$ rpki-client -vvf repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft File: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft (raw, json) Hash identifier: Q2yrwUL4ztXRl/KntFGELyJnHStJPdN9wC+shGEDnZs= Subject key identifier: 90:2C:4C:55:F9:7B:EF:15:B7:3B:88:76:3D:21:D1:EE:14:DA:7E:85 Authority key identifier: 35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 Certificate issuer: /CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Certificate serial: 15914A049900D5FE5FFB1953E77AC808C38CF723 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft Manifest number: 050D Signing time: Sat 28 Feb 2026 12:21:16 +0000 Manifest this update: Sat 28 Feb 2026 12:16:16 +0000 Manifest next update: Tue 03 Mar 2026 19:14:16 +0000 Files and hashes: 1: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl (hash: dEHfBmNkW0O6LN1n7SS1cNDOuNDCQu3TpzrcS19Dkg4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 19:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:91:4a:04:99:00:d5:fe:5f:fb:19:53:e7:7a:c8:08:c3:8c:f7:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Validity Not Before: Feb 28 12:16:16 2026 GMT Not After : Mar 3 19:14:16 2026 GMT Subject: CN=902C4C55F97BEF15B73B88763D21D1EE14DA7E85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f5:c5:dd:7c:e1:d6:65:11:92:3c:d1:e9:ea: 3b:44:98:d6:55:61:39:40:a8:ef:a4:d4:2f:e1:0b: 8b:7c:b6:a1:7e:e3:01:cb:73:15:d8:78:0c:84:9f: 74:d6:14:62:4b:33:0c:dd:85:1e:0a:4d:95:e7:33: 1c:1f:99:95:90:39:0c:75:b3:2b:06:81:ad:6b:37: 08:6d:af:82:8e:09:8d:9b:62:c8:fc:65:a2:b0:d2: 4d:a6:48:72:17:1f:6d:2a:11:95:f0:36:0a:ce:cd: 02:76:ba:93:a7:c3:75:ea:6b:47:40:11:3a:dc:75: 96:91:6d:04:9f:03:d9:c5:b5:f9:b3:88:84:40:b6: 56:95:90:6a:df:30:81:43:07:59:df:0f:07:0d:6e: 2a:79:12:98:e6:cb:2f:66:8a:15:0d:67:ce:fa:e8: af:cd:9c:9c:f8:c2:ba:9a:e6:ba:3b:2b:dd:f0:33: ae:d9:c5:28:de:de:80:7e:35:4a:95:30:0f:18:90: 2e:c0:55:02:d6:71:69:61:bb:3b:b8:f2:87:6d:3b: 5e:35:45:d6:ad:b6:90:e8:ca:80:b8:07:20:ed:ac: 9c:39:07:4d:17:9c:a3:76:2d:78:21:5c:d2:30:dd: 0b:5f:6e:7d:63:5e:5f:56:f3:95:1c:1f:ac:da:ac: 53:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2C:4C:55:F9:7B:EF:15:B7:3B:88:76:3D:21:D1:EE:14:DA:7E:85 X509v3 Authority Key Identifier: keyid:35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:4e:69:4a:df:c8:b7:53:d1:24:b9:b5:b4:87:a5:27:80:64: 5f:11:ba:a9:4b:6e:35:7a:32:82:6a:0f:15:e4:37:83:53:6e: 44:d3:b4:ec:03:67:6d:89:df:f8:40:28:c1:c2:a0:66:93:63: b3:51:7d:4d:e4:60:79:88:f0:1c:e2:12:f5:50:57:8a:8e:66: de:c4:8f:af:e4:f8:16:b2:09:4d:09:c6:88:0d:de:34:4e:11: 35:c3:c0:c5:69:e6:78:d3:48:4c:4b:ca:a5:ac:c2:e8:c4:52: c3:c3:3a:f5:b0:9d:0f:ab:9e:9c:3f:19:25:da:7e:1b:a4:42: 9f:0c:d3:64:fe:ea:fb:27:19:64:81:5d:f1:a7:f8:c6:b8:00: 20:cd:45:8e:62:f9:76:4a:5a:f9:be:4d:c1:cc:6f:61:5a:47: 97:f3:b8:22:67:e1:87:a7:5a:ff:f8:6c:99:22:11:9b:85:32: 81:38:3f:23:02:7f:0f:fe:86:18:1e:f0:c5:5b:8a:d4:70:87: 3c:58:13:bf:27:c8:d5:10:c9:ca:d9:cc:97:25:6e:09:fa:fe: d9:a6:ab:5d:be:84:a5:58:7d:79:76:d2:d1:ad:fa:61:e7:d0: 21:e6:96:f4:b1:96:33:d0:24:cb:63:4d:9a:5e:41:1f:9b:25: b9:53:5d:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFZFKBJkA1f5f+xlT53rICMOM9yMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3 NEZCNzYwNTAeFw0yNjAyMjgxMjE2MTZaFw0yNjAzMDMxOTE0MTZaMDMxMTAvBgNV BAMTKDkwMkM0QzU1Rjk3QkVGMTVCNzNCODg3NjNEMjFEMUVFMTREQTdFODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX9cXdfOHWZRGSPNHp6jtEmNZV YTlAqO+k1C/hC4t8tqF+4wHLcxXYeAyEn3TWFGJLMwzdhR4KTZXnMxwfmZWQOQx1 sysGga1rNwhtr4KOCY2bYsj8ZaKw0k2mSHIXH20qEZXwNgrOzQJ2upOnw3Xqa0dA ETrcdZaRbQSfA9nFtfmziIRAtlaVkGrfMIFDB1nfDwcNbip5Epjmyy9mihUNZ876 6K/NnJz4wrqa5ro7K93wM67ZxSje3oB+NUqVMA8YkC7AVQLWcWlhuzu48odtO141 RdattpDoyoC4ByDtrJw5B00XnKN2LXghXNIw3Qtfbn1jXl9W85UcH6zarFO1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkCxMVfl77xW3O4h2PSHR7hTafoUwHwYDVR0j BBgwFoAUNXt6115uM4omwvyc5LOnonT7dgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTU1ZjVhNi1mMzc4LTQyNTItODA0Yi1iMGI5Mzg2NTRmYmYvMC8zNTdCN0FENzVF NkUzMzhBMjZDMkZDOUNFNEIzQTdBMjc0RkI3NjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3NEZC NzYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjk1NWY1YTYtZjM3OC00MjUyLTgw NGItYjBiOTM4NjU0ZmJmLzAvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3 QTI3NEZCNzYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJOaUrfyLdT0SS5tbSHpSeAZF8RuqlLbjV6 MoJqDxXkN4NTbkTTtOwDZ22J3/hAKMHCoGaTY7NRfU3kYHmI8BziEvVQV4qOZt7E j6/k+BayCU0JxogN3jROETXDwMVp5njTSExLyqWswujEUsPDOvWwnQ+rnpw/GSXa fhukQp8M02T+6vsnGWSBXfGn+Ma4ACDNRY5i+XZKWvm+TcHMb2FaR5fzuCJn4Yen Wv/4bJkiEZuFMoE4PyMCfw/+hhge8MVbitRwhzxYE78nyNUQycrZzJclbgn6/tmm q12+hKVYfXl20tGt+mHn0CHmlvSxljPQJMtjTZpeQR+bJblTXaI= -----END CERTIFICATE-----Generated at Mon Mar 2 15:37:57 2026 by rpki-client