$ rpki-client -vvf repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft File: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft (raw, json) Hash identifier: EoW8v1mK7MbafcFI0JhNs009YAXgTr6THKpip/tcrU8= Subject key identifier: 63:BD:9F:9F:65:08:EE:16:56:D1:9C:02:5C:70:F6:6D:6F:5E:DA:93 Authority key identifier: 35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B Certificate issuer: /CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Certificate serial: 2E71CAFC3337A730BCF74B58F98A28113C315C5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft Manifest number: 0331 Signing time: Sun 01 Mar 2026 19:10:04 +0000 Manifest this update: Sun 01 Mar 2026 19:05:04 +0000 Manifest next update: Wed 04 Mar 2026 19:42:04 +0000 Files and hashes: 1: 3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa (hash: 8HhI26rXh/jjcFdNc40xKLKoLxJCht2FMFxSJPngPR0=) 2: 3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa (hash: /6Bl69u1CgUC488n3C0LoD1UwiEDNUgl9lr41NkrxCQ=) 3: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl (hash: ID3TDcOBVn4TdHbnCGYDYOjar+asH1uVgGaC/ZDRzJk=) 4: 3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa (hash: Kzzs0ztzcR23r39ht+5Psv7618tFzduqtiaoQQ3t1Z0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:71:ca:fc:33:37:a7:30:bc:f7:4b:58:f9:8a:28:11:3c:31:5c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Validity Not Before: Mar 1 19:05:04 2026 GMT Not After : Mar 4 19:42:04 2026 GMT Subject: CN=63BD9F9F6508EE1656D19C025C70F66D6F5EDA93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:1c:c4:34:cb:25:7d:e5:b8:db:67:e2:66: bd:92:7f:6c:70:ee:d9:c2:c7:44:9d:b7:bc:ff:1a: ab:7e:e5:5d:f5:7e:2b:22:cf:98:6f:d4:d1:4f:a2: ce:f9:a4:2f:a3:43:9b:e8:18:9d:35:06:81:e3:83: 19:9f:c5:a6:2b:87:5b:11:f4:e5:e1:ee:7a:93:3b: 3a:24:61:d1:83:e4:cb:c3:e6:66:cb:0e:91:91:37: a9:3e:3c:9a:5d:2b:e1:8c:61:d8:cb:8a:f4:1e:b2: e6:8f:6b:28:46:b0:bb:56:7f:f6:8f:b1:a3:d2:a9: c8:a6:3f:c8:54:5a:8d:95:f2:1b:bd:79:5a:44:82: f4:c1:5c:d6:7d:aa:c9:ee:12:21:43:66:32:9b:fd: 16:dc:e4:b1:ec:cd:d4:d9:80:da:7f:e1:21:d2:80: 15:31:f1:27:84:c2:de:e2:60:a1:5d:bf:4e:26:37: 26:11:df:ff:33:11:1c:e0:88:f8:f5:9f:ce:da:79: d7:63:07:01:f9:11:98:9c:e3:97:1d:72:60:5d:ff: 2d:ac:62:b0:91:8d:da:8f:b5:13:9f:d5:5f:b7:80: c4:93:f4:04:3e:0e:73:30:0c:65:6d:47:78:b3:64: 30:0b:5b:ef:2e:bc:0a:64:9e:a0:87:aa:de:10:c1: c7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BD:9F:9F:65:08:EE:16:56:D1:9C:02:5C:70:F6:6D:6F:5E:DA:93 X509v3 Authority Key Identifier: keyid:35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ce:eb:7f:dd:1f:d7:dd:87:39:03:db:7a:c4:0b:65:47:29: 38:d3:8a:21:5d:ae:07:69:f2:65:90:94:82:39:3b:21:1a:6d: e9:3e:64:9e:ea:eb:63:5f:72:07:03:99:2e:41:92:dd:74:33: 4f:49:7d:8b:60:32:d7:46:30:5a:60:9e:82:78:03:bd:78:fb: 23:55:44:89:c0:79:52:3a:5a:98:b9:f2:2c:cc:f7:af:50:5c: d2:13:bb:b9:73:b4:98:24:25:1f:d7:c2:6f:31:d7:be:1d:ac: 2c:1c:7f:c8:63:b0:9d:58:44:ef:30:1c:93:3d:23:a9:8f:0e: 95:c5:47:5f:37:17:b9:50:79:4b:52:d8:f7:8c:cf:4f:ba:f2: dc:c8:3b:75:58:fe:ba:ab:08:5d:0a:a6:0e:3a:a8:be:21:bc: 2e:62:c9:93:8a:3b:f0:32:24:0f:e1:68:e0:be:4a:ef:fb:8c: 3d:5a:7a:25:ed:0f:38:dc:f0:6a:8c:a3:ac:9f:d6:11:76:49: 63:d5:53:5d:08:84:e9:a1:42:d2:3e:d2:99:a2:f4:d9:c3:70: 66:8a:68:05:da:16:66:02:0e:b5:4b:8a:12:0e:c9:fa:0f:70: 2a:84:4d:03:d6:c6:16:fb:df:33:d0:4d:46:54:73:08:bf:ca: 4f:56:b7:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULnHK/DM3pzC890tY+YooETwxXF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1 RUE0M0UyQjAeFw0yNjAzMDExOTA1MDRaFw0yNjAzMDQxOTQyMDRaMDMxMTAvBgNV BAMTKDYzQkQ5RjlGNjUwOEVFMTY1NkQxOUMwMjVDNzBGNjZENkY1RURBOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnKxzENMslfeW422fiZr2Sf2xw 7tnCx0Sdt7z/Gqt+5V31fisiz5hv1NFPos75pC+jQ5voGJ01BoHjgxmfxaYrh1sR 9OXh7nqTOzokYdGD5MvD5mbLDpGRN6k+PJpdK+GMYdjLivQesuaPayhGsLtWf/aP saPSqcimP8hUWo2V8hu9eVpEgvTBXNZ9qsnuEiFDZjKb/Rbc5LHszdTZgNp/4SHS gBUx8SeEwt7iYKFdv04mNyYR3/8zERzgiPj1n87aeddjBwH5EZic45cdcmBd/y2s YrCRjdqPtROf1V+3gMST9AQ+DnMwDGVtR3izZDALW+8uvApknqCHqt4Qwcf5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY72fn2UI7hZW0ZwCXHD2bW9e2pMwHwYDVR0j BBgwFoAUNX3qxebBGzw+FS1aJPjYMV6kPiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDRiNjEyZi1mOTI0LTRlYzItYjFmMS1hMTMwNWQyM2Q1M2EvMC8zNTdERUFDNUU2 QzExQjNDM0UxNTJENUEyNEY4RDgzMTVFQTQzRTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1RUE0 M0UyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q0YjYxMmYtZjkyNC00ZWMyLWIx ZjEtYTEzMDVkMjNkNTNhLzAvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4 MzE1RUE0M0UyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjO63/dH9fdhzkD23rEC2VHKTjTiiFdrgdp 8mWQlII5OyEabek+ZJ7q62NfcgcDmS5Bkt10M09JfYtgMtdGMFpgnoJ4A714+yNV RInAeVI6Wpi58izM969QXNITu7lztJgkJR/Xwm8x174drCwcf8hjsJ1YRO8wHJM9 I6mPDpXFR183F7lQeUtS2PeMz0+68tzIO3VY/rqrCF0Kpg46qL4hvC5iyZOKO/Ay JA/haOC+Su/7jD1aeiXtDzjc8GqMo6yf1hF2SWPVU10IhOmhQtI+0pmi9NnDcGaK aAXaFmYCDrVLihIOyfoPcCqETQPWxhb73zPQTUZUcwi/yk9Wtyo= -----END CERTIFICATE-----Generated at Mon Mar 2 22:49:13 2026 by rpki-client