$ rpki-client -vvf repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft File: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft (raw, json) Hash identifier: A1lwk6JFzEP4bQPHDFcfB2QmB1p2+f9zCiowFTrgsdw= Subject key identifier: 82:A3:46:B9:41:6C:1B:57:F9:0E:13:1B:A7:FD:C3:B2:EF:D2:89:DA Authority key identifier: 35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E Certificate issuer: /CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Certificate serial: 78B0BF3F51F16C41B5DB235719314A0420BEF7CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft Manifest number: 02B5 Signing time: Sun 22 Mar 2026 03:20:46 +0000 Manifest this update: Sun 22 Mar 2026 03:15:46 +0000 Manifest next update: Wed 25 Mar 2026 06:09:46 +0000 Files and hashes: 1: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl (hash: fXAsOqkPZyzyO9OrtxS34VIp83B2kdEDa11X1LFAkKs=) 2: 3130332e3138312e37372e302f32342d3234203d3e20313430343233.roa (hash: ysHwcI5ENqF/e0DNaL77TsbeGSsghP307b8/eRPgpE4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 06:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b0:bf:3f:51:f1:6c:41:b5:db:23:57:19:31:4a:04:20:be:f7:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Validity Not Before: Mar 22 03:15:46 2026 GMT Not After : Mar 25 06:09:46 2026 GMT Subject: CN=82A346B9416C1B57F90E131BA7FDC3B2EFD289DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:30:bd:fc:fe:e2:8a:f7:0f:3c:c1:4c:1c:3d: 61:dd:c7:ba:9f:2b:91:a2:19:dc:67:c7:e6:55:09: f6:48:ba:95:19:4c:ac:a0:50:50:75:00:b2:da:5d: f7:9e:d5:ef:c2:8a:8d:d3:a6:be:8f:93:a2:7b:e8: 38:2c:62:dd:db:72:42:83:7a:84:d2:70:c3:ca:ea: 28:0e:7a:22:e4:3e:1c:75:67:ce:70:bc:d9:78:34: e3:9a:6d:0c:8b:46:b2:a1:bd:0c:3f:26:c2:41:60: f2:c4:9f:65:9f:34:b5:e2:54:b1:d9:47:e9:1f:f7: 86:df:61:61:ce:9f:f5:c2:12:4d:93:40:36:c4:b5: 72:60:01:45:69:2c:54:9e:32:38:88:98:6e:a1:2e: 0e:a1:ac:d0:5d:4e:aa:b7:7c:c2:e6:36:45:db:e2: cd:1f:2a:70:41:6a:6d:5b:bb:11:d6:5b:8e:65:f8: b1:5c:9e:75:f0:e5:1b:c8:ea:c3:b0:67:97:70:5a: ee:41:74:55:6c:e6:a5:ce:f0:94:c4:11:53:27:12: a3:9e:1e:6c:db:33:00:07:7a:39:10:e5:ae:28:58: 37:e6:34:fa:18:1d:dd:32:e1:3d:8a:21:b6:91:93: 37:73:c5:cf:24:6d:6e:f5:2b:69:a6:68:53:41:12: 54:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A3:46:B9:41:6C:1B:57:F9:0E:13:1B:A7:FD:C3:B2:EF:D2:89:DA X509v3 Authority Key Identifier: keyid:35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d7:be:4d:92:c0:7b:4b:c5:12:a3:35:f5:67:be:cd:a8:81: 8b:e5:80:62:e2:5f:13:b5:42:a3:75:21:a6:80:52:76:ed:02: ae:3b:cc:a9:a9:57:94:c2:19:d4:c4:23:59:7e:35:dc:bf:83: 1d:e3:0d:7d:b1:9a:1f:9f:f9:38:ba:dd:ef:a3:41:41:c3:0f: 53:72:be:91:37:37:0b:cc:56:16:74:4a:24:42:2d:22:f8:b3: 0d:d8:6f:ad:88:4c:66:b1:d5:8e:e4:0a:c8:1b:ed:e5:86:4a: 41:29:c1:54:a7:e9:3e:e3:b6:d6:92:72:4c:fd:76:07:7c:e0: 2e:5d:1c:33:2a:43:94:3f:63:15:cf:40:d8:bd:e4:56:15:6c: ae:dd:f4:10:f7:7d:a1:40:75:51:97:23:ef:fa:9f:6f:ec:d1: bc:08:15:9b:02:fe:50:3b:e4:7d:f5:52:d9:22:60:bd:a0:0b: f6:22:10:03:e2:88:90:04:31:dd:3e:9c:c1:f3:d1:08:90:c0: d3:c7:ee:ea:a0:c2:c5:06:44:2f:02:44:6d:b8:f3:6b:90:39: 5e:ef:14:bd:f2:50:c3:9f:75:fb:0c:9d:a3:69:7b:98:b4:d4: ea:a0:72:fe:20:a9:25:b0:f5:5a:1c:a5:28:91:51:fe:38:84: 56:c4:12:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeLC/P1HxbEG12yNXGTFKBCC+980wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1Rjkx OEQyMzY0RTAeFw0yNjAzMjIwMzE1NDZaFw0yNjAzMjUwNjA5NDZaMDMxMTAvBgNV BAMTKDgyQTM0NkI5NDE2QzFCNTdGOTBFMTMxQkE3RkRDM0IyRUZEMjg5REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAML38/uKK9w88wUwcPWHdx7qf K5GiGdxnx+ZVCfZIupUZTKygUFB1ALLaXfee1e/Cio3Tpr6Pk6J76DgsYt3bckKD eoTScMPK6igOeiLkPhx1Z85wvNl4NOOabQyLRrKhvQw/JsJBYPLEn2WfNLXiVLHZ R+kf94bfYWHOn/XCEk2TQDbEtXJgAUVpLFSeMjiImG6hLg6hrNBdTqq3fMLmNkXb 4s0fKnBBam1buxHWW45l+LFcnnXw5RvI6sOwZ5dwWu5BdFVs5qXO8JTEEVMnEqOe HmzbMwAHejkQ5a4oWDfmNPoYHd0y4T2KIbaRkzdzxc8kbW71K2mmaFNBElQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgqNGuUFsG1f5DhMbp/3Dsu/SidowHwYDVR0j BBgwFoAUNcFO6yfOQt6x8zHPCA/l+RjSNk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmNjNDczNC1iZWI2LTRlMzMtOWIxYy00NmRjZDE2NDI1YTEvMC8zNUMxNEVFQjI3 Q0U0MkRFQjFGMzMxQ0YwODBGRTVGOTE4RDIzNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1RjkxOEQy MzY0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZjYzQ3MzQtYmViNi00ZTMzLTli MWMtNDZkY2QxNjQyNWExLzAvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1 RjkxOEQyMzY0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzXvk2SwHtLxRKjNfVnvs2ogYvlgGLiXxO1 QqN1IaaAUnbtAq47zKmpV5TCGdTEI1l+Ndy/gx3jDX2xmh+f+Ti63e+jQUHDD1Ny vpE3NwvMVhZ0SiRCLSL4sw3Yb62ITGax1Y7kCsgb7eWGSkEpwVSn6T7jttaSckz9 dgd84C5dHDMqQ5Q/YxXPQNi95FYVbK7d9BD3faFAdVGXI+/6n2/s0bwIFZsC/lA7 5H31UtkiYL2gC/YiEAPiiJAEMd0+nMHz0QiQwNPH7uqgwsUGRC8CRG2482uQOV7v FL3yUMOfdfsMnaNpe5i01Oqgcv4gqSWw9VocpSiRUf44hFbEEgo= -----END CERTIFICATE-----Generated at Sun Mar 22 09:24:47 2026 by rpki-client