$ rpki-client -vvf repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft File: 358F4D417A1317CB220BBDC982D7F35D1540D51A.mft (raw, json) Hash identifier: AzN+f51Zmw1y47qUT3s2+hC+1H3ZUkzpYfJ1yxQKvkE= Subject key identifier: EC:AA:AA:1F:44:E8:C3:9B:6A:B9:F9:E0:22:0A:7C:93:3E:BC:0E:B0 Authority key identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A Certificate issuer: /CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Certificate serial: 7A120B91BFF241090073A81511DEA6CCD991B8DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft Manifest number: 01D9 Signing time: Fri 17 Apr 2026 11:02:21 +0000 Manifest this update: Fri 17 Apr 2026 10:57:21 +0000 Manifest next update: Mon 20 Apr 2026 19:12:21 +0000 Files and hashes: 1: 358F4D417A1317CB220BBDC982D7F35D1540D51A.crl (hash: 2l/wqx7liXxDQdCcjoAtYKykT04arFE4dvxKcSe2Gw0=) 2: 3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa (hash: DvNJ8H1CJLvMIn5Y34NSV0YQmp6wM1aq7OtPFufJmPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 19:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:12:0b:91:bf:f2:41:09:00:73:a8:15:11:de:a6:cc:d9:91:b8:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Validity Not Before: Apr 17 10:57:21 2026 GMT Not After : Apr 20 19:12:21 2026 GMT Subject: CN=ECAAAA1F44E8C39B6AB9F9E0220A7C933EBC0EB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6f:1a:26:d2:49:bb:95:e3:9e:e1:6e:c4:6c: 9e:b2:b4:49:5e:91:45:95:b8:ec:9b:cf:9d:fe:55: de:09:63:30:ec:0c:ed:c1:93:8f:3a:9c:23:79:98: 8e:c0:f8:21:27:16:70:0f:19:e1:4c:ed:49:67:e4: da:e4:4b:cd:63:5d:7b:3f:da:42:d2:8d:b9:91:6c: 15:b5:f7:0a:67:57:d6:9d:52:c3:d6:0a:24:4a:5b: 95:33:a6:65:63:24:b5:1e:1e:70:ac:c2:b6:c7:bf: f3:10:37:0f:85:51:a6:47:b5:f4:c6:8b:ce:f9:ca: 05:4a:1b:ec:23:d0:b1:5f:c8:21:7b:65:16:83:c4: a2:69:df:26:3d:09:a0:2b:40:4e:30:ba:1a:73:74: 20:d2:9e:65:e9:07:b9:f9:bf:35:6f:e7:82:80:52: ff:80:3b:43:dc:bf:65:da:0d:20:4d:97:af:5d:89: 52:a7:72:b2:12:cd:aa:d8:0c:dd:ba:87:b9:70:b2: d3:6f:ab:72:e2:55:bd:cf:fe:ac:2d:61:25:aa:5f: 9a:51:96:5a:26:49:45:7f:6d:09:5c:c5:74:d0:78: 20:9a:a6:eb:bc:70:53:3f:bf:37:fe:f4:ff:a1:c1: 8a:34:ed:76:19:1e:1f:0d:7e:59:2c:88:24:2d:67: 07:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AA:AA:1F:44:E8:C3:9B:6A:B9:F9:E0:22:0A:7C:93:3E:BC:0E:B0 X509v3 Authority Key Identifier: keyid:35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:fb:89:51:a2:60:64:3f:d6:17:78:b9:f0:ce:5c:55:e5:c9: b6:08:c1:d2:2a:b5:31:d9:33:6b:45:b1:e0:23:b0:60:7f:0a: 28:2e:10:c5:a3:10:ad:8a:8b:f0:79:75:23:31:c5:a5:0a:a4: 81:8a:0c:e0:a5:79:21:96:f3:0e:4f:05:a5:72:8a:62:dd:8f: 90:82:2c:9e:32:da:b6:0e:e0:8e:6d:78:b0:0e:b8:dd:95:8c: 9a:9b:a2:36:5c:30:ff:5d:ea:0c:15:23:f9:0d:f1:49:ed:f8: 3f:f0:ea:09:9a:d8:2a:42:88:74:61:f5:ee:42:0e:b7:bb:28: 23:9d:f2:da:af:03:e3:e1:59:03:ef:4b:c7:9a:57:de:99:8f: e5:62:bd:0b:e6:46:b9:1e:94:7b:c3:8e:89:a5:1d:b4:43:f3: 5a:3c:bb:df:da:62:b8:ab:f4:50:50:71:c5:02:89:72:60:3f: 73:e9:35:28:7b:15:f0:39:03:37:6c:6f:bf:0a:7a:d6:75:48: 44:0e:8b:37:27:58:10:97:96:30:ce:f3:1b:1a:f5:e0:78:85: 6d:dc:18:61:97:04:20:c1:56:70:57:c0:95:dc:1c:25:f5:d4: ed:88:4f:b9:8d:53:5c:03:89:12:14:e1:05:dd:3e:99:b1:6c: 9e:89:10:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUehILkb/yQQkAc6gVEd6mzNmRuNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQx NTQwRDUxQTAeFw0yNjA0MTcxMDU3MjFaFw0yNjA0MjAxOTEyMjFaMDMxMTAvBgNV BAMTKEVDQUFBQTFGNDRFOEMzOUI2QUI5RjlFMDIyMEE3QzkzM0VCQzBFQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZbxom0km7leOe4W7EbJ6ytEle kUWVuOybz53+Vd4JYzDsDO3Bk486nCN5mI7A+CEnFnAPGeFM7Uln5NrkS81jXXs/ 2kLSjbmRbBW19wpnV9adUsPWCiRKW5UzpmVjJLUeHnCswrbHv/MQNw+FUaZHtfTG i875ygVKG+wj0LFfyCF7ZRaDxKJp3yY9CaArQE4wuhpzdCDSnmXpB7n5vzVv54KA Uv+AO0Pcv2XaDSBNl69diVKncrISzarYDN26h7lwstNvq3LiVb3P/qwtYSWqX5pR llomSUV/bQlcxXTQeCCapuu8cFM/vzf+9P+hwYo07XYZHh8NflksiCQtZweLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7KqqH0Tow5tqufngIgp8kz68DrAwHwYDVR0j BBgwFoAUNY9NQXoTF8siC73JgtfzXRVA1RowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDM4YzE5NS00OTRhLTQ2YTItYjkzYy04ZTE1NjY4ZjA1YjIvMC8zNThGNEQ0MTdB MTMxN0NCMjIwQkJEQzk4MkQ3RjM1RDE1NDBENTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQxNTQw RDUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQzOGMxOTUtNDk0YS00NmEyLWI5 M2MtOGUxNTY2OGYwNWIyLzAvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0Yz NUQxNTQwRDUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ77iVGiYGQ/1hd4ufDOXFXlybYIwdIqtTHZ M2tFseAjsGB/CiguEMWjEK2Ki/B5dSMxxaUKpIGKDOCleSGW8w5PBaVyimLdj5CC LJ4y2rYO4I5teLAOuN2VjJqbojZcMP9d6gwVI/kN8Unt+D/w6gma2CpCiHRh9e5C Dre7KCOd8tqvA+PhWQPvS8eaV96Zj+VivQvmRrkelHvDjomlHbRD81o8u9/aYrir 9FBQccUCiXJgP3PpNSh7FfA5Azdsb78KetZ1SEQOizcnWBCXljDO8xsa9eB4hW3c GGGXBCDBVnBXwJXcHCX11O2IT7mNU1wDiRIU4QXdPpmxbJ6JEC4= -----END CERTIFICATE-----Generated at Fri Apr 17 20:35:17 2026 by rpki-client