$ rpki-client -vvf repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft File: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft (raw, json) Hash identifier: IiwVDsPpIty8iCZbZuC5xiHl0h12x6ziaC36v7iPsx4= Subject key identifier: 24:91:A5:03:CB:E4:0A:24:72:25:6D:BF:49:B5:F8:73:BF:5B:23:46 Authority key identifier: 35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E Certificate issuer: /CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Certificate serial: 32DFE21AFA9C83F1EC054A66FF5E08A9A4E2254F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft Manifest number: 02C1 Signing time: Fri 17 Apr 2026 13:23:09 +0000 Manifest this update: Fri 17 Apr 2026 13:18:09 +0000 Manifest next update: Mon 20 Apr 2026 18:14:09 +0000 Files and hashes: 1: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl (hash: VdZgGiVoSQmvHyuBL3Lx4dw6Bvt1B6bpEklGc1vhLGo=) 2: 3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa (hash: ysHwcI5ENqF/e0DNaL77TsbeGSsghP307b8/eRPgpE4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:df:e2:1a:fa:9c:83:f1:ec:05:4a:66:ff:5e:08:a9:a4:e2:25:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Validity Not Before: Apr 17 13:18:09 2026 GMT Not After : Apr 20 18:14:09 2026 GMT Subject: CN=2491A503CBE40A2472256DBF49B5F873BF5B2346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:36:54:b4:80:f0:9a:d4:eb:a7:b8:27:5c:77: 25:dc:6a:5f:b4:bb:35:82:b9:ad:32:ec:3a:57:8f: c7:d1:ab:7e:7e:38:c8:96:84:d4:90:1e:a2:1d:4a: 36:21:25:20:fb:74:4b:cd:42:52:3c:6a:e6:73:bd: 22:16:5f:00:a6:e9:c7:53:5d:57:fd:f6:2c:5c:ff: 2b:e3:41:97:a6:ad:79:14:b0:be:6a:89:80:00:22: 76:0b:b8:a9:98:03:c2:d5:de:f6:82:8f:f3:83:91: ea:b2:f6:03:34:65:ce:97:65:fe:41:58:7d:f3:5f: 67:d7:df:4f:50:54:5a:82:89:da:dd:ae:e4:18:34: 82:c7:88:52:36:ad:40:1c:13:32:a0:5d:4a:79:ec: 5f:9b:70:9a:b0:b2:79:53:82:93:cd:fa:bd:80:95: c1:46:52:18:84:2a:94:49:bf:8f:df:4f:d0:35:82: ad:c7:a8:f9:7c:26:4d:bc:18:a4:9f:8a:ea:76:98: 05:ea:4c:52:ba:84:78:df:f2:2e:0f:5d:3d:10:76: ca:e1:77:22:c7:e6:93:8b:0c:8e:13:11:e5:3d:ca: 15:99:81:ae:bb:fd:c4:06:99:06:dd:c2:e6:e2:d8: 50:5e:32:b0:8c:d7:db:fd:2f:98:21:b0:03:7c:3f: 9b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:91:A5:03:CB:E4:0A:24:72:25:6D:BF:49:B5:F8:73:BF:5B:23:46 X509v3 Authority Key Identifier: keyid:35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:c6:d4:fb:59:d4:41:73:25:15:6f:e3:db:2e:c5:22:25:93: b1:1c:6b:7e:68:25:12:d6:53:3e:ec:b5:6f:89:08:b4:cd:0c: 68:55:09:ea:e3:5f:ee:11:ed:7e:3e:ce:81:c0:9c:db:c7:28: ed:96:81:16:65:07:a8:f6:3e:7c:c5:86:d6:7a:b9:0a:07:d0: 6b:93:2d:8e:1d:70:c9:67:fe:46:38:65:47:f2:1f:98:48:69: 2a:0a:8f:8c:53:45:d4:1f:ce:46:28:04:45:14:ce:a9:c2:04: b5:3e:12:29:ac:f7:94:a9:3d:92:1b:43:3c:e5:7b:e9:68:9b: f9:18:b5:0b:fb:20:92:27:6a:76:52:cb:9a:e5:f0:30:a5:d0: 81:e6:ae:57:c5:37:0e:b7:32:fb:ab:40:37:19:50:dd:18:21: 75:88:9e:50:45:58:b0:bd:7c:37:80:fc:e7:23:58:e0:8a:a0: 18:e4:2f:b8:c2:e9:0f:67:18:53:6a:49:fb:37:35:05:45:c9: 86:35:43:5c:bd:60:48:ab:d6:e4:f8:d0:13:fa:d8:fd:e4:4f: 68:d3:8f:14:70:48:78:88:fa:cf:95:d2:b4:7a:4d:d0:e7:89: 7d:d5:5e:c5:3c:eb:a1:47:1a:e9:ce:44:a9:6b:3b:d5:e1:0c: 9d:03:c6:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMt/iGvqcg/HsBUpm/14IqaTiJU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1Rjkx OEQyMzY0RTAeFw0yNjA0MTcxMzE4MDlaFw0yNjA0MjAxODE0MDlaMDMxMTAvBgNV BAMTKDI0OTFBNTAzQ0JFNDBBMjQ3MjI1NkRCRjQ5QjVGODczQkY1QjIzNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLNlS0gPCa1OunuCdcdyXcal+0 uzWCua0y7DpXj8fRq35+OMiWhNSQHqIdSjYhJSD7dEvNQlI8auZzvSIWXwCm6cdT XVf99ixc/yvjQZemrXkUsL5qiYAAInYLuKmYA8LV3vaCj/ODkeqy9gM0Zc6XZf5B WH3zX2fX309QVFqCidrdruQYNILHiFI2rUAcEzKgXUp57F+bcJqwsnlTgpPN+r2A lcFGUhiEKpRJv4/fT9A1gq3HqPl8Jk28GKSfiup2mAXqTFK6hHjf8i4PXT0Qdsrh dyLH5pOLDI4TEeU9yhWZga67/cQGmQbdwubi2FBeMrCM19v9L5ghsAN8P5uBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJJGlA8vkCiRyJW2/SbX4c79bI0YwHwYDVR0j BBgwFoAUNcFO6yfOQt6x8zHPCA/l+RjSNk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmNjNDczNC1iZWI2LTRlMzMtOWIxYy00NmRjZDE2NDI1YTEvMC8zNUMxNEVFQjI3 Q0U0MkRFQjFGMzMxQ0YwODBGRTVGOTE4RDIzNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1RjkxOEQy MzY0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZjYzQ3MzQtYmViNi00ZTMzLTli MWMtNDZkY2QxNjQyNWExLzAvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1 RjkxOEQyMzY0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHG1PtZ1EFzJRVv49suxSIlk7Eca35oJRLW Uz7stW+JCLTNDGhVCerjX+4R7X4+zoHAnNvHKO2WgRZlB6j2PnzFhtZ6uQoH0GuT LY4dcMln/kY4ZUfyH5hIaSoKj4xTRdQfzkYoBEUUzqnCBLU+Eims95SpPZIbQzzl e+lom/kYtQv7IJInanZSy5rl8DCl0IHmrlfFNw63MvurQDcZUN0YIXWInlBFWLC9 fDeA/OcjWOCKoBjkL7jC6Q9nGFNqSfs3NQVFyYY1Q1y9YEir1uT40BP62P3kT2jT jxRwSHiI+s+V0rR6TdDniX3VXsU866FHGunORKlrO9XhDJ0DxqE= -----END CERTIFICATE-----Generated at Fri Apr 17 19:56:07 2026 by rpki-client