$ rpki-client -vvf repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft File: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft (raw, json) Hash identifier: BReVcFtHVsOc7PqIOrl+uV3kvho3gcZDmPuhNzwEimg= Subject key identifier: FE:05:74:E7:DF:07:E7:78:92:B3:EA:30:F7:5A:62:52:90:08:F1:8E Authority key identifier: 30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51 Certificate issuer: /CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51 Certificate serial: 22BD3DCA4773C4BFB08F7E98F022CDD3F6E33C8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft Manifest number: 042B Signing time: Sun 01 Mar 2026 12:01:54 +0000 Manifest this update: Sun 01 Mar 2026 11:56:54 +0000 Manifest next update: Wed 04 Mar 2026 23:02:54 +0000 Files and hashes: 1: 3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa (hash: Bi9nY1p0p/LL12T0+GcY0uwFY1cTRYvh/8l06MWKr+o=) 2: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl (hash: tfuHE63ukYHI8dhJAxiuL7UnjqyQAlupa2mG7hV4z8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:bd:3d:ca:47:73:c4:bf:b0:8f:7e:98:f0:22:cd:d3:f6:e3:3c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51 Validity Not Before: Mar 1 11:56:54 2026 GMT Not After : Mar 4 23:02:54 2026 GMT Subject: CN=FE0574E7DF07E77892B3EA30F75A62529008F18E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4b:3e:3d:c7:2e:25:77:c5:3e:a9:f6:f4:b7: f1:4b:9b:93:07:24:72:53:74:aa:05:77:3f:6f:cc: 47:32:65:ff:17:d6:2a:bc:b4:13:ad:3e:ca:3d:65: da:3f:f0:c2:be:82:78:da:9b:db:ca:09:18:c2:a7: 03:34:b6:df:a7:fc:22:6f:87:46:d1:b7:1f:27:8c: cf:e7:00:62:49:3a:fe:38:a2:4a:ac:ca:f1:83:fe: b4:7f:7b:a1:20:f7:95:51:62:71:92:8c:24:f2:24: e0:e1:54:89:e6:b1:3c:3b:77:3f:45:5f:09:f7:b3: 9a:d0:77:aa:f5:90:95:f1:41:78:5f:bf:b6:6e:65: 4b:80:89:87:71:b9:b7:24:d3:ec:49:a6:43:a2:52: 65:b4:ed:8c:bb:74:4a:99:8e:8c:28:be:db:bb:fd: ae:09:f9:43:e3:95:dd:c4:f8:bf:93:13:ac:00:51: ee:52:5d:3f:c9:b9:68:73:a2:c1:ca:f7:16:8d:86: 89:be:15:25:d7:40:03:57:e6:37:f5:a2:20:bb:4a: ca:f3:11:0b:65:0f:64:8a:1f:bc:80:b2:15:be:85: 41:a8:39:60:ef:7c:67:d4:a4:08:8a:88:97:06:98: 28:34:13:48:8a:e1:89:a9:d0:d8:34:c2:e9:34:65: 72:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:05:74:E7:DF:07:E7:78:92:B3:EA:30:F7:5A:62:52:90:08:F1:8E X509v3 Authority Key Identifier: keyid:30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:cb:ea:74:e2:19:8b:43:2f:d6:53:e8:76:30:78:e2:b3:12: d3:38:30:f9:6c:f6:75:28:17:fc:fb:a4:ff:91:28:c8:23:41: b6:bd:e4:99:ee:a4:a2:d4:e8:ba:22:24:9e:d4:ff:ba:d0:33: 73:ca:a4:ca:e3:ac:71:a4:b5:f2:14:a8:bf:64:45:71:03:35: fa:1d:7d:4c:22:71:f2:6b:17:1a:15:cb:31:92:7c:fb:73:80: 1e:9d:47:8b:ca:e7:01:6c:72:d5:38:a4:ed:46:2a:09:f4:59: 28:49:da:d4:63:a1:fe:f8:92:49:3c:ab:e2:00:79:aa:c5:35: 1c:26:cc:4d:a9:5f:47:04:de:4b:60:4a:e1:ac:6a:92:7d:da: 55:a5:54:17:16:df:73:fd:82:0a:88:aa:5c:d9:88:dd:22:29: 1a:d2:07:91:b6:54:d3:be:d0:40:b1:62:36:70:7b:28:b1:c9: 34:38:85:f3:e9:9d:fb:d5:cc:21:d2:6e:15:e0:05:16:3e:9f: 50:53:20:ef:0d:7b:9c:5d:5a:dc:85:c3:43:60:d5:4b:de:88: c6:56:ad:6d:0a:e5:4e:ca:16:06:de:04:90:ee:0b:41:84:bf: 24:e4:4e:1e:eb:24:d2:17:61:c9:12:ef:59:0b:35:d9:9d:4b: a6:95:7e:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIr09ykdzxL+wj36Y8CLN0/bjPI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJDODAy NkEwQ0U1MTAeFw0yNjAzMDExMTU2NTRaFw0yNjAzMDQyMzAyNTRaMDMxMTAvBgNV BAMTKEZFMDU3NEU3REYwN0U3Nzg5MkIzRUEzMEY3NUE2MjUyOTAwOEYxOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Sz49xy4ld8U+qfb0t/FLm5MH JHJTdKoFdz9vzEcyZf8X1iq8tBOtPso9Zdo/8MK+gnjam9vKCRjCpwM0tt+n/CJv h0bRtx8njM/nAGJJOv44okqsyvGD/rR/e6Eg95VRYnGSjCTyJODhVInmsTw7dz9F Xwn3s5rQd6r1kJXxQXhfv7ZuZUuAiYdxubck0+xJpkOiUmW07Yy7dEqZjowovtu7 /a4J+UPjld3E+L+TE6wAUe5SXT/JuWhzosHK9xaNhom+FSXXQANX5jf1oiC7Ssrz EQtlD2SKH7yAshW+hUGoOWDvfGfUpAiKiJcGmCg0E0iK4Ymp0Ng0wuk0ZXIhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/gV0598H53iSs+ow91piUpAI8Y4wHwYDVR0j BBgwFoAUMPwS6QOuDuh70aHligYsgCagzlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzExYzExMC03YWIxLTRhMzktYjljYS0zYTliMGU4MWJjZjUvMC8zMEZDMTJFOTAz QUUwRUU4N0JEMUExRTU4QTA2MkM4MDI2QTBDRTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJDODAyNkEw Q0U1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDcxMWMxMTAtN2FiMS00YTM5LWI5 Y2EtM2E5YjBlODFiY2Y1LzAvMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJD ODAyNkEwQ0U1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbL6nTiGYtDL9ZT6HYweOKzEtM4MPls9nUo F/z7pP+RKMgjQba95JnupKLU6LoiJJ7U/7rQM3PKpMrjrHGktfIUqL9kRXEDNfod fUwicfJrFxoVyzGSfPtzgB6dR4vK5wFsctU4pO1GKgn0WShJ2tRjof74kkk8q+IA earFNRwmzE2pX0cE3ktgSuGsapJ92lWlVBcW33P9ggqIqlzZiN0iKRrSB5G2VNO+ 0ECxYjZweyixyTQ4hfPpnfvVzCHSbhXgBRY+n1BTIO8Ne5xdWtyFw0Ng1UveiMZW rW0K5U7KFgbeBJDuC0GEvyTkTh7rJNIXYckS71kLNdmdS6aVfsY= -----END CERTIFICATE-----Generated at Mon Mar 2 12:28:09 2026 by rpki-client