
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft
File: 35526D55C5F4431129EA7CE9304705CE395693D9.mft (raw, json)
Hash identifier: y66yV3VTOu9lwU55eDZ8pC5b/mVL7l5a7zpTuMmqRKg=
Subject key identifier: 5B:B6:C5:7F:3D:E3:5C:66:22:2A:B4:58:FF:EF:AF:4B:8E:1E:8A:25
Authority key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9
Certificate issuer: /CN=35526D55C5F4431129EA7CE9304705CE395693D9
Certificate serial: 3CE65D75B84555CA6ED78483613C087F53192EE2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft
Manifest number: 0277
Signing time: Sat 28 Feb 2026 08:01:19 +0000
Manifest this update: Sat 28 Feb 2026 07:56:19 +0000
Manifest next update: Tue 03 Mar 2026 18:24:19 +0000
Files and hashes: 1: 35526D55C5F4431129EA7CE9304705CE395693D9.crl (hash: f+L7ii3csmrhiistFOclHlGszCBx5PVukFDFeYaelRQ=)
2: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: RTuAe01oZKcYw+JAnijcOaMyxK0mUgunx1L/6+eOJW8=)
3: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: xmE/JEyhXthuYU++MAzsO/GoVJLu7FXPu8oedNkxkIE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl
rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 18:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e6:5d:75:b8:45:55:ca:6e:d7:84:83:61:3c:08:7f:53:19:2e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35526D55C5F4431129EA7CE9304705CE395693D9
Validity
Not Before: Feb 28 07:56:19 2026 GMT
Not After : Mar 3 18:24:19 2026 GMT
Subject: CN=5BB6C57F3DE35C66222AB458FFEFAF4B8E1E8A25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:c8:c0:7f:1b:d8:2f:82:d8:11:fc:53:ef:
81:fc:08:34:51:f9:28:52:64:0b:e2:f4:18:44:b6:
33:8c:ae:5b:53:1a:da:45:75:91:16:76:6c:53:37:
e9:ad:ce:99:9b:a6:7a:74:3c:cf:c3:6c:70:27:ba:
03:cf:9b:c5:20:bd:96:2a:5e:a4:db:78:43:66:22:
19:0c:a8:af:e7:1e:c7:07:6d:a1:4c:b6:7a:14:1c:
d7:51:73:d5:ac:f3:c2:02:44:ab:c2:a0:3e:53:61:
2a:a4:71:3c:f7:7b:63:75:2f:3f:be:31:20:bd:f1:
a5:0d:ae:2b:c5:40:a2:39:8e:39:e0:87:7f:69:b3:
7d:d6:6b:a8:b1:ec:ce:13:ee:e0:2d:c8:94:b0:e6:
97:79:23:16:78:04:28:1d:77:f2:ae:1f:3d:cd:90:
70:fe:4c:7e:22:c9:d9:e5:d6:6d:d8:bf:61:b6:22:
ce:ee:cb:65:20:d8:4b:4e:56:2e:8b:f5:6e:5c:fd:
90:1e:8a:c3:fe:a5:ad:7f:95:f4:53:5c:ce:1a:e2:
5b:f2:b4:2e:49:7b:69:45:b3:df:86:d1:b4:58:7a:
92:1d:32:c1:92:03:dc:93:d5:a7:96:3e:df:67:ed:
e7:2e:31:17:3f:a2:a4:c8:b8:0d:9a:65:40:aa:8b:
ab:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B6:C5:7F:3D:E3:5C:66:22:2A:B4:58:FF:EF:AF:4B:8E:1E:8A:25
X509v3 Authority Key Identifier:
keyid:35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:88:3e:72:b5:2d:4f:9c:a6:0f:c8:50:b2:29:41:cf:20:19:
f2:6f:dd:fd:1d:26:ab:b8:78:b0:8f:77:66:82:79:91:2f:d1:
89:d3:7d:0b:dc:49:e5:d8:ca:47:f7:e7:61:e1:e3:4f:64:37:
01:ed:97:5b:78:72:d0:15:47:52:2a:61:72:d6:36:35:bf:e6:
4a:92:49:41:4e:04:c2:a2:e9:e3:d0:77:31:1c:a8:14:fe:0e:
e9:c8:5b:10:d3:09:0e:5a:cc:84:af:5d:f1:2f:5b:c6:c7:1b:
1f:23:c8:5d:18:3b:96:f9:60:9d:65:b9:1f:ca:c1:7f:16:cd:
bb:aa:34:83:4c:50:ef:c0:26:81:cd:32:80:cb:85:b6:b1:ae:
11:5c:a1:7a:ce:b2:4d:01:a7:2e:fb:15:ef:bd:b2:8e:0f:19:
00:27:c9:64:3d:17:f7:0e:6d:7f:02:bd:a0:e6:60:a3:1f:45:
e6:4b:6a:43:11:cc:ec:87:33:21:ca:bc:04:f3:73:e4:18:7e:
21:b6:cf:7c:52:c8:b0:d2:ee:9f:fc:a0:39:cd:55:d9:11:34:
22:8d:2c:ba:40:07:85:f1:57:2d:a0:e7:c3:c7:a8:8b:8b:f3:
5a:11:54:0f:2e:4e:1a:f6:6c:a1:57:d5:bc:d6:0f:13:1e:92:
ab:97:2f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:50:56 2026 by rpki-client