$ rpki-client -vvf repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft File: 035AD6A9B712C4FA76B7E823A79F6410B449136D.mft (raw, json) Hash identifier: Y9IPUVlfUsQurLfs18e3SmoXwbtOBSM2DiOVIboyVb0= Subject key identifier: 8E:F6:27:DF:CA:EB:75:B2:26:86:C7:C0:D2:1C:F8:C1:DC:DC:58:8C Authority key identifier: 03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D Certificate issuer: /CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Certificate serial: 672620EB6915EA3E85618EBB92B3AD199225D09E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft Manifest number: 0287 Signing time: Sun 01 Mar 2026 03:02:23 +0000 Manifest this update: Sun 01 Mar 2026 02:57:23 +0000 Manifest next update: Wed 04 Mar 2026 04:40:23 +0000 Files and hashes: 1: 3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa (hash: fSTjDiCkhPJTilhENB30IOj5dwzmYI75peRH7bkO+gw=) 2: 035AD6A9B712C4FA76B7E823A79F6410B449136D.crl (hash: egJJx6OrPsHO4rdv7iLngWJoDGKGFcQr+NZ80yDXBIk=) 3: 3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa (hash: dAv8397KxH06NFrEpCMxpGCTJ8fWDjy1a13maKgnPwg=) 4: 3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa (hash: gBUWYn2rSz2KJJuB905tTSt6/9g+/R4WY7xwSYhk9n0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 04:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:26:20:eb:69:15:ea:3e:85:61:8e:bb:92:b3:ad:19:92:25:d0:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Validity Not Before: Mar 1 02:57:23 2026 GMT Not After : Mar 4 04:40:23 2026 GMT Subject: CN=8EF627DFCAEB75B22686C7C0D21CF8C1DCDC588C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fd:7f:a8:4e:bf:72:f2:41:eb:a0:2b:03:a6: 6b:f0:4d:1b:f5:28:97:05:9a:74:09:75:43:4b:8a: 31:84:e5:63:ce:96:67:52:4d:80:e6:c0:ee:f4:f0: 19:f8:26:c7:1a:e4:ea:1e:6c:de:bb:ff:7f:15:f6: f7:bc:a0:1c:2c:a3:04:28:38:1a:a3:7a:8c:2d:f3: 1b:f2:56:5b:5d:58:ab:a6:b1:c8:5d:9e:af:69:bd: dc:fa:c0:45:51:29:8c:65:ae:62:e2:f3:17:87:da: 81:e8:b8:fd:25:53:3d:68:8b:e9:90:dc:61:2e:ef: 03:0d:94:9b:df:6f:c7:85:af:aa:18:c0:a1:86:9a: d3:42:86:5b:f3:a2:c5:4a:1a:26:c8:61:53:25:c3: 26:be:1f:48:33:d6:7f:80:3b:ee:2e:e7:1c:49:b3: f7:26:c8:36:1e:b1:1a:02:90:9a:f9:29:52:99:39: ae:c0:c0:30:6d:fe:8d:20:bc:75:e2:64:6c:f7:66: d7:80:4d:09:fc:05:0d:28:8e:ed:df:46:c7:cf:fd: e7:a9:d2:27:1c:e4:f4:33:d1:dd:13:04:0f:2e:c5: 67:b5:10:9e:75:7b:ca:3a:d7:6b:44:fb:11:8c:cc: 9a:90:4a:50:8f:93:b2:d3:84:55:a8:76:a1:61:77: d1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F6:27:DF:CA:EB:75:B2:26:86:C7:C0:D2:1C:F8:C1:DC:DC:58:8C X509v3 Authority Key Identifier: keyid:03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:2c:da:85:aa:c0:20:ce:b2:b6:79:93:76:4f:85:c4:56:4a: 0c:87:ad:04:51:7d:0f:fa:a4:ff:26:f0:98:89:21:03:ee:ba: 50:17:8e:f8:f9:04:33:39:26:97:70:45:a9:45:8d:ef:ae:e5: bd:54:e9:10:99:ce:5b:fc:95:4e:73:10:97:3e:0a:93:c7:2f: 56:eb:d4:4b:1b:39:d5:ef:5b:d6:4e:6d:08:15:a6:9c:8d:eb: ba:3d:2c:78:49:ae:ce:fa:6f:47:b9:9a:fe:1a:a9:d0:e2:c4: 00:e0:a3:ee:fd:77:db:2a:23:b4:c0:dd:e7:63:34:70:17:20: a3:79:9a:2d:7e:9e:fc:41:89:e2:67:c7:78:10:2d:fb:b3:5f: 27:17:18:db:78:a1:cf:ca:a6:dd:5d:62:57:67:13:3f:3e:75: 0f:e8:52:58:27:47:10:ca:de:20:19:04:1b:d6:60:5c:0b:ae: d9:6f:af:9a:71:d7:c1:fb:b0:ef:fa:3f:64:ad:db:34:ab:15: af:b8:fd:c3:9b:b0:ce:0c:e9:64:6a:07:aa:c5:69:00:4b:b6: 36:98:87:cd:23:8a:ba:21:7e:12:4e:6f:90:8b:3e:ca:cf:b2: 96:de:1b:a9:99:b0:d6:28:f1:8d:08:72:83:1d:97:89:d6:c8: e4:c1:2f:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZyYg62kV6j6FYY67krOtGZIl0J4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBC NDQ5MTM2RDAeFw0yNjAzMDEwMjU3MjNaFw0yNjAzMDQwNDQwMjNaMDMxMTAvBgNV BAMTKDhFRjYyN0RGQ0FFQjc1QjIyNjg2QzdDMEQyMUNGOEMxRENEQzU4OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq/X+oTr9y8kHroCsDpmvwTRv1 KJcFmnQJdUNLijGE5WPOlmdSTYDmwO708Bn4Jsca5OoebN67/38V9ve8oBwsowQo OBqjeowt8xvyVltdWKumschdnq9pvdz6wEVRKYxlrmLi8xeH2oHouP0lUz1oi+mQ 3GEu7wMNlJvfb8eFr6oYwKGGmtNChlvzosVKGibIYVMlwya+H0gz1n+AO+4u5xxJ s/cmyDYesRoCkJr5KVKZOa7AwDBt/o0gvHXiZGz3ZteATQn8BQ0oju3fRsfP/eep 0icc5PQz0d0TBA8uxWe1EJ51e8o612tE+xGMzJqQSlCPk7LThFWodqFhd9EBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjvYn38rrdbImhsfA0hz4wdzcWIwwHwYDVR0j BBgwFoAUA1rWqbcSxPp2t+gjp59kELRJE20wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTZmNWNlNy1iMzZiLTQ3M2QtYTViZS05YzAzNTBkMWYzODIvMC8wMzVBRDZBOUI3 MTJDNEZBNzZCN0U4MjNBNzlGNjQxMEI0NDkxMzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBCNDQ5 MTM2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2ZjVjZTctYjM2Yi00NzNkLWE1 YmUtOWMwMzUwZDFmMzgyLzAvMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0 MTBCNDQ5MTM2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYs2oWqwCDOsrZ5k3ZPhcRWSgyHrQRRfQ/6 pP8m8JiJIQPuulAXjvj5BDM5JpdwRalFje+u5b1U6RCZzlv8lU5zEJc+CpPHL1br 1EsbOdXvW9ZObQgVppyN67o9LHhJrs76b0e5mv4aqdDixADgo+79d9sqI7TA3edj NHAXIKN5mi1+nvxBieJnx3gQLfuzXycXGNt4oc/Kpt1dYldnEz8+dQ/oUlgnRxDK 3iAZBBvWYFwLrtlvr5px18H7sO/6P2St2zSrFa+4/cObsM4M6WRqB6rFaQBLtjaY h80jirohfhJOb5CLPsrPspbeG6mZsNYo8Y0IcoMdl4nWyOTBL/Y= -----END CERTIFICATE-----Generated at Mon Mar 2 09:31:30 2026 by rpki-client