$ rpki-client -vvf repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft File: E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft (raw, json) Hash identifier: u/2w3U5CsiNINQqLroXpRFbg65D5ajdeBTE/9FPUdIE= Subject key identifier: 79:07:E0:6C:BA:22:B6:C6:99:77:D5:31:B7:92:DF:0B:D4:28:86:BF Authority key identifier: E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 Certificate issuer: /CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Certificate serial: 7E9AE43486291A232A93AB41576F1F0881851A53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft Manifest number: 03A0 Signing time: Fri 17 Apr 2026 00:31:03 +0000 Manifest this update: Fri 17 Apr 2026 00:26:03 +0000 Manifest next update: Mon 20 Apr 2026 06:10:03 +0000 Files and hashes: 1: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (hash: P9ZT0gx4PZCiyvKWCx2aRwpm5VsSmy2L7+39A7JpiDw=) 2: 3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa (hash: hFHJ4kS9GUwE2b+g6TQ3uI/zzh5E5E9pR8UEKQtLf9c=) 3: E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl (hash: nVuYKgJaOeteEaa7tTAdEIQpXGaASVp9/yndcu1l4BE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 06:10:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:9a:e4:34:86:29:1a:23:2a:93:ab:41:57:6f:1f:08:81:85:1a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Validity Not Before: Apr 17 00:26:03 2026 GMT Not After : Apr 20 06:10:03 2026 GMT Subject: CN=7907E06CBA22B6C69977D531B792DF0BD42886BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:01:6e:34:0f:f7:39:b5:fd:88:8b:fc:f9:6a: a7:e8:b8:d4:f9:db:69:bf:61:89:cb:73:9b:2c:e4: 1f:4c:b1:f1:ae:bd:04:a0:2c:ec:64:c6:14:6c:ba: 9b:b9:9a:60:00:f4:4c:e6:4c:15:ac:ec:7a:55:f3: 9e:2a:6f:6f:ac:72:06:fe:c3:00:5c:12:cd:ad:f6: 4d:f8:eb:e0:9a:2f:1f:e6:bc:2e:da:d0:4a:c7:fb: 3e:3a:9e:8e:ca:35:35:5f:89:ec:5c:b5:35:b8:f9: 1c:2b:b9:28:31:d1:2c:4d:41:91:7d:6b:56:6e:76: f4:d9:40:02:e2:47:48:9b:65:a7:ac:17:5b:13:71: f5:b2:91:ad:c4:55:ab:28:e3:d4:8e:e3:ae:6e:cc: c9:8b:b9:db:fc:4f:92:ea:2b:ab:a8:52:89:6a:3b: 66:a2:17:f4:6c:ab:69:31:c6:6d:cc:4c:9f:dd:ef: ca:1f:11:a0:91:98:f9:e8:10:43:6e:53:19:ec:eb: 8e:09:4e:c3:40:5b:ee:c8:1b:8c:cf:22:f4:23:c2: d3:e3:02:12:ba:7e:b7:47:0a:1c:99:f8:fd:d9:47: f4:50:88:e2:50:db:5b:fb:d1:2f:22:bb:d6:1f:f6: db:31:16:cc:fe:6a:78:0a:fc:46:67:52:90:b2:9a: 9d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:07:E0:6C:BA:22:B6:C6:99:77:D5:31:B7:92:DF:0B:D4:28:86:BF X509v3 Authority Key Identifier: keyid:E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:d1:95:ce:52:54:07:c0:72:95:15:ba:d2:e2:dd:34:4b:9c: e0:bd:9f:76:f3:d5:1a:bb:44:87:68:59:c5:0b:bd:0e:68:15: a8:71:3d:7f:3c:c4:e0:34:f1:26:d4:ce:e9:c5:9d:cb:67:1e: 0b:c9:7c:15:8f:48:89:3f:bb:92:28:9d:bb:f7:99:ce:83:f8: 9b:21:e7:4a:7e:21:75:a5:09:80:13:38:b6:52:6c:57:e2:a7: e6:c9:78:50:d1:cb:37:0c:fd:1f:08:88:7d:5d:27:0b:21:c2: 4d:03:c6:01:35:90:67:54:6b:84:a5:e8:79:32:4e:99:c4:01: f1:73:31:96:5a:f1:ab:6f:de:31:ae:88:dc:6b:73:fd:cc:c8: 23:32:ff:3b:a4:fd:01:cd:21:d9:ac:37:14:02:94:80:83:59: 5a:e5:17:4c:84:55:c6:39:69:64:71:86:ca:fb:9c:1b:b5:3c: 4d:6c:26:8b:61:d8:63:26:52:26:07:74:41:52:b7:b1:a3:10: 49:dd:0b:d1:30:8e:ce:de:54:a8:78:dd:da:c5:c7:7e:dc:b6: 47:2e:84:37:b8:34:d8:6d:4e:b5:3f:33:80:1b:4f:5d:7c:5b: aa:f5:6e:33:88:d9:1b:3c:33:77:3e:cf:f8:e5:fe:9c:9f:80: 3c:65:14:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfprkNIYpGiMqk6tBV28fCIGFGlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1 RTJFNDQzMzAeFw0yNjA0MTcwMDI2MDNaFw0yNjA0MjAwNjEwMDNaMDMxMTAvBgNV BAMTKDc5MDdFMDZDQkEyMkI2QzY5OTc3RDUzMUI3OTJERjBCRDQyODg2QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAW40D/c5tf2Ii/z5aqfouNT5 22m/YYnLc5ss5B9MsfGuvQSgLOxkxhRsupu5mmAA9EzmTBWs7HpV854qb2+scgb+ wwBcEs2t9k346+CaLx/mvC7a0ErH+z46no7KNTVfiexctTW4+RwruSgx0SxNQZF9 a1ZudvTZQALiR0ibZaesF1sTcfWyka3EVaso49SO465uzMmLudv8T5LqK6uoUolq O2aiF/Rsq2kxxm3MTJ/d78ofEaCRmPnoEENuUxns644JTsNAW+7IG4zPIvQjwtPj AhK6frdHChyZ+P3ZR/RQiOJQ21v70S8iu9Yf9tsxFsz+angK/EZnUpCymp3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeQfgbLoitsaZd9Uxt5LfC9Qohr8wHwYDVR0j BBgwFoAU412gexFL1CkB98HbjmhOmV4uRDMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWFiYjU3OC1iOWRiLTRhNDctOGQ3ZS0xMWE2MzQyODkwMTgvMC9FMzVEQTA3QjEx NEJENDI5MDFGN0MxREI4RTY4NEU5OTVFMkU0NDMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1RTJF NDQzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhYmI1NzgtYjlkYi00YTQ3LThk N2UtMTFhNjM0Mjg5MDE4LzAvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRF OTk1RTJFNDQzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHRlc5SVAfAcpUVutLi3TRLnOC9n3bz1Rq7 RIdoWcULvQ5oFahxPX88xOA08SbUzunFnctnHgvJfBWPSIk/u5Ionbv3mc6D+Jsh 50p+IXWlCYATOLZSbFfip+bJeFDRyzcM/R8IiH1dJwshwk0DxgE1kGdUa4Sl6Hky TpnEAfFzMZZa8atv3jGuiNxrc/3MyCMy/zuk/QHNIdmsNxQClICDWVrlF0yEVcY5 aWRxhsr7nBu1PE1sJoth2GMmUiYHdEFSt7GjEEndC9Ewjs7eVKh43drFx37ctkcu hDe4NNhtTrU/M4AbT118W6r1bjOI2Rs8M3c+z/jl/pyfgDxlFJo= -----END CERTIFICATE-----Generated at Fri Apr 17 18:33:44 2026 by rpki-client