$ rpki-client -vvf repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft File: 30C39359651C33B59AC32BC46831980108960568.mft (raw, json) Hash identifier: sVDoA89j5QI7IiLqyZqgXYO2MBm1Z/dBjw/erQNuWXg= Subject key identifier: 35:A5:B5:04:2E:01:1F:67:E7:6D:46:32:3A:B3:A3:E1:A5:3E:EE:A0 Authority key identifier: 30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68 Certificate issuer: /CN=30C39359651C33B59AC32BC46831980108960568 Certificate serial: 66BC016F74C8A224BE232D5D23CB7ED9DC6A2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft Manifest number: 055B Signing time: Wed 25 Mar 2026 14:02:25 +0000 Manifest this update: Wed 25 Mar 2026 13:57:25 +0000 Manifest next update: Sat 28 Mar 2026 14:21:25 +0000 Files and hashes: 1: 30C39359651C33B59AC32BC46831980108960568.crl (hash: D8wXLJh1jgVqKjhowFy3SUFlr/Y7m3VVdemdl4ooQos=) 2: 323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa (hash: dFQhxxhIxqRHu+YRpdoF0va5NYJwS4I6YJDx/CCdh1g=) 3: 3130332e3130372e3134302e302f32342d3234203d3e20313337323937.roa (hash: BHlKkUg0NjANH6Mliit3f4KGxxDlGbzPwZhqnWpcPcU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:bc:01:6f:74:c8:a2:24:be:23:2d:5d:23:cb:7e:d9:dc:6a:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30C39359651C33B59AC32BC46831980108960568 Validity Not Before: Mar 25 13:57:25 2026 GMT Not After : Mar 28 14:21:25 2026 GMT Subject: CN=35A5B5042E011F67E76D46323AB3A3E1A53EEEA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:48:73:ae:04:28:30:9f:d2:4c:18:97:25:28: af:4e:9c:0c:fe:7f:b2:5f:c3:13:6b:8b:40:20:9a: ff:6e:da:59:78:87:4a:75:c4:b1:cc:f4:b2:c4:a7: 34:ce:6a:ed:5d:d9:11:f9:0a:a1:c4:ee:85:17:48: 53:2e:c9:c3:69:9a:b3:27:87:9f:f7:e3:7f:87:33: 5e:46:92:63:b9:50:4c:6e:79:e9:ab:33:50:c9:3a: 63:5b:37:e6:01:55:82:4b:1e:c7:94:3e:15:ab:9b: f2:56:9d:ad:54:e5:60:c6:a0:ed:f1:45:81:5a:6f: 38:ae:50:f2:b9:d8:6c:db:81:b8:46:d1:ca:0c:49: 69:db:14:fc:40:bf:37:d7:f7:a4:85:c6:29:e4:91: 9c:68:bf:35:a7:f4:83:9e:66:d7:b1:6c:4f:53:18: d8:37:cf:26:dd:77:7a:fb:6b:54:16:60:1c:8a:b8: a1:03:27:75:6f:6b:1d:89:18:76:95:38:86:e4:58: 79:06:8c:46:e9:3c:f1:27:e9:4a:19:27:8a:64:6b: 99:d0:89:68:a2:e8:f5:1d:9b:22:5a:1d:36:3b:6b: dc:3d:73:b1:8a:71:fa:ea:7d:fc:4d:1f:92:fd:e8: 9b:57:09:71:3d:52:96:84:f5:85:12:06:13:cf:49: 9f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A5:B5:04:2E:01:1F:67:E7:6D:46:32:3A:B3:A3:E1:A5:3E:EE:A0 X509v3 Authority Key Identifier: keyid:30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:22:05:8c:13:03:c4:a0:63:90:85:78:c6:ca:ad:08:17:97: 12:42:e3:f3:c6:91:de:58:3a:89:14:07:d9:40:39:a2:21:f8: 69:d6:3d:96:81:75:3f:18:63:f0:29:1b:5f:d1:df:8e:54:85: 79:46:fd:ee:56:e7:cb:9b:96:bf:4d:b5:10:ed:e2:0f:4a:e5: d7:4d:09:d2:a2:19:e9:ad:18:71:46:64:71:fd:94:d8:7c:02: 6a:87:ed:28:9e:97:49:15:f9:84:95:28:70:3c:e5:7c:22:86: 46:ae:b2:63:b8:61:2b:f8:00:ea:cd:dc:ed:3d:48:e3:20:bc: e6:96:6c:47:77:4c:e4:f9:38:d9:00:1e:bc:e6:23:f7:e6:cc: a4:c4:ac:f3:db:c6:c9:f7:54:de:0e:0c:63:72:03:67:1f:80: ed:a7:9e:b6:63:33:92:16:aa:36:44:72:0c:1b:61:4d:8c:c2: 57:2a:6e:a3:94:e1:7d:e6:b2:55:a2:25:91:e0:75:2f:c9:ba: 74:5e:dc:5d:9f:f9:69:04:39:a7:65:f5:ac:ff:08:1d:34:32: 24:ce:eb:ed:1a:a9:02:34:c6:e0:fe:97:71:a2:57:48:95:f0: 55:fb:62:b4:a0:5f:37:d1:cb:f0:1e:d6:a2:2d:f0:e3:87:90: 3e:f8:fe:57 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITZrwBb3TIoiS+Iy1dI8t+2dxqLzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygzMEMzOTM1OTY1MUMzM0I1OUFDMzJCQzQ2ODMxOTgwMTA4 OTYwNTY4MB4XDTI2MDMyNTEzNTcyNVoXDTI2MDMyODE0MjEyNVowMzExMC8GA1UE AxMoMzVBNUI1MDQyRTAxMUY2N0U3NkQ0NjMyM0FCM0EzRTFBNTNFRUVBMDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMJIc64EKDCf0kwYlyUor06cDP5/ sl/DE2uLQCCa/27aWXiHSnXEscz0ssSnNM5q7V3ZEfkKocTuhRdIUy7Jw2masyeH n/fjf4czXkaSY7lQTG556aszUMk6Y1s35gFVgksex5Q+Faub8ladrVTlYMag7fFF gVpvOK5Q8rnYbNuBuEbRygxJadsU/EC/N9f3pIXGKeSRnGi/Naf0g55m17FsT1MY 2DfPJt13evtrVBZgHIq4oQMndW9rHYkYdpU4huRYeQaMRuk88SfpShknimRrmdCJ aKLo9R2bIlodNjtr3D1zsYpx+up9/E0fkv3om1cJcT1SloT1hRIGE89JnzsCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQ1pbUELgEfZ+dtRjI6s6PhpT7uoDAfBgNVHSME GDAWgBQww5NZZRwztZrDK8RoMZgBCJYFaDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1 Nzk5NmY1LWE5MzQtNGI0NC04NTQ3LTE5ZWMzN2NmN2MxNC8wLzMwQzM5MzU5NjUx QzMzQjU5QUMzMkJDNDY4MzE5ODAxMDg5NjA1NjguY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi8zMEMzOTM1OTY1MUMzM0I1OUFDMzJCQzQ2ODMxOTgwMTA4OTYw NTY4LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85NTc5OTZmNS1hOTM0LTRiNDQtODU0 Ny0xOWVjMzdjZjdjMTQvMC8zMEMzOTM1OTY1MUMzM0I1OUFDMzJCQzQ2ODMxOTgw MTA4OTYwNTY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAbyIFjBMDxKBjkIV4xsqtCBeXEkLj88aR3lg6 iRQH2UA5oiH4adY9loF1Pxhj8CkbX9HfjlSFeUb97lbny5uWv021EO3iD0rl100J 0qIZ6a0YcUZkcf2U2HwCaoftKJ6XSRX5hJUocDzlfCKGRq6yY7hhK/gA6s3c7T1I 4yC85pZsR3dM5Pk42QAevOYj9+bMpMSs89vGyfdU3g4MY3IDZx+A7aeetmMzkhaq NkRyDBthTYzCVypuo5ThfeayVaIlkeB1L8m6dF7cXZ/5aQQ5p2X1rP8IHTQyJM7r 7RqpAjTG4P6XcaJXSJXwVftitKBfN9HL8B7Woi3w44eQPvj+Vw== -----END CERTIFICATE-----Generated at Thu Mar 26 21:59:07 2026 by rpki-client