$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft File: 35B589224D641562D0CFE2019F733A965FC8E0C7.mft (raw, json) Hash identifier: rNsYGzKm1Lgiwvx9gO5F1effo1Mq9DRg8NhtGsfc/o8= Subject key identifier: 15:53:FE:D3:98:F8:82:03:7B:4A:E0:C4:E2:20:EE:79:87:91:5D:3F Authority key identifier: 35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7 Certificate issuer: /CN=35B589224D641562D0CFE2019F733A965FC8E0C7 Certificate serial: 433889F9865540700FBA194E85C9B8C5AFE99F21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft Manifest number: 01D4 Signing time: Tue 17 Mar 2026 05:11:15 +0000 Manifest this update: Tue 17 Mar 2026 05:06:15 +0000 Manifest next update: Fri 20 Mar 2026 15:05:15 +0000 Files and hashes: 1: 35B589224D641562D0CFE2019F733A965FC8E0C7.crl (hash: 7PBA0p93HnHl5RQ0SaT336hUeEqYFi3tCu7zgbRhZ7M=) 2: 3130332e36392e3130372e302f32342d3234203d3e20313437303837.roa (hash: WPB0w9n7mCdc21HVfo06mm6RPH3lHaCHs4qLmynGO70=) 3: 3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa (hash: PTzTUTP+tcbec6oQ8XF9BBUTPEmaQDT9+JJ/xv7s79o=) 4: 3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa (hash: J8nc/ZkZUuiaLnI5jAoWLgIJJR1NS9p7mlRSvT0aL/o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 15:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:38:89:f9:86:55:40:70:0f:ba:19:4e:85:c9:b8:c5:af:e9:9f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B589224D641562D0CFE2019F733A965FC8E0C7 Validity Not Before: Mar 17 05:06:15 2026 GMT Not After : Mar 20 15:05:15 2026 GMT Subject: CN=1553FED398F882037B4AE0C4E220EE7987915D3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:18:59:ce:88:79:b0:59:ee:59:bf:c6:1f:1e: b0:ce:d1:7d:4e:99:ad:cd:df:ef:3d:92:4d:76:4a: ed:2e:f5:0e:57:f1:de:04:8d:92:44:33:d9:ae:61: 1f:ca:eb:64:06:4b:67:b8:ca:57:a8:ea:cd:79:a2: a9:0e:74:ff:cc:e3:bf:e5:84:ed:78:30:f4:73:ad: c3:1d:85:ef:6e:d0:8a:5f:b4:b3:f7:ce:55:ca:ab: f0:50:c7:6d:36:50:9b:ec:ce:95:1b:d4:a1:b5:ce: a0:b0:28:4a:80:3b:5f:27:1e:e9:a1:32:f2:0a:8a: 7b:21:4e:35:38:4c:b3:35:22:cc:7a:d0:79:5d:83: b8:f2:8f:60:f8:6a:0f:99:c6:ca:84:48:09:4b:bf: a7:19:7c:bc:00:c2:46:68:c8:be:7a:63:a5:75:98: 4f:f2:bf:26:44:97:4b:ab:f8:7c:7f:17:b8:7d:f2: 39:3f:ad:99:1e:9b:ef:12:7e:25:67:61:4e:61:cf: 5c:9b:05:cb:ce:bb:d7:79:28:d6:80:9f:a1:ca:8a: b5:84:e0:51:68:0d:7a:0c:e2:fe:9c:95:78:1c:39: ef:81:ea:77:03:0e:05:c6:c6:1d:00:c0:e3:cf:bb: 5c:b1:e8:be:41:e2:ca:2b:56:c6:99:8a:8c:6a:ce: 65:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:53:FE:D3:98:F8:82:03:7B:4A:E0:C4:E2:20:EE:79:87:91:5D:3F X509v3 Authority Key Identifier: keyid:35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:c6:cf:3b:eb:ce:91:02:34:03:ae:da:bf:67:7d:78:22:f3: 4d:05:e6:d2:df:b0:eb:cc:a5:46:07:d4:3c:8f:5e:8b:ff:3f: 4b:b6:70:10:6c:ac:ae:23:d4:19:76:da:17:57:2e:44:f9:a7: 51:94:9a:2a:eb:31:85:2b:2b:a9:48:58:08:ad:8f:4e:fe:7d: 9f:07:d2:1e:f7:be:bd:4d:75:d5:e7:a1:a2:73:7b:80:b5:50: 51:e3:67:7c:76:30:7f:9c:2f:ec:28:ae:ce:97:bd:16:fd:32: 90:f1:84:de:e7:26:92:c4:2f:3a:61:00:e5:89:6b:b6:2a:f9: 35:de:6f:6a:97:5a:5e:c1:52:79:13:f1:2f:47:b8:7f:f8:6b: 67:91:ed:7b:42:f0:f8:15:e4:26:6d:af:ab:c9:f9:be:d5:f9: 45:49:04:1a:aa:20:ab:d3:31:1c:d8:e7:07:47:4e:11:69:ef: 7f:7f:32:ca:e2:7d:a8:f3:4a:8c:76:ba:77:08:14:e8:0e:92: 9c:62:18:a1:85:71:7d:8f:4d:81:99:05:81:3d:1e:60:1a:ed: d4:b1:c5:64:e2:74:82:08:8a:bf:2c:53:c5:cf:96:fe:e2:14: 7c:69:4a:68:33:39:24:ce:f8:05:4d:33:c0:ad:16:dc:21:5e: f7:42:6d:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQziJ+YZVQHAPuhlOhcm4xa/pnyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNBOTY1 RkM4RTBDNzAeFw0yNjAzMTcwNTA2MTVaFw0yNjAzMjAxNTA1MTVaMDMxMTAvBgNV BAMTKDE1NTNGRUQzOThGODgyMDM3QjRBRTBDNEUyMjBFRTc5ODc5MTVEM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAGFnOiHmwWe5Zv8YfHrDO0X1O ma3N3+89kk12Su0u9Q5X8d4EjZJEM9muYR/K62QGS2e4yleo6s15oqkOdP/M47/l hO14MPRzrcMdhe9u0IpftLP3zlXKq/BQx202UJvszpUb1KG1zqCwKEqAO18nHumh MvIKinshTjU4TLM1Isx60Hldg7jyj2D4ag+ZxsqESAlLv6cZfLwAwkZoyL56Y6V1 mE/yvyZEl0ur+Hx/F7h98jk/rZkem+8SfiVnYU5hz1ybBcvOu9d5KNaAn6HKirWE 4FFoDXoM4v6clXgcOe+B6ncDDgXGxh0AwOPPu1yx6L5B4sorVsaZioxqzmVxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFVP+05j4ggN7SuDE4iDueYeRXT8wHwYDVR0j BBgwFoAUNbWJIk1kFWLQz+IBn3M6ll/I4McwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWUyZWJkZS02MzExLTQ4OGEtODJiNy05ZDRjMDU1MzA5ODcvMC8zNUI1ODkyMjRE NjQxNTYyRDBDRkUyMDE5RjczM0E5NjVGQzhFMEM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNBOTY1RkM4 RTBDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFlMmViZGUtNjMxMS00ODhhLTgy YjctOWQ0YzA1NTMwOTg3LzAvMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNB OTY1RkM4RTBDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzGzzvrzpECNAOu2r9nfXgi800F5tLfsOvM pUYH1DyPXov/P0u2cBBsrK4j1Bl22hdXLkT5p1GUmirrMYUrK6lIWAitj07+fZ8H 0h73vr1NddXnoaJze4C1UFHjZ3x2MH+cL+wors6XvRb9MpDxhN7nJpLELzphAOWJ a7Yq+TXeb2qXWl7BUnkT8S9HuH/4a2eR7XtC8PgV5CZtr6vJ+b7V+UVJBBqqIKvT MRzY5wdHThFp739/MsrifajzSox2uncIFOgOkpxiGKGFcX2PTYGZBYE9HmAa7dSx xWTidIIIir8sU8XPlv7iFHxpSmgzOSTO+AVNM8CtFtwhXvdCbbU= -----END CERTIFICATE-----Generated at Thu Mar 19 09:25:13 2026 by rpki-client