$ rpki-client -vvf repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft File: 035AD6A9B712C4FA76B7E823A79F6410B449136D.mft (raw, json) Hash identifier: 2z+W/wYkvxO2RPJHSLqeWozT5GIznUIgd9h+YIYKRPU= Subject key identifier: 3A:AF:BF:B5:99:6F:3E:3D:C0:BE:CD:79:42:8F:C7:34:90:80:3D:82 Authority key identifier: 03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D Certificate issuer: /CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Certificate serial: 41AB07BEC67BBA678D52CA064A67C6B2867625B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft Manifest number: 029C Signing time: Thu 16 Apr 2026 15:13:31 +0000 Manifest this update: Thu 16 Apr 2026 15:08:31 +0000 Manifest next update: Sun 19 Apr 2026 18:19:31 +0000 Files and hashes: 1: 035AD6A9B712C4FA76B7E823A79F6410B449136D.crl (hash: N1lKLCrsD7KXMRMFeJ3DQ4GaCq41xIzCGfutrcvm984=) 2: 3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa (hash: fSTjDiCkhPJTilhENB30IOj5dwzmYI75peRH7bkO+gw=) 3: 3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa (hash: dAv8397KxH06NFrEpCMxpGCTJ8fWDjy1a13maKgnPwg=) 4: 3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa (hash: gBUWYn2rSz2KJJuB905tTSt6/9g+/R4WY7xwSYhk9n0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 18:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ab:07:be:c6:7b:ba:67:8d:52:ca:06:4a:67:c6:b2:86:76:25:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Validity Not Before: Apr 16 15:08:31 2026 GMT Not After : Apr 19 18:19:31 2026 GMT Subject: CN=3AAFBFB5996F3E3DC0BECD79428FC73490803D82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e7:fb:5f:c1:91:81:b7:63:6b:20:0e:dd:ef: d2:79:4f:a9:7e:17:31:d6:b7:b0:a1:98:cd:48:47: d6:1a:1c:80:2f:29:d3:17:2f:ca:1d:39:f3:ef:7b: d3:a6:31:b0:63:20:55:40:c8:82:ef:89:b5:f0:7c: ce:68:5c:37:b5:fd:e0:4e:87:ba:53:49:35:32:7e: 0f:87:68:ef:09:37:5e:78:48:9b:f9:83:f9:4b:3e: ba:f4:3c:7f:08:a9:f2:99:46:fd:f3:c3:8b:05:19: 8c:eb:67:7c:b6:5e:e6:cf:94:44:96:28:4a:8d:ee: 6a:ce:ab:cb:40:fb:88:d2:0e:d2:b8:d0:16:32:e5: 6a:e9:d2:10:3c:5e:80:1c:fb:54:ef:3e:ec:1b:a0: e7:ad:a3:65:df:cc:a0:df:50:28:fe:46:51:ba:8c: f0:bd:35:2d:ec:1e:10:b1:6d:af:7d:05:47:f7:8f: 17:eb:e3:87:28:fd:f6:60:31:3b:89:8e:6c:27:c0: 5f:78:d2:c5:98:82:84:00:93:08:e4:9b:2d:b8:16: 1d:95:6c:12:f2:ab:34:b3:5e:58:41:9e:49:78:01: 8c:47:cc:79:98:9a:ec:6f:75:a6:c4:b4:0f:d6:b4: 73:3f:7a:b5:e7:d2:1d:ad:6e:d6:84:8b:df:59:85: 9f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AF:BF:B5:99:6F:3E:3D:C0:BE:CD:79:42:8F:C7:34:90:80:3D:82 X509v3 Authority Key Identifier: keyid:03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:88:5f:15:e7:e7:9d:ae:d5:31:47:3b:85:9a:47:6a:76:ef: 1f:71:ce:45:e5:97:fc:aa:1b:5f:3f:2a:1f:64:34:0b:0d:93: 38:32:d7:17:ee:8d:31:e4:0a:80:23:5a:ad:d8:52:86:85:c4: d0:a3:6b:58:fc:b3:03:c9:6d:64:1e:ef:ff:86:aa:3e:c0:35: 99:f4:34:f1:08:c2:ac:02:1a:29:08:e2:58:44:a9:76:bd:f8: dd:69:f7:22:83:47:06:98:32:b0:30:40:6c:81:85:ff:ef:30: f5:a2:6a:c7:8f:05:c6:ae:71:7b:11:b3:74:fd:88:66:38:6b: a8:f3:fd:18:f3:47:ae:4a:9b:68:d1:62:d5:f0:90:20:61:1f: bc:5e:5d:6d:0f:50:90:25:bb:f8:b3:e1:f0:73:3c:cb:94:a3: ed:0d:e6:52:86:88:a5:c7:cc:97:22:48:49:b7:1d:3c:3f:49: 0f:12:3e:98:73:42:5d:de:df:7c:2b:04:d0:ce:01:91:b2:f8: 68:84:75:f5:50:03:a6:04:12:55:28:54:f4:25:9a:e1:54:50: 8d:f8:87:e8:09:da:d5:1b:a1:d5:bf:77:a6:14:b9:01:24:25: 2e:d2:2d:ff:4d:d5:5e:42:11:06:62:ae:91:b9:b4:7c:10:80: f2:e7:96:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQasHvsZ7umeNUsoGSmfGsoZ2JbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBC NDQ5MTM2RDAeFw0yNjA0MTYxNTA4MzFaFw0yNjA0MTkxODE5MzFaMDMxMTAvBgNV BAMTKDNBQUZCRkI1OTk2RjNFM0RDMEJFQ0Q3OTQyOEZDNzM0OTA4MDNEODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp5/tfwZGBt2NrIA7d79J5T6l+ FzHWt7ChmM1IR9YaHIAvKdMXL8odOfPve9OmMbBjIFVAyILvibXwfM5oXDe1/eBO h7pTSTUyfg+HaO8JN154SJv5g/lLPrr0PH8IqfKZRv3zw4sFGYzrZ3y2XubPlESW KEqN7mrOq8tA+4jSDtK40BYy5Wrp0hA8XoAc+1TvPuwboOeto2XfzKDfUCj+RlG6 jPC9NS3sHhCxba99BUf3jxfr44co/fZgMTuJjmwnwF940sWYgoQAkwjkmy24Fh2V bBLyqzSzXlhBnkl4AYxHzHmYmuxvdabEtA/WtHM/erXn0h2tbtaEi99ZhZ8ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOq+/tZlvPj3Avs15Qo/HNJCAPYIwHwYDVR0j BBgwFoAUA1rWqbcSxPp2t+gjp59kELRJE20wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTZmNWNlNy1iMzZiLTQ3M2QtYTViZS05YzAzNTBkMWYzODIvMC8wMzVBRDZBOUI3 MTJDNEZBNzZCN0U4MjNBNzlGNjQxMEI0NDkxMzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBCNDQ5 MTM2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2ZjVjZTctYjM2Yi00NzNkLWE1 YmUtOWMwMzUwZDFmMzgyLzAvMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0 MTBCNDQ5MTM2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+IXxXn552u1TFHO4WaR2p27x9xzkXll/yq G18/Kh9kNAsNkzgy1xfujTHkCoAjWq3YUoaFxNCja1j8swPJbWQe7/+Gqj7ANZn0 NPEIwqwCGikI4lhEqXa9+N1p9yKDRwaYMrAwQGyBhf/vMPWiasePBcaucXsRs3T9 iGY4a6jz/RjzR65Km2jRYtXwkCBhH7xeXW0PUJAlu/iz4fBzPMuUo+0N5lKGiKXH zJciSEm3HTw/SQ8SPphzQl3e33wrBNDOAZGy+GiEdfVQA6YEElUoVPQlmuFUUI34 h+gJ2tUbodW/d6YUuQEkJS7SLf9N1V5CEQZirpG5tHwQgPLnllo= -----END CERTIFICATE-----Generated at Fri Apr 17 16:07:07 2026 by rpki-client