$ rpki-client -vvf repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft File: 8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft (raw, json) Hash identifier: y5CdZOW+9pd2mMB414onrvRN2RXEV4xU1doM8I3ZW/Y= Subject key identifier: 49:FB:20:09:B8:31:08:1F:2C:93:75:04:36:97:8B:5C:D7:F3:29:0D Authority key identifier: 80:30:ED:8A:48:ED:98:5A:5D:D8:8E:9B:C1:C0:D0:15:F4:36:FF:DF Certificate issuer: /CN=8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF Certificate serial: 1F208D0CA440AA4DF23C0C0A9F11AD13B849CC7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft Manifest number: 023B Signing time: Sat 28 Feb 2026 10:01:58 +0000 Manifest this update: Sat 28 Feb 2026 09:56:58 +0000 Manifest next update: Tue 03 Mar 2026 21:57:58 +0000 Files and hashes: 1: 3130332e3138392e3235342e302f32342d3234203d3e20313439393135.roa (hash: Fo/wu0BFSpF55NefZU/m5we3g29g18juirYZ6ANAiIw=) 2: 8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl (hash: VoMhjXTbbT/qUCvUedkgw9xh18vWvwHOKiPPW8+UwnU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 21:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:20:8d:0c:a4:40:aa:4d:f2:3c:0c:0a:9f:11:ad:13:b8:49:cc:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF Validity Not Before: Feb 28 09:56:58 2026 GMT Not After : Mar 3 21:57:58 2026 GMT Subject: CN=49FB2009B831081F2C93750436978B5CD7F3290D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e1:4a:b4:9f:3c:e6:12:29:d6:d7:0f:5c:3c: 5e:45:42:6f:a8:21:eb:f5:a2:7e:5e:de:63:92:ed: e4:c9:39:ef:22:fd:38:86:c6:ec:ab:d2:04:69:80: f8:57:d4:db:2a:07:16:91:e7:e2:c3:12:45:87:03: b9:85:09:a8:c7:ae:df:9a:8e:28:43:b5:e5:ff:55: 8d:d8:91:9e:5f:97:99:a1:f1:fd:f0:60:51:80:09: 08:ef:4c:12:ac:80:df:96:ed:a6:7a:86:bc:8e:a6: c2:73:58:90:8d:2f:54:dd:24:26:38:56:4b:c7:0a: 31:bf:94:89:9e:f3:38:b7:43:f6:2d:92:a0:ab:09: 1a:93:e6:04:e4:1d:d4:96:3a:85:9b:aa:6e:77:4a: d4:da:99:4f:4e:a2:3c:5f:b8:a0:84:b5:67:72:ac: ff:9d:95:71:a0:78:d7:70:3c:b4:58:ed:a8:7c:45: 80:3d:84:66:84:32:99:44:c5:5c:1c:21:74:fb:3b: be:d7:44:1f:a2:99:95:30:d8:f1:24:33:08:4c:f0: 8c:74:e7:fd:ba:1a:93:1e:a2:64:b5:51:8f:e4:43: 90:bc:06:8c:79:5f:ef:0d:de:ec:32:29:69:0f:e2: 80:9a:f4:fd:c6:92:65:50:af:10:64:ad:f4:e4:da: 8e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FB:20:09:B8:31:08:1F:2C:93:75:04:36:97:8B:5C:D7:F3:29:0D X509v3 Authority Key Identifier: keyid:80:30:ED:8A:48:ED:98:5A:5D:D8:8E:9B:C1:C0:D0:15:F4:36:FF:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b7:10:24:ff:c7:3f:44:cd:e5:3b:0d:bd:53:b9:5f:4e:98: 0e:6b:07:0c:1a:72:fb:39:d8:f2:88:67:d2:d4:03:0a:91:ba: da:20:1f:6f:10:a8:82:ce:4c:6e:29:eb:3a:30:1b:f0:22:20: 97:7d:2d:dd:c8:e9:f6:0e:9c:ab:5c:e4:bd:f5:c4:1e:31:bc: 06:43:ed:34:9c:ac:ed:1a:0b:41:14:b0:74:a7:91:5f:6f:8a: 2d:e4:4c:78:72:81:6c:85:f7:9c:d4:e3:3a:ba:f9:62:41:39: 32:9b:6a:7b:da:45:1d:31:1c:fb:cf:ba:f0:8e:83:40:49:59: 2f:3e:cf:fc:bc:de:63:6c:76:f9:2d:60:1e:2d:ca:84:61:05: 94:d2:5f:f2:9f:23:97:48:02:61:22:f0:90:dd:ef:f8:bb:5c: 63:92:31:15:3c:79:8c:62:61:d6:08:40:86:84:e4:92:35:cc: 97:37:29:94:bd:31:4b:b1:32:c8:a8:e9:46:9d:77:af:8c:c4: 74:42:86:7e:bd:38:df:28:66:da:b7:68:a9:c7:c5:d6:ef:59: 18:59:2d:1d:fb:2b:b0:a2:4a:cf:b2:15:c2:97:04:2e:0b:de: 47:88:95:4e:47:68:4a:1a:06:4f:c5:50:98:c6:e8:5b:b2:b0: 33:a0:22:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHyCNDKRAqk3yPAwKnxGtE7hJzHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQwMTVG NDM2RkZERjAeFw0yNjAyMjgwOTU2NThaFw0yNjAzMDMyMTU3NThaMDMxMTAvBgNV BAMTKDQ5RkIyMDA5QjgzMTA4MUYyQzkzNzUwNDM2OTc4QjVDRDdGMzI5MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN4Uq0nzzmEinW1w9cPF5FQm+o Iev1on5e3mOS7eTJOe8i/TiGxuyr0gRpgPhX1NsqBxaR5+LDEkWHA7mFCajHrt+a jihDteX/VY3YkZ5fl5mh8f3wYFGACQjvTBKsgN+W7aZ6hryOpsJzWJCNL1TdJCY4 VkvHCjG/lIme8zi3Q/YtkqCrCRqT5gTkHdSWOoWbqm53StTamU9OojxfuKCEtWdy rP+dlXGgeNdwPLRY7ah8RYA9hGaEMplExVwcIXT7O77XRB+imZUw2PEkMwhM8Ix0 5/26GpMeomS1UY/kQ5C8Box5X+8N3uwyKWkP4oCa9P3GkmVQrxBkrfTk2o6rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSfsgCbgxCB8sk3UENpeLXNfzKQ0wHwYDVR0j BBgwFoAUgDDtikjtmFpd2I6bwcDQFfQ2/98wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzAwNTZiNC1mMDI3LTQ0ZmEtOTc0ZC00YTFlZDE5MWFlNTYvMC84MDMwRUQ4QTQ4 RUQ5ODVBNUREODhFOUJDMUMwRDAxNUY0MzZGRkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQwMTVGNDM2 RkZERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMwMDU2YjQtZjAyNy00NGZhLTk3 NGQtNGExZWQxOTFhZTU2LzAvODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQw MTVGNDM2RkZERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAy3ECT/xz9EzeU7Db1TuV9OmA5rBwwacvs5 2PKIZ9LUAwqRutogH28QqILOTG4p6zowG/AiIJd9Ld3I6fYOnKtc5L31xB4xvAZD 7TScrO0aC0EUsHSnkV9vii3kTHhygWyF95zU4zq6+WJBOTKbanvaRR0xHPvPuvCO g0BJWS8+z/y83mNsdvktYB4tyoRhBZTSX/KfI5dIAmEi8JDd7/i7XGOSMRU8eYxi YdYIQIaE5JI1zJc3KZS9MUuxMsio6Uadd6+MxHRChn69ON8oZtq3aKnHxdbvWRhZ LR37K7CiSs+yFcKXBC4L3keIlU5HaEoaBk/FUJjG6FuysDOgIsI= -----END CERTIFICATE-----Generated at Mon Mar 2 15:16:13 2026 by rpki-client