$ rpki-client -vvf repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft File: 35526D55C5F4431129EA7CE9304705CE395693D9.mft (raw, json) Hash identifier: WHKBbNc90ch1FRZ5eOMFA7kgrHGTOpNr1DFgkfeQUL4= Subject key identifier: 46:BA:D9:BA:60:09:D7:D8:A3:B9:67:7A:38:BE:5D:E8:75:63:9E:C8 Authority key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 Certificate issuer: /CN=35526D55C5F4431129EA7CE9304705CE395693D9 Certificate serial: 0A4B87F4B9B31A9D7CD699BCD431AD7580FFC332 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft Manifest number: 028C Signing time: Fri 17 Apr 2026 08:41:25 +0000 Manifest this update: Fri 17 Apr 2026 08:36:25 +0000 Manifest next update: Mon 20 Apr 2026 20:35:25 +0000 Files and hashes: 1: 35526D55C5F4431129EA7CE9304705CE395693D9.crl (hash: gnvz1gQIcCpjDuc4TQ0qUVdOYR2/Je7H6P540rPc6Dk=) 2: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: RTuAe01oZKcYw+JAnijcOaMyxK0mUgunx1L/6+eOJW8=) 3: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: xmE/JEyhXthuYU++MAzsO/GoVJLu7FXPu8oedNkxkIE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:4b:87:f4:b9:b3:1a:9d:7c:d6:99:bc:d4:31:ad:75:80:ff:c3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35526D55C5F4431129EA7CE9304705CE395693D9 Validity Not Before: Apr 17 08:36:25 2026 GMT Not After : Apr 20 20:35:25 2026 GMT Subject: CN=46BAD9BA6009D7D8A3B9677A38BE5DE875639EC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:33:51:b3:49:bf:fa:71:be:08:d2:55:d3:be: c5:f1:40:c7:99:f3:1a:b5:29:f3:d5:89:1b:97:41: b2:04:a7:75:8e:99:cf:de:46:2a:59:5d:f2:02:ab: 0e:e4:43:e6:db:78:49:b1:6f:ee:6a:17:b0:87:0c: 19:85:8a:f6:7c:ef:38:db:f2:4d:83:42:58:74:89: 6d:12:40:a9:50:fa:9e:3b:a3:b8:cc:86:08:22:f0: 28:cd:7f:28:0d:65:de:cd:9b:88:66:fa:06:f1:33: 48:c9:d5:b7:a8:2e:22:b2:fc:bc:0d:96:b3:f8:ca: 1d:51:94:94:c3:9d:bd:18:14:25:c1:7e:4e:fc:52: 8c:34:aa:4b:f4:7e:9c:a7:e4:96:80:a7:fc:dc:cd: 58:ff:83:d3:13:2d:d5:98:7f:a3:8b:ec:0e:1c:80: 4d:53:66:c8:a8:d1:75:06:1a:c7:71:bf:58:d1:9b: 95:dd:3b:45:94:6e:59:ab:fe:95:8d:14:4b:ac:f3: 48:0c:e9:3f:43:d4:4a:fb:a2:26:55:cd:e1:b9:e6: 8e:18:5d:b1:c9:a9:1d:c2:31:10:cc:78:11:70:cd: 71:bc:83:be:48:55:17:65:e1:f7:d9:63:82:94:b9: a1:b6:39:9e:62:2b:72:c0:2c:2a:64:fa:42:1a:5f: 32:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BA:D9:BA:60:09:D7:D8:A3:B9:67:7A:38:BE:5D:E8:75:63:9E:C8 X509v3 Authority Key Identifier: keyid:35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:ee:f5:e4:3d:c8:46:49:71:ae:07:49:0a:9a:e7:d9:14:f6: 50:b9:7b:9b:ed:3b:14:6b:9b:31:92:d9:c2:60:52:4d:c5:fd: 42:68:12:69:92:ac:89:56:d2:6b:64:96:5d:9e:d3:f3:71:cd: d5:26:38:0e:2c:9c:10:59:d3:bd:5d:31:d7:b6:e8:c2:40:96: 5d:b0:ef:2c:c3:8b:9a:f1:a4:10:ce:56:ed:d8:01:1f:c5:57: 0f:4f:3d:43:06:d2:22:ff:ff:0c:40:c9:ee:0e:39:b8:01:e4: 9e:f9:47:8a:28:c2:ca:17:7b:a0:81:73:d2:94:46:2f:d8:13: 24:f4:f9:96:26:f0:9f:32:a3:d5:b7:c9:f2:ee:36:48:fb:fc: f7:ec:f8:61:54:ed:e2:2f:0a:ae:bc:18:2b:15:19:0f:e4:03: c9:62:84:24:ba:3c:8f:86:de:e6:dd:7d:18:82:06:1a:39:88: 7d:9a:6b:ff:ec:f8:17:0a:d1:1e:13:fb:c3:68:12:47:d9:2e: b5:8a:07:33:0f:7f:ca:29:7a:31:68:69:f4:17:cc:d7:ec:4d: 85:00:3d:d9:50:44:00:a4:b4:0a:96:21:28:24:b7:24:37:b3: 41:c4:95:b3:a7:a9:85:49:50:32:a5:e0:e5:a0:b6:a7:0e:43: 93:90:a8:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCkuH9LmzGp181pm81DGtdYD/wzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0Uz OTU2OTNEOTAeFw0yNjA0MTcwODM2MjVaFw0yNjA0MjAyMDM1MjVaMDMxMTAvBgNV BAMTKDQ2QkFEOUJBNjAwOUQ3RDhBM0I5Njc3QTM4QkU1REU4NzU2MzlFQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwM1GzSb/6cb4I0lXTvsXxQMeZ 8xq1KfPViRuXQbIEp3WOmc/eRipZXfICqw7kQ+bbeEmxb+5qF7CHDBmFivZ87zjb 8k2DQlh0iW0SQKlQ+p47o7jMhggi8CjNfygNZd7Nm4hm+gbxM0jJ1beoLiKy/LwN lrP4yh1RlJTDnb0YFCXBfk78Uow0qkv0fpyn5JaAp/zczVj/g9MTLdWYf6OL7A4c gE1TZsio0XUGGsdxv1jRm5XdO0WUblmr/pWNFEus80gM6T9D1Er7oiZVzeG55o4Y XbHJqR3CMRDMeBFwzXG8g75IVRdl4ffZY4KUuaG2OZ5iK3LALCpk+kIaXzLDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURrrZumAJ19ijuWd6OL5d6HVjnsgwHwYDVR0j BBgwFoAUNVJtVcX0QxEp6nzpMEcFzjlWk9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGIwYmY1Yi00NTZkLTRlNjItOWY0OC02MTkyMTQ5ZDUyYzIvMC8zNTUyNkQ1NUM1 RjQ0MzExMjlFQTdDRTkzMDQ3MDVDRTM5NTY5M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0UzOTU2 OTNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1 Q0UzOTU2OTNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHu9eQ9yEZJca4HSQqa59kU9lC5e5vtOxRr mzGS2cJgUk3F/UJoEmmSrIlW0mtkll2e0/NxzdUmOA4snBBZ071dMde26MJAll2w 7yzDi5rxpBDOVu3YAR/FVw9PPUMG0iL//wxAye4OObgB5J75R4oowsoXe6CBc9KU Ri/YEyT0+ZYm8J8yo9W3yfLuNkj7/Pfs+GFU7eIvCq68GCsVGQ/kA8lihCS6PI+G 3ubdfRiCBho5iH2aa//s+BcK0R4T+8NoEkfZLrWKBzMPf8opejFoafQXzNfsTYUA PdlQRACktAqWISgktyQ3s0HElbOnqYVJUDKl4OWgtqcOQ5OQqEA= -----END CERTIFICATE-----Generated at Sat Apr 18 01:34:52 2026 by rpki-client