$ rpki-client -vvf repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft File: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft (raw, json) Hash identifier: 1HY1pr2Ggy3oPeBwlhc+xYdQPetry4wSFTHs3obQNyM= Subject key identifier: C8:A0:56:AF:EB:09:13:33:3C:EF:EC:B9:5E:5C:42:FF:54:B5:15:58 Authority key identifier: 30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51 Certificate issuer: /CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51 Certificate serial: 081E67F1E5EFBA0459136FD2D987CE841FB861E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft Manifest number: 0436 Signing time: Thu 26 Mar 2026 11:21:56 +0000 Manifest this update: Thu 26 Mar 2026 11:16:56 +0000 Manifest next update: Sun 29 Mar 2026 16:53:56 +0000 Files and hashes: 1: 3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa (hash: Bi9nY1p0p/LL12T0+GcY0uwFY1cTRYvh/8l06MWKr+o=) 2: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl (hash: w/zF16n/qrbvkVBeXR80MakiG931sniQWFD1koC2kvk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:1e:67:f1:e5:ef:ba:04:59:13:6f:d2:d9:87:ce:84:1f:b8:61:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51 Validity Not Before: Mar 26 11:16:56 2026 GMT Not After : Mar 29 16:53:56 2026 GMT Subject: CN=C8A056AFEB0913333CEFECB95E5C42FF54B51558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:61:3e:90:c7:06:66:de:e4:87:ea:1c:f9:c9: 38:eb:13:7f:9c:16:2b:65:bd:67:60:eb:d8:60:4b: ab:49:b1:56:ee:36:ca:56:6b:31:97:5f:99:46:f8: b1:23:34:6f:26:78:3e:f6:95:ef:c4:11:40:00:d4: c6:a9:67:99:ee:59:87:3c:bf:5d:11:3f:b5:ef:74: b2:bf:ac:38:72:f8:32:81:56:6d:0d:8b:3f:a9:52: e4:7d:32:5d:47:60:dc:74:ea:ce:94:19:8a:83:94: b0:97:50:c9:b4:9b:49:48:96:f4:18:27:fe:83:8d: da:34:7c:70:65:a7:ee:cb:4d:73:07:b5:bb:36:6a: c1:0e:4c:1b:2c:52:e6:a3:b2:7a:a2:3e:ae:2b:7a: ec:9a:25:81:38:09:64:34:0f:5a:ca:fb:9d:15:10: 9b:fa:a9:c7:18:0d:c9:e1:60:b5:e5:a7:42:38:b6: f1:00:ae:b2:99:9b:20:fc:35:98:13:31:4c:b4:1f: a7:af:8a:6d:df:53:0f:c4:be:6e:06:85:50:78:d8: 11:0a:36:4a:79:cd:9f:ab:2b:b4:bf:96:13:09:af: 06:f5:f3:4f:46:c8:0e:08:e7:69:36:1c:ce:b5:3e: 55:5c:3f:7c:69:46:e6:cc:28:ef:c0:39:47:19:9c: 23:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A0:56:AF:EB:09:13:33:3C:EF:EC:B9:5E:5C:42:FF:54:B5:15:58 X509v3 Authority Key Identifier: keyid:30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:13:cd:03:db:c7:24:9c:66:ef:8a:c9:88:0b:f3:2a:46:5d: a1:ed:3d:ec:72:fe:dc:ca:72:6c:03:8f:a1:6e:3e:f2:a6:8b: 6e:14:e4:6a:79:22:27:e0:b0:af:f1:fc:97:f6:c0:ef:09:69: 14:86:6c:5e:ab:0d:71:04:97:31:38:7c:ae:cb:f5:e5:5e:46: 5b:74:61:d8:c5:67:8e:89:6c:21:44:3e:20:70:34:92:a8:47: 7e:c3:e3:ac:0c:9a:dd:c4:26:ef:c0:cb:ef:a2:fa:ba:8b:14: 1c:2f:1b:75:51:ba:cf:93:ad:ef:81:8a:3f:05:bc:f3:89:fd: b6:2d:44:06:18:f1:8e:57:54:1a:61:c1:4e:2b:df:56:c1:f2: f3:c0:15:b6:a9:c0:bc:09:6d:0d:c1:db:3d:b5:38:48:d2:6f: 8d:de:21:00:59:73:00:26:aa:17:00:8c:a7:81:de:dc:72:3d: 89:84:48:06:9f:72:01:5d:71:81:5c:8c:1b:da:10:80:8b:1c: 33:d7:4f:ea:ab:df:6d:e2:29:c7:1a:eb:97:73:32:2d:0a:ef: 66:83:65:c8:09:41:e6:cd:6b:2d:17:75:98:73:13:69:cd:a5: 7f:0a:9e:22:01:a3:9f:95:74:dc:b1:8b:7d:0a:95:2d:a6:5d: e0:8d:52:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCB5n8eXvugRZE2/S2YfOhB+4YeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJDODAy NkEwQ0U1MTAeFw0yNjAzMjYxMTE2NTZaFw0yNjAzMjkxNjUzNTZaMDMxMTAvBgNV BAMTKEM4QTA1NkFGRUIwOTEzMzMzQ0VGRUNCOTVFNUM0MkZGNTRCNTE1NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYYT6QxwZm3uSH6hz5yTjrE3+c FitlvWdg69hgS6tJsVbuNspWazGXX5lG+LEjNG8meD72le/EEUAA1MapZ5nuWYc8 v10RP7XvdLK/rDhy+DKBVm0Niz+pUuR9Ml1HYNx06s6UGYqDlLCXUMm0m0lIlvQY J/6Djdo0fHBlp+7LTXMHtbs2asEOTBssUuajsnqiPq4reuyaJYE4CWQ0D1rK+50V EJv6qccYDcnhYLXlp0I4tvEArrKZmyD8NZgTMUy0H6evim3fUw/Evm4GhVB42BEK Nkp5zZ+rK7S/lhMJrwb1809GyA4I52k2HM61PlVcP3xpRubMKO/AOUcZnCPJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyKBWr+sJEzM87+y5XlxC/1S1FVgwHwYDVR0j BBgwFoAUMPwS6QOuDuh70aHligYsgCagzlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzExYzExMC03YWIxLTRhMzktYjljYS0zYTliMGU4MWJjZjUvMC8zMEZDMTJFOTAz QUUwRUU4N0JEMUExRTU4QTA2MkM4MDI2QTBDRTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJDODAyNkEw Q0U1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDcxMWMxMTAtN2FiMS00YTM5LWI5 Y2EtM2E5YjBlODFiY2Y1LzAvMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJD ODAyNkEwQ0U1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQTzQPbxyScZu+KyYgL8ypGXaHtPexy/tzK cmwDj6FuPvKmi24U5Gp5IifgsK/x/Jf2wO8JaRSGbF6rDXEElzE4fK7L9eVeRlt0 YdjFZ46JbCFEPiBwNJKoR37D46wMmt3EJu/Ay++i+rqLFBwvG3VRus+Tre+Bij8F vPOJ/bYtRAYY8Y5XVBphwU4r31bB8vPAFbapwLwJbQ3B2z21OEjSb43eIQBZcwAm qhcAjKeB3txyPYmESAafcgFdcYFcjBvaEICLHDPXT+qr323iKcca65dzMi0K72aD ZcgJQebNay0XdZhzE2nNpX8KniIBo5+VdNyxi30KlS2mXeCNUkk= -----END CERTIFICATE-----Generated at Thu Mar 26 17:01:04 2026 by rpki-client