
$ rpki-client -vvf repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft
File: 30C39359651C33B59AC32BC46831980108960568.mft (raw, json)
Hash identifier: riP9hUOMioNmDaHpi+f/JIGwdPdBOgZ353ugQOOp1Og=
Subject key identifier: D8:AA:EC:DC:AB:47:51:2F:CA:F5:17:98:C9:46:5A:A1:D6:15:1E:A8
Authority key identifier: 30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68
Certificate issuer: /CN=30C39359651C33B59AC32BC46831980108960568
Certificate serial: 4EB1D8E14C6CCE67B613256BBAF21ED5B08634CB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft
Manifest number: 0565
Signing time: Thu 16 Apr 2026 17:32:31 +0000
Manifest this update: Thu 16 Apr 2026 17:27:31 +0000
Manifest next update: Sun 19 Apr 2026 18:22:31 +0000
Files and hashes: 1: 3130332e3130372e3134302e302f32342d3234203d3e20313337323937.roa (hash: BHlKkUg0NjANH6Mliit3f4KGxxDlGbzPwZhqnWpcPcU=)
2: 323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa (hash: dFQhxxhIxqRHu+YRpdoF0va5NYJwS4I6YJDx/CCdh1g=)
3: 30C39359651C33B59AC32BC46831980108960568.crl (hash: ozZKV97RuC2+nnhqnJMxabWY4uCJI/buIMZbUIFKRso=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl
rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 18:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:b1:d8:e1:4c:6c:ce:67:b6:13:25:6b:ba:f2:1e:d5:b0:86:34:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30C39359651C33B59AC32BC46831980108960568
Validity
Not Before: Apr 16 17:27:31 2026 GMT
Not After : Apr 19 18:22:31 2026 GMT
Subject: CN=D8AAECDCAB47512FCAF51798C9465AA1D6151EA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:ac:69:34:8d:df:b5:8a:8b:b1:b8:a3:09:
fe:fe:b6:2e:ec:68:60:35:49:58:c9:29:56:27:52:
b5:11:af:94:ce:47:74:aa:ec:21:6b:f4:6f:21:b9:
c4:e6:29:4c:1d:f3:a3:34:67:62:9d:02:41:bb:49:
64:30:8c:2b:03:75:c3:95:40:c8:59:d1:0b:de:bd:
a2:06:70:b6:b4:af:63:c2:c4:ae:a6:a2:fc:9a:4f:
1f:ab:9f:c3:2c:f3:e6:2f:4c:c1:23:b1:2f:42:c0:
d4:23:6b:02:95:35:35:23:9a:c3:20:89:09:9b:60:
80:5f:1f:65:8a:27:ed:e1:75:f5:2e:3e:8e:e4:0c:
86:cc:40:c9:e5:2e:9d:e4:8f:4d:85:59:03:5e:db:
50:a8:77:3b:de:e0:91:d4:03:a3:23:ef:d1:d1:af:
66:52:9e:38:65:c2:1d:6b:a3:47:7e:60:0f:e0:ee:
b5:5e:8c:32:e6:21:ce:f0:e3:bb:8f:5b:88:73:c9:
5e:18:89:f2:79:f0:55:44:60:8f:d4:6a:b1:a5:d9:
4f:db:3c:26:cd:8a:0b:d6:7f:8a:4c:27:96:7d:48:
f9:52:ac:b8:59:89:87:1f:7c:34:58:e1:72:13:f1:
09:0c:cf:7d:be:0e:54:7f:16:a4:88:b8:93:60:f0:
a4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AA:EC:DC:AB:47:51:2F:CA:F5:17:98:C9:46:5A:A1:D6:15:1E:A8
X509v3 Authority Key Identifier:
keyid:30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a8:af:b7:8a:aa:38:5e:96:12:80:09:64:e9:d2:74:6a:d2:
a4:41:7f:15:53:b6:07:b1:c7:55:4e:32:63:c7:82:84:f1:6a:
14:b9:86:68:d0:84:a7:79:e7:11:3c:72:24:7d:66:4d:58:56:
92:84:99:5e:38:5c:52:7b:77:91:37:20:21:2c:b5:e5:78:13:
bb:99:d9:08:c7:b6:c1:94:c4:11:c4:e9:0a:6c:55:b5:63:71:
d4:32:f6:78:23:0f:42:9c:d7:7d:37:e6:e7:1a:d6:7d:4b:91:
88:af:d6:4c:20:3d:eb:15:5d:a4:9d:ea:cf:2c:2d:46:64:82:
e2:7a:8c:2e:b4:a1:d5:9e:91:ca:d5:b1:7b:da:3d:fc:c9:78:
3c:00:73:7b:60:75:db:e4:d3:b3:66:8a:1f:5c:c3:bd:3e:9f:
ab:f6:87:72:98:44:40:27:af:da:8a:b2:5d:cb:d8:6a:b4:6c:
c8:9f:75:69:37:fe:ae:1e:d6:42:e1:b7:d6:3e:07:d6:3b:98:
dc:80:31:2a:86:6f:5a:0b:dc:b7:23:bb:08:8b:9f:b7:11:3b:
01:e7:c8:65:65:08:d7:57:b3:fd:c9:24:8e:f8:ac:c2:39:8a:
b9:69:81:a4:74:86:1b:44:45:b9:d0:a9:44:16:f3:d4:dd:81:
88:dd:96:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:01:45 2026 by rpki-client