$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft File: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft (raw, json) Hash identifier: e1QlYHuaf49yT5yKMcRHjlfFXwfkDYXHz3E1nnWKyc8= Subject key identifier: B7:40:D5:A2:2F:8B:1C:63:E7:AC:EF:BC:1A:11:ED:84:19:CC:64:30 Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B Certificate issuer: /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Certificate serial: 2CF7CF32ADC9B9194B6E0447647F08E4A17DF549 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft Manifest number: 014E Signing time: Sun 01 Mar 2026 13:31:59 +0000 Manifest this update: Sun 01 Mar 2026 13:26:59 +0000 Manifest next update: Wed 04 Mar 2026 21:11:59 +0000 Files and hashes: 1: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: f0fqku3cp8Vbd07DCJqQWFOyK/wwGkwlAr8Blz5N69c=) 2: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: fxONR0UgQfuA8uLufmdVhYcok48YZDVOTWo+bGUHEd4=) 3: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl (hash: 6PajxPm7Ph0LPCJzbitqTw+PKeGvyeQS2bUoCzR/WFU=) 4: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: GCsQ/doYvtKedc1SH/YhKj811ehkroOqTsancOtufMM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:f7:cf:32:ad:c9:b9:19:4b:6e:04:47:64:7f:08:e4:a1:7d:f5:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Validity Not Before: Mar 1 13:26:59 2026 GMT Not After : Mar 4 21:11:59 2026 GMT Subject: CN=B740D5A22F8B1C63E7ACEFBC1A11ED8419CC6430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a8:23:46:53:d4:d2:43:ec:56:38:70:1c:90: b7:14:69:9a:f2:82:24:57:4b:4e:56:ea:3b:ec:80: 0b:81:ca:23:ec:f8:a4:40:1e:5a:ee:ae:ae:34:47: 2a:89:e3:e7:0a:50:fb:72:3f:24:c6:82:80:70:3f: bc:6d:a3:1f:ec:2c:e2:3d:89:c3:f2:aa:be:72:ca: ba:cf:d9:f8:2d:bb:6d:2d:1c:6c:87:d4:a5:d3:42: e1:27:78:a8:6a:ac:cd:38:b0:85:f6:e0:48:fd:f0: 2d:11:f9:b0:d8:06:b6:4e:97:3f:90:5c:de:4f:6f: cb:02:6e:a4:ad:92:57:0b:a6:11:ab:99:7e:28:87: b3:fe:c0:f0:b3:0c:c0:59:66:25:b6:17:ca:10:8e: a3:43:0d:16:28:56:63:a3:7c:d5:ae:1e:36:6a:60: 8b:ce:8f:a1:5d:7b:d5:d5:a7:c2:03:6f:13:17:63: 78:cc:6d:82:96:e3:db:3e:e5:fd:66:4b:0e:dc:dc: dd:b6:55:ce:d2:6b:ed:bd:2f:a4:6b:d4:81:24:63: b6:c2:e8:07:4f:20:e3:f1:29:69:b3:01:8b:96:76: 7c:10:2b:11:2b:00:e7:5e:e7:5a:db:00:ec:01:78: ba:64:19:ba:58:42:86:c1:a8:a4:4d:0d:95:51:01: c0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:40:D5:A2:2F:8B:1C:63:E7:AC:EF:BC:1A:11:ED:84:19:CC:64:30 X509v3 Authority Key Identifier: keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d7:63:71:75:b2:09:e0:93:2d:92:85:2a:5d:b0:cb:bd:b9: 22:c9:0d:b3:78:ff:f0:26:5d:95:48:ec:79:a4:fe:16:79:c5: 88:7a:72:68:d7:3a:76:f1:ec:1b:9a:3f:7b:d0:1c:ff:45:3c: 05:1b:f8:96:46:1e:a1:e4:5e:5c:9f:db:a4:d5:cd:0b:e0:c7: 00:c8:40:b6:f0:77:ec:a4:79:bf:4e:e1:0e:6c:4d:ed:b3:8c: b9:30:66:1d:06:e9:76:01:e5:b4:1c:df:5d:7b:65:43:33:6c: 94:f1:9e:a2:41:34:a9:85:5a:5e:7f:41:57:68:88:c1:c6:f8: ff:f0:2e:ef:71:97:d2:46:b2:e2:d9:d6:fa:19:7e:31:10:7c: cf:9e:f0:d4:27:30:91:4e:70:df:bc:e2:c5:ec:6c:e7:96:dd: b5:db:0c:6c:b2:39:57:55:8c:5f:58:1b:65:a0:fc:2a:85:64: 61:53:ef:a7:ab:7c:a3:01:84:18:0b:22:58:68:3f:c4:90:29: 53:05:07:e0:90:fc:e9:81:fd:bc:57:9a:d1:a1:4e:a4:0d:9b: e0:21:8b:d5:f9:da:72:f4:20:14:bb:3d:03:81:76:d0:5d:17: 7c:f4:a6:43:9c:39:35:ce:7c:b9:fa:61:42:49:d3:fb:62:9a: 8d:84:08:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULPfPMq3JuRlLbgRHZH8I5KF99UkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx NTYzRjY3QjAeFw0yNjAzMDExMzI2NTlaFw0yNjAzMDQyMTExNTlaMDMxMTAvBgNV BAMTKEI3NDBENUEyMkY4QjFDNjNFN0FDRUZCQzFBMTFFRDg0MTlDQzY0MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFqCNGU9TSQ+xWOHAckLcUaZry giRXS05W6jvsgAuByiPs+KRAHlrurq40RyqJ4+cKUPtyPyTGgoBwP7xtox/sLOI9 icPyqr5yyrrP2fgtu20tHGyH1KXTQuEneKhqrM04sIX24Ej98C0R+bDYBrZOlz+Q XN5Pb8sCbqStklcLphGrmX4oh7P+wPCzDMBZZiW2F8oQjqNDDRYoVmOjfNWuHjZq YIvOj6Fde9XVp8IDbxMXY3jMbYKW49s+5f1mSw7c3N22Vc7Sa+29L6Rr1IEkY7bC 6AdPIOPxKWmzAYuWdnwQKxErAOde51rbAOwBeLpkGbpYQobBqKRNDZVRAcDrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt0DVoi+LHGPnrO+8GhHthBnMZDAwHwYDVR0j BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz RjY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJB QTUxNTYzRjY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjXY3F1sgngky2ShSpdsMu9uSLJDbN4//Am XZVI7Hmk/hZ5xYh6cmjXOnbx7BuaP3vQHP9FPAUb+JZGHqHkXlyf26TVzQvgxwDI QLbwd+ykeb9O4Q5sTe2zjLkwZh0G6XYB5bQc3117ZUMzbJTxnqJBNKmFWl5/QVdo iMHG+P/wLu9xl9JGsuLZ1voZfjEQfM+e8NQnMJFOcN+84sXsbOeW3bXbDGyyOVdV jF9YG2Wg/CqFZGFT76erfKMBhBgLIlhoP8SQKVMFB+CQ/OmB/bxXmtGhTqQNm+Ah i9X52nL0IBS7PQOBdtBdF3z0pkOcOTXOfLn6YUJJ0/timo2ECGY= -----END CERTIFICATE-----Generated at Mon Mar 2 13:19:49 2026 by rpki-client