$ rpki-client -vvf repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft File: 30C896473FC5DE403F4651059F6BE1586BFAC473.mft (raw, json) Hash identifier: vMT/KdXlMCndyzMXkuTWaFJ/9tet+AiOhMVx20zZL1g= Subject key identifier: 37:89:8C:E8:95:D5:E4:A9:7B:53:D3:D3:A1:D9:5C:02:91:5A:8D:F7 Authority key identifier: 30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 Certificate issuer: /CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Certificate serial: 16F321FC65A4DA8E11F193C6DFBB9C6C6E6ADF78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft Manifest number: 0102 Signing time: Thu 26 Mar 2026 12:01:56 +0000 Manifest this update: Thu 26 Mar 2026 11:56:56 +0000 Manifest next update: Sun 29 Mar 2026 21:33:56 +0000 Files and hashes: 1: 30C896473FC5DE403F4651059F6BE1586BFAC473.crl (hash: VmiNF3h9i/4PydChNJYEh2w3trrTtRoik4fBJYWGVVc=) 2: 3135372e36362e36362e302f32342d3234203d3e20313532373831.roa (hash: x/vtNdgftiP2gNHQRXmqF+bNIt+0K74KbEvvSueFvXY=) 3: 3135372e36362e36372e302f32342d3234203d3e20313532373831.roa (hash: jM3o+qLgLitpWG9aIDTu7g7FqrNoiH7dHWh51KuZSvY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 21:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f3:21:fc:65:a4:da:8e:11:f1:93:c6:df:bb:9c:6c:6e:6a:df:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Validity Not Before: Mar 26 11:56:56 2026 GMT Not After : Mar 29 21:33:56 2026 GMT Subject: CN=37898CE895D5E4A97B53D3D3A1D95C02915A8DF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a6:a2:df:12:84:ed:54:00:0e:db:07:da:8d: ba:2b:1c:59:64:6f:a8:80:73:bf:00:93:b6:87:78: d1:da:14:b8:fd:a4:52:5f:c3:95:18:67:01:05:19: 96:07:78:a2:bb:1a:ff:d9:20:da:f3:90:f2:78:73: 29:63:ad:65:6a:74:77:b3:db:7f:4f:66:8c:18:7e: 84:95:5a:87:03:72:20:9c:c7:78:5a:05:77:ff:c5: 5b:6b:46:18:c8:5d:29:6e:f3:5f:7c:48:f4:c4:bb: 9c:f3:20:7d:48:ec:67:eb:3c:75:02:0d:21:dd:1f: 46:bd:43:8e:8d:a1:00:fe:a6:b4:14:99:38:7c:91: fb:68:e0:0c:f7:91:2f:62:be:96:50:e5:ce:cb:e2: 0b:b6:61:bb:88:2c:39:ee:0e:93:5d:85:53:95:be: 79:b7:43:85:a6:04:e8:20:0b:01:a4:96:39:0c:ec: 5b:52:93:67:f9:c3:57:87:a4:cd:18:b0:f8:54:33: fc:bd:3d:db:75:04:99:f6:71:6c:ca:dc:81:f5:d7: c4:b4:52:03:9d:6a:1f:42:cf:d9:7c:b1:46:f1:9c: 99:e3:6b:d9:9a:16:92:b2:aa:cf:a1:40:70:37:3b: 8a:75:65:94:f0:91:33:ea:eb:53:e4:fd:6a:cb:e0: 8d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:89:8C:E8:95:D5:E4:A9:7B:53:D3:D3:A1:D9:5C:02:91:5A:8D:F7 X509v3 Authority Key Identifier: keyid:30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c4:6f:42:90:ef:52:2a:2c:d4:7e:c6:e7:94:ef:27:73:22: 89:1e:f2:ed:18:e7:39:15:26:64:76:98:79:ae:32:d8:4a:65: 1e:07:30:40:17:69:9f:c2:1c:0e:ae:0b:a1:21:d9:c2:e5:19: 79:13:2b:c2:b5:5d:d1:04:0c:01:9f:7d:fb:df:0e:84:01:9a: f8:bc:26:af:1b:f1:87:3a:bb:a8:1f:a4:6f:02:3b:03:e3:5f: e6:f0:49:aa:a8:b1:de:b8:a6:f9:b9:2b:73:3a:21:78:f1:2b: 4a:a5:f4:ee:a5:58:85:e4:6f:80:b3:12:25:8e:fa:72:45:e0: 5f:07:ad:db:9a:7a:ca:45:04:cd:1c:c4:16:6a:c7:61:68:ae: 80:59:fb:9b:4b:dd:0e:c8:71:54:88:8a:ee:f6:9b:9f:4a:ba: 1e:56:49:cb:f9:ba:3a:ec:3a:21:37:e4:bc:fc:1d:70:f1:48: 7c:58:2a:2d:dd:e7:ff:5c:cf:e8:c1:43:e1:ee:6d:74:d3:30: 9d:c2:3a:af:71:65:1e:45:80:5b:39:57:bb:64:cb:14:fe:fd: 1b:3e:93:40:0c:76:ad:de:a0:65:f1:dc:7d:e8:7c:19:71:83: 03:aa:55:88:f2:b8:90:20:98:c9:c3:67:29:6f:7e:28:cc:d8: d9:10:ba:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFvMh/GWk2o4R8ZPG37ucbG5q33gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2 QkZBQzQ3MzAeFw0yNjAzMjYxMTU2NTZaFw0yNjAzMjkyMTMzNTZaMDMxMTAvBgNV BAMTKDM3ODk4Q0U4OTVENUU0QTk3QjUzRDNEM0ExRDk1QzAyOTE1QThERjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFpqLfEoTtVAAO2wfajborHFlk b6iAc78Ak7aHeNHaFLj9pFJfw5UYZwEFGZYHeKK7Gv/ZINrzkPJ4cyljrWVqdHez 239PZowYfoSVWocDciCcx3haBXf/xVtrRhjIXSlu8198SPTEu5zzIH1I7GfrPHUC DSHdH0a9Q46NoQD+prQUmTh8kfto4Az3kS9ivpZQ5c7L4gu2YbuILDnuDpNdhVOV vnm3Q4WmBOggCwGkljkM7FtSk2f5w1eHpM0YsPhUM/y9Pdt1BJn2cWzK3IH118S0 UgOdah9Cz9l8sUbxnJnja9maFpKyqs+hQHA3O4p1ZZTwkTPq61Pk/WrL4I3fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN4mM6JXV5Kl7U9PTodlcApFajfcwHwYDVR0j BBgwFoAUMMiWRz/F3kA/RlEFn2vhWGv6xHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjcwYWU3Ni05NTk0LTQ5ODAtYjQxMC00OTFhNjMxOWZmM2EvMC8zMEM4OTY0NzNG QzVERTQwM0Y0NjUxMDU5RjZCRTE1ODZCRkFDNDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2QkZB QzQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY3MGFlNzYtOTU5NC00OTgwLWI0 MTAtNDkxYTYzMTlmZjNhLzAvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUx NTg2QkZBQzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/Eb0KQ71IqLNR+xueU7ydzIoke8u0Y5zkV JmR2mHmuMthKZR4HMEAXaZ/CHA6uC6Eh2cLlGXkTK8K1XdEEDAGfffvfDoQBmvi8 Jq8b8Yc6u6gfpG8COwPjX+bwSaqosd64pvm5K3M6IXjxK0ql9O6lWIXkb4CzEiWO +nJF4F8HrduaespFBM0cxBZqx2ForoBZ+5tL3Q7IcVSIiu72m59Kuh5WScv5ujrs OiE35Lz8HXDxSHxYKi3d5/9cz+jBQ+HubXTTMJ3COq9xZR5FgFs5V7tkyxT+/Rs+ k0AMdq3eoGXx3H3ofBlxgwOqVYjyuJAgmMnDZylvfijM2NkQunk= -----END CERTIFICATE-----Generated at Thu Mar 26 22:13:48 2026 by rpki-client