$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft File: F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft (raw, json) Hash identifier: p5BDIRAncY09PF0QU6A21vJECYEcSBW72q1BrBqVIyY= Subject key identifier: 3A:1B:BD:87:A3:14:50:E2:46:9E:C8:BA:5D:99:3C:BE:F1:F4:D8:83 Authority key identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33 Certificate issuer: /CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733 Certificate serial: 13A16AD324C47EF131CDD76603812ED1883583C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft Manifest number: 0553 Signing time: Mon 02 Mar 2026 07:02:15 +0000 Manifest this update: Mon 02 Mar 2026 06:57:15 +0000 Manifest next update: Thu 05 Mar 2026 17:03:15 +0000 Files and hashes: 1: 323430373a343630303a3a2f33322d3438203d3e203435323935.roa (hash: 4LpQRgrp7oBVnTYb85mIa1GKQ4oBc22IhdekLi1TA6c=) 2: 3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (hash: WCf4k80HtpWJXreA4Q6XD5iDNEeVQ9AU8BVWi8IEoSM=) 3: F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl (hash: POCCNyNOaNh28XeZdsfxPT9/WYtwsv5voJjDffCSly0=) 4: 3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (hash: ykBCC6a4TUa9u53qD+3M0qE2NkGoJtCXa3OdoYw7FhA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:a1:6a:d3:24:c4:7e:f1:31:cd:d7:66:03:81:2e:d1:88:35:83:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733 Validity Not Before: Mar 2 06:57:15 2026 GMT Not After : Mar 5 17:03:15 2026 GMT Subject: CN=3A1BBD87A31450E2469EC8BA5D993CBEF1F4D883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:e9:53:3c:a9:3e:d4:37:73:25:9d:a3:7c: b9:83:1c:74:02:09:58:62:2f:f7:29:45:cf:07:c5: 16:49:14:11:22:29:8d:11:68:a2:a0:be:57:12:84: 1c:dd:f9:ea:4a:d1:75:e3:4a:ae:58:20:cc:80:d5: ac:61:bc:5c:7a:6c:04:4c:32:8e:28:48:45:c3:2f: 03:e0:8f:08:bc:7d:7c:d8:fb:e3:f5:6a:aa:7a:e5: e0:75:6b:30:36:ea:fc:6a:2c:c3:82:d8:00:be:bd: 9c:e0:d8:8d:55:1d:94:b7:e0:c2:6c:a4:fb:7f:c5: 14:ea:52:84:c0:e2:5e:12:21:29:34:82:37:d3:43: b5:73:15:94:b4:13:9d:fc:f9:f0:84:c2:2d:4d:cf: 7c:93:da:3d:c0:52:13:93:9e:6d:5d:47:c6:bd:c0: fc:44:3b:74:a8:3d:c8:b5:41:32:1b:65:9b:5a:8b: 43:86:27:cd:c4:02:d1:cb:aa:37:9a:31:b0:3d:ac: c1:be:93:fa:1e:82:d6:8e:b6:e4:07:fb:82:43:e1: d2:83:72:93:3a:e6:93:09:14:11:81:f7:95:31:e2: 47:65:a7:21:fd:e2:aa:82:da:59:26:8c:aa:ed:ad: 40:05:f6:ee:6b:64:ec:49:a3:d0:70:38:2a:8d:1f: 1b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1B:BD:87:A3:14:50:E2:46:9E:C8:BA:5D:99:3C:BE:F1:F4:D8:83 X509v3 Authority Key Identifier: keyid:F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b5:6c:60:d5:7a:fe:74:cf:af:79:33:d7:90:d2:ad:f8:72: fe:4c:b8:da:4b:98:1f:c8:69:86:6d:8f:d2:40:71:04:e7:92: 5e:cd:d4:82:c4:72:70:f1:51:d8:80:76:7b:2a:08:60:95:91: 19:f1:ee:a8:f7:32:47:2c:7a:ee:89:ec:80:4b:15:9f:da:d2: 1c:5c:28:90:c7:60:96:32:1c:ee:5b:04:17:1d:b1:2a:4c:29: b7:bf:3e:23:3b:19:0e:de:ae:e9:67:e5:09:5f:04:36:b2:00: 0a:06:f4:33:38:7f:28:3e:8d:87:7c:be:e8:b5:4a:cc:e4:ab: cb:05:74:86:5d:3a:29:3d:6e:f1:7f:30:dc:6a:2c:2f:e2:cf: a0:b2:81:b5:63:2b:44:71:70:f0:44:6c:5c:d0:2f:f1:be:a7: d9:91:02:2e:12:d7:d3:3b:39:9f:65:89:9f:39:21:52:5b:cb: be:01:bf:12:84:fb:89:19:11:79:f5:6e:c2:ca:4b:ed:cb:c3: 46:93:f0:b1:6f:61:17:d3:65:78:c5:69:df:c2:b5:2d:67:09: 33:a0:c5:09:0c:32:9e:00:24:65:92:99:39:18:7c:30:e5:ea: f9:08:26:3e:8a:42:70:5a:87:94:4a:56:61:ff:7a:f7:74:99: a6:6b:65:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE6Fq0yTEfvExzddmA4Eu0Yg1g8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4QUVC RkE5NzczMzAeFw0yNjAzMDIwNjU3MTVaFw0yNjAzMDUxNzAzMTVaMDMxMTAvBgNV BAMTKDNBMUJCRDg3QTMxNDUwRTI0NjlFQzhCQTVEOTkzQ0JFRjFGNEQ4ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBqelTPKk+1DdzJZ2jfLmDHHQC CVhiL/cpRc8HxRZJFBEiKY0RaKKgvlcShBzd+epK0XXjSq5YIMyA1axhvFx6bARM Mo4oSEXDLwPgjwi8fXzY++P1aqp65eB1azA26vxqLMOC2AC+vZzg2I1VHZS34MJs pPt/xRTqUoTA4l4SISk0gjfTQ7VzFZS0E538+fCEwi1Nz3yT2j3AUhOTnm1dR8a9 wPxEO3SoPci1QTIbZZtai0OGJ83EAtHLqjeaMbA9rMG+k/oegtaOtuQH+4JD4dKD cpM65pMJFBGB95Ux4kdlpyH94qqC2lkmjKrtrUAF9u5rZOxJo9BwOCqNHxv9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOhu9h6MUUOJGnsi6XZk8vvH02IMwHwYDVR0j BBgwFoAU8w8U9K62Yw/04nCwcpNYrr+pdzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGY0OGE4OS05MGM1LTRmNWEtODAxNS0zNmYxMTk2YTcxYzgvMC9GMzBGMTRGNEFF QjY2MzBGRjRFMjcwQjA3MjkzNThBRUJGQTk3NzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4QUVCRkE5 NzczMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmNDhhODktOTBjNS00ZjVhLTgw MTUtMzZmMTE5NmE3MWM4LzAvRjMwRjE0RjRBRUI2NjMwRkY0RTI3MEIwNzI5MzU4 QUVCRkE5NzczMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD21bGDVev50z695M9eQ0q34cv5MuNpLmB/I aYZtj9JAcQTnkl7N1ILEcnDxUdiAdnsqCGCVkRnx7qj3Mkcseu6J7IBLFZ/a0hxc KJDHYJYyHO5bBBcdsSpMKbe/PiM7GQ7eruln5QlfBDayAAoG9DM4fyg+jYd8vui1 Sszkq8sFdIZdOik9bvF/MNxqLC/iz6CygbVjK0RxcPBEbFzQL/G+p9mRAi4S19M7 OZ9liZ85IVJby74BvxKE+4kZEXn1bsLKS+3Lw0aT8LFvYRfTZXjFad/CtS1nCTOg xQkMMp4AJGWSmTkYfDDl6vkIJj6KQnBah5RKVmH/evd0maZrZeI= -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:40 2026 by rpki-client