY79fgDECUAYD9L2dIJuMYpoY8BT+tk3OBcojvYsyuYVtZW LR5pXVx4fdgwtAysLT3th9q4nFpyOVb6eGJJWdlzeDHd7kP2fe2cCgAzrOqUjsHz lSvkzTMM3BtY2Pnb6KPM97iJYF3raV8Xf5C2LBNghTi34RPIGmltyk6JDONrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4UnRNzHW9DtTTYmQ/tmXv0GLhp0wHwYDVR0j BBgwFoAUNXt6115uM4omwvyc5LOnonT7dgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTU1ZjVhNi1mMzc4LTQyNTItODA0Yi1iMGI5Mzg2NTRmYmYvMC8zNTdCN0FENzVF NkUzMzhBMjZDMkZDOUNFNEIzQTdBMjc0RkI3NjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3NEZC NzYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjk1NWY1YTYtZjM3OC00MjUyLTgw NGItYjBiOTM4NjU0ZmJmLzAvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3 QTI3NEZCNzYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4S5jMwpC0hzOWY1nfYlEN7I97OQZSgOGNg xzmhIAQ1BW70ZfvSkuVEVdbt5b2JsZEV+/GhYgoyoywGoOnJJUzWJc6rOaQdPzzy EBlBOngLyJ9xAJqxkX4JlClCwbJiOKOHzEfyTGklxqaq6do7FbmVg2PmbC8nkxjm +5iAlpYnMiD45cVZSjPU1EUFalRzjzGReUTGwYhCCls6YjLpVejGPzsxcFRspDsM n5NoVcj13gy9u+sA4YjEGrs4UuF0R4HKk5eIRzKltijpxVf5qZVjxhokoKBL7NHi OQte4nUlu45SvBX+WMVRsaMEHbYmswGyOe6ASwJDjXVYuMJXUFk= -----END CERTIFICATE-----Generated at Sun Apr 19 12:46:42 2026 by rpki-client