
$ rpki-client -vvf repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft
File: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft (raw, json)
Hash identifier: N2sDrX4kaauP1oH5KRwB5yiNyF16ScO9Np3gTURbABs=
Subject key identifier: 0E:76:43:D4:9A:89:D9:65:1F:D5:96:0F:A3:6A:7B:5B:B8:50:8B:73
Authority key identifier: 35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E
Certificate issuer: /CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E
Certificate serial: 7EBDF6F04E23FBDF98B793A60ACB05FBA40BA16E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft
Manifest number: 02AC
Signing time: Sun 01 Mar 2026 16:50:46 +0000
Manifest this update: Sun 01 Mar 2026 16:45:46 +0000
Manifest next update: Wed 04 Mar 2026 22:24:46 +0000
Files and hashes: 1: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl (hash: 1Uw7GcXkn389WMH8q6gg//VtfmXp0q1LVTs08HilZnI=)
2: 3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa (hash: ysHwcI5ENqF/e0DNaL77TsbeGSsghP307b8/eRPgpE4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl
rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 22:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:bd:f6:f0:4e:23:fb:df:98:b7:93:a6:0a:cb:05:fb:a4:0b:a1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E
Validity
Not Before: Mar 1 16:45:46 2026 GMT
Not After : Mar 4 22:24:46 2026 GMT
Subject: CN=0E7643D49A89D9651FD5960FA36A7B5BB8508B73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:e7:02:4c:ce:cd:47:f5:b7:87:b7:f5:40:
b0:fb:65:f2:61:f7:1a:d3:3e:ed:42:4c:60:23:1e:
60:27:28:20:4c:ff:bd:ee:63:54:34:a8:25:1c:c3:
60:45:3d:7d:c7:3b:d9:f7:20:6d:0f:df:ad:3e:1a:
e1:31:f8:ba:44:5b:17:c2:7b:99:e3:0d:d8:69:4a:
35:81:b8:0b:5a:18:8e:b2:03:0f:d5:42:42:a3:61:
d8:9d:0b:83:4c:ce:ca:a4:a3:63:8c:18:af:b7:24:
78:72:44:4b:da:97:ae:07:e2:56:13:34:52:c5:4b:
d0:37:7d:fe:6c:55:b4:a0:45:40:1c:12:00:f7:d2:
ab:2e:94:24:74:ed:f1:78:8f:b7:75:5a:bf:16:a2:
fc:19:a3:ad:5d:20:06:7a:52:a8:6c:79:76:80:9b:
e0:33:87:ef:6b:e3:6a:da:0e:84:74:ec:60:f5:42:
b1:b4:42:1d:84:17:b5:e2:07:94:8c:de:af:95:b0:
7e:6c:64:5f:2a:e2:59:20:6c:c9:54:32:98:ea:ca:
a6:f8:46:24:c5:70:67:17:5e:f4:f2:13:49:e7:9b:
15:a0:fa:6e:00:d8:82:eb:96:9b:02:ab:af:34:9d:
c1:b1:01:65:1e:07:f9:ab:05:fe:91:ff:52:2c:e9:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:76:43:D4:9A:89:D9:65:1F:D5:96:0F:A3:6A:7B:5B:B8:50:8B:73
X509v3 Authority Key Identifier:
keyid:35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:53:0c:67:fa:9a:10:19:a3:66:6f:b1:39:bd:3a:24:a9:7b:
76:d7:b3:71:3c:b8:46:42:af:1a:73:6c:89:3d:c0:5f:85:2a:
85:45:a4:53:64:62:6a:ee:60:c7:3a:cd:cb:b9:8d:9d:17:d2:
d8:4c:07:e7:68:80:94:d2:eb:07:a5:02:7c:26:14:dc:25:39:
d7:f9:5d:f8:a3:6a:ae:b8:92:f3:76:00:c1:2a:ef:d0:8d:11:
96:9d:78:27:71:55:51:16:fa:6c:34:a0:66:05:d0:09:84:9e:
88:48:54:35:75:37:46:b2:85:09:1c:b8:d3:56:a2:82:73:e3:
4e:1d:bb:c3:0a:2b:32:6b:93:51:c1:92:c9:25:ba:4c:47:6c:
c1:1e:14:12:f2:b1:cc:fe:8e:28:26:26:51:2a:a2:0d:60:5f:
56:9d:1d:a4:22:94:9e:ee:6a:6a:9b:cb:04:a0:ef:80:8b:f5:
20:4c:59:87:d0:b5:2c:4d:d2:77:9a:7b:62:7b:a6:f6:39:ff:
65:3b:a9:ef:37:8b:83:18:05:32:42:0f:b2:c1:75:be:35:43:
95:d3:b4:a8:b4:b9:3a:b9:d4:2c:56:6a:0e:72:d2:fb:76:2a:
f3:1c:cb:32:97:a7:34:8a:64:48:1d:6c:cc:0c:ef:b0:1f:c0:
ee:7c:40:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:29 2026 by rpki-client