$ rpki-client -vvf repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft File: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft (raw, json) Hash identifier: vGVdtVrrbjScwzD6PSanSgrziOlXVBnFusbi+yyQz38= Subject key identifier: 5C:F1:9E:7D:F7:A7:92:6F:90:74:E8:7C:10:12:DE:AD:FE:3D:2F:9C Authority key identifier: 35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B Certificate issuer: /CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Certificate serial: 0BE40D7D85EDC4071D1B9730E0EF8C4A05CBE869 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft Manifest number: 0346 Signing time: Fri 17 Apr 2026 20:00:05 +0000 Manifest this update: Fri 17 Apr 2026 19:55:05 +0000 Manifest next update: Mon 20 Apr 2026 23:07:05 +0000 Files and hashes: 1: 3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa (hash: /6Bl69u1CgUC488n3C0LoD1UwiEDNUgl9lr41NkrxCQ=) 2: 3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa (hash: Kzzs0ztzcR23r39ht+5Psv7618tFzduqtiaoQQ3t1Z0=) 3: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl (hash: 93fV3A9mK/z4qq0KrnuJST7JrcnGn+w+dNopIvJG6BA=) 4: 3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa (hash: 8HhI26rXh/jjcFdNc40xKLKoLxJCht2FMFxSJPngPR0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 23:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e4:0d:7d:85:ed:c4:07:1d:1b:97:30:e0:ef:8c:4a:05:cb:e8:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Validity Not Before: Apr 17 19:55:05 2026 GMT Not After : Apr 20 23:07:05 2026 GMT Subject: CN=5CF19E7DF7A7926F9074E87C1012DEADFE3D2F9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3b:e4:ae:29:d5:7b:0f:21:d2:f7:03:50:a3: 0e:72:fa:af:cd:c0:ae:e8:b3:ec:8d:bf:0c:c1:17: 8d:33:96:00:10:f9:d9:7e:89:62:c7:8c:6f:f3:7c: 1a:ff:e5:c7:1e:1d:66:06:52:66:93:a8:7f:69:d1: 39:8c:c3:3d:ca:d9:81:7e:92:9e:8e:23:13:65:f1: 86:6b:f2:b7:8a:38:3f:37:2d:7e:a7:5b:9a:b0:df: 8f:b0:90:72:db:ad:dd:10:07:85:fe:ff:5c:26:8e: c3:a1:95:cb:bb:c9:55:0d:09:5f:fe:78:a5:89:f6: 11:17:56:9f:13:60:e9:d3:a0:81:d9:13:00:4e:a0: fd:24:29:f0:fb:e8:ee:45:b7:9b:51:5f:13:ca:b4: fb:2d:57:3e:7b:98:8c:fd:55:01:95:54:0b:da:7e: 40:7a:c8:16:ec:ad:e6:c8:b8:5f:61:ea:12:8d:34: c3:53:ce:1f:53:7e:88:68:87:d3:f1:db:36:94:32: 57:d4:84:03:a7:6f:a7:47:32:11:43:78:72:55:dd: 92:52:aa:d3:e4:40:e3:82:36:34:f4:b8:54:41:78: 66:20:d9:9d:27:cf:f8:ab:cc:8d:37:4a:66:99:a0: f3:fe:96:66:84:0a:ae:a3:8c:4d:c2:00:96:57:7a: ab:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F1:9E:7D:F7:A7:92:6F:90:74:E8:7C:10:12:DE:AD:FE:3D:2F:9C X509v3 Authority Key Identifier: keyid:35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ec:c6:0c:85:88:04:67:01:7e:60:f7:27:fb:1b:1f:bc:bb: 53:26:e6:a0:4d:b9:b5:5c:e3:dc:19:a5:fe:41:67:31:7b:98: a2:8c:f2:51:80:dd:e3:aa:fd:e4:39:cf:cc:34:5d:82:da:d4: c2:4b:4a:b6:97:78:c3:f3:93:6d:f8:2c:d2:e6:62:3a:e4:f5: cb:5e:4b:9c:a5:23:26:87:65:b9:31:63:da:68:66:6c:7f:9e: ec:2f:43:01:fe:68:eb:dc:bc:3d:df:b0:93:cd:f4:d2:5e:3b: 5e:f2:bf:84:c5:dd:95:9b:f3:5b:66:a2:fe:9f:55:f3:9d:c3: 97:f9:65:97:58:1f:50:37:22:a9:16:42:08:cd:c3:ae:38:d3: 5e:dd:2b:56:1d:13:c1:00:fd:74:5d:bb:d5:82:e4:eb:2e:4d: 0c:1f:9b:5f:d7:bc:cb:c6:3e:58:c9:cc:3c:e7:10:60:ad:e3: ac:7d:1c:13:56:dd:f0:8f:ef:06:f7:d9:ad:82:1b:14:9a:ec: 7b:f1:c2:8d:aa:cb:c3:06:71:02:dd:5b:01:2d:93:e7:e8:26: cd:d2:d2:2b:3a:cc:d0:32:2e:8c:2f:e0:e7:1e:e3:33:ce:70: ac:b9:cc:c3:19:9a:7f:eb:29:1b:50:b3:d8:66:9e:32:f6:f7: 26:93:bf:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC+QNfYXtxAcdG5cw4O+MSgXL6GkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1 RUE0M0UyQjAeFw0yNjA0MTcxOTU1MDVaFw0yNjA0MjAyMzA3MDVaMDMxMTAvBgNV BAMTKDVDRjE5RTdERjdBNzkyNkY5MDc0RTg3QzEwMTJERUFERkUzRDJGOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8O+SuKdV7DyHS9wNQow5y+q/N wK7os+yNvwzBF40zlgAQ+dl+iWLHjG/zfBr/5cceHWYGUmaTqH9p0TmMwz3K2YF+ kp6OIxNl8YZr8reKOD83LX6nW5qw34+wkHLbrd0QB4X+/1wmjsOhlcu7yVUNCV/+ eKWJ9hEXVp8TYOnToIHZEwBOoP0kKfD76O5Ft5tRXxPKtPstVz57mIz9VQGVVAva fkB6yBbsrebIuF9h6hKNNMNTzh9Tfohoh9Px2zaUMlfUhAOnb6dHMhFDeHJV3ZJS qtPkQOOCNjT0uFRBeGYg2Z0nz/irzI03SmaZoPP+lmaECq6jjE3CAJZXeqstAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXPGeffenkm+QdOh8EBLerf49L5wwHwYDVR0j BBgwFoAUNX3qxebBGzw+FS1aJPjYMV6kPiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDRiNjEyZi1mOTI0LTRlYzItYjFmMS1hMTMwNWQyM2Q1M2EvMC8zNTdERUFDNUU2 QzExQjNDM0UxNTJENUEyNEY4RDgzMTVFQTQzRTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1RUE0 M0UyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q0YjYxMmYtZjkyNC00ZWMyLWIx ZjEtYTEzMDVkMjNkNTNhLzAvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4 MzE1RUE0M0UyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnsxgyFiARnAX5g9yf7Gx+8u1Mm5qBNubVc 49wZpf5BZzF7mKKM8lGA3eOq/eQ5z8w0XYLa1MJLSraXeMPzk234LNLmYjrk9cte S5ylIyaHZbkxY9poZmx/nuwvQwH+aOvcvD3fsJPN9NJeO17yv4TF3ZWb81tmov6f VfOdw5f5ZZdYH1A3IqkWQgjNw644017dK1YdE8EA/XRdu9WC5OsuTQwfm1/XvMvG PljJzDznEGCt46x9HBNW3fCP7wb32a2CGxSa7Hvxwo2qy8MGcQLdWwEtk+foJs3S 0is6zNAyLowv4Oce4zPOcKy5zMMZmn/rKRtQs9hmnjL29yaTv/M= -----END CERTIFICATE-----Generated at Sat Apr 18 01:53:43 2026 by rpki-client