$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft File: 35369AC685201508541197F86A8FDAC2375BE30A.mft (raw, json) Hash identifier: fPy/5pbOSXlSY4nGaKzQ2xIl01KiiqCNO12vMsxWXlQ= Subject key identifier: 31:3F:16:E4:76:4F:D3:DD:6D:A9:23:87:3C:E0:E9:9A:44:53:EA:BB Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A Certificate issuer: /CN=35369AC685201508541197F86A8FDAC2375BE30A Certificate serial: 0B2DD66F03D4D9AE4CD295AC5898DEF24FCFBED5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft Manifest number: 01FD Signing time: Thu 16 Apr 2026 19:02:34 +0000 Manifest this update: Thu 16 Apr 2026 18:57:34 +0000 Manifest next update: Mon 20 Apr 2026 01:37:34 +0000 Files and hashes: 1: 35369AC685201508541197F86A8FDAC2375BE30A.crl (hash: mYcsfaYec29Il3HBCOVQoSaU6MhqGKgIbpQr9ha4StY=) 2: 3130332e3131312e38362e302f32342d3234203d3e20313331373639.roa (hash: 9+Mv4cEtMbH5KopkzgQCoNSpTRV8G99XXR57cTSgvOU=) 3: 3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa (hash: ovmFPVguepwh1KZwLVmisbEmSv3ixrZq0Db1FT9lUSk=) 4: 323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (hash: nASP1+s5Yr02DageTGdazoA9xc6IABPGa5gu3FsZO/s=) 5: 3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa (hash: 3VX7SmRrNhkZ2gYSECqjxxiOqtU2CUq75Ny0SNZjNIo=) 6: 3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa (hash: PlQgzB/cRsoh7ZWV0eeB0CCERK7vc0F8oX5TvclNELU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 01:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:2d:d6:6f:03:d4:d9:ae:4c:d2:95:ac:58:98:de:f2:4f:cf:be:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A Validity Not Before: Apr 16 18:57:34 2026 GMT Not After : Apr 20 01:37:34 2026 GMT Subject: CN=313F16E4764FD3DD6DA923873CE0E99A4453EABB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:48:bb:30:05:9e:b0:87:26:db:ba:51:83:02: 94:ed:32:c3:32:9f:41:b0:18:83:3c:54:1d:07:96: af:0c:15:08:4b:e0:d9:fc:47:7c:60:94:7b:3f:8a: 4e:89:1e:a7:b6:b1:fe:98:f0:ce:f4:61:e9:c4:d4: 01:c6:fd:cc:59:27:c1:04:ed:77:7c:fa:9e:53:a1: 98:35:6b:38:02:be:c5:ae:d6:f0:4e:55:1e:99:14: bf:b1:75:bc:33:8b:0d:d3:16:61:c2:ab:e0:7e:99: 01:56:c4:26:da:b4:dc:f4:08:1f:d2:a6:ef:90:6e: bb:12:23:f5:de:16:f2:e7:9d:06:33:cc:bf:b6:23: 53:19:c7:ee:2f:0a:ee:bd:81:58:ae:f4:5f:82:da: 30:75:c9:01:65:aa:f6:57:9a:ae:26:87:a2:48:44: 4f:42:8d:44:b7:09:3a:dd:1a:ab:c7:a0:b8:b7:66: 83:88:45:d7:a9:4b:1b:70:55:a2:9e:51:29:fb:5c: a8:73:e8:01:c8:b2:fd:db:fb:27:ec:18:1c:e8:20: ce:a3:47:21:0b:16:85:c2:0d:6c:bb:d0:9b:4a:ca: 66:2d:f7:23:23:b4:13:76:21:70:1b:7f:dd:85:00: 9c:d2:4a:fd:e7:1b:ce:34:e3:e6:71:f3:8e:f0:c5: 81:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3F:16:E4:76:4F:D3:DD:6D:A9:23:87:3C:E0:E9:9A:44:53:EA:BB X509v3 Authority Key Identifier: keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:2f:c7:83:39:3f:e0:f8:7d:61:ab:3e:9a:46:49:14:ab:c6: f1:ca:e2:70:83:1d:8c:16:69:7d:05:ff:bf:54:bd:f2:d0:fc: a6:6d:ca:f9:98:98:10:16:d2:a3:7a:5a:62:e2:d6:34:ff:5b: 85:8a:ae:e8:b3:86:24:21:73:2a:f1:c5:a7:bc:10:fa:de:68: d6:15:b9:a7:fe:82:1e:42:ed:46:91:91:b4:b1:08:db:a3:a1: d0:df:b4:51:8a:52:21:fe:0e:8b:e2:9d:b7:0f:3e:f1:9b:43: 67:28:45:fa:72:2c:37:07:1e:bc:6a:7e:33:36:90:7f:4e:24: 52:78:b0:97:21:14:7e:c4:43:c9:68:6d:37:91:a2:5f:63:c3: 7e:a4:e5:57:e5:6d:8a:43:4f:22:f9:a9:65:a4:b3:8a:d0:72: f5:8a:e5:79:c9:2b:79:77:13:27:4b:11:3a:cc:58:88:0a:2b: b9:a1:fa:e1:90:c1:89:06:be:e1:af:fa:98:84:2d:57:55:11: 05:c0:b3:c7:e3:0f:77:cb:8b:f8:c6:f0:8d:36:70:bd:e7:2e: ab:d6:5f:3d:ff:cc:28:af:69:0a:20:b6:96:88:e8:54:7d:27: fd:df:0a:8a:b2:30:11:75:0a:5c:fa:4f:41:fe:a8:07:4d:75: ca:64:5d:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCy3WbwPU2a5M0pWsWJje8k/PvtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIz NzVCRTMwQTAeFw0yNjA0MTYxODU3MzRaFw0yNjA0MjAwMTM3MzRaMDMxMTAvBgNV BAMTKDMxM0YxNkU0NzY0RkQzREQ2REE5MjM4NzNDRTBFOTlBNDQ1M0VBQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkSLswBZ6whybbulGDApTtMsMy n0GwGIM8VB0Hlq8MFQhL4Nn8R3xglHs/ik6JHqe2sf6Y8M70YenE1AHG/cxZJ8EE 7Xd8+p5ToZg1azgCvsWu1vBOVR6ZFL+xdbwziw3TFmHCq+B+mQFWxCbatNz0CB/S pu+QbrsSI/XeFvLnnQYzzL+2I1MZx+4vCu69gViu9F+C2jB1yQFlqvZXmq4mh6JI RE9CjUS3CTrdGqvHoLi3ZoOIRdepSxtwVaKeUSn7XKhz6AHIsv3b+yfsGBzoIM6j RyELFoXCDWy70JtKymYt9yMjtBN2IXAbf92FAJzSSv3nG8404+Zx847wxYEdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMT8W5HZP091tqSOHPODpmkRT6rswHwYDVR0j BBgwFoAUNTaaxoUgFQhUEZf4ao/awjdb4wowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTRhY2EzYy02M2RjLTRjMWItYTdlOC1hY2JhZTgyMWNkZTUvMC8zNTM2OUFDNjg1 MjAxNTA4NTQxMTk3Rjg2QThGREFDMjM3NUJFMzBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIzNzVC RTMwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0YWNhM2MtNjNkYy00YzFiLWE3 ZTgtYWNiYWU4MjFjZGU1LzAvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRB QzIzNzVCRTMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQvx4M5P+D4fWGrPppGSRSrxvHK4nCDHYwW aX0F/79UvfLQ/KZtyvmYmBAW0qN6WmLi1jT/W4WKruizhiQhcyrxxae8EPreaNYV uaf+gh5C7UaRkbSxCNujodDftFGKUiH+DovinbcPPvGbQ2coRfpyLDcHHrxqfjM2 kH9OJFJ4sJchFH7EQ8lobTeRol9jw36k5VflbYpDTyL5qWWks4rQcvWK5XnJK3l3 EydLETrMWIgKK7mh+uGQwYkGvuGv+piELVdVEQXAs8fjD3fLi/jG8I02cL3nLqvW Xz3/zCivaQogtpaI6FR9J/3fCoqyMBF1Clz6T0H+qAdNdcpkXW0= -----END CERTIFICATE-----Generated at Sat Apr 18 06:11:21 2026 by rpki-client