$ rpki-client -vvf repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft File: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft (raw, json) Hash identifier: FHkgK5SejqMwGJkETVYxlb6PAuOFhgX9GZfEMmY0DA8= Subject key identifier: 3F:98:11:4A:47:D8:B9:FF:76:C9:B1:59:DA:1B:B8:2A:BB:45:1E:39 Authority key identifier: B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 Certificate issuer: /CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Certificate serial: 176180B6B0E7119078E01C16C726A44C60F414F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft Manifest number: 01CB Signing time: Fri 17 Apr 2026 13:23:37 +0000 Manifest this update: Fri 17 Apr 2026 13:18:37 +0000 Manifest next update: Tue 21 Apr 2026 00:11:37 +0000 Files and hashes: 1: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl (hash: TJmRmaGVmaPeI4rtuHtzVmotf1Q/K9Bm10MfzrDyCSU=) 2: 3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (hash: 5p8DeVWE4ixdVzTUD+2z3ALmeQQXrFM+ymQAz8yvg9Q=) 3: 3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (hash: HxY+qbSnnto1Z4HzXSATggf6s2/jsThuJ9IKEWbevzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 00:11:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:61:80:b6:b0:e7:11:90:78:e0:1c:16:c7:26:a4:4c:60:f4:14:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Validity Not Before: Apr 17 13:18:37 2026 GMT Not After : Apr 21 00:11:37 2026 GMT Subject: CN=3F98114A47D8B9FF76C9B159DA1BB82ABB451E39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:da:4f:48:11:5a:c0:b9:7d:22:69:c5:4d:2d: b3:86:12:de:77:cc:22:5a:29:76:91:2c:e2:b9:46: ee:67:e2:ae:ab:98:4d:8f:20:f2:60:5a:87:c9:56: 72:87:24:7e:2d:1a:dd:f1:35:9a:c8:31:b2:f9:4e: b9:6d:bc:cd:5d:14:03:06:d8:70:8d:01:7a:28:9f: cf:a5:55:5b:08:fc:0b:84:46:a4:bc:f7:bf:df:52: 2e:67:2a:83:02:cf:c5:c6:5f:84:7d:7c:18:76:9c: f0:46:b5:3b:20:9c:1d:0e:43:06:03:3d:63:07:97: 36:9e:de:da:48:e8:97:28:a4:09:37:fe:d5:a8:af: ea:e4:f9:82:81:ca:4d:2a:2d:b9:a3:a1:a4:79:ac: 21:d3:ac:9c:5c:c3:f0:f5:8c:b5:1c:15:d2:60:80: 54:5c:f3:04:e0:37:59:10:90:7f:c6:fc:5e:7b:5f: a3:0c:b9:90:ad:a3:51:85:46:41:87:36:8c:1c:11: 6e:4d:b6:b6:b6:c0:5e:e3:e3:24:2f:42:3d:73:7c: ca:71:3f:24:e3:95:9b:9d:d7:ad:45:80:33:d8:76: 84:1c:0e:b9:1a:ee:48:50:94:ef:1e:a3:26:84:ee: d0:be:0d:97:9b:1d:be:d6:00:8f:5d:ea:dc:b1:9f: 66:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:98:11:4A:47:D8:B9:FF:76:C9:B1:59:DA:1B:B8:2A:BB:45:1E:39 X509v3 Authority Key Identifier: keyid:B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:71:57:18:cb:b0:45:f2:e7:f7:f9:55:67:e1:e9:90:20:a3: 90:3b:72:a3:88:c0:54:90:74:7c:f8:b8:90:ce:04:5e:54:51: f8:41:dd:a3:c5:14:df:be:0d:44:82:df:50:20:cf:35:ea:a2: 61:78:d4:30:35:40:31:64:75:66:ee:46:3a:05:72:d6:ab:7b: f4:1c:27:48:a8:6f:16:07:0d:31:27:df:3e:3d:92:d6:38:d8: 07:12:41:22:3c:c1:70:70:1d:84:71:24:2a:00:d6:b9:f8:5e: b2:d8:c0:1f:fe:78:49:d8:72:95:fb:d5:fd:63:7d:aa:b6:7c: 3c:78:cc:bb:c6:29:93:ef:b5:03:fd:0b:7d:36:1c:39:60:1b: 79:33:c0:08:cc:36:e0:9b:db:64:a0:b1:8a:91:96:59:ba:c0: 3d:c2:50:b0:54:0c:d9:f2:17:73:df:85:d5:d9:99:4c:dd:9f: eb:b7:af:23:62:5a:13:2d:bf:83:1b:33:d1:5e:ba:d7:67:d4: 46:ca:15:65:3f:f2:69:bb:3d:8f:39:5f:69:69:fe:8c:c5:fb: c0:26:f7:96:83:3b:3f:66:b6:c7:af:8d:9a:63:f5:cc:42:eb: 35:9a:26:7d:6c:f2:3e:19:cc:bd:77:e1:4e:71:a1:c7:17:f5: b7:7c:5a:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF2GAtrDnEZB44BwWxyakTGD0FPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlC MTE5NEREODAeFw0yNjA0MTcxMzE4MzdaFw0yNjA0MjEwMDExMzdaMDMxMTAvBgNV BAMTKDNGOTgxMTRBNDdEOEI5RkY3NkM5QjE1OURBMUJCODJBQkI0NTFFMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS2k9IEVrAuX0iacVNLbOGEt53 zCJaKXaRLOK5Ru5n4q6rmE2PIPJgWofJVnKHJH4tGt3xNZrIMbL5TrltvM1dFAMG 2HCNAXoon8+lVVsI/AuERqS897/fUi5nKoMCz8XGX4R9fBh2nPBGtTsgnB0OQwYD PWMHlzae3tpI6JcopAk3/tWor+rk+YKByk0qLbmjoaR5rCHTrJxcw/D1jLUcFdJg gFRc8wTgN1kQkH/G/F57X6MMuZCto1GFRkGHNowcEW5Ntra2wF7j4yQvQj1zfMpx PyTjlZud161FgDPYdoQcDrka7khQlO8eoyaE7tC+DZebHb7WAI9d6tyxn2a3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP5gRSkfYuf92ybFZ2hu4KrtFHjkwHwYDVR0j BBgwFoAUsw/b3nD75wzETzxxC0ZwabEZTdgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDc1MDg4ZS00OWFmLTQ3MmItOWI2Mi04MWU3M2RhYWYxZDYvMC9CMzBGREJERTcw RkJFNzBDQzQ0RjNDNzEwQjQ2NzA2OUIxMTk0REQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlCMTE5 NEREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ3NTA4OGUtNDlhZi00NzJiLTli NjItODFlNzNkYWFmMWQ2LzAvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0Njcw NjlCMTE5NEREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlxVxjLsEXy5/f5VWfh6ZAgo5A7cqOIwFSQ dHz4uJDOBF5UUfhB3aPFFN++DUSC31AgzzXqomF41DA1QDFkdWbuRjoFctare/Qc J0iobxYHDTEn3z49ktY42AcSQSI8wXBwHYRxJCoA1rn4XrLYwB/+eEnYcpX71f1j faq2fDx4zLvGKZPvtQP9C302HDlgG3kzwAjMNuCb22SgsYqRllm6wD3CULBUDNny F3PfhdXZmUzdn+u3ryNiWhMtv4MbM9Feutdn1EbKFWU/8mm7PY85X2lp/ozF+8Am 95aDOz9mtsevjZpj9cxC6zWaJn1s8j4ZzL134U5xoccX9bd8Wlo= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:05 2026 by rpki-client