$ rpki-client -vvf repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft File: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft (raw, json) Hash identifier: iXySydXa719il0uHNvLG5OlryOa/TkCab5foQL142L4= Subject key identifier: 7B:28:3F:BB:A3:0B:D7:82:10:15:37:75:B9:46:94:D9:A0:56:68:6D Authority key identifier: B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 Certificate issuer: /CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Certificate serial: 2DA236C6F3FC03C5996A4B6005A1049E2046E040 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft Manifest number: 01C1 Signing time: Wed 25 Mar 2026 18:21:16 +0000 Manifest this update: Wed 25 Mar 2026 18:16:16 +0000 Manifest next update: Sun 29 Mar 2026 02:50:16 +0000 Files and hashes: 1: 3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (hash: 5p8DeVWE4ixdVzTUD+2z3ALmeQQXrFM+ymQAz8yvg9Q=) 2: 3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (hash: HxY+qbSnnto1Z4HzXSATggf6s2/jsThuJ9IKEWbevzQ=) 3: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl (hash: 5qDXkk7gbK9arcFkvZbZ2PtA+U08z6n+vWxZWIgdV3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a2:36:c6:f3:fc:03:c5:99:6a:4b:60:05:a1:04:9e:20:46:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Validity Not Before: Mar 25 18:16:16 2026 GMT Not After : Mar 29 02:50:16 2026 GMT Subject: CN=7B283FBBA30BD78210153775B94694D9A056686D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:90:60:bf:0e:12:f3:d2:ad:33:4f:91:88:c1: 48:9d:79:b6:87:b6:c6:46:a8:e8:bc:93:67:32:04: 76:6f:b9:b8:2c:1b:3a:6d:3c:0e:7f:d1:84:3a:66: ef:3b:dd:0f:5b:ae:58:15:9b:b0:91:d2:7d:2c:08: 7f:25:51:fc:f9:bf:c0:39:be:b1:05:1a:37:f9:db: 4b:cb:fa:4b:f3:bd:fb:6f:b4:35:52:3b:e1:7b:e0: c3:44:f8:ae:f5:3d:b3:cd:12:cf:70:d8:11:04:7e: 18:8f:5b:4f:95:78:b6:30:84:f7:a0:97:04:50:94: 5d:28:8c:bf:b9:b5:b9:55:b5:b5:51:7d:00:37:90: 47:32:65:90:4d:ec:83:56:0e:88:15:c8:a7:46:f9: fc:ea:be:f8:53:ec:44:9d:e9:a9:7f:64:da:38:c9: 1f:6c:5a:2a:88:6a:3f:26:24:35:4f:87:9c:93:2b: 34:9a:a7:0c:5e:5f:a8:0e:ea:64:94:7d:2c:93:20: d8:fe:7c:65:64:2f:8b:8d:ec:03:51:bb:3d:a8:fe: 97:ea:a4:7e:55:0c:fb:1a:7e:47:07:c6:b7:5d:43: fc:53:a0:9a:65:00:7d:62:66:d8:1b:68:bd:31:85: 62:80:f3:76:94:15:cd:c6:76:a4:47:76:50:ba:c2: 34:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:28:3F:BB:A3:0B:D7:82:10:15:37:75:B9:46:94:D9:A0:56:68:6D X509v3 Authority Key Identifier: keyid:B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:74:81:fe:6e:cd:d0:f1:34:08:0d:45:13:70:d0:3c:c8:88: 6b:46:d7:f3:27:58:52:38:4a:fa:8f:13:ee:be:06:f0:ce:d9: 60:f3:a0:eb:7a:31:5e:7d:44:35:2f:29:ed:2c:85:85:3f:57: 23:c6:97:18:30:7c:6d:bb:26:56:7c:55:09:52:50:da:28:7e: 8f:c0:9c:3e:d2:60:cb:1a:b9:82:8d:51:ec:5b:a4:f4:82:23: 65:73:1d:3d:04:ba:d2:89:ea:91:98:ed:66:01:c3:96:b5:a1: 03:e3:d5:11:75:c4:e9:85:f7:83:d8:78:76:11:ae:da:29:d1: e1:02:f7:0d:ca:6f:e5:0d:d7:1d:27:b2:ee:6a:97:68:b0:79: bf:5e:a9:90:58:92:3b:d4:ac:36:a7:8f:d6:a1:f0:55:5a:93: 3d:e2:54:e7:47:4b:da:43:d4:bf:f8:f6:2d:30:c7:7c:36:70: c1:c5:05:f2:99:b2:d1:99:59:7d:42:f6:b5:19:bc:14:73:4f: 3a:da:5c:0a:51:cd:2b:6a:2f:c2:88:71:a0:b2:bf:89:2a:8b: fc:e0:81:49:a7:8c:16:64:ab:c1:85:5f:96:bd:ac:1b:eb:b7: 90:50:3f:21:48:f8:88:eb:31:82:7a:5e:58:50:05:af:6a:d8: 03:56:07:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULaI2xvP8A8WZaktgBaEEniBG4EAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlC MTE5NEREODAeFw0yNjAzMjUxODE2MTZaFw0yNjAzMjkwMjUwMTZaMDMxMTAvBgNV BAMTKDdCMjgzRkJCQTMwQkQ3ODIxMDE1Mzc3NUI5NDY5NEQ5QTA1NjY4NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8kGC/DhLz0q0zT5GIwUidebaH tsZGqOi8k2cyBHZvubgsGzptPA5/0YQ6Zu873Q9brlgVm7CR0n0sCH8lUfz5v8A5 vrEFGjf520vL+kvzvftvtDVSO+F74MNE+K71PbPNEs9w2BEEfhiPW0+VeLYwhPeg lwRQlF0ojL+5tblVtbVRfQA3kEcyZZBN7INWDogVyKdG+fzqvvhT7ESd6al/ZNo4 yR9sWiqIaj8mJDVPh5yTKzSapwxeX6gO6mSUfSyTINj+fGVkL4uN7ANRuz2o/pfq pH5VDPsafkcHxrddQ/xToJplAH1iZtgbaL0xhWKA83aUFc3GdqRHdlC6wjQlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeyg/u6ML14IQFTd1uUaU2aBWaG0wHwYDVR0j BBgwFoAUsw/b3nD75wzETzxxC0ZwabEZTdgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDc1MDg4ZS00OWFmLTQ3MmItOWI2Mi04MWU3M2RhYWYxZDYvMC9CMzBGREJERTcw RkJFNzBDQzQ0RjNDNzEwQjQ2NzA2OUIxMTk0REQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlCMTE5 NEREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ3NTA4OGUtNDlhZi00NzJiLTli NjItODFlNzNkYWFmMWQ2LzAvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0Njcw NjlCMTE5NEREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAB0gf5uzdDxNAgNRRNw0DzIiGtG1/MnWFI4 SvqPE+6+BvDO2WDzoOt6MV59RDUvKe0shYU/VyPGlxgwfG27JlZ8VQlSUNoofo/A nD7SYMsauYKNUexbpPSCI2VzHT0EutKJ6pGY7WYBw5a1oQPj1RF1xOmF94PYeHYR rtop0eEC9w3Kb+UN1x0nsu5ql2iweb9eqZBYkjvUrDanj9ah8FVakz3iVOdHS9pD 1L/49i0wx3w2cMHFBfKZstGZWX1C9rUZvBRzTzraXApRzStqL8KIcaCyv4kqi/zg gUmnjBZkq8GFX5a9rBvrt5BQPyFI+IjrMYJ6XlhQBa9q2ANWB/c= -----END CERTIFICATE-----Generated at Thu Mar 26 17:54:17 2026 by rpki-client