$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft File: 35369AC685201508541197F86A8FDAC2375BE30A.mft (raw, json) Hash identifier: fqOng/bjqUpajL1MI+ia2hjS4cFSHlXQPPPRi/+UOJM= Subject key identifier: 1B:D3:6B:F9:34:BD:51:4E:8E:4A:F9:B1:DA:9F:0C:E2:D4:86:13:FA Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A Certificate issuer: /CN=35369AC685201508541197F86A8FDAC2375BE30A Certificate serial: 3D1EE80D5E0674E01CBCBA02CBBFB25FF177D359 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft Manifest number: 01FF Signing time: Tue 21 Apr 2026 07:33:43 +0000 Manifest this update: Tue 21 Apr 2026 07:28:43 +0000 Manifest next update: Fri 24 Apr 2026 07:47:43 +0000 Files and hashes: 1: 323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (hash: nASP1+s5Yr02DageTGdazoA9xc6IABPGa5gu3FsZO/s=) 2: 3130332e3131312e38362e302f32342d3234203d3e20313331373639.roa (hash: 9+Mv4cEtMbH5KopkzgQCoNSpTRV8G99XXR57cTSgvOU=) 3: 3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa (hash: PlQgzB/cRsoh7ZWV0eeB0CCERK7vc0F8oX5TvclNELU=) 4: 35369AC685201508541197F86A8FDAC2375BE30A.crl (hash: ryf+81GioxxTu9qRVgp0r7kmWsFufsIhJitcqYkcRoQ=) 5: 3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa (hash: ovmFPVguepwh1KZwLVmisbEmSv3ixrZq0Db1FT9lUSk=) 6: 3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa (hash: 3VX7SmRrNhkZ2gYSECqjxxiOqtU2CUq75Ny0SNZjNIo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:1e:e8:0d:5e:06:74:e0:1c:bc:ba:02:cb:bf:b2:5f:f1:77:d3:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A Validity Not Before: Apr 21 07:28:43 2026 GMT Not After : Apr 24 07:47:43 2026 GMT Subject: CN=1BD36BF934BD514E8E4AF9B1DA9F0CE2D48613FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:41:c7:53:d1:ae:19:48:50:e1:82:2e:fc:33: ca:d3:98:bb:4e:fc:07:f7:a9:72:fc:c8:6d:ed:1a: 71:e2:cc:7e:64:cb:db:cc:65:8d:25:01:65:59:1e: 43:c9:02:27:6a:70:fc:07:82:85:8a:79:6c:ac:62: a1:34:65:e8:65:62:72:28:fc:91:d3:48:58:8f:17: 4c:ee:55:c7:cb:8c:5d:52:c7:d3:63:23:f8:39:47: 21:d0:31:c6:56:75:5d:df:25:2d:14:0d:39:14:15: a5:88:b0:20:d1:a9:f5:f2:a1:d3:29:80:9a:a2:ec: 3e:94:47:29:46:d5:ff:d2:b5:cf:95:27:c5:f6:ee: dc:d4:e9:29:27:3e:c2:57:4c:da:ea:0a:b0:dc:d8: 2c:38:27:6e:83:8b:24:7b:83:63:2d:ae:b3:33:66: e3:40:8c:a9:43:fa:e0:06:52:9c:eb:a9:75:80:94: 4a:40:62:ae:7a:06:0b:86:54:3c:42:0f:c7:a0:cc: e5:25:f3:d3:2d:d7:10:fd:2c:fc:5e:38:bc:3a:f7: f0:e3:f7:cc:dd:86:5c:aa:b8:8e:a0:fe:a8:a1:c5: 44:b1:3b:b0:d2:ea:49:fc:a9:12:62:b4:35:86:86: ab:ed:2f:44:3b:36:86:77:a6:cc:55:b8:37:25:1e: c9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D3:6B:F9:34:BD:51:4E:8E:4A:F9:B1:DA:9F:0C:E2:D4:86:13:FA X509v3 Authority Key Identifier: keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:bb:98:0e:7f:9c:67:4c:51:32:8b:15:85:a5:7b:f7:8d:73: b3:5b:9c:21:81:72:fc:66:02:32:cb:8b:84:b0:b5:2c:03:8e: 3f:3a:30:2c:c0:af:43:f9:51:e2:68:c7:84:f1:92:27:08:3b: f4:46:ef:ea:e7:60:64:63:f4:1e:b4:53:ab:d1:0b:2b:df:a3: 85:81:6f:9e:65:60:3c:71:a3:f0:60:65:8b:b0:2e:2d:66:a0: 36:78:55:a7:e2:cd:80:bf:6a:00:16:63:a8:b0:f7:1c:8a:21: f7:58:89:08:ae:25:44:d3:c3:32:0e:05:7a:6f:af:87:d9:05: 6e:85:cc:90:1e:78:cd:e3:71:4b:1d:aa:c4:1f:cb:89:31:42: d9:4b:0b:96:46:79:bd:e3:d9:ee:e0:c1:66:21:17:44:d6:e8: 00:5f:04:fc:44:83:f0:73:27:00:f4:16:6d:66:1f:a0:a7:bd: c2:0b:3a:6c:6a:a1:6d:f7:26:00:7a:e6:5e:16:07:53:72:15: 5d:44:ea:8e:63:bd:a9:b0:3a:58:2b:b1:c5:7b:12:d0:3c:f3: 85:66:6f:b2:18:9d:0a:e4:61:3a:56:53:ff:18:f3:40:dd:05: 21:88:91:73:a5:a1:6f:da:e7:7a:ff:93:6f:e5:3d:59:b4:c2: d6:9b:d8:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPR7oDV4GdOAcvLoCy7+yX/F301kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIz NzVCRTMwQTAeFw0yNjA0MjEwNzI4NDNaFw0yNjA0MjQwNzQ3NDNaMDMxMTAvBgNV BAMTKDFCRDM2QkY5MzRCRDUxNEU4RTRBRjlCMURBOUYwQ0UyRDQ4NjEzRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGQcdT0a4ZSFDhgi78M8rTmLtO /Af3qXL8yG3tGnHizH5ky9vMZY0lAWVZHkPJAidqcPwHgoWKeWysYqE0ZehlYnIo /JHTSFiPF0zuVcfLjF1Sx9NjI/g5RyHQMcZWdV3fJS0UDTkUFaWIsCDRqfXyodMp gJqi7D6URylG1f/Stc+VJ8X27tzU6SknPsJXTNrqCrDc2Cw4J26DiyR7g2MtrrMz ZuNAjKlD+uAGUpzrqXWAlEpAYq56BguGVDxCD8egzOUl89Mt1xD9LPxeOLw69/Dj 98zdhlyquI6g/qihxUSxO7DS6kn8qRJitDWGhqvtL0Q7NoZ3psxVuDclHsl9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG9Nr+TS9UU6OSvmx2p8M4tSGE/owHwYDVR0j BBgwFoAUNTaaxoUgFQhUEZf4ao/awjdb4wowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTRhY2EzYy02M2RjLTRjMWItYTdlOC1hY2JhZTgyMWNkZTUvMC8zNTM2OUFDNjg1 MjAxNTA4NTQxMTk3Rjg2QThGREFDMjM3NUJFMzBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIzNzVC RTMwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0YWNhM2MtNjNkYy00YzFiLWE3 ZTgtYWNiYWU4MjFjZGU1LzAvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRB QzIzNzVCRTMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG27mA5/nGdMUTKLFYWle/eNc7NbnCGBcvxm AjLLi4SwtSwDjj86MCzAr0P5UeJox4TxkicIO/RG7+rnYGRj9B60U6vRCyvfo4WB b55lYDxxo/BgZYuwLi1moDZ4VafizYC/agAWY6iw9xyKIfdYiQiuJUTTwzIOBXpv r4fZBW6FzJAeeM3jcUsdqsQfy4kxQtlLC5ZGeb3j2e7gwWYhF0TW6ABfBPxEg/Bz JwD0Fm1mH6CnvcILOmxqoW33JgB65l4WB1NyFV1E6o5jvamwOlgrscV7EtA884Vm b7IYnQrkYTpWU/8Y80DdBSGIkXOloW/a53r/k2/lPVm0wtab2AI= -----END CERTIFICATE-----Generated at Wed Apr 22 07:25:50 2026 by rpki-client