$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft File: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft (raw, json) Hash identifier: zGPJ5PuEVz+ONI70ocHxtCif4TkMT5hWWd1Fruxrt7I= Subject key identifier: 6C:94:0A:67:A6:8E:D9:02:64:0B:0D:84:E7:E4:E8:26:7D:8F:0F:28 Authority key identifier: CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F Certificate issuer: /CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Certificate serial: 542277035A71D1568FB5F887D30C341D6FFBC2A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft Manifest number: 0583 Signing time: Thu 12 Mar 2026 14:12:01 +0000 Manifest this update: Thu 12 Mar 2026 14:07:01 +0000 Manifest next update: Sun 15 Mar 2026 16:23:01 +0000 Files and hashes: 1: 3230322e36352e3131322e302f32302d3231203d3e203233393531.roa (hash: la3Lo26Aa17Lz+dfnwUc2WZ/Zq7gWX7qsfEvtWc9abY=) 2: 3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa (hash: 0r1qT8I3KYKeRC/g+vu3+beTQV2dYBEegiYAXFw3fs8=) 3: 3230322e36352e3132312e302f32342d3234203d3e203233393531.roa (hash: W+avD/27cuz8u7PAdTFS+byjySE6cCdTL/goNcaSuQ0=) 4: 3230322e36352e3132302e302f32332d3234203d3e203233393531.roa (hash: C1WvxvbH5IPUep7eQYoHGhXLqRMtWOqOKZMr05i/OjU=) 5: 3230322e36352e3132302e302f32322d3233203d3e203233393531.roa (hash: bHw7ucEbh58xjruyf4VXXtftgFiKqgJhqbjayjPsTrs=) 6: 3230322e36352e3131322e302f32312d3231203d3e203233393531.roa (hash: hfhM/jWQ9jt+ZUHNnJtrtoOuudPpKc+J350QWYXtC40=) 7: 3131372e32302e34382e302f32302d3234203d3e203233393531.roa (hash: jzYSflbMwJIU7OJmfhxLLNRmLBX8xfDaE+EvcpXWcPM=) 8: 3130332e3130312e3133362e302f32332d3233203d3e203538353030.roa (hash: iGsP4VUogsadbwnWd/AM/1aXy+hpua+BCk1eWXzoRzA=) 9: 3230322e36352e3132342e302f32322d3234203d3e203436303531.roa (hash: nCRffZlynF4CiEOh2iuotIMhJ1K47T3UdPYWHYFk4iY=) 10: 3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa (hash: L+cExX3/7uWr/hDyt2UkMn9zUU41LC6rMVWy+5SJhTc=) 11: 3130332e3130312e3133382e302f32332d3234203d3e203233393531.roa (hash: gYdjbrllcxVsFjz+69ccDbd/xh/3XuSos0MpuObt62I=) 12: CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl (hash: 5G9mjvREnJjJOBNX7wLwXkVj/rsgaBWn3Z7x0yYw7s0=) 13: 3230322e36352e3131322e302f32342d3234203d3e203233393531.roa (hash: PLDNLWRC4Np5IJQ9gJkzQFwg5d2Imd+U4PVSM94Wh9c=) 14: 3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa (hash: 8QPIleK9jMxRrZo8MGpSwWvTnJ7WLwlPDZ1i0haixbA=) 15: 3230322e36352e3132322e302f32342d3234203d3e203233393531.roa (hash: 09wWxPVAnpsug3YZq5fezhFaG7QDA9T1Mjs7NiJLE+g=) 16: 3130332e3130312e3133372e302f32342d3234203d3e203538353030.roa (hash: SHObZCSyQ759rOoQJ/JZR3beQgRHBAmiHG/b7NwBiWM=) 17: 3230322e36352e3131322e302f32312d3234203d3e203233393531.roa (hash: 42OUxulwbAB1CTRXrAGVc4itTg6RD7nCc12Z/wbxKk0=) 18: 323430313a656530303a3a2f33322d3438203d3e203233393531.roa (hash: NzMEm3c3sVacQZSWsj7eCdzP+65DR1/M0h04y+5YJYE=) 19: 3230322e36352e3132302e302f32342d3234203d3e203233393531.roa (hash: HWfHUrPU0i0A++2BYGkQMMOMjrzhDkKb6wybSU/0t9A=) 20: 3230322e36352e3132332e302f32342d3234203d3e203233393531.roa (hash: uYljhWPFI38b1Nx1UtlQJyqp8X7WWWNXDKkB58nW4HI=) 21: 3230322e36352e3132322e302f32332d3233203d3e203233393531.roa (hash: uySOy+S8Xsy4H4ygVfn9FFZSJNP2ZKNqDsizB5B+qv8=) 22: 3130332e3130312e3133362e302f32342d3234203d3e203538353030.roa (hash: 6WhqetXB0Qru1Hk4/GxM3BsbsVKsqVduKrzOxiby6RM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Mar 2026 16:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:22:77:03:5a:71:d1:56:8f:b5:f8:87:d3:0c:34:1d:6f:fb:c2:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Validity Not Before: Mar 12 14:07:01 2026 GMT Not After : Mar 15 16:23:01 2026 GMT Subject: CN=6C940A67A68ED902640B0D84E7E4E8267D8F0F28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:80:b4:1c:52:f9:dd:33:b4:fd:e1:df:de:05: 8b:d8:dc:d8:e8:a0:4e:1a:ca:72:cc:9c:ba:68:0c: 56:31:b8:a0:db:24:d5:4c:48:50:b2:9a:1b:ad:3f: 73:d2:f5:d8:62:bc:e6:b3:bf:7b:cf:fb:78:75:e0: 6a:64:c6:66:75:de:8c:e9:04:33:8f:b3:15:ae:58: b4:f0:50:15:bc:2c:be:c6:90:ba:dd:27:3e:cf:97: 8c:18:78:32:22:34:a4:e2:aa:99:dc:b8:80:23:01: 45:84:91:4b:69:fa:99:b2:ec:e8:92:74:29:71:15: df:a1:3e:bc:86:13:ee:f1:44:c0:40:25:90:d5:19: f2:9a:57:a1:8e:e0:7b:4d:ab:38:01:78:09:31:2b: 28:6b:27:6a:90:be:97:8f:12:98:3f:8d:0a:5c:29: e4:ee:af:44:a5:8d:7f:05:6e:75:b3:57:26:63:9c: 27:93:9d:f1:15:8e:b5:3d:75:e5:f3:1e:41:c6:91: dc:c0:f2:a1:a9:36:f6:f9:cb:90:69:97:47:f7:5b: 8d:59:6c:fd:45:43:b4:33:55:11:8e:24:f5:cc:ac: 1a:4f:1f:02:ed:7e:e3:53:db:db:7e:1d:0f:2f:c6: d9:21:9c:ec:b6:d1:80:62:7c:51:be:6e:a9:cd:11: 75:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:94:0A:67:A6:8E:D9:02:64:0B:0D:84:E7:E4:E8:26:7D:8F:0F:28 X509v3 Authority Key Identifier: keyid:CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:29:03:51:70:bd:0b:a1:f8:58:87:64:4a:9d:24:24:2d:70: b7:ce:c2:a4:f7:37:af:a6:5d:01:b7:04:51:dd:01:a9:92:23: a4:ac:89:90:18:1d:95:d2:15:56:09:b4:a4:e4:0b:6c:ec:47: 35:ad:41:fa:c4:aa:cd:90:d2:7b:34:83:e5:ef:1c:fa:57:54: 58:23:01:21:f4:6a:65:6d:0d:9e:07:cb:0d:bc:22:e8:7d:34: 41:ce:7c:6b:c3:4f:29:55:69:74:11:bb:cd:8c:92:19:b3:01: ca:9a:bb:50:d3:fb:69:f8:f2:bd:b1:53:83:f4:89:b8:f9:fe: 66:f8:19:67:ad:3f:24:b0:7e:27:3b:5c:76:86:44:70:79:2c: e0:51:59:0e:5b:0f:73:31:f2:c0:ff:ad:9a:3c:81:16:84:fe: 03:47:df:7d:48:c0:be:80:37:c7:f9:86:9d:ff:c8:0e:51:71: 96:c8:d4:ae:aa:71:36:22:a7:08:95:d4:39:66:a5:9a:cb:f1: c5:82:15:03:0a:87:8d:1d:ff:c8:f0:5a:ba:c1:df:f7:2b:03: 02:da:88:0d:6f:70:95:12:eb:80:fe:81:bd:3c:db:36:7a:d9: a5:f0:60:4e:ec:06:dd:43:98:91:cd:8e:8c:9b:35:ca:40:36: b9:15:bc:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVCJ3A1px0VaPtfiH0ww0HW/7wqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUx NDNDOEU4RjAeFw0yNjAzMTIxNDA3MDFaFw0yNjAzMTUxNjIzMDFaMDMxMTAvBgNV BAMTKDZDOTQwQTY3QTY4RUQ5MDI2NDBCMEQ4NEU3RTRFODI2N0Q4RjBGMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKgLQcUvndM7T94d/eBYvY3Njo oE4aynLMnLpoDFYxuKDbJNVMSFCymhutP3PS9dhivOazv3vP+3h14GpkxmZ13ozp BDOPsxWuWLTwUBW8LL7GkLrdJz7Pl4wYeDIiNKTiqpncuIAjAUWEkUtp+pmy7OiS dClxFd+hPryGE+7xRMBAJZDVGfKaV6GO4HtNqzgBeAkxKyhrJ2qQvpePEpg/jQpc KeTur0SljX8FbnWzVyZjnCeTnfEVjrU9deXzHkHGkdzA8qGpNvb5y5Bpl0f3W41Z bP1FQ7QzVRGOJPXMrBpPHwLtfuNT29t+HQ8vxtkhnOy20YBifFG+bqnNEXXlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbJQKZ6aO2QJkCw2E5+ToJn2PDygwHwYDVR0j BBgwFoAUyjW6x6QF3x7Z7WLwnS9PLhQ8jo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZhN2U0Ni1iNmFkLTRhN2QtYjkzMC0xYWIwYmYwMmRkNWQvMC9DQTM1QkFDN0E0 MDVERjFFRDlFRDYyRjA5RDJGNEYyRTE0M0M4RThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUxNDND OEU4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2YTdlNDYtYjZhZC00YTdkLWI5 MzAtMWFiMGJmMDJkZDVkLzAvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRG MkUxNDNDOEU4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMpA1FwvQuh+FiHZEqdJCQtcLfOwqT3N6+m XQG3BFHdAamSI6SsiZAYHZXSFVYJtKTkC2zsRzWtQfrEqs2Q0ns0g+XvHPpXVFgj ASH0amVtDZ4Hyw28Iuh9NEHOfGvDTylVaXQRu82MkhmzAcqau1DT+2n48r2xU4P0 ibj5/mb4GWetPySwfic7XHaGRHB5LOBRWQ5bD3Mx8sD/rZo8gRaE/gNH331IwL6A N8f5hp3/yA5RcZbI1K6qcTYipwiV1DlmpZrL8cWCFQMKh40d/8jwWrrB3/crAwLa iA1vcJUS64D+gb082zZ62aXwYE7sBt1DmJHNjoybNcpANrkVvOU= -----END CERTIFICATE-----Generated at Fri Mar 13 12:11:24 2026 by rpki-client