$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft File: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft (raw, json) Hash identifier: EvYC57muWIQ/KS6Pz6dTKvUmf7VHLVOWulUA2xNG8XA= Subject key identifier: 5B:85:DE:DF:51:97:AE:1C:D9:9C:13:1D:58:A4:EF:E0:BA:7C:89:5B Authority key identifier: CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F Certificate issuer: /CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Certificate serial: 11EFC72918857F3EEF2DDC85B1DBA2CAAD5496CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft Manifest number: 0597 Signing time: Sat 25 Apr 2026 16:32:06 +0000 Manifest this update: Sat 25 Apr 2026 16:27:06 +0000 Manifest next update: Tue 28 Apr 2026 19:28:06 +0000 Files and hashes: 1: 3130332e3130312e3133362e302f32342d3234203d3e203538353030.roa (hash: 6WhqetXB0Qru1Hk4/GxM3BsbsVKsqVduKrzOxiby6RM=) 2: 3230322e36352e3132332e302f32342d3234203d3e203233393531.roa (hash: uYljhWPFI38b1Nx1UtlQJyqp8X7WWWNXDKkB58nW4HI=) 3: 3230322e36352e3131322e302f32342d3234203d3e203233393531.roa (hash: PLDNLWRC4Np5IJQ9gJkzQFwg5d2Imd+U4PVSM94Wh9c=) 4: 3230322e36352e3131322e302f32302d3231203d3e203233393531.roa (hash: la3Lo26Aa17Lz+dfnwUc2WZ/Zq7gWX7qsfEvtWc9abY=) 5: 3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa (hash: 8QPIleK9jMxRrZo8MGpSwWvTnJ7WLwlPDZ1i0haixbA=) 6: 3230322e36352e3132312e302f32342d3234203d3e203233393531.roa (hash: W+avD/27cuz8u7PAdTFS+byjySE6cCdTL/goNcaSuQ0=) 7: 3230322e36352e3132322e302f32332d3233203d3e203233393531.roa (hash: uySOy+S8Xsy4H4ygVfn9FFZSJNP2ZKNqDsizB5B+qv8=) 8: 3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa (hash: 0r1qT8I3KYKeRC/g+vu3+beTQV2dYBEegiYAXFw3fs8=) 9: 3130332e3130312e3133372e302f32342d3234203d3e203538353030.roa (hash: SHObZCSyQ759rOoQJ/JZR3beQgRHBAmiHG/b7NwBiWM=) 10: 3230322e36352e3131322e302f32312d3231203d3e203233393531.roa (hash: hfhM/jWQ9jt+ZUHNnJtrtoOuudPpKc+J350QWYXtC40=) 11: 3230322e36352e3132302e302f32342d3234203d3e203233393531.roa (hash: HWfHUrPU0i0A++2BYGkQMMOMjrzhDkKb6wybSU/0t9A=) 12: 323430313a656530303a3a2f33322d3438203d3e203233393531.roa (hash: NzMEm3c3sVacQZSWsj7eCdzP+65DR1/M0h04y+5YJYE=) 13: 3230322e36352e3132302e302f32332d3234203d3e203233393531.roa (hash: C1WvxvbH5IPUep7eQYoHGhXLqRMtWOqOKZMr05i/OjU=) 14: 3230322e36352e3132302e302f32322d3233203d3e203233393531.roa (hash: bHw7ucEbh58xjruyf4VXXtftgFiKqgJhqbjayjPsTrs=) 15: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl (hash: az9dItgPF8bWlhGOv4Ofqv/7IKrL+M9tyI0PQJtyfdw=) 16: 3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa (hash: L+cExX3/7uWr/hDyt2UkMn9zUU41LC6rMVWy+5SJhTc=) 17: 3130332e3130312e3133362e302f32332d3233203d3e203538353030.roa (hash: iGsP4VUogsadbwnWd/AM/1aXy+hpua+BCk1eWXzoRzA=) 18: 3230322e36352e3132342e302f32322d3234203d3e203436303531.roa (hash: nCRffZlynF4CiEOh2iuotIMhJ1K47T3UdPYWHYFk4iY=) 19: 3230322e36352e3132322e302f32342d3234203d3e203233393531.roa (hash: 09wWxPVAnpsug3YZq5fezhFaG7QDA9T1Mjs7NiJLE+g=) 20: 3230322e36352e3131322e302f32312d3234203d3e203233393531.roa (hash: 42OUxulwbAB1CTRXrAGVc4itTg6RD7nCc12Z/wbxKk0=) 21: 3130332e3130312e3133382e302f32332d3234203d3e203233393531.roa (hash: gYdjbrllcxVsFjz+69ccDbd/xh/3XuSos0MpuObt62I=) 22: 3131372e32302e34382e302f32302d3234203d3e203233393531.roa (hash: jzYSflbMwJIU7OJmfhxLLNRmLBX8xfDaE+EvcpXWcPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 19:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ef:c7:29:18:85:7f:3e:ef:2d:dc:85:b1:db:a2:ca:ad:54:96:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Validity Not Before: Apr 25 16:27:06 2026 GMT Not After : Apr 28 19:28:06 2026 GMT Subject: CN=5B85DEDF5197AE1CD99C131D58A4EFE0BA7C895B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cb:bb:47:12:2a:47:22:c4:86:6e:3f:21:b2: 1d:73:d8:e2:59:9d:2a:9b:0a:0a:c2:45:2b:1f:c2: 3c:8d:ca:b9:04:c6:3c:a1:f8:a6:32:6b:20:cb:e6: 8b:38:3d:11:6f:00:4c:41:0b:e8:89:d0:a5:3c:3a: ef:26:72:b0:51:9c:5f:ba:98:5c:7c:a9:12:e5:75: 54:5f:6e:41:9f:0b:18:31:78:15:bb:3e:7f:82:8e: 51:a1:49:76:02:62:93:aa:9a:fd:e9:d6:f3:57:f6: e7:2f:ba:fb:7f:91:5a:a5:84:23:01:69:c3:56:5d: 99:d3:9c:15:9a:6c:7c:9c:ac:dc:f4:9f:78:60:f4: d5:f9:47:de:bc:a2:32:cf:33:20:fc:f3:e5:75:d2: 8b:07:d5:fc:a4:6f:9b:1d:62:6f:11:80:e1:f3:d9: c0:44:5b:51:20:38:7f:b7:c9:76:ee:5c:cc:4f:af: 66:b9:99:0e:8f:6a:ed:f2:06:6c:b6:7e:13:53:0d: 72:79:56:46:de:bc:64:44:92:f6:79:83:c8:bc:c1: ab:65:e4:90:4a:84:d5:f4:90:35:75:04:0e:5f:68: 7c:08:bb:73:f8:6d:3e:99:5e:4a:66:b5:f9:a2:62: 5e:70:a2:21:11:d1:ae:ee:da:15:34:08:81:b3:6c: 03:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:85:DE:DF:51:97:AE:1C:D9:9C:13:1D:58:A4:EF:E0:BA:7C:89:5B X509v3 Authority Key Identifier: keyid:CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:34:77:57:72:cd:8b:8f:79:95:27:10:e7:0f:04:37:4d:16: 82:67:19:5b:6f:27:38:30:98:1a:2d:7d:a7:d7:3f:98:24:9f: 7d:85:c7:ee:9b:0f:fa:d4:45:e0:57:5a:80:9a:32:7f:db:6c: 16:a9:48:4c:a4:8f:a3:1b:cf:2d:5d:ae:79:f8:e5:53:fa:03: d5:fe:75:e6:18:c7:de:01:cc:2f:18:e6:49:ce:ea:09:fd:6d: 2e:5d:6c:5a:3a:68:d2:a1:0d:3e:91:48:cb:90:6e:b8:06:22: d3:45:b0:1f:1b:d7:81:c8:5c:2b:fa:bb:e6:5c:b1:76:b2:d1: 32:7b:37:a9:01:e4:de:e6:9b:57:44:a4:36:4c:c9:51:52:5b: c8:6b:1c:74:77:c4:bf:5f:a2:76:a3:b3:5e:a2:6b:c3:ad:a7: 9c:7a:6f:da:eb:52:d1:1b:09:f5:7c:db:e4:ec:9d:55:1f:e2: 53:b5:8d:59:72:67:66:20:3b:dd:47:de:3d:bb:6d:12:5e:60: ac:30:6f:79:6d:2e:54:52:50:3d:4b:73:f4:53:66:d2:f8:8d: 43:9e:54:4a:68:4b:9d:f6:e0:4a:cc:aa:f1:5c:30:b0:2b:5c: b5:a3:6f:4f:6b:94:6d:ea:22:09:d7:66:5f:b0:fd:05:b9:7b: 3d:6f:3f:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEe/HKRiFfz7vLdyFsduiyq1Uls0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUx NDNDOEU4RjAeFw0yNjA0MjUxNjI3MDZaFw0yNjA0MjgxOTI4MDZaMDMxMTAvBgNV BAMTKDVCODVERURGNTE5N0FFMUNEOTlDMTMxRDU4QTRFRkUwQkE3Qzg5NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfy7tHEipHIsSGbj8hsh1z2OJZ nSqbCgrCRSsfwjyNyrkExjyh+KYyayDL5os4PRFvAExBC+iJ0KU8Ou8mcrBRnF+6 mFx8qRLldVRfbkGfCxgxeBW7Pn+CjlGhSXYCYpOqmv3p1vNX9ucvuvt/kVqlhCMB acNWXZnTnBWabHycrNz0n3hg9NX5R968ojLPMyD88+V10osH1fykb5sdYm8RgOHz 2cBEW1EgOH+3yXbuXMxPr2a5mQ6Pau3yBmy2fhNTDXJ5VkbevGREkvZ5g8i8watl 5JBKhNX0kDV1BA5faHwIu3P4bT6ZXkpmtfmiYl5woiER0a7u2hU0CIGzbAN5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW4Xe31GXrhzZnBMdWKTv4Lp8iVswHwYDVR0j BBgwFoAUyjW6x6QF3x7Z7WLwnS9PLhQ8jo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZhN2U0Ni1iNmFkLTRhN2QtYjkzMC0xYWIwYmYwMmRkNWQvMC9DQTM1QkFDN0E0 MDVERjFFRDlFRDYyRjA5RDJGNEYyRTE0M0M4RThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUxNDND OEU4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2YTdlNDYtYjZhZC00YTdkLWI5 MzAtMWFiMGJmMDJkZDVkLzAvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRG MkUxNDNDOEU4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGs0d1dyzYuPeZUnEOcPBDdNFoJnGVtvJzgw mBotfafXP5gkn32Fx+6bD/rUReBXWoCaMn/bbBapSEykj6Mbzy1drnn45VP6A9X+ deYYx94BzC8Y5knO6gn9bS5dbFo6aNKhDT6RSMuQbrgGItNFsB8b14HIXCv6u+Zc sXay0TJ7N6kB5N7mm1dEpDZMyVFSW8hrHHR3xL9fonajs16ia8Otp5x6b9rrUtEb CfV82+TsnVUf4lO1jVlyZ2YgO91H3j27bRJeYKwwb3ltLlRSUD1Lc/RTZtL4jUOe VEpoS5324ErMqvFcMLArXLWjb09rlG3qIgnXZl+w/QW5ez1vP2M= -----END CERTIFICATE-----Generated at Mon Apr 27 18:35:58 2026 by rpki-client