$ rpki-client -vvf repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft File: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft (raw, json) Hash identifier: xW9izSd1z2earu8cK6qAR/AWwa1OrLCBeRv7D4Dz4FA= Subject key identifier: 11:B0:50:41:EA:44:05:DC:0F:BD:B3:B1:99:A2:EC:B6:84:8C:1E:F1 Authority key identifier: C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 Certificate issuer: /CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Certificate serial: 08400F73F5032B61AAC2DD66D72F1EF05DFBD13F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft Manifest number: 03A0 Signing time: Sun 01 Mar 2026 15:42:34 +0000 Manifest this update: Sun 01 Mar 2026 15:37:34 +0000 Manifest next update: Thu 05 Mar 2026 02:21:34 +0000 Files and hashes: 1: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl (hash: P9uRRmvzf8m7iKKi78O3VTxfXwp0y1Djem8wBrdjOwE=) 2: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (hash: MTg1tuijanT/fwfxdf3hwp8GNR+2Cd4sBdhUtmiigzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:40:0f:73:f5:03:2b:61:aa:c2:dd:66:d7:2f:1e:f0:5d:fb:d1:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Validity Not Before: Mar 1 15:37:34 2026 GMT Not After : Mar 5 02:21:34 2026 GMT Subject: CN=11B05041EA4405DC0FBDB3B199A2ECB6848C1EF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f9:1e:a3:e7:5a:5b:e5:75:b8:61:f6:af:23: c1:30:f8:a0:6e:91:e5:85:78:0d:9c:de:9e:2e:52: cd:bf:e3:67:a9:80:f2:81:00:ba:5e:b4:ce:17:a3: 94:34:e2:28:a7:58:f7:67:68:3f:06:d4:43:de:6d: ae:b2:1f:5a:34:29:11:f0:d1:ee:aa:ab:ba:64:b3: e2:69:bf:31:76:c4:b9:70:16:3c:98:1f:af:d6:e0: 75:7f:bb:ff:ef:0a:2a:9f:85:7c:f5:f1:52:e1:18: 22:93:21:f3:8f:bc:5f:e9:86:9e:f1:a8:88:25:1d: 9b:55:e1:e6:0c:37:b8:1f:31:6f:b3:09:2a:51:93: ac:3b:cf:89:ab:dc:a6:60:16:92:81:76:74:42:32: e9:2a:b6:09:51:dc:de:73:4f:e2:bc:ab:34:81:8a: 38:0a:52:13:57:54:bf:d9:5b:b9:5e:52:4a:55:47: e7:ef:1f:f1:ee:cd:48:20:ba:c4:55:c4:be:f9:7a: c2:bb:c3:4b:01:68:95:d1:2a:c2:cd:85:f1:fa:87: 02:c0:ad:fa:10:69:f0:86:ea:05:61:cd:e7:eb:10: b5:54:a2:8f:a7:5f:be:b5:d1:07:4b:10:34:70:2c: 70:e5:0a:58:79:f5:aa:3c:44:34:aa:b7:0b:ae:99: f4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B0:50:41:EA:44:05:DC:0F:BD:B3:B1:99:A2:EC:B6:84:8C:1E:F1 X509v3 Authority Key Identifier: keyid:C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:de:97:2c:f4:4c:e3:83:a7:5f:bc:b6:ea:ad:02:0f:96:2f: 93:50:72:e8:9b:a6:e5:bb:65:1c:bc:69:36:78:b8:d6:cf:f9: 0d:72:ab:91:92:4b:45:c3:8b:95:fb:bd:2b:c6:d2:a2:6b:d1: 3e:c8:43:03:bb:ce:88:06:6d:a2:5d:4a:1d:c5:fc:9d:47:52: 03:cc:05:01:d8:c2:70:b3:0b:f7:0b:a6:87:9d:66:42:8d:bd: e0:1e:8b:b6:59:86:fb:c0:3c:7e:63:e8:b6:03:28:d2:0e:e9: 8e:ca:29:df:47:4f:8a:1c:ca:27:af:d0:b3:ec:12:24:77:a5: 6e:1a:84:26:5c:8c:5d:d5:0c:08:27:81:2c:d0:06:8d:11:1a: 3d:f0:61:da:f8:c9:b0:08:e7:5c:25:62:05:c1:98:63:48:91: 77:68:2e:9d:d5:17:00:c3:62:18:6b:27:9a:5a:57:da:85:da: fe:02:79:4d:67:77:c0:49:4b:aa:b3:43:25:be:e6:ce:80:86: 2c:d3:77:cc:57:03:22:c4:57:55:ea:9c:75:ae:73:cd:be:41: 00:1a:29:a9:59:51:a2:f2:9f:81:09:82:69:06:c7:85:10:52: f7:cf:ce:81:6d:e1:cb:e9:2e:ca:22:b7:8b:11:86:99:51:83: c2:43:e3:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCEAPc/UDK2Gqwt1m1y8e8F370T8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzky Mjg2MzFGNzAeFw0yNjAzMDExNTM3MzRaFw0yNjAzMDUwMjIxMzRaMDMxMTAvBgNV BAMTKDExQjA1MDQxRUE0NDA1REMwRkJEQjNCMTk5QTJFQ0I2ODQ4QzFFRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe+R6j51pb5XW4YfavI8Ew+KBu keWFeA2c3p4uUs2/42epgPKBALpetM4Xo5Q04iinWPdnaD8G1EPeba6yH1o0KRHw 0e6qq7pks+JpvzF2xLlwFjyYH6/W4HV/u//vCiqfhXz18VLhGCKTIfOPvF/php7x qIglHZtV4eYMN7gfMW+zCSpRk6w7z4mr3KZgFpKBdnRCMukqtglR3N5zT+K8qzSB ijgKUhNXVL/ZW7leUkpVR+fvH/HuzUggusRVxL75esK7w0sBaJXRKsLNhfH6hwLA rfoQafCG6gVhzefrELVUoo+nX7610QdLEDRwLHDlClh59ao8RDSqtwuumfT5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEbBQQepEBdwPvbOxmaLstoSMHvEwHwYDVR0j BBgwFoAUwwo3cezl92LW+m2HKPTAySKGMfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTFmNjI5OS1iMTU1LTQyMTItYjVlMS05ZjU3MDNjZDA5ODkvMC9DMzBBMzc3MUVD RTVGNzYyRDZGQTZEODcyOEY0QzBDOTIyODYzMUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzkyMjg2 MzFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ExZjYyOTktYjE1NS00MjEyLWI1 ZTEtOWY1NzAzY2QwOTg5LzAvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMw QzkyMjg2MzFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTelyz0TOODp1+8tuqtAg+WL5NQcuibpuW7 ZRy8aTZ4uNbP+Q1yq5GSS0XDi5X7vSvG0qJr0T7IQwO7zogGbaJdSh3F/J1HUgPM BQHYwnCzC/cLpoedZkKNveAei7ZZhvvAPH5j6LYDKNIO6Y7KKd9HT4ocyiev0LPs EiR3pW4ahCZcjF3VDAgngSzQBo0RGj3wYdr4ybAI51wlYgXBmGNIkXdoLp3VFwDD YhhrJ5paV9qF2v4CeU1nd8BJS6qzQyW+5s6AhizTd8xXAyLEV1XqnHWuc82+QQAa KalZUaLyn4EJgmkGx4UQUvfPzoFt4cvpLsoit4sRhplRg8JD4zs= -----END CERTIFICATE-----Generated at Mon Mar 2 09:09:17 2026 by rpki-client