
$ rpki-client -vvf repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft
File: 35E6B2357C98B974C14BA8A5DE46B519083666C6.mft (raw, json)
Hash identifier: uBpoOgxMzE+Qri7UJCYeT6eObES0jC0rTr4sUsJkEX8=
Subject key identifier: D6:BC:92:A2:DD:5C:23:F5:56:B0:52:F1:C9:66:41:53:8B:E9:90:45
Authority key identifier: 35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6
Certificate issuer: /CN=35E6B2357C98B974C14BA8A5DE46B519083666C6
Certificate serial: 0DDD10C898BC757300FF919FD34D51F8516170F8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft
Manifest number: 0213
Signing time: Mon 02 Mar 2026 04:11:57 +0000
Manifest this update: Mon 02 Mar 2026 04:06:57 +0000
Manifest next update: Thu 05 Mar 2026 12:43:57 +0000
Files and hashes: 1: 3130332e3134302e37362e302f32342d3234203d3e203535363636.roa (hash: GLppbahQizSwOWwKriMc4uG3htQlLQar3GU+UJJemeo=)
2: 3130332e3134302e37362e302f32332d3234203d3e203535363636.roa (hash: VrC0pE6ywJ4SpMSp1FoGXZj0toTtd8RroZm7PaGXQLI=)
3: 35E6B2357C98B974C14BA8A5DE46B519083666C6.crl (hash: YokKgKSmIKdKpnoUGIvD0TY+oFZoSuy2eJ8GUaJw0KE=)
4: 3130332e3134302e37372e302f32342d3234203d3e203535363636.roa (hash: lKrNBKuDZS/ipiNlTaiA44F8MyhuWOX6AJpZ28duXRw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl
rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:dd:10:c8:98:bc:75:73:00:ff:91:9f:d3:4d:51:f8:51:61:70:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35E6B2357C98B974C14BA8A5DE46B519083666C6
Validity
Not Before: Mar 2 04:06:57 2026 GMT
Not After : Mar 5 12:43:57 2026 GMT
Subject: CN=D6BC92A2DD5C23F556B052F1C96641538BE99045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:10:30:2c:54:b0:d5:6c:43:70:bb:86:87:
c0:1d:1e:c1:6e:0f:a7:62:c4:34:6e:6e:0d:4a:ea:
17:1b:46:4d:8a:b6:11:2e:13:54:ea:e2:eb:be:8c:
04:11:ea:71:06:51:95:b5:4b:16:de:3c:1c:ae:9d:
8a:ed:a1:a5:5d:ef:d5:c5:2c:2e:b4:db:95:cf:a5:
06:eb:8b:78:d5:75:45:6b:03:1b:ef:86:52:46:c8:
14:22:32:66:c6:67:a3:0f:2e:e5:6a:aa:e3:bc:ca:
53:3f:44:15:7e:53:c1:d9:ae:a8:b4:15:92:59:9e:
52:22:4b:30:72:a4:a9:03:c0:14:87:c7:df:b5:a4:
19:69:6a:4b:5d:a8:2b:2b:27:56:25:7e:6b:96:58:
f7:79:90:c3:59:58:06:9d:38:f8:30:cc:64:62:61:
4a:c2:18:df:51:11:ca:c3:fe:44:d0:e4:6a:54:da:
2b:41:5e:8d:f3:b7:5a:e7:8e:0b:fe:0d:7e:6d:06:
53:84:21:72:c4:77:46:1f:06:68:83:15:c5:fc:23:
c5:f5:e3:ca:6a:67:e8:45:6d:6f:8f:0c:12:92:82:
81:61:43:ea:fc:23:c5:03:ec:3e:3c:70:77:30:b7:
d4:ef:7a:2a:83:8f:af:79:49:73:a2:9c:36:c7:62:
eb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BC:92:A2:DD:5C:23:F5:56:B0:52:F1:C9:66:41:53:8B:E9:90:45
X509v3 Authority Key Identifier:
keyid:35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4c:a2:ac:3f:6b:91:2f:4d:40:73:28:c5:6a:e9:e6:66:cb:
77:6d:97:da:3c:94:7f:b9:7d:b7:82:99:33:49:fa:e9:ce:e1:
b7:7a:3f:28:3d:b6:00:61:d3:2d:fb:80:69:e3:ae:09:e8:15:
12:f7:c1:f9:23:e3:39:ed:db:01:17:52:72:6e:fd:26:64:19:
78:c0:1c:0a:bb:28:4e:b3:a4:0c:09:77:c2:cd:4b:01:5c:3a:
9c:93:7e:60:b6:e3:08:68:e4:50:98:f5:d4:6b:ae:aa:26:7e:
8c:20:06:2a:a2:cc:0e:cd:b8:95:56:ca:5d:dd:86:c8:ab:e0:
d3:ee:d3:1e:8a:7b:cc:1b:5e:b5:dc:98:90:9e:1e:e7:9f:2b:
40:c5:3c:df:4d:44:34:e5:84:24:dd:92:0c:22:03:e4:39:84:
e1:82:3d:66:a3:20:ef:ab:89:42:e2:f4:09:dd:bd:36:44:20:
0f:83:a5:5b:23:18:ac:d1:86:9d:04:15:8a:7f:46:7d:85:cc:
46:d8:b4:17:c7:f6:24:72:af:de:a4:f5:bd:65:04:a9:a6:0f:
93:b5:e1:77:0d:72:95:85:e0:b8:09:10:ec:28:11:7b:d7:52:
59:db:75:a2:1a:7a:42:b6:52:68:0e:4d:da:aa:91:c4:74:73:
c0:46:2d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:58:08 2026 by rpki-client