$ rpki-client -vvf repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft File: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft (raw, json) Hash identifier: qKFjZ3QR7cEtAEGjm7jbJoGIal9hlo+UEgHHVGM0wDc= Subject key identifier: 7A:8D:1B:87:1F:63:8F:32:CC:F3:AC:C5:26:C2:5E:20:8C:E1:5D:C4 Authority key identifier: 30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C Certificate issuer: /CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Certificate serial: 236535971C07E94E4BDCE19B776F93F2FD9BF96D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft Manifest number: 010F Signing time: Tue 24 Mar 2026 18:20:58 +0000 Manifest this update: Tue 24 Mar 2026 18:15:58 +0000 Manifest next update: Fri 27 Mar 2026 20:50:58 +0000 Files and hashes: 1: 323030313a6466333a346234303a3a2f34382d3438203d3e20313531393932.roa (hash: H0tMLPWT/xMzJjo+X3cfcs6u4yhbTyToHbzV+AgsIh8=) 2: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl (hash: YzSya5YtaruumeY75zs4zC9vZ0WgR6VJwyb2on/1Me4=) 3: 3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa (hash: 067j8zIqWRfiKYsv/8PNz7miyq3F672QljWEkk7m/9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:50:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:65:35:97:1c:07:e9:4e:4b:dc:e1:9b:77:6f:93:f2:fd:9b:f9:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Validity Not Before: Mar 24 18:15:58 2026 GMT Not After : Mar 27 20:50:58 2026 GMT Subject: CN=7A8D1B871F638F32CCF3ACC526C25E208CE15DC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b6:4f:28:e3:2f:98:2a:48:59:01:1f:20:f6: 15:80:bc:e7:75:ad:43:14:d7:02:10:89:c3:52:8c: 09:2e:25:e3:3d:a4:04:1c:cd:43:8d:da:ae:36:e1: c0:5c:e1:a5:0c:49:4c:8b:b8:ca:47:35:ec:49:85: 78:41:f1:cf:c8:53:6f:30:fa:32:bd:53:7a:11:0e: 33:3c:aa:3a:a9:ef:e1:3f:32:3e:d3:d5:80:16:76: 4f:cb:ed:84:f5:72:f6:74:53:a0:a6:78:81:5f:56: ff:3b:0a:95:4e:4f:bc:4b:60:67:d8:34:fa:ea:47: f9:ef:48:9d:fb:83:55:c0:28:f1:93:7b:61:47:82: 52:bb:36:17:a8:30:dc:b7:9d:8c:ae:2c:da:03:b4: da:33:15:34:92:56:66:f2:d7:2b:ae:a2:a8:82:f1: 15:d3:f8:5d:71:ff:45:32:66:f8:cd:b2:b2:15:57: 27:7f:6d:a9:87:dc:92:d3:9e:77:15:45:01:aa:6c: 00:5d:cf:f2:45:84:18:9e:0c:90:86:be:46:12:4f: a7:16:b8:c0:ba:bd:a3:5c:03:be:bb:19:aa:8e:1b: 88:49:62:ba:29:5b:0f:49:b0:ab:47:58:9f:63:ab: 48:be:04:ab:9f:32:57:9e:d7:09:21:38:0f:0e:79: 20:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8D:1B:87:1F:63:8F:32:CC:F3:AC:C5:26:C2:5E:20:8C:E1:5D:C4 X509v3 Authority Key Identifier: keyid:30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:6e:d1:ad:8d:1b:54:c2:4a:a9:52:be:cc:56:31:48:55:76: 45:21:56:88:f7:8e:a5:8e:a7:1c:d1:4e:98:8e:d7:c2:39:87: f8:d0:08:2e:ab:3c:ef:3a:77:af:0b:eb:8a:0e:09:ce:21:98: 8d:5d:9b:39:7d:4c:38:32:5d:73:36:c9:c2:ac:94:b1:23:8e: 98:5a:e4:d0:fb:0d:b4:7a:6a:c5:d5:3c:50:c3:ac:da:79:f9: 32:17:2e:3b:c9:90:fe:85:7b:19:4f:e1:35:2a:d0:33:b1:de: dc:be:b7:69:da:f9:85:6d:9d:d1:e0:c9:a2:dc:d3:69:67:13: de:21:f8:81:82:01:fc:15:62:0a:97:6a:75:3e:87:80:a4:af: aa:69:b6:ee:d7:39:bf:0c:d6:05:8e:60:c6:9f:8c:54:f9:e8: 25:c8:7c:cb:68:66:c8:a0:24:3c:86:41:0f:c7:2f:34:94:1b: 6f:8f:1f:f7:8a:01:17:73:52:5d:65:ee:95:e2:cc:f3:ec:c7: 0a:d8:e6:55:01:97:a8:c8:22:30:a7:41:cf:2c:0a:1f:14:1e: 57:d0:f7:89:45:0c:98:8c:fa:86:50:a8:aa:77:33:7f:63:94: c7:52:26:f1:ae:62:88:cf:b2:99:07:97:d8:0e:73:8f:01:f7: 1c:3b:c9:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI2U1lxwH6U5L3OGbd2+T8v2b+W0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0Qzgw NjFBN0IxQzAeFw0yNjAzMjQxODE1NThaFw0yNjAzMjcyMDUwNThaMDMxMTAvBgNV BAMTKDdBOEQxQjg3MUY2MzhGMzJDQ0YzQUNDNTI2QzI1RTIwOENFMTVEQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOtk8o4y+YKkhZAR8g9hWAvOd1 rUMU1wIQicNSjAkuJeM9pAQczUON2q424cBc4aUMSUyLuMpHNexJhXhB8c/IU28w +jK9U3oRDjM8qjqp7+E/Mj7T1YAWdk/L7YT1cvZ0U6CmeIFfVv87CpVOT7xLYGfY NPrqR/nvSJ37g1XAKPGTe2FHglK7NheoMNy3nYyuLNoDtNozFTSSVmby1yuuoqiC 8RXT+F1x/0UyZvjNsrIVVyd/bamH3JLTnncVRQGqbABdz/JFhBieDJCGvkYST6cW uMC6vaNcA767GaqOG4hJYropWw9JsKtHWJ9jq0i+BKufMlee1wkhOA8OeSDRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeo0bhx9jjzLM86zFJsJeIIzhXcQwHwYDVR0j BBgwFoAUMHpAjiqoImja025vFF1kyAYaexwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTdmMWY0My1jZTdlLTQ5NzAtYWFkMC03ODJiMDE5YmQwM2UvMC8zMDdBNDA4RTJB QTgyMjY4REFEMzZFNkYxNDVENjRDODA2MUE3QjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0QzgwNjFB N0IxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU3ZjFmNDMtY2U3ZS00OTcwLWFh ZDAtNzgyYjAxOWJkMDNlLzAvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0 QzgwNjFBN0IxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJu0a2NG1TCSqlSvsxWMUhVdkUhVoj3jqWO pxzRTpiO18I5h/jQCC6rPO86d68L64oOCc4hmI1dmzl9TDgyXXM2ycKslLEjjpha 5ND7DbR6asXVPFDDrNp5+TIXLjvJkP6FexlP4TUq0DOx3ty+t2na+YVtndHgyaLc 02lnE94h+IGCAfwVYgqXanU+h4Ckr6pptu7XOb8M1gWOYMafjFT56CXIfMtoZsig JDyGQQ/HLzSUG2+PH/eKARdzUl1l7pXizPPsxwrY5lUBl6jIIjCnQc8sCh8UHlfQ 94lFDJiM+oZQqKp3M39jlMdSJvGuYojPspkHl9gOc48B9xw7yd4= -----END CERTIFICATE-----Generated at Thu Mar 26 12:07:10 2026 by rpki-client