$ rpki-client -vvf repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft File: 353E665549A5A245D363BD0DCEA20282E562E909.mft (raw, json) Hash identifier: cYGEHPq+DIPJ1bUoB0FjpL/+zjKq0FLITTFYCvBXGpE= Subject key identifier: E6:FD:66:CA:A3:2D:34:A3:56:9B:81:C9:B7:C0:3C:3E:71:D1:30:40 Authority key identifier: 35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 Certificate issuer: /CN=353E665549A5A245D363BD0DCEA20282E562E909 Certificate serial: 3808D3F90B0131B2F85E208001C7D1347A9797FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft Manifest number: DF Signing time: Sat 28 Feb 2026 09:41:17 +0000 Manifest this update: Sat 28 Feb 2026 09:36:17 +0000 Manifest next update: Tue 03 Mar 2026 20:30:17 +0000 Files and hashes: 1: 353E665549A5A245D363BD0DCEA20282E562E909.crl (hash: ZnoqWyr2npwyFSeMRsXk26oSWxUAeKco/3rzXI+BHCE=) 2: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: RLs7YWOLxdLtlrs9K05DQU0Ui1dbjVBI2I7ZQMJjIGM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 20:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:08:d3:f9:0b:01:31:b2:f8:5e:20:80:01:c7:d1:34:7a:97:97:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353E665549A5A245D363BD0DCEA20282E562E909 Validity Not Before: Feb 28 09:36:17 2026 GMT Not After : Mar 3 20:30:17 2026 GMT Subject: CN=E6FD66CAA32D34A3569B81C9B7C03C3E71D13040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:df:a0:2d:e0:2b:07:d7:1d:39:16:0f:8e:7d: 4b:66:fb:9f:31:d3:96:c3:05:6f:08:00:c9:1d:cc: a9:54:4b:f7:70:ab:58:50:31:d4:21:6b:05:b3:6a: 3a:3f:f9:17:6d:7e:24:8c:52:ae:13:82:20:09:0c: 5f:c5:22:a1:32:6c:cc:14:1b:6c:d7:ba:f8:a1:4c: 02:8d:05:17:98:19:d9:f0:6a:81:f5:16:38:6a:7e: 6a:42:43:06:2e:c8:f9:dc:a0:09:6b:33:a2:0b:ac: 63:64:28:dc:1b:a0:ee:02:ed:c2:02:95:fa:a8:46: eb:77:09:1b:ae:66:b4:6e:d8:27:9c:a8:fd:24:31: d2:39:5f:d8:22:e5:90:7c:4b:55:68:1c:b7:da:55: 97:3f:6d:b8:0a:bc:be:d8:d7:bc:c4:7e:44:82:00: 82:d6:5e:14:89:1f:83:7b:eb:44:0d:d5:91:26:e3: da:12:29:42:32:04:21:04:c6:fb:3a:20:7c:0f:8a: 89:db:e5:96:58:3e:81:b4:f6:2e:38:28:23:19:ba: 8f:66:a6:e0:d6:b7:7e:55:e5:82:95:c2:d5:b8:65: 80:30:cd:98:05:cd:23:8f:01:15:a4:27:76:f7:37: 81:59:cc:21:8c:d6:f0:c4:db:59:bf:d7:a9:d0:f8: 58:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FD:66:CA:A3:2D:34:A3:56:9B:81:C9:B7:C0:3C:3E:71:D1:30:40 X509v3 Authority Key Identifier: keyid:35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:41:03:5c:99:97:6f:3a:0f:8a:37:23:28:5a:fc:8c:ff:2a: c3:73:8d:86:0a:68:fc:87:39:82:19:d2:30:cd:3d:33:f7:71: cb:f5:a5:8a:5f:53:83:a4:2a:dd:1e:0c:2c:62:25:da:a5:36: d6:75:c1:57:91:aa:c4:ea:3a:9e:fb:21:a3:c3:6d:a9:c9:d1: 5b:43:c2:d6:74:e4:64:7f:12:cf:11:19:7f:b4:f8:9c:ce:43: 75:57:a8:79:a7:fc:59:18:46:51:f1:0d:28:01:bc:b8:75:c4: eb:48:69:01:ff:ea:ae:e2:6d:3e:60:73:a2:fe:77:a6:3b:88: a5:87:00:c9:6c:e9:20:b9:02:3a:63:df:7a:25:11:92:da:e5: 6b:1f:4d:cb:00:55:b7:8f:95:07:c2:53:02:68:68:92:73:c4: d7:15:94:c3:14:d4:cc:de:53:f6:fb:6a:63:8d:93:d4:25:ff: 6c:ac:75:fb:ab:32:5e:bc:9b:0e:0d:fc:89:90:ef:65:55:95: 5c:f0:a7:83:2f:a6:55:36:83:2c:8c:63:ef:51:42:bf:d6:bb: 2b:91:e8:9f:ca:00:5c:36:3e:f1:9b:34:04:6d:b5:4c:5f:24: fb:2e:12:56:5f:92:ff:e7:f5:22:48:bd:84:f0:ec:bf:5a:af: a6:ef:99:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOAjT+QsBMbL4XiCAAcfRNHqXl/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJF NTYyRTkwOTAeFw0yNjAyMjgwOTM2MTdaFw0yNjAzMDMyMDMwMTdaMDMxMTAvBgNV BAMTKEU2RkQ2NkNBQTMyRDM0QTM1NjlCODFDOUI3QzAzQzNFNzFEMTMwNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT36At4CsH1x05Fg+OfUtm+58x 05bDBW8IAMkdzKlUS/dwq1hQMdQhawWzajo/+RdtfiSMUq4TgiAJDF/FIqEybMwU G2zXuvihTAKNBReYGdnwaoH1FjhqfmpCQwYuyPncoAlrM6ILrGNkKNwboO4C7cIC lfqoRut3CRuuZrRu2CecqP0kMdI5X9gi5ZB8S1VoHLfaVZc/bbgKvL7Y17zEfkSC AILWXhSJH4N760QN1ZEm49oSKUIyBCEExvs6IHwPionb5ZZYPoG09i44KCMZuo9m puDWt35V5YKVwtW4ZYAwzZgFzSOPARWkJ3b3N4FZzCGM1vDE21m/16nQ+FinAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5v1myqMtNKNWm4HJt8A8PnHRMEAwHwYDVR0j BBgwFoAUNT5mVUmlokXTY70NzqICguVi6QkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQxMWIwNS1jNThhLTQyMDYtYjdhYi1jMjUwYzE0NjU1NTAvMC8zNTNFNjY1NTQ5 QTVBMjQ1RDM2M0JEMERDRUEyMDI4MkU1NjJFOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJFNTYy RTkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MTFiMDUtYzU4YS00MjA2LWI3 YWItYzI1MGMxNDY1NTUwLzAvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAy ODJFNTYyRTkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBBA1yZl286D4o3Iyha/Iz/KsNzjYYKaPyH OYIZ0jDNPTP3ccv1pYpfU4OkKt0eDCxiJdqlNtZ1wVeRqsTqOp77IaPDbanJ0VtD wtZ05GR/Es8RGX+0+JzOQ3VXqHmn/FkYRlHxDSgBvLh1xOtIaQH/6q7ibT5gc6L+ d6Y7iKWHAMls6SC5Ajpj33olEZLa5WsfTcsAVbePlQfCUwJoaJJzxNcVlMMU1Mze U/b7amONk9Ql/2ysdfurMl68mw4N/ImQ72VVlVzwp4MvplU2gyyMY+9RQr/WuyuR 6J/KAFw2PvGbNARttUxfJPsuElZfkv/n9SJIvYTw7L9ar6bvmUw= -----END CERTIFICATE-----Generated at Mon Mar 2 18:53:43 2026 by rpki-client