$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft File: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft (raw, json) Hash identifier: j79LoIObyWb0ADHOfLvddeqheIKHtI2sJRwLHEeBdrQ= Subject key identifier: 1E:08:A8:15:D6:D3:FF:AD:75:2E:7B:8E:9D:D5:B3:99:47:67:09:74 Authority key identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 Certificate issuer: /CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Certificate serial: 0D7C3A6BBA9016559BEA45B463C09B29E4FC3008 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft Manifest number: 012D Signing time: Thu 26 Mar 2026 12:12:05 +0000 Manifest this update: Thu 26 Mar 2026 12:07:05 +0000 Manifest next update: Sun 29 Mar 2026 12:41:05 +0000 Files and hashes: 1: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl (hash: yF4sUHrCT09BeSjCCgpSf4jetiRLbrRBBkgtNHwfm20=) 2: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: fMCHbxG1b40Dh8toSsRbGtu8leYZ/YXgsXlH0lO7T1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 12:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:7c:3a:6b:ba:90:16:55:9b:ea:45:b4:63:c0:9b:29:e4:fc:30:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Validity Not Before: Mar 26 12:07:05 2026 GMT Not After : Mar 29 12:41:05 2026 GMT Subject: CN=1E08A815D6D3FFAD752E7B8E9DD5B39947670974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:10:fc:c4:e0:42:04:05:ce:ae:b3:49:31:ae: f4:24:83:ed:c3:a4:84:75:28:22:ec:4e:10:2a:f4: c8:ba:02:4b:7d:c8:d4:56:14:7a:04:50:0f:30:bd: 15:a6:3e:fd:ab:02:43:1c:d8:72:69:f6:3e:b2:55: 95:9c:dc:b4:a4:7a:12:41:86:6b:20:98:6a:13:34: 5d:ca:9d:47:b2:0d:64:b1:74:9b:8b:d0:7c:4a:23: 41:54:f0:40:e7:e6:19:2a:8c:d5:f7:bc:3e:9b:38: 81:dc:87:2a:6e:fa:8c:10:ef:8f:22:ef:73:01:80: 71:7f:9a:24:64:e2:b1:20:b5:d4:56:6c:0f:d6:4f: bc:f5:67:0e:90:3e:e2:2f:59:a1:29:57:43:69:3d: 2b:b9:57:3e:91:28:68:42:a0:3f:07:d1:98:b7:cf: f2:4f:7b:46:4a:7f:26:3d:12:63:f8:b4:b7:01:81: 60:c0:21:82:0f:fb:90:97:e8:10:01:4a:b2:be:02: 29:c3:e3:c7:7a:e7:7e:be:e9:d6:a9:6e:6e:c0:fe: 79:ad:29:2b:d7:15:f9:20:a9:4c:99:1a:3d:fa:b8: 9a:d4:52:4e:80:fc:ae:39:f7:d0:b1:8c:8b:a2:4a: d7:96:bc:c6:54:e1:e7:b9:33:ec:0a:67:1a:5c:c3: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:08:A8:15:D6:D3:FF:AD:75:2E:7B:8E:9D:D5:B3:99:47:67:09:74 X509v3 Authority Key Identifier: keyid:30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:9b:81:68:8b:fc:74:5b:a6:ea:fa:0a:87:e9:ec:3b:d1:b4: f3:87:09:7d:94:f6:7c:95:6b:a1:a1:f2:42:47:b0:ab:8e:64: e4:9d:82:8f:e1:bf:62:af:c4:7c:2d:fe:63:46:7c:59:ce:22: f4:e9:09:3b:23:7d:90:83:26:8d:f8:d3:a3:22:12:42:58:10: 1f:f6:96:13:b3:b7:a5:30:a4:47:fb:0f:4f:8a:8f:47:0b:9f: 45:f5:02:b0:18:29:dd:fb:0a:dd:8a:d3:39:45:cf:3a:53:06: f6:90:af:47:b4:a1:77:6f:28:db:1d:44:36:54:ee:23:2c:51: 2c:ec:c6:1a:65:92:3c:9a:65:d8:17:1a:2f:17:73:3f:08:d0: fd:b2:e3:ef:d8:7c:b9:67:1e:72:c7:35:5d:b6:57:7c:7e:25: 79:87:af:a3:41:28:51:4b:d4:b4:75:e7:07:8c:bf:ee:6f:81: 36:d8:11:7b:8a:d9:e3:a1:e7:1a:76:38:f5:12:07:da:64:f9: 4b:01:3e:29:f8:2f:e9:79:2f:40:74:b6:21:66:d9:40:41:ec: 45:20:54:7a:3b:8c:1e:ec:ef:fc:c6:11:4f:ac:0f:91:df:92: 8a:f2:25:7c:56:f8:56:d9:e1:e7:af:9a:60:42:2e:66:20:f0: 57:38:ba:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDXw6a7qQFlWb6kW0Y8CbKeT8MAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUy MTA2RjFCNDAeFw0yNjAzMjYxMjA3MDVaFw0yNjAzMjkxMjQxMDVaMDMxMTAvBgNV BAMTKDFFMDhBODE1RDZEM0ZGQUQ3NTJFN0I4RTlERDVCMzk5NDc2NzA5NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDEPzE4EIEBc6us0kxrvQkg+3D pIR1KCLsThAq9Mi6Akt9yNRWFHoEUA8wvRWmPv2rAkMc2HJp9j6yVZWc3LSkehJB hmsgmGoTNF3KnUeyDWSxdJuL0HxKI0FU8EDn5hkqjNX3vD6bOIHchypu+owQ748i 73MBgHF/miRk4rEgtdRWbA/WT7z1Zw6QPuIvWaEpV0NpPSu5Vz6RKGhCoD8H0Zi3 z/JPe0ZKfyY9EmP4tLcBgWDAIYIP+5CX6BABSrK+AinD48d6536+6dapbm7A/nmt KSvXFfkgqUyZGj36uJrUUk6A/K4599CxjIuiSteWvMZU4ee5M+wKZxpcwwzvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHgioFdbT/611LnuOndWzmUdnCXQwHwYDVR0j BBgwFoAUMIpRAED9+bwot7Y9MgPkDiEG8bQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVkOGQ2Yy1mMGZhLTQ3Y2MtYWVhYS1iNGUzZWUxMTY4ODIvMC8zMDhBNTEwMDQw RkRGOUJDMjhCN0I2M0QzMjAzRTQwRTIxMDZGMUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUyMTA2 RjFCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0 MEUyMTA2RjFCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICbgWiL/HRbpur6Cofp7DvRtPOHCX2U9nyV a6Gh8kJHsKuOZOSdgo/hv2KvxHwt/mNGfFnOIvTpCTsjfZCDJo3406MiEkJYEB/2 lhOzt6UwpEf7D0+Kj0cLn0X1ArAYKd37Ct2K0zlFzzpTBvaQr0e0oXdvKNsdRDZU 7iMsUSzsxhplkjyaZdgXGi8Xcz8I0P2y4+/YfLlnHnLHNV22V3x+JXmHr6NBKFFL 1LR15weMv+5vgTbYEXuK2eOh5xp2OPUSB9pk+UsBPin4L+l5L0B0tiFm2UBB7EUg VHo7jB7s7/zGEU+sD5HfkoryJXxW+FbZ4eevmmBCLmYg8Fc4utI= -----END CERTIFICATE-----Generated at Thu Mar 26 15:18:18 2026 by rpki-client