$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft File: F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft (raw, json) Hash identifier: NmZN9YfwrS1rHcd++GVyAILN94zabxdFu7TtIf+AaOg= Subject key identifier: 94:CB:29:75:76:F9:0A:E9:B1:8C:74:4B:6F:11:5D:E7:99:62:AA:A3 Authority key identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33 Certificate issuer: /CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733 Certificate serial: 22A97FCEB0EFC478583EEB72BBFFC7DC8BF1A544 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft Manifest number: 055D Signing time: Wed 25 Mar 2026 06:02:18 +0000 Manifest this update: Wed 25 Mar 2026 05:57:18 +0000 Manifest next update: Sat 28 Mar 2026 06:27:18 +0000 Files and hashes: 1: 3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (hash: ykBCC6a4TUa9u53qD+3M0qE2NkGoJtCXa3OdoYw7FhA=) 2: 323430373a343630303a3a2f33322d3438203d3e203435323935.roa (hash: 4LpQRgrp7oBVnTYb85mIa1GKQ4oBc22IhdekLi1TA6c=) 3: 3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (hash: WCf4k80HtpWJXreA4Q6XD5iDNEeVQ9AU8BVWi8IEoSM=) 4: F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl (hash: W6ZDyZPVhcBssHFw7VGVFAIuicmnXCruROZT5ws7/+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a9:7f:ce:b0:ef:c4:78:58:3e:eb:72:bb:ff:c7:dc:8b:f1:a5:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733 Validity Not Before: Mar 25 05:57:18 2026 GMT Not After : Mar 28 06:27:18 2026 GMT Subject: CN=94CB297576F90AE9B18C744B6F115DE79962AAA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cf:f6:df:fe:aa:8c:a6:db:67:6d:93:2e:78: e4:48:c5:fc:0f:5d:72:27:46:34:65:fb:a5:ce:2a: 81:e5:82:65:14:88:1a:e0:ed:c7:70:83:e0:38:e2: 0f:d6:7a:44:80:41:2e:a7:12:ef:30:bb:db:56:ee: 36:15:82:61:a8:c0:0f:ef:4b:43:68:7b:dc:ff:40: 1e:e0:a0:fd:bd:51:1b:2c:e3:97:84:05:1a:c9:94: b8:23:d9:81:71:86:5f:af:51:17:1d:55:c6:64:57: a4:e2:ff:f5:49:4f:76:85:fe:42:e3:dd:d5:27:20: 2c:ed:7f:f7:4e:b3:9c:50:79:64:a1:0f:c2:62:8f: 8d:68:f5:44:df:6a:1c:67:52:6f:05:c6:93:49:62: da:1b:29:53:0e:81:54:73:5a:99:53:c7:38:0c:c2: 55:23:1d:81:d7:5e:40:09:7e:28:ae:66:3b:aa:51: 44:f9:55:bf:b9:ba:dd:c5:bd:cb:6b:a0:0c:da:03: 21:42:ed:60:38:bf:04:e1:d3:d1:a4:32:e7:4a:27: 83:f4:95:c2:7d:be:f0:85:dc:00:42:85:c1:d9:6b: 5d:d9:3a:70:b6:69:9c:7e:02:54:a3:2e:96:b3:ce: 95:87:71:3e:95:9e:f5:d3:f7:36:6c:ec:aa:a9:ea: 60:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CB:29:75:76:F9:0A:E9:B1:8C:74:4B:6F:11:5D:E7:99:62:AA:A3 X509v3 Authority Key Identifier: keyid:F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6f:cc:5b:be:d5:8a:13:72:44:c3:32:cd:1b:9b:91:2f:ba: 7d:d0:13:82:e3:db:f6:6c:5f:c6:10:91:2d:18:2c:84:e0:8c: 44:64:91:51:46:ad:c2:55:d4:eb:e0:f2:44:82:a2:49:b1:87: a8:c3:74:a4:43:b9:58:26:99:91:4b:4f:c4:62:fc:6f:fd:f1: 61:3d:10:49:f7:22:0d:af:2f:f6:ca:15:dc:ae:3c:5c:f9:79: b6:10:73:fa:d8:a9:33:fc:a2:48:d4:63:0f:de:30:cf:79:17: d0:23:e4:c8:7d:89:b2:82:c1:ec:9f:3d:ed:3d:c2:83:ab:8d: cd:d1:4e:59:89:68:fa:07:eb:c0:f1:a0:21:09:9c:2a:19:c8: 43:3c:1b:f5:e2:b9:40:0e:f4:cd:c8:32:a2:52:6c:ea:48:07: 14:3b:0b:41:8b:7a:51:e7:2e:81:21:d3:05:f8:9b:0e:55:ba: f1:d8:11:1c:97:37:5c:c2:0c:7b:4f:ae:13:8b:f4:26:46:5f: a4:3e:97:53:55:30:d6:f9:aa:cc:3e:58:30:5c:83:c9:db:54: ba:00:20:cf:5d:8f:51:6a:79:6d:5f:31:b9:1b:a4:41:13:5c: 2d:c2:a6:f7:e7:82:6b:4d:7e:93:f0:79:2d:83:46:50:6b:db: e2:78:70:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIql/zrDvxHhYPutyu//H3IvxpUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4QUVC RkE5NzczMzAeFw0yNjAzMjUwNTU3MThaFw0yNjAzMjgwNjI3MThaMDMxMTAvBgNV BAMTKDk0Q0IyOTc1NzZGOTBBRTlCMThDNzQ0QjZGMTE1REU3OTk2MkFBQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBz/bf/qqMpttnbZMueORIxfwP XXInRjRl+6XOKoHlgmUUiBrg7cdwg+A44g/WekSAQS6nEu8wu9tW7jYVgmGowA/v S0Noe9z/QB7goP29URss45eEBRrJlLgj2YFxhl+vURcdVcZkV6Ti//VJT3aF/kLj 3dUnICztf/dOs5xQeWShD8Jij41o9UTfahxnUm8FxpNJYtobKVMOgVRzWplTxzgM wlUjHYHXXkAJfiiuZjuqUUT5Vb+5ut3FvctroAzaAyFC7WA4vwTh09GkMudKJ4P0 lcJ9vvCF3ABChcHZa13ZOnC2aZx+AlSjLpazzpWHcT6VnvXT9zZs7Kqp6mAtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlMspdXb5CumxjHRLbxFd55liqqMwHwYDVR0j BBgwFoAU8w8U9K62Yw/04nCwcpNYrr+pdzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGY0OGE4OS05MGM1LTRmNWEtODAxNS0zNmYxMTk2YTcxYzgvMC9GMzBGMTRGNEFF QjY2MzBGRjRFMjcwQjA3MjkzNThBRUJGQTk3NzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4QUVCRkE5 NzczMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmNDhhODktOTBjNS00ZjVhLTgw MTUtMzZmMTE5NmE3MWM4LzAvRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4 QUVCRkE5NzczMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9vzFu+1YoTckTDMs0bm5Evun3QE4Lj2/Zs X8YQkS0YLITgjERkkVFGrcJV1Ovg8kSCokmxh6jDdKRDuVgmmZFLT8Ri/G/98WE9 EEn3Ig2vL/bKFdyuPFz5ebYQc/rYqTP8okjUYw/eMM95F9Aj5Mh9ibKCweyfPe09 woOrjc3RTlmJaPoH68DxoCEJnCoZyEM8G/XiuUAO9M3IMqJSbOpIBxQ7C0GLelHn LoEh0wX4mw5VuvHYERyXN1zCDHtPrhOL9CZGX6Q+l1NVMNb5qsw+WDBcg8nbVLoA IM9dj1FqeW1fMbkbpEETXC3CpvfngmtNfpPweS2DRlBr2+J4cBU= -----END CERTIFICATE-----Generated at Thu Mar 26 16:58:40 2026 by rpki-client