$ rpki-client -vvf repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft File: 30C39359651C33B59AC32BC46831980108960568.mft (raw, json) Hash identifier: trSLhFkTNpgbh6b8ClG7YMZsprMpPOrnOQF6d75F+mg= Subject key identifier: DF:DC:EB:32:5A:2E:D4:EF:27:79:31:02:04:E2:05:73:8C:25:F4:67 Authority key identifier: 30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68 Certificate issuer: /CN=30C39359651C33B59AC32BC46831980108960568 Certificate serial: 43C88FC0BCE2F527CBAA0556CF1C34EAB33D3A01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft Manifest number: 0550 Signing time: Sun 01 Mar 2026 07:52:25 +0000 Manifest this update: Sun 01 Mar 2026 07:47:25 +0000 Manifest next update: Wed 04 Mar 2026 14:32:25 +0000 Files and hashes: 1: 323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa (hash: dFQhxxhIxqRHu+YRpdoF0va5NYJwS4I6YJDx/CCdh1g=) 2: 30C39359651C33B59AC32BC46831980108960568.crl (hash: OYQpEs/j3fVjYAEh1PGbAVJ7gfuZqZuWdER3XxKnr8k=) 3: 3130332e3130372e3134302e302f32342d3234203d3e20313337323937.roa (hash: BHlKkUg0NjANH6Mliit3f4KGxxDlGbzPwZhqnWpcPcU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 14:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:c8:8f:c0:bc:e2:f5:27:cb:aa:05:56:cf:1c:34:ea:b3:3d:3a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30C39359651C33B59AC32BC46831980108960568 Validity Not Before: Mar 1 07:47:25 2026 GMT Not After : Mar 4 14:32:25 2026 GMT Subject: CN=DFDCEB325A2ED4EF2779310204E205738C25F467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bf:82:6e:aa:dd:1c:48:6f:9c:ec:4d:1e:55: 07:e0:28:34:a5:32:d5:0d:32:a2:99:f4:e6:b4:05: 1d:2b:72:74:e4:48:92:c7:cd:f4:17:88:62:d2:81: 14:17:d9:8e:18:8f:19:49:f3:6d:c4:e3:36:db:d2: 60:8d:12:85:e3:a4:2d:d3:ac:d1:9a:3f:4c:22:ec: e2:03:e0:e8:37:18:98:30:56:a6:5d:29:e6:2c:9a: 4f:b5:f2:d8:6c:10:21:50:6c:b8:65:9d:22:e2:e4: 3a:7e:31:41:d4:fe:ad:aa:31:b5:3c:a7:44:c0:c1: 10:4b:5a:3b:df:3c:e3:40:c5:55:5a:b3:4e:07:95: 49:c5:57:93:46:24:4d:6e:03:99:59:04:ef:dd:4b: 55:61:9e:fb:9e:88:f1:cc:ee:bf:96:3e:3a:99:ca: 28:ed:cf:81:d7:1c:64:05:1e:64:6b:7b:e9:2e:59: 98:9e:72:48:1b:90:82:7b:b3:3a:96:05:e8:f9:cc: bf:ef:86:8c:14:33:23:39:89:bb:c7:8c:f3:ee:e5: 20:89:23:fc:ce:3c:b3:f2:30:ac:1a:ff:7a:39:8a: c5:75:75:9f:08:0c:7c:43:ab:0d:e9:57:fb:23:25: 02:f7:6a:a5:75:68:8d:ae:3b:88:85:22:ea:42:93: 76:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DC:EB:32:5A:2E:D4:EF:27:79:31:02:04:E2:05:73:8C:25:F4:67 X509v3 Authority Key Identifier: keyid:30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:4f:df:60:12:ac:37:90:00:42:e2:a4:c4:5b:08:1b:df:42: d2:9a:3a:f3:26:df:4e:33:75:06:dc:14:37:b1:9c:f5:8a:2f: 92:31:d9:67:7c:f2:43:90:cf:c2:6d:74:e5:e9:54:30:ee:93: 27:cd:60:1c:0e:57:bc:78:0b:4d:fb:fa:9a:60:ce:f9:ac:4e: df:9b:98:23:ae:0e:ff:3b:40:c0:c9:09:b2:3e:0a:fa:15:29: 49:e5:cf:b7:6c:36:bd:eb:ed:cc:a4:8c:94:40:a5:4b:1d:da: 58:be:f3:29:38:85:2e:c4:08:14:13:62:e9:ac:26:7b:0f:12: 4c:af:09:5f:3b:75:21:89:99:22:7d:8e:e3:9c:12:bd:b8:e3: 01:06:60:96:19:03:8d:58:d0:33:2f:50:35:7d:b1:43:c3:b1: 2d:74:90:2a:55:2d:72:15:6c:63:ba:4f:63:f7:38:5e:1a:e8: ab:da:7e:97:bf:0b:09:1a:ce:3a:42:48:95:35:39:d7:50:4d: 07:cb:45:fe:da:18:89:b4:27:4c:68:e1:a6:33:bb:63:26:a1: a0:3a:75:4b:9a:a5:af:d9:da:5f:cb:47:9e:90:ca:ce:f6:d7: be:72:4d:22:9c:e2:f9:c7:99:90:b8:70:eb:9c:6b:c7:93:20: 2a:3f:be:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ8iPwLzi9SfLqgVWzxw06rM9OgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDMzkzNTk2NTFDMzNCNTlBQzMyQkM0NjgzMTk4MDEw ODk2MDU2ODAeFw0yNjAzMDEwNzQ3MjVaFw0yNjAzMDQxNDMyMjVaMDMxMTAvBgNV BAMTKERGRENFQjMyNUEyRUQ0RUYyNzc5MzEwMjA0RTIwNTczOEMyNUY0NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWv4Juqt0cSG+c7E0eVQfgKDSl MtUNMqKZ9Oa0BR0rcnTkSJLHzfQXiGLSgRQX2Y4YjxlJ823E4zbb0mCNEoXjpC3T rNGaP0wi7OID4Og3GJgwVqZdKeYsmk+18thsECFQbLhlnSLi5Dp+MUHU/q2qMbU8 p0TAwRBLWjvfPONAxVVas04HlUnFV5NGJE1uA5lZBO/dS1VhnvueiPHM7r+WPjqZ yijtz4HXHGQFHmRre+kuWZieckgbkIJ7szqWBej5zL/vhowUMyM5ibvHjPPu5SCJ I/zOPLPyMKwa/3o5isV1dZ8IDHxDqw3pV/sjJQL3aqV1aI2uO4iFIupCk3ZdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU39zrMlou1O8neTECBOIFc4wl9GcwHwYDVR0j BBgwFoAUMMOTWWUcM7WawyvEaDGYAQiWBWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTc5OTZmNS1hOTM0LTRiNDQtODU0Ny0xOWVjMzdjZjdjMTQvMC8zMEMzOTM1OTY1 MUMzM0I1OUFDMzJCQzQ2ODMxOTgwMTA4OTYwNTY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBDMzkzNTk2NTFDMzNCNTlBQzMyQkM0NjgzMTk4MDEwODk2 MDU2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU3OTk2ZjUtYTkzNC00YjQ0LTg1 NDctMTllYzM3Y2Y3YzE0LzAvMzBDMzkzNTk2NTFDMzNCNTlBQzMyQkM0NjgzMTk4 MDEwODk2MDU2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMlP32ASrDeQAELipMRbCBvfQtKaOvMm304z dQbcFDexnPWKL5Ix2Wd88kOQz8JtdOXpVDDukyfNYBwOV7x4C037+ppgzvmsTt+b mCOuDv87QMDJCbI+CvoVKUnlz7dsNr3r7cykjJRApUsd2li+8yk4hS7ECBQTYums JnsPEkyvCV87dSGJmSJ9juOcEr244wEGYJYZA41Y0DMvUDV9sUPDsS10kCpVLXIV bGO6T2P3OF4a6Kvafpe/CwkazjpCSJU1OddQTQfLRf7aGIm0J0xo4aYzu2MmoaA6 dUuapa/Z2l/LR56Qys72175yTSKc4vnHmZC4cOuca8eTICo/vgU= -----END CERTIFICATE-----Generated at Mon Mar 2 17:17:24 2026 by rpki-client