$ rpki-client -vvf repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft File: 353E665549A5A245D363BD0DCEA20282E562E909.mft (raw, json) Hash identifier: BKOmg+GqenQ+rGhm/QcFplvKVs2mvRZrWDuISwpcBME= Subject key identifier: 96:0D:19:94:D5:E3:0B:02:68:F7:10:0E:57:9D:AE:26:80:9A:BE:F8 Authority key identifier: 35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 Certificate issuer: /CN=353E665549A5A245D363BD0DCEA20282E562E909 Certificate serial: 1E112BB2F9A0D7A17A12AA076AF35B11127DB8B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft Manifest number: F4 Signing time: Thu 16 Apr 2026 10:21:19 +0000 Manifest this update: Thu 16 Apr 2026 10:16:19 +0000 Manifest next update: Sun 19 Apr 2026 18:15:19 +0000 Files and hashes: 1: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: RLs7YWOLxdLtlrs9K05DQU0Ui1dbjVBI2I7ZQMJjIGM=) 2: 353E665549A5A245D363BD0DCEA20282E562E909.crl (hash: UDjVsNOZ8SvH1HgHbk3v+c0my8OmVsblRiov6qjWxUE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 18:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:11:2b:b2:f9:a0:d7:a1:7a:12:aa:07:6a:f3:5b:11:12:7d:b8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353E665549A5A245D363BD0DCEA20282E562E909 Validity Not Before: Apr 16 10:16:19 2026 GMT Not After : Apr 19 18:15:19 2026 GMT Subject: CN=960D1994D5E30B0268F7100E579DAE26809ABEF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e2:d9:58:d4:78:4d:94:48:0f:60:1f:86:24: fb:d1:d2:e3:fe:50:a9:7d:86:b8:d3:90:cc:02:2a: 92:f5:cb:42:fa:ca:54:50:93:33:a9:fb:4c:16:af: 8c:a8:72:7b:c9:4f:8e:9a:c0:f7:fc:cf:5b:d7:14: ff:3c:b7:95:ef:f3:a5:71:f2:44:e9:44:af:73:83: 96:27:c9:fa:dd:74:c0:00:f2:83:03:78:3b:fa:19: e4:cf:32:d5:95:1e:bb:5e:4e:82:c1:74:67:e7:f1: b4:34:85:28:d6:41:af:a0:ff:9b:31:d4:88:12:9f: 93:22:79:ac:4b:b7:0e:bf:74:bc:69:ee:6d:7a:bf: d9:c6:94:47:d0:f6:5d:a6:b7:59:06:12:b5:e2:bb: 50:29:53:4f:d3:64:0d:d7:b8:6e:a8:62:26:bf:6b: f2:be:33:30:59:db:78:1f:dc:db:42:91:87:8e:88: 4f:c8:14:fb:ad:99:df:c5:48:82:86:fb:f9:45:d0: 9d:d8:e1:a4:9e:84:51:49:af:f2:dc:f3:dd:a9:2d: 97:6a:64:f9:f1:b4:63:29:12:a2:2c:80:0e:13:7b: fc:4d:18:6f:4b:62:95:8a:a9:c0:02:85:49:74:6b: d9:66:fc:00:3f:6e:7d:f2:57:1b:b5:f3:ad:03:8d: 08:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0D:19:94:D5:E3:0B:02:68:F7:10:0E:57:9D:AE:26:80:9A:BE:F8 X509v3 Authority Key Identifier: keyid:35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:1f:b7:97:3e:59:fd:69:3c:11:09:cd:0e:ea:98:12:42:c3: ef:44:7f:50:fd:d7:d1:90:6d:37:ba:34:da:ee:4e:2b:33:82: b7:1b:e7:df:5c:65:e7:cd:1a:e1:2c:81:97:55:17:de:ef:ef: b3:fb:db:49:39:16:fa:dd:b5:fa:0f:97:b6:df:8e:54:ba:93: dc:b3:7e:cd:9d:48:a9:11:e4:f9:a8:a3:85:55:81:f4:55:1e: 10:cd:ae:d8:4c:1a:d9:bb:47:46:5b:28:c8:65:78:db:02:54: 9e:73:24:a2:4c:6e:f5:38:93:86:bf:91:f9:0e:6d:f5:6d:9e: 12:02:b7:8c:c6:58:32:63:65:56:6e:8f:5d:96:ec:15:ad:95: 30:68:30:a5:31:24:b6:d5:ca:f7:05:2b:cf:d1:d2:4d:04:b0: 79:5e:ce:6d:c9:fb:6c:ea:95:a2:cb:bf:d8:b3:58:9c:46:61: 52:6b:dd:a9:46:8a:92:bd:34:3d:f1:fc:b2:36:86:44:50:88: c4:af:ce:15:b5:ad:d6:2f:d2:17:17:71:55:e6:1b:c6:8d:cf: 26:2c:c8:8b:fa:8c:63:e4:c2:c0:2c:a6:e6:82:04:96:5a:e9: d5:47:c3:c9:31:45:5f:74:62:ab:bd:3c:d3:79:d9:7e:23:c8: cb:99:9d:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHhErsvmg16F6EqoHavNbERJ9uLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJF NTYyRTkwOTAeFw0yNjA0MTYxMDE2MTlaFw0yNjA0MTkxODE1MTlaMDMxMTAvBgNV BAMTKDk2MEQxOTk0RDVFMzBCMDI2OEY3MTAwRTU3OURBRTI2ODA5QUJFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa4tlY1HhNlEgPYB+GJPvR0uP+ UKl9hrjTkMwCKpL1y0L6ylRQkzOp+0wWr4yocnvJT46awPf8z1vXFP88t5Xv86Vx 8kTpRK9zg5YnyfrddMAA8oMDeDv6GeTPMtWVHrteToLBdGfn8bQ0hSjWQa+g/5sx 1IgSn5MieaxLtw6/dLxp7m16v9nGlEfQ9l2mt1kGErXiu1ApU0/TZA3XuG6oYia/ a/K+MzBZ23gf3NtCkYeOiE/IFPutmd/FSIKG+/lF0J3Y4aSehFFJr/Lc892pLZdq ZPnxtGMpEqIsgA4Te/xNGG9LYpWKqcAChUl0a9lm/AA/bn3yVxu1860DjQj7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlg0ZlNXjCwJo9xAOV52uJoCavvgwHwYDVR0j BBgwFoAUNT5mVUmlokXTY70NzqICguVi6QkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQxMWIwNS1jNThhLTQyMDYtYjdhYi1jMjUwYzE0NjU1NTAvMC8zNTNFNjY1NTQ5 QTVBMjQ1RDM2M0JEMERDRUEyMDI4MkU1NjJFOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJFNTYy RTkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MTFiMDUtYzU4YS00MjA2LWI3 YWItYzI1MGMxNDY1NTUwLzAvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAy ODJFNTYyRTkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0ft5c+Wf1pPBEJzQ7qmBJCw+9Ef1D919GQ bTe6NNruTiszgrcb599cZefNGuEsgZdVF97v77P720k5FvrdtfoPl7bfjlS6k9yz fs2dSKkR5Pmoo4VVgfRVHhDNrthMGtm7R0ZbKMhleNsCVJ5zJKJMbvU4k4a/kfkO bfVtnhICt4zGWDJjZVZuj12W7BWtlTBoMKUxJLbVyvcFK8/R0k0EsHlezm3J+2zq laLLv9izWJxGYVJr3alGipK9ND3x/LI2hkRQiMSvzhW1rdYv0hcXcVXmG8aNzyYs yIv6jGPkwsAspuaCBJZa6dVHw8kxRV90Yqu9PNN52X4jyMuZnRc= -----END CERTIFICATE-----Generated at Sat Apr 18 03:11:43 2026 by rpki-client