$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft File: 35AF7B054A8CC95835EC5A2F9275004D39521553.mft (raw, json) Hash identifier: bItM4rsCaMTjHvqnHyT5X1R4mbujOplGtl9it0q6YF8= Subject key identifier: 20:2A:9D:1F:82:8E:2B:FF:6E:6D:31:7E:77:20:B2:C8:A5:CE:45:A6 Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 Certificate issuer: /CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Certificate serial: 286365D34A827694CF417AEE2DB289583080AEFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft Manifest number: 01F0 Signing time: Wed 15 Apr 2026 23:01:52 +0000 Manifest this update: Wed 15 Apr 2026 22:56:52 +0000 Manifest next update: Sun 19 Apr 2026 05:57:52 +0000 Files and hashes: 1: 3130332e3137332e3136352e302f32342d3234203d3e20313437303831.roa (hash: YPnyu3J46S+PNDfPl4x2HfdMro8qcwKYQIJNOuw7SNM=) 2: 3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (hash: Sa1fK6pgYDElHHofY035RXNXkmiq5pXQ+mZ92ple4FU=) 3: 35AF7B054A8CC95835EC5A2F9275004D39521553.crl (hash: 3mgL/KYGJMn9aCSTVshYhAFa709Eep4HNQTAOCISoVo=) 4: 3130332e3137332e3136342e302f32342d3234203d3e20313437303831.roa (hash: G5wKKP5D5NKHHIZXwfrSRRWwdWFA64K8RR4eUb7olLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 05:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:63:65:d3:4a:82:76:94:cf:41:7a:ee:2d:b2:89:58:30:80:ae:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553 Validity Not Before: Apr 15 22:56:52 2026 GMT Not After : Apr 19 05:57:52 2026 GMT Subject: CN=202A9D1F828E2BFF6E6D317E7720B2C8A5CE45A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:aa:f5:95:92:5a:21:d3:fa:26:b0:a0:5f:5f: 0d:47:ca:ab:da:65:25:d1:96:83:10:31:d1:82:ba: 5b:1c:da:1c:49:f3:57:af:01:82:6f:e1:34:b2:76: 9b:57:19:b3:bf:2c:b5:b7:e4:c8:c3:c6:eb:bd:d5: ee:bf:fe:58:91:2b:4f:86:46:52:c2:88:8b:dc:16: 15:3a:27:27:5f:5d:99:e7:9f:8a:b2:f5:6a:19:bc: 55:5d:fb:a2:94:c8:e6:b5:5e:b3:d9:d6:32:33:b6: a3:a9:ab:92:40:30:de:bc:06:82:6d:4e:cb:63:fa: a7:dd:25:1a:06:d2:14:75:e7:af:1f:80:02:c5:c1: c9:cb:d9:76:27:04:51:74:e0:a8:66:d7:ca:51:59: 36:e3:36:5b:6a:81:5b:15:10:b0:84:6f:3f:9d:b7: 25:63:74:dd:cd:c1:a5:2b:20:4e:f4:c3:9e:85:2e: 55:89:a8:29:ec:48:1b:75:12:a5:fc:25:f1:e5:95: 5d:f0:e5:39:1f:dd:bb:4b:65:57:65:8a:81:4b:b6: 92:30:81:9b:68:2d:83:77:18:2b:de:e2:8f:57:a0: 2d:b0:6f:cd:d2:d6:8d:79:ba:76:90:d6:7e:77:05: a3:57:bb:94:b5:72:45:9a:58:ff:49:09:01:07:75: b6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2A:9D:1F:82:8E:2B:FF:6E:6D:31:7E:77:20:B2:C8:A5:CE:45:A6 X509v3 Authority Key Identifier: keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:37:2e:92:1a:a1:b2:26:b8:55:92:7f:dd:73:9c:6b:c0:07: 49:b7:bd:92:fa:c9:8a:1e:bf:61:b6:fd:44:46:c7:2a:c6:22: b4:53:c0:e5:f1:de:a0:86:02:de:cd:cc:d7:af:99:0f:38:32: 00:14:b1:f8:77:4a:6e:81:dd:2b:b7:0c:5d:26:c3:b7:36:5c: f6:cb:b5:3c:32:f0:ef:f0:6f:60:60:3e:51:4b:e8:1b:86:1c: 10:dd:61:e5:6b:b0:fa:02:cd:98:7f:b3:76:d0:9d:e9:7b:2c: d6:39:5f:de:e5:e9:3f:38:ca:d3:ad:6b:c5:ac:06:5a:0b:58: fa:88:1f:ed:07:28:a8:22:e2:e2:ab:8e:20:39:d3:39:9f:ef: 76:94:d9:f7:7f:df:2d:b0:51:cf:06:5d:26:55:6b:3b:39:77: 27:53:f8:cc:0e:c6:93:4e:bc:46:ec:2f:42:0e:30:af:6e:c9: 1f:78:6e:02:05:06:a2:e4:28:a2:f4:4b:7c:4f:1d:31:c1:c8: 42:c4:4e:98:5e:55:47:a2:77:f5:ac:98:a1:8c:82:96:34:d9: 29:5c:89:16:02:38:5d:d3:3d:31:e2:87:4a:d1:6f:33:d4:d8: 27:90:2c:be:7f:99:33:8e:0b:08:75:64:36:a3:4f:6a:34:54: db:51:8e:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKGNl00qCdpTPQXruLbKJWDCArvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQz OTUyMTU1MzAeFw0yNjA0MTUyMjU2NTJaFw0yNjA0MTkwNTU3NTJaMDMxMTAvBgNV BAMTKDIwMkE5RDFGODI4RTJCRkY2RTZEMzE3RTc3MjBCMkM4QTVDRTQ1QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbqvWVkloh0/omsKBfXw1Hyqva ZSXRloMQMdGCulsc2hxJ81evAYJv4TSydptXGbO/LLW35MjDxuu91e6//liRK0+G RlLCiIvcFhU6JydfXZnnn4qy9WoZvFVd+6KUyOa1XrPZ1jIztqOpq5JAMN68BoJt Tstj+qfdJRoG0hR1568fgALFwcnL2XYnBFF04Khm18pRWTbjNltqgVsVELCEbz+d tyVjdN3NwaUrIE70w56FLlWJqCnsSBt1EqX8JfHllV3w5Tkf3btLZVdlioFLtpIw gZtoLYN3GCve4o9XoC2wb83S1o15unaQ1n53BaNXu5S1ckWaWP9JCQEHdbahAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUICqdH4KOK/9ubTF+dyCyyKXORaYwHwYDVR0j BBgwFoAUNa97BUqMyVg17FovknUATTlSFVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ2YTljYS0xMDk2LTRmZTQtODk5My1kMGJlOTdiNTRhNzYvMC8zNUFGN0IwNTRB OENDOTU4MzVFQzVBMkY5Mjc1MDA0RDM5NTIxNTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAwNEQzOTUy MTU1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0NmE5Y2EtMTA5Ni00ZmU0LTg5 OTMtZDBiZTk3YjU0YTc2LzAvMzVBRjdCMDU0QThDQzk1ODM1RUM1QTJGOTI3NTAw NEQzOTUyMTU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEw3LpIaobImuFWSf91znGvAB0m3vZL6yYoe v2G2/URGxyrGIrRTwOXx3qCGAt7NzNevmQ84MgAUsfh3Sm6B3Su3DF0mw7c2XPbL tTwy8O/wb2BgPlFL6BuGHBDdYeVrsPoCzZh/s3bQnel7LNY5X97l6T84ytOta8Ws BloLWPqIH+0HKKgi4uKrjiA50zmf73aU2fd/3y2wUc8GXSZVazs5dydT+MwOxpNO vEbsL0IOMK9uyR94bgIFBqLkKKL0S3xPHTHByELETpheVUeid/WsmKGMgpY02Slc iRYCOF3TPTHih0rRbzPU2CeQLL5/mTOOCwh1ZDajT2o0VNtRjnA= -----END CERTIFICATE-----Generated at Sat Apr 18 01:30:28 2026 by rpki-client