$ rpki-client -vvf repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft File: 353E665549A5A245D363BD0DCEA20282E562E909.mft (raw, json) Hash identifier: bwDVtpsceirjLdYWfYEfhSF0XVL+prUdLg4zeKgowsE= Subject key identifier: DE:14:EF:AA:ED:24:2C:47:D4:D3:FD:6E:81:41:DB:C0:D8:79:CE:5D Authority key identifier: 35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 Certificate issuer: /CN=353E665549A5A245D363BD0DCEA20282E562E909 Certificate serial: 057A4C66BBE9131349999CF3B11FCAA80E49BB78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft Manifest number: F6 Signing time: Mon 20 Apr 2026 22:21:19 +0000 Manifest this update: Mon 20 Apr 2026 22:16:19 +0000 Manifest next update: Fri 24 Apr 2026 05:01:19 +0000 Files and hashes: 1: 353E665549A5A245D363BD0DCEA20282E562E909.crl (hash: Rc6Q5PLLTypviQVemqeJqmXcyvXRnZKoqBMS9PgzEnw=) 2: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (hash: RLs7YWOLxdLtlrs9K05DQU0Ui1dbjVBI2I7ZQMJjIGM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:7a:4c:66:bb:e9:13:13:49:99:9c:f3:b1:1f:ca:a8:0e:49:bb:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353E665549A5A245D363BD0DCEA20282E562E909 Validity Not Before: Apr 20 22:16:19 2026 GMT Not After : Apr 24 05:01:19 2026 GMT Subject: CN=DE14EFAAED242C47D4D3FD6E8141DBC0D879CE5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:4f:3e:4b:09:3a:d7:56:54:93:59:ec:a0: f5:c8:d4:1c:ae:4d:72:91:9c:90:30:be:b6:17:ab: cf:7b:ae:15:c7:c3:6d:01:5d:e3:3a:a7:59:53:82: 6f:5d:e0:83:23:f7:3e:2a:16:06:29:3a:2f:d1:23: 48:00:a3:94:f9:5b:bf:dd:44:e3:38:f5:6f:63:cd: f0:96:4e:27:34:b7:1e:ec:45:a1:78:a8:95:aa:b9: 5d:a5:6e:e8:90:f8:dc:8f:6c:cf:5e:48:ba:06:7b: 9f:cd:5f:43:87:00:f4:29:eb:57:0c:93:bc:03:4c: 9b:e2:81:9f:45:74:02:f3:2c:29:bd:44:30:78:b0: bf:1b:2a:25:6f:db:db:e3:18:83:6b:ae:cd:46:1b: 70:ec:cd:11:33:37:68:5a:68:52:81:37:d7:fa:bd: 9b:e1:25:cb:8e:28:9d:7e:25:7a:2f:2d:56:67:b2: f5:e6:7e:4e:39:4d:c9:6c:71:ad:f9:88:be:ca:d1: 40:bb:dc:0d:6c:95:19:53:e4:b0:63:9f:c2:96:f8: 84:52:b2:a5:2c:b6:cb:c2:67:b2:6b:50:41:e0:f6: e2:2a:c6:03:1a:3e:36:5e:2d:a5:8f:db:da:6d:c4: 86:c4:6c:cf:3a:3a:38:b2:9c:fe:13:3e:44:00:08: 87:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:14:EF:AA:ED:24:2C:47:D4:D3:FD:6E:81:41:DB:C0:D8:79:CE:5D X509v3 Authority Key Identifier: keyid:35:3E:66:55:49:A5:A2:45:D3:63:BD:0D:CE:A2:02:82:E5:62:E9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/353E665549A5A245D363BD0DCEA20282E562E909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/353E665549A5A245D363BD0DCEA20282E562E909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:da:3c:75:59:ad:47:1e:71:a2:fe:76:75:60:e6:b5:08:db: 38:d7:c3:df:b9:6a:24:e3:5b:17:a6:b3:e6:2e:53:23:57:92: 35:5b:66:b1:74:6d:52:15:63:de:99:11:d0:ee:4a:9e:36:f4: 2a:23:d0:1b:92:e6:70:6d:7d:55:e7:6e:f0:de:78:9c:b3:db: 8c:08:4e:73:b1:2e:09:72:41:46:51:87:72:34:9c:98:77:90: 2d:21:db:30:19:85:43:a2:f4:01:ae:64:37:2b:1e:3a:d4:79: 37:e7:e2:25:de:27:32:6b:e2:b8:40:9b:9e:7f:ab:44:e3:3d: a1:e9:7d:8f:2c:df:44:13:77:38:8b:c8:c8:d5:58:ac:18:f5: 67:a2:28:88:4b:1c:ad:44:10:0a:ce:b7:c8:7b:e0:15:03:16: bf:b2:1d:67:2a:c0:43:b1:13:b0:1b:55:f6:93:b3:a0:e5:4e: 95:0e:f8:3f:c8:bd:1f:35:92:ce:dd:c9:ba:cb:ed:28:e5:a0: e4:ca:bf:8b:8a:da:f6:00:53:50:91:05:76:4c:ea:79:8e:56: c0:c4:2f:f8:bd:73:d6:f5:cb:13:60:19:17:d3:fb:6b:ec:cc: 78:47:a2:dd:2b:3e:28:a1:f7:67:a4:5a:b8:53:1e:1a:75:67: 90:5d:bb:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBXpMZrvpExNJmZzzsR/KqA5Ju3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJF NTYyRTkwOTAeFw0yNjA0MjAyMjE2MTlaFw0yNjA0MjQwNTAxMTlaMDMxMTAvBgNV BAMTKERFMTRFRkFBRUQyNDJDNDdENEQzRkQ2RTgxNDFEQkMwRDg3OUNFNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2EU8+Swk611ZUk1nsoPXI1Byu TXKRnJAwvrYXq897rhXHw20BXeM6p1lTgm9d4IMj9z4qFgYpOi/RI0gAo5T5W7/d ROM49W9jzfCWTic0tx7sRaF4qJWquV2lbuiQ+NyPbM9eSLoGe5/NX0OHAPQp61cM k7wDTJvigZ9FdALzLCm9RDB4sL8bKiVv29vjGINrrs1GG3DszREzN2haaFKBN9f6 vZvhJcuOKJ1+JXovLVZnsvXmfk45Tclsca35iL7K0UC73A1slRlT5LBjn8KW+IRS sqUstsvCZ7JrUEHg9uIqxgMaPjZeLaWP29ptxIbEbM86OjiynP4TPkQACIejAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3hTvqu0kLEfU0/1ugUHbwNh5zl0wHwYDVR0j BBgwFoAUNT5mVUmlokXTY70NzqICguVi6QkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQxMWIwNS1jNThhLTQyMDYtYjdhYi1jMjUwYzE0NjU1NTAvMC8zNTNFNjY1NTQ5 QTVBMjQ1RDM2M0JEMERDRUEyMDI4MkU1NjJFOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAyODJFNTYy RTkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MTFiMDUtYzU4YS00MjA2LWI3 YWItYzI1MGMxNDY1NTUwLzAvMzUzRTY2NTU0OUE1QTI0NUQzNjNCRDBEQ0VBMjAy ODJFNTYyRTkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXaPHVZrUcecaL+dnVg5rUI2zjXw9+5aiTj Wxems+YuUyNXkjVbZrF0bVIVY96ZEdDuSp429Coj0BuS5nBtfVXnbvDeeJyz24wI TnOxLglyQUZRh3I0nJh3kC0h2zAZhUOi9AGuZDcrHjrUeTfn4iXeJzJr4rhAm55/ q0TjPaHpfY8s30QTdziLyMjVWKwY9WeiKIhLHK1EEArOt8h74BUDFr+yHWcqwEOx E7AbVfaTs6DlTpUO+D/IvR81ks7dybrL7SjloOTKv4uK2vYAU1CRBXZM6nmOVsDE L/i9c9b1yxNgGRfT+2vszHhHot0rPiih92ekWrhTHhp1Z5Bdu7U= -----END CERTIFICATE-----Generated at Wed Apr 22 04:55:17 2026 by rpki-client