$ rpki-client -vvf repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft File: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft (raw, json) Hash identifier: 6QqrjCwQE4W9R0ma2g29tPzReRj59Oz2g0ATSqxfUiA= Subject key identifier: 15:EB:17:D4:CA:C7:EB:D2:F3:F7:17:10:5D:3A:10:93:15:59:D5:C5 Authority key identifier: 30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C Certificate issuer: /CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Certificate serial: 245DB82B8D6FD670D0D6AFE051BC99AF8072DF56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft Manifest number: 0119 Signing time: Thu 16 Apr 2026 08:50:58 +0000 Manifest this update: Thu 16 Apr 2026 08:45:58 +0000 Manifest next update: Sun 19 Apr 2026 20:47:58 +0000 Files and hashes: 1: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl (hash: bMUyra5adAe0JqShBEWBXsdZ8Upv0T4Zjo6rXCJSY3Y=) 2: 323030313a6466333a346234303a3a2f34382d3438203d3e20313531393932.roa (hash: H0tMLPWT/xMzJjo+X3cfcs6u4yhbTyToHbzV+AgsIh8=) 3: 3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa (hash: 067j8zIqWRfiKYsv/8PNz7miyq3F672QljWEkk7m/9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:5d:b8:2b:8d:6f:d6:70:d0:d6:af:e0:51:bc:99:af:80:72:df:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Validity Not Before: Apr 16 08:45:58 2026 GMT Not After : Apr 19 20:47:58 2026 GMT Subject: CN=15EB17D4CAC7EBD2F3F717105D3A10931559D5C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d5:70:27:cf:9f:68:13:c9:bd:71:2d:a0:71: c5:53:8a:a1:c9:3f:c4:34:c7:84:f7:68:d1:4a:61: c0:3a:5e:c3:1a:56:84:e8:d2:61:1f:6b:8c:a5:52: 9b:af:3b:ad:60:35:87:4a:8e:d6:ef:24:9f:77:a1: 50:a8:ea:70:f5:54:54:ce:e3:3a:6d:04:db:2a:21: 39:1d:20:80:75:08:73:04:e0:01:e9:c4:0f:4d:b1: 59:15:ba:6c:33:eb:53:0b:be:48:cf:6f:cc:3c:78: 76:5e:5b:34:ae:c8:06:55:8c:a5:73:b8:78:d7:2c: d5:14:3d:9f:93:4f:9f:ed:9d:d4:c6:24:01:de:76: d0:c4:7a:c9:b7:55:20:b1:61:05:2c:a7:aa:0a:fe: 7e:e0:d3:5a:6e:f3:19:fd:19:8a:20:86:0c:60:f3: f6:83:35:29:fa:db:8c:fd:15:c5:ac:e1:97:04:93: 2a:0b:48:c3:93:3d:51:71:26:fa:a9:e2:a2:de:16: 55:16:cc:d3:1f:e2:be:d1:c9:ed:45:9a:fa:a4:34: 53:c8:a5:e0:bf:3f:b5:11:b7:10:91:2e:5f:4c:60: 3a:a1:cb:d4:d0:42:1e:a8:34:1d:3c:32:44:98:22: 79:50:ca:27:07:55:09:6d:9d:c6:4d:ac:23:b2:90: af:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:EB:17:D4:CA:C7:EB:D2:F3:F7:17:10:5D:3A:10:93:15:59:D5:C5 X509v3 Authority Key Identifier: keyid:30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:41:07:34:3f:70:3f:a4:fa:b6:58:1d:6a:d3:e9:ec:c1:bc: 37:fb:55:19:12:c9:f4:ab:05:63:4a:06:19:3f:bd:d5:65:15: ea:4a:a9:e5:22:c8:cb:7f:32:ae:06:bf:36:5b:e7:e5:30:72: 0e:9f:50:e6:04:94:e2:17:51:80:eb:2a:0f:01:17:49:f0:87: 4d:04:9c:c9:20:ee:df:23:d0:db:aa:1d:9e:f2:b9:da:41:ee: 0e:2e:8a:28:07:48:26:a3:b5:9c:42:3d:2d:49:ec:f3:b0:8f: 8f:76:49:38:9f:bb:dd:d9:53:7e:bd:0a:9f:ec:86:92:55:85: e1:90:12:0a:b1:14:9d:f9:9a:d5:47:a1:58:6f:d1:97:5a:13: e3:c6:02:8f:a6:83:b2:2d:ff:96:78:f8:05:4c:f8:f5:df:d8: 51:b7:48:27:1e:2b:db:3e:a2:2e:4d:77:b9:2d:d5:d8:13:cd: 78:4f:e0:86:97:d4:8c:83:31:11:37:dd:f9:7f:3e:d3:c2:d4: 19:4f:34:56:bd:bb:c4:67:85:28:8e:65:ed:c2:b3:e7:56:24: aa:4e:0b:4c:c5:ad:ef:7a:15:41:a0:dc:6a:36:c4:c9:55:0d: 0f:51:30:e3:1d:25:57:31:29:bf:58:93:10:9e:0a:74:21:88: ca:29:90:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJF24K41v1nDQ1q/gUbyZr4By31YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0Qzgw NjFBN0IxQzAeFw0yNjA0MTYwODQ1NThaFw0yNjA0MTkyMDQ3NThaMDMxMTAvBgNV BAMTKDE1RUIxN0Q0Q0FDN0VCRDJGM0Y3MTcxMDVEM0ExMDkzMTU1OUQ1QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu1XAnz59oE8m9cS2gccVTiqHJ P8Q0x4T3aNFKYcA6XsMaVoTo0mEfa4ylUpuvO61gNYdKjtbvJJ93oVCo6nD1VFTO 4zptBNsqITkdIIB1CHME4AHpxA9NsVkVumwz61MLvkjPb8w8eHZeWzSuyAZVjKVz uHjXLNUUPZ+TT5/tndTGJAHedtDEesm3VSCxYQUsp6oK/n7g01pu8xn9GYoghgxg 8/aDNSn624z9FcWs4ZcEkyoLSMOTPVFxJvqp4qLeFlUWzNMf4r7Rye1FmvqkNFPI peC/P7URtxCRLl9MYDqhy9TQQh6oNB08MkSYInlQyicHVQltncZNrCOykK/vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFesX1MrH69Lz9xcQXToQkxVZ1cUwHwYDVR0j BBgwFoAUMHpAjiqoImja025vFF1kyAYaexwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTdmMWY0My1jZTdlLTQ5NzAtYWFkMC03ODJiMDE5YmQwM2UvMC8zMDdBNDA4RTJB QTgyMjY4REFEMzZFNkYxNDVENjRDODA2MUE3QjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0QzgwNjFB N0IxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU3ZjFmNDMtY2U3ZS00OTcwLWFh ZDAtNzgyYjAxOWJkMDNlLzAvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0 QzgwNjFBN0IxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlBBzQ/cD+k+rZYHWrT6ezBvDf7VRkSyfSr BWNKBhk/vdVlFepKqeUiyMt/Mq4GvzZb5+Uwcg6fUOYElOIXUYDrKg8BF0nwh00E nMkg7t8j0NuqHZ7yudpB7g4uiigHSCajtZxCPS1J7POwj492STifu93ZU369Cp/s hpJVheGQEgqxFJ35mtVHoVhv0ZdaE+PGAo+mg7It/5Z4+AVM+PXf2FG3SCceK9s+ oi5Nd7kt1dgTzXhP4IaX1IyDMRE33fl/PtPC1BlPNFa9u8RnhSiOZe3Cs+dWJKpO C0zFre96FUGg3Go2xMlVDQ9RMOMdJVcxKb9YkxCeCnQhiMopkEY= -----END CERTIFICATE-----Generated at Sat Apr 18 05:50:13 2026 by rpki-client