$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft File: 35369AC685201508541197F86A8FDAC2375BE30A.mft (raw, json) Hash identifier: pOq4x1JKN212ZZLNYLUQqqrzat3nPCS4qd6LN3dQP9M= Subject key identifier: D7:3F:AD:48:4A:0D:7A:53:4F:DC:0B:E0:93:8A:5D:C3:83:26:0E:26 Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A Certificate issuer: /CN=35369AC685201508541197F86A8FDAC2375BE30A Certificate serial: 2152BFEF6B5A30578AAA70755BECF5B9EE622A89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft Manifest number: 01E8 Signing time: Sat 28 Feb 2026 20:42:27 +0000 Manifest this update: Sat 28 Feb 2026 20:37:27 +0000 Manifest next update: Wed 04 Mar 2026 03:22:27 +0000 Files and hashes: 1: 3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa (hash: 3VX7SmRrNhkZ2gYSECqjxxiOqtU2CUq75Ny0SNZjNIo=) 2: 323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (hash: nASP1+s5Yr02DageTGdazoA9xc6IABPGa5gu3FsZO/s=) 3: 35369AC685201508541197F86A8FDAC2375BE30A.crl (hash: 0w2T8351cO4bH8OMp9r0NDNtvS8bZNJOkGwis2fvjKc=) 4: 3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa (hash: PlQgzB/cRsoh7ZWV0eeB0CCERK7vc0F8oX5TvclNELU=) 5: 3130332e3131312e38362e302f32342d3234203d3e20313331373639.roa (hash: 9+Mv4cEtMbH5KopkzgQCoNSpTRV8G99XXR57cTSgvOU=) 6: 3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa (hash: ovmFPVguepwh1KZwLVmisbEmSv3ixrZq0Db1FT9lUSk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 03:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:52:bf:ef:6b:5a:30:57:8a:aa:70:75:5b:ec:f5:b9:ee:62:2a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A Validity Not Before: Feb 28 20:37:27 2026 GMT Not After : Mar 4 03:22:27 2026 GMT Subject: CN=D73FAD484A0D7A534FDC0BE0938A5DC383260E26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b2:57:2f:f2:0e:44:96:91:39:20:5b:e9:10: 6d:4c:c2:51:0e:b8:3b:84:a5:1c:9d:d8:ba:c7:2c: b3:0b:93:1c:c6:99:ea:5d:16:ac:bd:3e:86:0b:40: d2:70:cf:57:6c:34:f7:ab:ea:f2:28:a7:44:03:62: 66:8f:d9:0b:26:55:4c:84:f6:92:f6:35:ea:3b:14: f3:e5:43:dd:6d:6a:e0:bf:92:07:27:8d:57:20:67: 6b:ad:06:56:c6:63:1e:76:74:73:60:40:8a:96:ad: 17:b3:bf:c3:28:31:f3:cb:c6:bd:ab:fc:51:8f:6f: bb:0e:53:b3:9e:5e:86:aa:b0:8d:d6:d0:d2:57:61: db:cd:1a:a9:30:ef:6d:a8:b3:36:93:ca:f0:93:d7: 1d:eb:8a:dd:22:48:24:b5:51:8e:5e:cf:f4:dd:05: 3b:55:4f:45:0f:2b:07:c4:ca:58:b9:a8:68:b2:63: 80:37:ae:e7:90:7a:85:02:09:93:69:77:c7:98:e0: 27:ff:24:ae:7d:0c:da:e2:38:38:74:74:57:7a:7c: f8:6e:b3:de:9a:f8:64:1e:6c:2d:8a:e4:ff:8e:18: 32:4c:43:68:f2:67:c3:d2:a3:8b:78:7a:34:59:45: 13:7f:54:ca:63:bd:0f:0e:d0:39:fd:65:dc:37:60: 9d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3F:AD:48:4A:0D:7A:53:4F:DC:0B:E0:93:8A:5D:C3:83:26:0E:26 X509v3 Authority Key Identifier: keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e2:0c:1a:f8:0a:e1:a3:c9:48:11:b7:df:e5:87:93:15:d9: 9f:35:7d:1d:3f:71:6a:ba:d0:4c:44:47:6c:bb:c6:2a:84:54: 60:fb:a3:03:da:d8:b3:bb:cc:88:11:a8:b9:4d:fb:b9:b1:85: 19:e3:07:68:a4:e6:16:59:9d:75:8e:27:a3:f1:02:ec:2c:d7: 11:eb:84:cc:f0:fe:b4:a8:bb:83:db:47:8e:de:ca:21:ea:57: a5:5b:c6:b4:06:e7:86:5b:d0:aa:da:ee:d5:55:f4:2c:37:07: 60:47:0f:6c:48:e6:11:20:6c:00:36:18:78:e9:1c:af:80:cc: 75:cf:1f:0d:e1:46:63:d0:48:c6:cb:c2:c3:3f:7a:3c:d6:51: 37:3d:d8:a0:7a:12:3e:86:58:a3:bd:c7:9e:3e:e7:43:e3:ac: 8d:9a:d4:2d:b5:3b:b1:c9:49:bc:93:dc:c7:8d:1a:a9:37:dd: c1:70:27:69:39:15:26:0e:7e:af:bf:49:60:cc:78:89:47:ef: cb:dd:d2:f8:c2:aa:90:db:14:45:17:30:72:49:5e:50:ec:0a: 77:97:79:ad:c2:8c:1c:c8:28:99:1e:10:b7:71:ae:57:d8:66: 11:3c:24:f9:c6:08:68:0b:0e:71:8f:20:2c:25:f1:56:70:30: bb:40:11:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIVK/72taMFeKqnB1W+z1ue5iKokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIz NzVCRTMwQTAeFw0yNjAyMjgyMDM3MjdaFw0yNjAzMDQwMzIyMjdaMDMxMTAvBgNV BAMTKEQ3M0ZBRDQ4NEEwRDdBNTM0RkRDMEJFMDkzOEE1REMzODMyNjBFMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMslcv8g5ElpE5IFvpEG1MwlEO uDuEpRyd2LrHLLMLkxzGmepdFqy9PoYLQNJwz1dsNPer6vIop0QDYmaP2QsmVUyE 9pL2Neo7FPPlQ91tauC/kgcnjVcgZ2utBlbGYx52dHNgQIqWrRezv8MoMfPLxr2r /FGPb7sOU7OeXoaqsI3W0NJXYdvNGqkw722oszaTyvCT1x3rit0iSCS1UY5ez/Td BTtVT0UPKwfEyli5qGiyY4A3rueQeoUCCZNpd8eY4Cf/JK59DNriODh0dFd6fPhu s96a+GQebC2K5P+OGDJMQ2jyZ8PSo4t4ejRZRRN/VMpjvQ8O0Dn9Zdw3YJ1/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1z+tSEoNelNP3Avgk4pdw4MmDiYwHwYDVR0j BBgwFoAUNTaaxoUgFQhUEZf4ao/awjdb4wowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTRhY2EzYy02M2RjLTRjMWItYTdlOC1hY2JhZTgyMWNkZTUvMC8zNTM2OUFDNjg1 MjAxNTA4NTQxMTk3Rjg2QThGREFDMjM3NUJFMzBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIzNzVC RTMwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0YWNhM2MtNjNkYy00YzFiLWE3 ZTgtYWNiYWU4MjFjZGU1LzAvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRB QzIzNzVCRTMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAniDBr4CuGjyUgRt9/lh5MV2Z81fR0/cWq6 0ExER2y7xiqEVGD7owPa2LO7zIgRqLlN+7mxhRnjB2ik5hZZnXWOJ6PxAuws1xHr hMzw/rSou4PbR47eyiHqV6VbxrQG54Zb0Kra7tVV9Cw3B2BHD2xI5hEgbAA2GHjp HK+AzHXPHw3hRmPQSMbLwsM/ejzWUTc92KB6Ej6GWKO9x54+50PjrI2a1C21O7HJ SbyT3MeNGqk33cFwJ2k5FSYOfq+/SWDMeIlH78vd0vjCqpDbFEUXMHJJXlDsCneX ea3CjBzIKJkeELdxrlfYZhE8JPnGCGgLDnGPICwl8VZwMLtAET8= -----END CERTIFICATE-----Generated at Mon Mar 2 07:44:49 2026 by rpki-client