$ rpki-client -vvf repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft File: 035AD6A9B712C4FA76B7E823A79F6410B449136D.mft (raw, json) Hash identifier: 1EeVNPEp7URd+JkREoDXd6nk+7XGbXy/i3h6fPGorIs= Subject key identifier: 64:AC:4E:C0:0E:31:68:22:72:66:C1:30:BA:BE:87:65:DF:24:8E:D4 Authority key identifier: 03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D Certificate issuer: /CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Certificate serial: 0CDBB94B145877F5A929FFF95094119628163391 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft Manifest number: 028F Signing time: Wed 18 Mar 2026 20:22:22 +0000 Manifest this update: Wed 18 Mar 2026 20:17:22 +0000 Manifest next update: Sun 22 Mar 2026 03:53:22 +0000 Files and hashes: 1: 035AD6A9B712C4FA76B7E823A79F6410B449136D.crl (hash: 9DztSRlvCcZqIX7JZumw9PpXiQUizBXx8er5joyCNno=) 2: 3130332e3135372e3139322e302f32332d3233203d3e20313431313232.roa (hash: gBUWYn2rSz2KJJuB905tTSt6/9g+/R4WY7xwSYhk9n0=) 3: 3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa (hash: dAv8397KxH06NFrEpCMxpGCTJ8fWDjy1a13maKgnPwg=) 4: 3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa (hash: fSTjDiCkhPJTilhENB30IOj5dwzmYI75peRH7bkO+gw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 03:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:db:b9:4b:14:58:77:f5:a9:29:ff:f9:50:94:11:96:28:16:33:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Validity Not Before: Mar 18 20:17:22 2026 GMT Not After : Mar 22 03:53:22 2026 GMT Subject: CN=64AC4EC00E3168227266C130BABE8765DF248ED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:96:6e:39:e2:22:2d:4e:3d:b9:65:c2:66:b8: 0f:1c:62:29:26:47:e0:37:cf:d7:4a:b1:d2:8b:32: 3e:de:b9:d2:9f:83:8c:95:76:d1:80:85:6c:aa:0b: 8f:d9:a1:f5:9b:64:96:7d:5e:03:2c:a8:ed:35:53: 87:9d:36:99:dd:e8:c5:3a:bb:ce:89:21:b3:8c:51: 51:0b:e4:31:8b:a5:0a:dd:99:d4:13:09:73:75:1f: 48:ee:14:5f:d0:5a:cf:00:05:da:dd:e7:e8:91:36: 67:e9:0d:e0:9a:d5:65:63:67:04:e8:e3:b9:9d:00: 55:bc:8c:aa:e9:e8:86:77:d3:c3:d4:b9:07:e6:7f: ee:8d:bf:a7:5c:5f:4c:dc:a3:5e:d2:a6:7d:f5:50: f5:40:33:55:9f:c2:eb:0e:47:5f:c1:ed:2a:06:67: 7e:dc:c7:38:e5:3c:47:60:92:82:b7:65:b1:d8:b2: 14:48:6f:a3:93:3f:89:39:2b:4a:72:aa:09:dc:72: 64:43:2e:28:c8:c2:24:fd:bb:92:55:c0:0d:d4:8c: 63:2f:49:79:87:ea:69:20:f6:88:de:05:2c:b2:d2: 85:83:32:78:7f:b8:58:8b:a0:a1:d8:67:8b:21:80: b0:be:5e:86:45:c9:87:eb:91:b8:0a:c2:ce:12:27: 13:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AC:4E:C0:0E:31:68:22:72:66:C1:30:BA:BE:87:65:DF:24:8E:D4 X509v3 Authority Key Identifier: keyid:03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:9a:51:0c:87:53:d6:c1:73:b3:82:a9:df:87:eb:49:ff:6a: 25:a5:65:ae:22:38:ca:28:73:fc:73:f5:ec:3b:cb:c5:21:e9: 1e:7d:6a:54:a1:f5:e1:e7:0e:9e:a3:88:a6:3a:35:23:be:05: f9:d4:9b:34:7d:a7:18:62:d0:b7:e3:54:32:58:77:07:48:63: cd:07:1d:6b:e1:c0:0c:78:ed:a6:63:8f:53:d4:91:16:31:d6: 6f:b6:ea:5f:ca:94:a7:80:32:2c:28:3a:93:55:7e:42:ad:b6: 4e:78:81:92:eb:ad:0c:ff:4e:3a:7e:5e:23:26:34:d4:07:1f: 0b:e9:d4:b9:1d:37:90:9f:32:e5:35:86:a9:70:64:e4:ae:da: 06:84:f8:f3:3d:65:29:30:1e:9d:f3:66:90:e3:7c:30:50:da: 1d:30:af:29:68:64:7c:f6:2b:31:70:df:c8:af:78:20:b5:d3: 4a:b2:0a:c8:4a:25:05:cd:b6:3a:39:c9:0f:91:86:8a:c5:13: 2e:42:5d:25:51:3f:09:a1:ec:3c:e1:2c:cf:b1:7d:5b:6b:ed: ae:f1:52:13:46:92:f6:04:a5:b1:fe:63:04:b7:c8:b7:49:d9: 48:3a:10:53:fb:20:0d:fd:7b:c9:f6:48:61:c4:fe:a5:a3:c8: e8:99:48:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDNu5SxRYd/WpKf/5UJQRligWM5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBC NDQ5MTM2RDAeFw0yNjAzMTgyMDE3MjJaFw0yNjAzMjIwMzUzMjJaMDMxMTAvBgNV BAMTKDY0QUM0RUMwMEUzMTY4MjI3MjY2QzEzMEJBQkU4NzY1REYyNDhFRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzlm454iItTj25ZcJmuA8cYikm R+A3z9dKsdKLMj7eudKfg4yVdtGAhWyqC4/ZofWbZJZ9XgMsqO01U4edNpnd6MU6 u86JIbOMUVEL5DGLpQrdmdQTCXN1H0juFF/QWs8ABdrd5+iRNmfpDeCa1WVjZwTo 47mdAFW8jKrp6IZ308PUuQfmf+6Nv6dcX0zco17Spn31UPVAM1WfwusOR1/B7SoG Z37cxzjlPEdgkoK3ZbHYshRIb6OTP4k5K0pyqgnccmRDLijIwiT9u5JVwA3UjGMv SXmH6mkg9ojeBSyy0oWDMnh/uFiLoKHYZ4shgLC+XoZFyYfrkbgKws4SJxOlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZKxOwA4xaCJyZsEwur6HZd8kjtQwHwYDVR0j BBgwFoAUA1rWqbcSxPp2t+gjp59kELRJE20wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTZmNWNlNy1iMzZiLTQ3M2QtYTViZS05YzAzNTBkMWYzODIvMC8wMzVBRDZBOUI3 MTJDNEZBNzZCN0U4MjNBNzlGNjQxMEI0NDkxMzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBCNDQ5 MTM2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2ZjVjZTctYjM2Yi00NzNkLWE1 YmUtOWMwMzUwZDFmMzgyLzAvMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0 MTBCNDQ5MTM2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWaUQyHU9bBc7OCqd+H60n/aiWlZa4iOMoo c/xz9ew7y8Uh6R59alSh9eHnDp6jiKY6NSO+BfnUmzR9pxhi0LfjVDJYdwdIY80H HWvhwAx47aZjj1PUkRYx1m+26l/KlKeAMiwoOpNVfkKttk54gZLrrQz/Tjp+XiMm NNQHHwvp1LkdN5CfMuU1hqlwZOSu2gaE+PM9ZSkwHp3zZpDjfDBQ2h0wryloZHz2 KzFw38iveCC100qyCshKJQXNtjo5yQ+RhorFEy5CXSVRPwmh7DzhLM+xfVtr7a7x UhNGkvYEpbH+YwS3yLdJ2Ug6EFP7IA39e8n2SGHE/qWjyOiZSKM= -----END CERTIFICATE-----Generated at Thu Mar 19 09:41:31 2026 by rpki-client