$ rpki-client -vvf repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft File: E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft (raw, json) Hash identifier: MQRKnm8UQ8+7LSE+mfgyVQ62jHXVh4Tiubn0JhTPl+c= Subject key identifier: 02:30:BE:34:E9:1B:EB:8E:FB:03:9A:FF:3E:68:69:A6:85:F9:A3:24 Authority key identifier: E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 Certificate issuer: /CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Certificate serial: 5D82E5261288141D991BDBEE68A0D93685A20C18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft Manifest number: 038B Signing time: Mon 02 Mar 2026 04:31:06 +0000 Manifest this update: Mon 02 Mar 2026 04:26:06 +0000 Manifest next update: Thu 05 Mar 2026 08:42:06 +0000 Files and hashes: 1: 3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa (hash: hFHJ4kS9GUwE2b+g6TQ3uI/zzh5E5E9pR8UEKQtLf9c=) 2: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (hash: P9ZT0gx4PZCiyvKWCx2aRwpm5VsSmy2L7+39A7JpiDw=) 3: E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl (hash: jwszFPwMlKHtAYW3xp4yL7nPulNG6skdfGpggBUc4UA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:82:e5:26:12:88:14:1d:99:1b:db:ee:68:a0:d9:36:85:a2:0c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Validity Not Before: Mar 2 04:26:06 2026 GMT Not After : Mar 5 08:42:06 2026 GMT Subject: CN=0230BE34E91BEB8EFB039AFF3E6869A685F9A324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:83:df:8d:01:42:6c:f1:90:74:23:fd:7e:2c: 3a:43:9f:9d:e0:3e:42:17:f3:1a:cd:48:b6:6b:b0: 1c:c2:5d:52:e0:5c:85:41:a1:5e:95:9e:f4:f3:d4: c0:62:06:dc:06:24:e2:b5:18:1a:5b:d3:98:80:cf: d1:6a:73:7e:3d:fd:e5:39:24:23:aa:ac:4e:05:9c: 34:99:e1:e8:f6:a5:4a:92:4e:da:2d:60:d1:67:ef: 1f:52:93:db:84:01:e9:e4:0b:8e:3b:f5:00:62:a5: 96:55:24:03:d3:01:0c:d2:01:7b:4b:64:9c:a9:7a: 1b:32:d1:9b:ab:05:a7:06:74:5c:84:ef:0e:35:d4: 47:c4:9b:a1:cb:5b:2b:3c:d1:e9:14:82:db:ed:62: 6f:47:aa:24:82:dc:50:cd:74:6d:d1:d0:fd:70:c1: b0:88:0f:a6:15:82:b2:95:2e:b7:cc:60:18:ec:47: b3:d5:66:c1:14:52:b3:dc:00:49:2f:88:59:16:36: 8c:eb:24:53:1b:1e:15:3f:f5:87:b1:64:8f:dd:33: 5f:f1:ce:bd:10:04:af:1b:de:f3:d2:b8:b3:8e:88: 20:06:e8:88:24:91:d1:7a:f9:3a:a2:87:2d:61:d8: e2:01:5d:01:ff:14:e6:7a:8c:77:14:16:c1:77:7f: 65:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:30:BE:34:E9:1B:EB:8E:FB:03:9A:FF:3E:68:69:A6:85:F9:A3:24 X509v3 Authority Key Identifier: keyid:E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:bd:81:9d:d6:4d:b5:b4:73:8b:6c:ae:65:d7:09:82:c6:93: d5:12:d4:6c:7f:ff:8e:6f:f9:6f:e1:32:b4:ed:5d:b8:d4:6d: 66:57:6c:4c:83:bb:bd:71:d0:76:32:70:5f:74:ca:eb:b3:80: 5a:0c:9c:b2:4e:c9:a5:91:d3:0d:01:79:8e:e1:8e:a7:a0:1f: 1a:8a:9f:8c:70:ae:98:4f:d3:51:25:8f:85:60:79:82:21:7b: 6a:7e:76:b1:33:33:b1:30:37:da:2b:03:8c:9a:e2:c9:59:31: c8:7b:75:ff:87:8d:fe:02:7d:58:ef:75:03:cf:21:7d:01:91: 1a:ee:12:f4:3f:96:2f:71:8e:74:ef:1e:8b:d2:2a:de:d1:17: 8f:4f:d9:d5:34:bd:17:4a:9a:5d:07:d0:8c:bb:ee:22:ef:52: cf:d2:f6:b3:24:93:ee:3c:70:e1:86:c6:cb:9d:a5:82:d4:0d: 98:15:50:b8:ba:ca:47:0d:d6:0c:7b:d1:55:ab:da:80:62:eb: 92:40:ca:e6:1c:4f:5f:58:d6:ef:e6:12:d2:0a:52:2d:b9:88: f6:e1:c6:1f:92:ed:c6:33:c9:d2:e4:f6:ed:ef:ab:93:c1:5c: 9f:90:4a:b6:f9:48:f4:98:f0:6e:50:34:f3:a7:88:89:e7:2d: 6e:c1:4b:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXYLlJhKIFB2ZG9vuaKDZNoWiDBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1 RTJFNDQzMzAeFw0yNjAzMDIwNDI2MDZaFw0yNjAzMDUwODQyMDZaMDMxMTAvBgNV BAMTKDAyMzBCRTM0RTkxQkVCOEVGQjAzOUFGRjNFNjg2OUE2ODVGOUEzMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/g9+NAUJs8ZB0I/1+LDpDn53g PkIX8xrNSLZrsBzCXVLgXIVBoV6VnvTz1MBiBtwGJOK1GBpb05iAz9Fqc349/eU5 JCOqrE4FnDSZ4ej2pUqSTtotYNFn7x9Sk9uEAenkC4479QBipZZVJAPTAQzSAXtL ZJypehsy0ZurBacGdFyE7w411EfEm6HLWys80ekUgtvtYm9HqiSC3FDNdG3R0P1w wbCID6YVgrKVLrfMYBjsR7PVZsEUUrPcAEkviFkWNozrJFMbHhU/9YexZI/dM1/x zr0QBK8b3vPSuLOOiCAG6IgkkdF6+Tqihy1h2OIBXQH/FOZ6jHcUFsF3f2WNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAjC+NOkb6477A5r/PmhppoX5oyQwHwYDVR0j BBgwFoAU412gexFL1CkB98HbjmhOmV4uRDMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWFiYjU3OC1iOWRiLTRhNDctOGQ3ZS0xMWE2MzQyODkwMTgvMC9FMzVEQTA3QjEx NEJENDI5MDFGN0MxREI4RTY4NEU5OTVFMkU0NDMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1RTJF NDQzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhYmI1NzgtYjlkYi00YTQ3LThk N2UtMTFhNjM0Mjg5MDE4LzAvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRF OTk1RTJFNDQzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHa9gZ3WTbW0c4tsrmXXCYLGk9US1Gx//45v +W/hMrTtXbjUbWZXbEyDu71x0HYycF90yuuzgFoMnLJOyaWR0w0BeY7hjqegHxqK n4xwrphP01Elj4VgeYIhe2p+drEzM7EwN9orA4ya4slZMch7df+Hjf4CfVjvdQPP IX0BkRruEvQ/li9xjnTvHovSKt7RF49P2dU0vRdKml0H0Iy77iLvUs/S9rMkk+48 cOGGxsudpYLUDZgVULi6ykcN1gx70VWr2oBi65JAyuYcT19Y1u/mEtIKUi25iPbh xh+S7cYzydLk9u3vq5PBXJ+QSrb5SPSY8G5QNPOniInnLW7BS/4= -----END CERTIFICATE-----Generated at Mon Mar 2 12:51:58 2026 by rpki-client