$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft File: 35AF7B054A8CC95835EC5A2F9275004D39521553.mft (raw, json) Hash identifier: tjUhXBrK29CO2PlusmJMajUrFkT6NgRNX1mqXLFd45Q= Subject key identifier: 00:FD:C7:76:71:D4:03:E0:C1:A5:52:0C:57:7D:4C:D9:5E:19:15:C5 Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Certificate serial: 5D748C76A35F5B98845DC6FA2E2495DA3DBB057B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft Manifest number: 01DC Signing time: Sun 01 Mar 2026 11:12:48 +0000 Manifest this update: Sun 01 Mar 2026 11:07:48 +0000 Manifest next update: Wed 04 Mar 2026 20:20:48 +0000 Files and hashes: 1: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: YPnyu3J46S+PNDfPl4x2HfdMro8qcwKYQIJNOuw7SNM=) 2: 35AF7B054A8CC95835EC5A2F9275004D39521553.crl (hash: qVDkgzimnUv3Qqktq6t+vnpLYYVuDy8GQwfb/yGHmcc=) 3: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: G5wKKP5D5NKHHIZXwfrSRRWwdWFA64K8RR4eUb7olLQ=) 4: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: Sa1fK6pgYDElHHofY035RXNXkmiq5pXQ+mZ92ple4FU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:74:8c:76:a3:5f:5b:98:84:5d:c6:fa:2e:24:95:da:3d:bb:05:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Validity Not Before: Mar 1 11:07:48 2026 GMT Not After : Mar 4 20:20:48 2026 GMT Subject: CN=00FDC77671D403E0C1A5520C577D4CD95E1915C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:46:3e:82:2b:4e:64:9f:f7:51:d3:35:bd:a4: 67:ef:2c:52:d4:4f:b8:10:b4:58:b6:17:61:0b:d9: c3:84:61:38:c1:37:42:52:4f:fa:99:97:2a:fe:95: b6:c5:71:c4:ee:55:42:b4:93:b0:ff:78:38:a7:5b: 49:3e:f8:72:5a:70:9e:c0:3f:05:d3:65:f2:1a:83: e1:3c:62:6d:64:40:e7:4f:fe:b5:f4:3c:06:48:d3: 96:6f:d0:f0:8d:79:34:a5:32:94:46:cf:c9:40:fc: 78:e3:de:77:ad:70:cb:93:9a:31:ef:13:c4:26:60: 9d:d2:16:52:4c:f3:ea:28:7a:f8:2e:ba:91:bc:16: 21:ba:da:33:54:0e:f7:e0:ff:33:9a:7f:97:00:7a: 0f:cd:dd:0d:ba:af:d7:83:3f:56:79:76:e0:2d:7e: 15:f2:5b:90:3f:81:4d:85:56:39:61:89:98:62:1d: c8:22:35:38:ea:63:f4:74:b9:97:87:66:5e:61:c1: ea:a7:40:97:c1:ff:75:7a:90:cc:b2:5b:d7:e1:5a: 3e:dd:f8:ca:df:d9:ae:d9:7b:15:bf:a0:d2:ba:35: 12:0a:2a:f6:c2:da:47:9d:03:35:dc:aa:5a:2f:41: 66:f0:fd:95:e3:63:e3:7f:d9:f8:99:a2:2a:d0:3b: 9b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FD:C7:76:71:D4:03:E0:C1:A5:52:0C:57:7D:4C:D9:5E:19:15:C5 X509v3 Authority Key Identifier: keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:70:1c:d0:2b:d8:af:38:92:f8:4d:e4:7d:37:b9:c5:66:9e: 88:1d:62:fd:31:74:dc:a9:ec:b4:c2:f8:fc:9c:23:a1:df:81: 9d:6f:a1:56:e2:a7:22:5b:c7:f9:d4:b4:73:44:42:40:c5:8f: a9:d7:d8:68:29:bb:b4:18:81:8c:77:bb:2b:96:ef:be:e6:c7: 56:64:1d:be:6a:45:b9:b5:a3:9d:28:16:ef:e3:3c:d2:d3:bb: 62:64:64:15:c8:97:97:96:fb:6c:48:0c:62:98:a5:58:67:94: 99:d3:a5:93:c0:28:c0:a6:47:1d:27:89:cc:5e:7b:1a:60:b0: ab:7e:1e:6f:23:14:68:ba:9d:cb:4a:49:00:a3:d0:1a:0f:44: 95:83:60:1f:73:49:a2:75:b3:e6:be:0a:de:79:fb:7e:92:b3: 0e:42:28:e7:69:da:e3:2d:f3:56:6e:22:95:78:72:f2:42:bd: 23:b2:4d:b7:56:07:a2:c6:f6:9f:cf:3e:3f:cf:86:13:96:3a: 2e:63:89:20:af:1a:57:fd:69:b5:75:5f:82:f3:81:cd:ba:ed: 4e:29:fe:b4:4c:0c:5f:19:64:69:e1:f7:a5:1b:94:14:63:ac: 87:4e:5f:02:a0:26:1b:59:fe:d4:7b:8b:1a:38:ac:14:ad:de: 7d:1f:89:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXXSMdqNfW5iEXcb6LiSV2j27BXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQz OTUyMTU1MzAeFw0yNjAzMDExMTA3NDhaFw0yNjAzMDQyMDIwNDhaMDMxMTAvBgNV BAMTKDAwRkRDNzc2NzFENDAzRTBDMUE1NTIwQzU3N0Q0Q0Q5NUUxOTE1QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzRj6CK05kn/dR0zW9pGfvLFLU T7gQtFi2F2EL2cOEYTjBN0JST/qZlyr+lbbFccTuVUK0k7D/eDinW0k++HJacJ7A PwXTZfIag+E8Ym1kQOdP/rX0PAZI05Zv0PCNeTSlMpRGz8lA/Hjj3netcMuTmjHv E8QmYJ3SFlJM8+ooevguupG8FiG62jNUDvfg/zOaf5cAeg/N3Q26r9eDP1Z5duAt fhXyW5A/gU2FVjlhiZhiHcgiNTjqY/R0uZeHZl5hweqnQJfB/3V6kMyyW9fhWj7d +Mrf2a7ZexW/oNK6NRIKKvbC2kedAzXcqlovQWbw/ZXjY+N/2fiZoirQO5sxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAP3HdnHUA+DBpVIMV31M2V4ZFcUwHwYDVR0j BBgwFoAUNa97BUqMyVg17FovknUATTlSFVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMC8zNUFGN0IwNTRB OENDOTU4MzVFQzVBMkY5Mjc1MDA0RDM5NTIxNTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQzOTUy MTU1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAw NEQzOTUyMTU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlwHNAr2K84kvhN5H03ucVmnogdYv0xdNyp 7LTC+PycI6HfgZ1voVbipyJbx/nUtHNEQkDFj6nX2Ggpu7QYgYx3uyuW777mx1Zk Hb5qRbm1o50oFu/jPNLTu2JkZBXIl5eW+2xIDGKYpVhnlJnTpZPAKMCmRx0nicxe expgsKt+Hm8jFGi6nctKSQCj0BoPRJWDYB9zSaJ1s+a+Ct55+36Ssw5CKOdp2uMt 81ZuIpV4cvJCvSOyTbdWB6LG9p/PPj/PhhOWOi5jiSCvGlf9abV1X4Lzgc267U4p /rRMDF8ZZGnh96UblBRjrIdOXwKgJhtZ/tR7ixo4rBSt3n0fieE= -----END CERTIFICATE-----Generated at Mon Mar 2 07:48:02 2026 by rpki-client