$ rpki-client -vvf repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft File: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft (raw, json) Hash identifier: ds4Bv7hSOxrChUf9YLqEi15tvZBPfanVlCQqe7z0aPk= Subject key identifier: B2:07:F2:26:7F:E3:6F:B6:3F:7D:C4:D9:07:4A:C1:62:DE:27:A0:F0 Authority key identifier: C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 Certificate issuer: /CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Certificate serial: 59EDB03F47AAC7450F7167A9C00EDFB9E5E75B5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft Manifest number: 0159 Signing time: Sat 28 Feb 2026 12:51:49 +0000 Manifest this update: Sat 28 Feb 2026 12:46:49 +0000 Manifest next update: Tue 03 Mar 2026 22:36:49 +0000 Files and hashes: 1: 3230332e31342e31382e302f32342d3234203d3e20313532303834.roa (hash: XcDiOJhAR1vd2U+Ewn3aHsLFKLuGOijteolk93wlaIY=) 2: C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl (hash: 8vCDSfPkvB7GVV01uEzLhh6XkF0ugNFGHGoBBLX6PHk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ed:b0:3f:47:aa:c7:45:0f:71:67:a9:c0:0e:df:b9:e5:e7:5b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Validity Not Before: Feb 28 12:46:49 2026 GMT Not After : Mar 3 22:36:49 2026 GMT Subject: CN=B207F2267FE36FB63F7DC4D9074AC162DE27A0F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:10:87:14:2f:2e:05:a7:54:04:88:7b:04:1c: 6c:db:76:fe:c8:2a:38:20:e5:1e:e7:3f:0e:96:e3: f6:b4:a5:32:b7:e2:4f:3d:63:2a:d0:68:c0:72:41: 65:72:bd:e9:10:d8:78:c7:64:41:2b:7e:e8:f4:c6: 2b:9f:59:63:bd:ea:ea:09:e4:9d:04:49:d1:0e:41: 18:c2:af:7c:e2:96:39:34:ea:8e:5c:c9:64:91:eb: 26:e0:24:76:cf:2f:90:b5:06:75:d4:bb:76:7e:d8: 74:7a:8c:a3:c1:1d:88:74:a5:ea:73:27:35:97:54: 09:09:7b:33:f8:64:9f:e9:d6:f9:85:71:76:66:45: 87:c6:0b:f6:c0:65:a2:8d:80:4a:1c:70:03:06:85: 4d:64:e6:41:ef:b9:64:af:c7:ad:2b:63:23:e6:79: b7:37:29:3a:30:3c:e1:49:fa:2a:dd:0b:93:cb:bc: 06:71:31:43:e1:db:ec:b4:40:dd:1f:86:d4:6b:11: 89:38:87:3c:72:bc:83:8a:a6:63:f7:27:7d:09:50: eb:94:39:48:9e:63:fb:66:91:7f:9f:b9:30:6c:a6: f3:42:24:b2:d1:ce:41:8b:7d:c5:db:66:3f:0d:d9: 29:e4:d3:db:98:af:3b:1f:d8:78:67:24:17:28:be: 24:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:07:F2:26:7F:E3:6F:B6:3F:7D:C4:D9:07:4A:C1:62:DE:27:A0:F0 X509v3 Authority Key Identifier: keyid:C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:cf:7e:35:7d:25:6d:52:a2:35:dd:0c:ca:f5:28:03:54:4d: e2:32:1a:9d:7f:05:bf:e8:44:16:fe:9a:42:6e:ec:03:c9:87: 90:e6:65:7e:0b:e4:8d:72:e3:e8:6f:8f:63:37:41:6b:e6:92: e8:5a:08:1b:5b:47:52:27:39:00:74:bc:b3:5f:93:61:12:2b: c1:d1:7f:71:0a:fa:93:22:b3:42:fa:11:0b:be:de:a9:9c:4c: 23:43:7c:f6:02:c1:be:07:9a:2f:38:a1:c3:99:9a:d1:ae:04: 3f:2d:73:0d:9a:b4:7c:bf:9d:fe:18:cd:81:9e:8f:52:8f:5b: 0b:cc:3a:f1:b9:b7:a2:90:cb:92:ce:57:6a:56:f0:c8:71:92: 96:a5:d5:4c:c5:1a:fb:d1:73:b1:2b:8b:d8:2e:36:a1:ad:98: cc:9e:ae:74:cb:3d:54:90:dd:d0:c6:db:5e:31:19:0c:eb:d4: f8:54:98:0f:cb:6b:43:6c:b1:04:78:33:21:0c:af:18:fd:96: e9:f8:89:39:14:d5:be:2b:55:33:1f:92:ad:17:32:48:05:58: db:1e:4f:25:fa:a1:a3:a0:0c:8c:c5:04:4a:51:54:ef:40:76: 4b:7d:93:4e:21:46:2f:0a:1c:79:5a:65:8e:68:82:03:ff:18: cc:df:1f:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWe2wP0eqx0UPcWepwA7fueXnW10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNG NDlBN0U0NzAeFw0yNjAyMjgxMjQ2NDlaFw0yNjAzMDMyMjM2NDlaMDMxMTAvBgNV BAMTKEIyMDdGMjI2N0ZFMzZGQjYzRjdEQzREOTA3NEFDMTYyREUyN0EwRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQEIcULy4Fp1QEiHsEHGzbdv7I Kjgg5R7nPw6W4/a0pTK34k89YyrQaMByQWVyvekQ2HjHZEErfuj0xiufWWO96uoJ 5J0ESdEOQRjCr3ziljk06o5cyWSR6ybgJHbPL5C1BnXUu3Z+2HR6jKPBHYh0pepz JzWXVAkJezP4ZJ/p1vmFcXZmRYfGC/bAZaKNgEoccAMGhU1k5kHvuWSvx60rYyPm ebc3KTowPOFJ+irdC5PLvAZxMUPh2+y0QN0fhtRrEYk4hzxyvIOKpmP3J30JUOuU OUieY/tmkX+fuTBspvNCJLLRzkGLfcXbZj8N2Snk09uYrzsf2HhnJBcoviR1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsgfyJn/jb7Y/fcTZB0rBYt4noPAwHwYDVR0j BBgwFoAUw17YWzb11RnSzR1HS+UcE/SafkcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTM2NjZlMS0xZTQxLTQyZWQtYWJiYy1hOGMwODdmM2YzMzkvMC9DMzVFRDg1QjM2 RjVENTE5RDJDRDFENDc0QkU1MUMxM0Y0OUE3RTQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNGNDlB N0U0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTUzNjY2ZTEtMWU0MS00MmVkLWFi YmMtYThjMDg3ZjNmMzM5LzAvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFD MTNGNDlBN0U0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrPfjV9JW1SojXdDMr1KANUTeIyGp1/Bb/o RBb+mkJu7APJh5DmZX4L5I1y4+hvj2M3QWvmkuhaCBtbR1InOQB0vLNfk2ESK8HR f3EK+pMis0L6EQu+3qmcTCNDfPYCwb4Hmi84ocOZmtGuBD8tcw2atHy/nf4YzYGe j1KPWwvMOvG5t6KQy5LOV2pW8Mhxkpal1UzFGvvRc7Eri9guNqGtmMyernTLPVSQ 3dDG214xGQzr1PhUmA/La0NssQR4MyEMrxj9lun4iTkU1b4rVTMfkq0XMkgFWNse TyX6oaOgDIzFBEpRVO9Adkt9k04hRi8KHHlaZY5oggP/GMzfH+E= -----END CERTIFICATE-----Generated at Mon Mar 2 10:57:48 2026 by rpki-client