$ rpki-client -vvf repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft File: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft (raw, json) Hash identifier: s8ZSPNJwdA4MK0raByaYZbmmbpLJd+Mx3GiGPmeusGY= Subject key identifier: 51:47:F5:06:D3:AA:CB:0A:16:46:CD:9B:0C:6E:CF:13:7E:C9:C5:FE Authority key identifier: 30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51 Certificate issuer: /CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51 Certificate serial: 0DF930EF1F8E49B031E1DDA7CB58825514D5C721 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft Manifest number: 0440 Signing time: Fri 17 Apr 2026 09:31:56 +0000 Manifest this update: Fri 17 Apr 2026 09:26:56 +0000 Manifest next update: Mon 20 Apr 2026 20:22:56 +0000 Files and hashes: 1: 3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa (hash: Bi9nY1p0p/LL12T0+GcY0uwFY1cTRYvh/8l06MWKr+o=) 2: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl (hash: f1OIpYD8NDeSF7Qw9j53jb4q0msJNvv/s24jT0L/HzI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f9:30:ef:1f:8e:49:b0:31:e1:dd:a7:cb:58:82:55:14:d5:c7:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51 Validity Not Before: Apr 17 09:26:56 2026 GMT Not After : Apr 20 20:22:56 2026 GMT Subject: CN=5147F506D3AACB0A1646CD9B0C6ECF137EC9C5FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:3e:a4:c0:b2:39:91:97:d2:4e:58:1b:6e: ba:0b:3b:e2:c7:64:4b:8e:de:83:a6:a5:04:04:fa: db:05:4b:23:6e:a7:8e:98:de:b5:8a:12:bc:96:95: 9f:a7:49:e9:ff:84:b5:80:44:72:a3:91:2e:1c:de: 88:76:8a:5c:4c:de:77:af:49:55:3e:17:d8:0a:b5: a2:14:16:4d:72:b7:b1:30:81:9d:03:81:77:6b:75: d8:0e:25:92:2a:2a:18:a6:56:1e:a6:82:16:62:c0: d2:22:1a:6a:43:4a:6d:9b:d2:56:a0:84:25:19:74: 46:c7:51:b0:0c:c8:50:14:39:d1:49:00:47:c5:98: 81:e0:cc:de:eb:01:e9:28:c2:2c:1f:7c:72:66:13: 04:06:78:a0:5d:53:da:fc:9a:97:d9:c0:a7:98:05: fe:66:e9:d3:49:6a:0a:b0:54:8c:58:39:df:8d:0b: 14:c9:2e:bf:93:1f:9b:fe:48:a6:ef:8c:c1:22:24: 58:84:53:ee:c6:f0:21:fc:69:3a:10:96:0a:72:c5: 0b:5a:48:2b:5a:ba:47:07:03:bc:3a:6b:86:de:82: b5:34:a5:c3:6a:91:d5:69:69:24:9c:b1:d3:1c:bb: a6:e3:30:30:b0:8d:a6:78:11:e4:3a:63:25:f1:b9: c2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:47:F5:06:D3:AA:CB:0A:16:46:CD:9B:0C:6E:CF:13:7E:C9:C5:FE X509v3 Authority Key Identifier: keyid:30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:e9:82:b2:47:db:e3:b7:d6:7d:f5:8a:13:58:21:4f:37:d9: e9:51:e0:d9:6e:c1:29:ab:22:79:8f:82:e9:ba:3d:4b:0c:41: 93:c6:a4:7d:26:69:f7:30:72:ce:19:ee:76:58:d7:3f:8d:3e: b1:1e:48:d1:8d:bc:08:23:a3:f4:da:ca:0e:f3:b0:91:76:1e: e3:c8:e9:32:b8:51:1f:04:af:88:eb:2c:f4:68:12:5c:00:f3: 6c:0d:b8:ac:3d:7a:47:90:ce:36:f2:b1:2e:70:9d:0a:44:e7: 0b:86:c8:78:1f:ee:e4:9d:48:38:af:c8:d9:ba:63:ef:49:cf: 08:80:f2:ec:aa:0c:0e:c8:82:83:ce:55:cc:d1:f5:c9:c6:05: 97:6e:9a:2f:3e:e2:19:fa:a0:84:3b:c6:79:eb:80:4d:f3:60: cb:bf:bb:c2:10:50:16:e5:bc:80:5d:3b:ad:b9:06:28:6e:44: 3d:72:e0:ae:2a:df:f9:ad:3d:5c:cf:b4:c9:2e:9c:7a:e0:2b: 62:38:21:ba:de:72:3c:eb:0b:e4:86:dd:c6:15:7f:c1:2a:59: e9:2e:31:bd:c7:56:f6:83:af:ab:40:76:68:e1:9f:75:cf:b0: 36:de:05:9d:8b:3a:57:a6:7c:33:97:8e:23:85:5e:07:ad:04: bb:c8:3b:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDfkw7x+OSbAx4d2ny1iCVRTVxyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJDODAy NkEwQ0U1MTAeFw0yNjA0MTcwOTI2NTZaFw0yNjA0MjAyMDIyNTZaMDMxMTAvBgNV BAMTKDUxNDdGNTA2RDNBQUNCMEExNjQ2Q0Q5QjBDNkVDRjEzN0VDOUM1RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDvT6kwLI5kZfSTlgbbroLO+LH ZEuO3oOmpQQE+tsFSyNup46Y3rWKEryWlZ+nSen/hLWARHKjkS4c3oh2ilxM3nev SVU+F9gKtaIUFk1yt7EwgZ0DgXdrddgOJZIqKhimVh6mghZiwNIiGmpDSm2b0lag hCUZdEbHUbAMyFAUOdFJAEfFmIHgzN7rAekowiwffHJmEwQGeKBdU9r8mpfZwKeY Bf5m6dNJagqwVIxYOd+NCxTJLr+TH5v+SKbvjMEiJFiEU+7G8CH8aToQlgpyxQta SCtaukcHA7w6a4begrU0pcNqkdVpaSScsdMcu6bjMDCwjaZ4EeQ6YyXxucJxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUUf1BtOqywoWRs2bDG7PE37Jxf4wHwYDVR0j BBgwFoAUMPwS6QOuDuh70aHligYsgCagzlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzExYzExMC03YWIxLTRhMzktYjljYS0zYTliMGU4MWJjZjUvMC8zMEZDMTJFOTAz QUUwRUU4N0JEMUExRTU4QTA2MkM4MDI2QTBDRTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJDODAyNkEw Q0U1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDcxMWMxMTAtN2FiMS00YTM5LWI5 Y2EtM2E5YjBlODFiY2Y1LzAvMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJD ODAyNkEwQ0U1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANnpgrJH2+O31n31ihNYIU832elR4NluwSmr InmPgum6PUsMQZPGpH0mafcwcs4Z7nZY1z+NPrEeSNGNvAgjo/Tayg7zsJF2HuPI 6TK4UR8Er4jrLPRoElwA82wNuKw9ekeQzjbysS5wnQpE5wuGyHgf7uSdSDivyNm6 Y+9JzwiA8uyqDA7IgoPOVczR9cnGBZdumi8+4hn6oIQ7xnnrgE3zYMu/u8IQUBbl vIBdO625BihuRD1y4K4q3/mtPVzPtMkunHrgK2I4IbrecjzrC+SG3cYVf8EqWeku Mb3HVvaDr6tAdmjhn3XPsDbeBZ2LOlemfDOXjiOFXgetBLvIO/8= -----END CERTIFICATE-----Generated at Fri Apr 17 18:29:30 2026 by rpki-client