$ rpki-client -vvf repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft File: 030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft (raw, json) Hash identifier: pKqjhMGQrvGSCyN7OWI5Jr4ceFabuIBrh0cbK1IkU1w= Subject key identifier: 2E:AC:8C:96:EB:B7:54:71:30:85:AB:E3:4A:25:78:C4:3C:51:77:88 Authority key identifier: 03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F Certificate issuer: /CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F Certificate serial: 49C17F0BA185B51B21C88E086D39F5BFDAFCCBA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft Manifest number: 027A Signing time: Sun 01 Mar 2026 13:51:01 +0000 Manifest this update: Sun 01 Mar 2026 13:46:01 +0000 Manifest next update: Wed 04 Mar 2026 23:09:01 +0000 Files and hashes: 1: 030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl (hash: yfIFWOXwjM47WJIp3LtK5gHI8j7i1LvmdrDVyiI8DxE=) 2: 3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa (hash: UmBaN4f8daXm7YcJHiYwqui5FgHxOYUATLUGSQyoA5A=) 3: 3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa (hash: iSdhQ66zYnSDoW2oYiFhzo66rGvZpv/6O91EPJd3VUo=) 4: 3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa (hash: JP4Zum4iV9kK+sjwkFZOVqNzSo/R4flchawr+ijKpxA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c1:7f:0b:a1:85:b5:1b:21:c8:8e:08:6d:39:f5:bf:da:fc:cb:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F Validity Not Before: Mar 1 13:46:01 2026 GMT Not After : Mar 4 23:09:01 2026 GMT Subject: CN=2EAC8C96EBB754713085ABE34A2578C43C517788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:78:d9:ec:a4:64:16:26:e9:8d:e8:d4:8d:58: 83:4b:61:a6:8a:df:71:be:6d:c4:14:3f:01:ac:d1: 88:16:b7:02:5d:c7:06:32:e9:03:ef:f2:a7:8a:2b: 62:75:a4:5c:78:a7:d3:c7:7f:b5:92:d9:97:a1:7d: 50:22:91:1b:2a:18:bf:be:6e:8f:29:5f:6d:37:d2: 9f:25:fa:cf:71:e2:08:f9:03:41:2a:8e:1e:7a:ca: 82:ae:0c:93:8a:82:4d:0c:7d:17:94:75:c3:6f:c8: 9f:eb:d8:1d:c0:34:d4:aa:f2:49:a2:8f:df:72:29: 28:e2:33:76:2e:5e:d4:41:4b:e4:4e:ab:11:5e:42: f4:82:60:06:eb:3a:5f:04:a7:fa:fb:e7:f2:da:29: 43:6b:c3:ea:06:ef:d0:72:6e:e8:d0:85:b7:cc:07: 85:d0:63:45:2f:e8:44:bc:8c:47:14:26:ce:e6:22: 62:6d:11:b6:ff:5a:05:32:c0:6f:04:32:25:bc:29: 50:8a:38:f0:d7:ad:21:81:9f:a2:e1:ed:15:d4:51: 80:d5:db:b9:3f:8b:ac:6c:8b:b7:f5:b8:06:55:8a: b6:7d:73:07:1c:61:b0:e4:ec:9b:41:37:b6:65:00: af:f1:be:ff:90:de:a9:10:b9:7a:b6:d4:c2:3c:b0: ae:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AC:8C:96:EB:B7:54:71:30:85:AB:E3:4A:25:78:C4:3C:51:77:88 X509v3 Authority Key Identifier: keyid:03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:cf:82:d7:8a:7a:16:c6:af:cf:16:f3:46:bc:a1:09:a4:1c: d7:fc:fe:cb:0e:51:f3:16:81:82:99:de:14:c3:db:9c:f7:ef: 0e:09:29:0a:f3:2c:f7:f3:f1:40:5a:85:4e:56:37:8e:b6:5f: 27:53:62:e8:11:26:b1:46:2a:fa:c6:1a:6d:8e:0c:6c:e4:7e: 6c:75:06:c2:ba:9f:85:97:28:a1:3f:45:eb:34:30:ed:2f:2e: 03:2c:c2:7c:2d:f7:be:45:fa:90:11:d4:10:c4:c8:23:bf:b9: bc:22:6a:23:5f:5b:1f:cb:24:29:aa:6d:a5:8a:72:db:26:5c: c2:60:c8:a7:43:be:01:73:79:95:48:4b:7f:c5:9b:7e:cb:db: 77:61:88:23:8f:33:36:00:c9:21:09:3a:30:4e:46:c0:38:1b: 39:d0:07:79:7a:96:de:3e:cf:8f:d3:cd:32:0f:3a:a0:d1:35: 7b:fc:d0:93:a3:e7:1c:c1:80:a1:04:e0:6d:c7:4c:d5:8e:80: cf:65:b3:bb:c8:10:e9:6f:52:40:ca:f9:ca:cc:3a:9e:0b:7a: 9d:15:f3:fe:bb:d3:ae:05:fd:5a:58:da:97:14:f5:3d:56:d9: 02:f4:b6:59:ab:fe:e9:01:f6:dc:d7:2d:9e:f3:44:3a:af:47: ea:34:6a:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUScF/C6GFtRshyI4IbTn1v9r8y6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3OUQx NzhBQ0UxRjAeFw0yNjAzMDExMzQ2MDFaFw0yNjAzMDQyMzA5MDFaMDMxMTAvBgNV BAMTKDJFQUM4Qzk2RUJCNzU0NzEzMDg1QUJFMzRBMjU3OEM0M0M1MTc3ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEeNnspGQWJumN6NSNWINLYaaK 33G+bcQUPwGs0YgWtwJdxwYy6QPv8qeKK2J1pFx4p9PHf7WS2ZehfVAikRsqGL++ bo8pX2030p8l+s9x4gj5A0Eqjh56yoKuDJOKgk0MfReUdcNvyJ/r2B3ANNSq8kmi j99yKSjiM3YuXtRBS+ROqxFeQvSCYAbrOl8Ep/r75/LaKUNrw+oG79BybujQhbfM B4XQY0Uv6ES8jEcUJs7mImJtEbb/WgUywG8EMiW8KVCKOPDXrSGBn6Lh7RXUUYDV 27k/i6xsi7f1uAZVirZ9cwccYbDk7JtBN7ZlAK/xvv+Q3qkQuXq21MI8sK4ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULqyMluu3VHEwhavjSiV4xDxRd4gwHwYDVR0j BBgwFoAUAwvlVyhtOk/m6apwY27HnReKzh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NThjOGY5Zi00MjEzLTRhMmEtODVjMy1iMjRiMGQwYjUxMDcvMC8wMzBCRTU1NzI4 NkQzQTRGRTZFOUFBNzA2MzZFQzc5RDE3OEFDRTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3OUQxNzhB Q0UxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU4YzhmOWYtNDIxMy00YTJhLTg1 YzMtYjI0YjBkMGI1MTA3LzAvMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3 OUQxNzhBQ0UxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7PgteKehbGr88W80a8oQmkHNf8/ssOUfMW gYKZ3hTD25z37w4JKQrzLPfz8UBahU5WN462XydTYugRJrFGKvrGGm2ODGzkfmx1 BsK6n4WXKKE/Res0MO0vLgMswnwt975F+pAR1BDEyCO/ubwiaiNfWx/LJCmqbaWK ctsmXMJgyKdDvgFzeZVIS3/Fm37L23dhiCOPMzYAySEJOjBORsA4GznQB3l6lt4+ z4/TzTIPOqDRNXv80JOj5xzBgKEE4G3HTNWOgM9ls7vIEOlvUkDK+crMOp4Lep0V 8/67064F/VpY2pcU9T1W2QL0tlmr/ukB9tzXLZ7zRDqvR+o0alU= -----END CERTIFICATE-----Generated at Mon Mar 2 07:38:53 2026 by rpki-client