$ rpki-client -vvf repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft File: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft (raw, json) Hash identifier: YP7gqLIOwmk4+Bcc1VrvNNNd47kOfixrOek+BF6Iy5c= Subject key identifier: FC:86:5A:DE:2A:3C:6C:4B:CA:9D:00:63:B7:DF:CB:B4:AD:C2:EB:97 Authority key identifier: 30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 Certificate issuer: /CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Certificate serial: 1AA978BEA80B910DA4056E3335C6AFD29F48530C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft Manifest number: 0109 Signing time: Thu 16 Apr 2026 04:49:26 +0000 Manifest this update: Thu 16 Apr 2026 04:44:26 +0000 Manifest next update: Sun 19 Apr 2026 11:59:26 +0000 Files and hashes: 1: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl (hash: a3aACtQw24OC3fSVV9kjkk9Fz31krHjCV15DShsVYWo=) 2: 3136302e32322e3230382e302f32332d3234203d3e20313532383239.roa (hash: LoZ+Ak/AzwjJxT3fXZctBt1mcUGSdVREnhJDJoE0LvU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 11:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a9:78:be:a8:0b:91:0d:a4:05:6e:33:35:c6:af:d2:9f:48:53:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Validity Not Before: Apr 16 04:44:26 2026 GMT Not After : Apr 19 11:59:26 2026 GMT Subject: CN=FC865ADE2A3C6C4BCA9D0063B7DFCBB4ADC2EB97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b9:50:e0:85:aa:90:7c:02:6a:38:ef:73:c3: 1a:b4:cd:66:61:a8:d1:43:3a:9d:96:08:98:b4:4a: 6e:c6:f6:28:b5:05:00:9c:c5:5b:7d:93:7d:6b:2a: 5c:d9:e3:db:41:fa:88:0e:64:82:cb:e1:74:25:d5: 37:9e:5f:b7:68:63:a1:74:f8:ea:4c:fb:cc:37:3d: ce:4c:5c:c7:e0:1f:05:65:04:4e:2e:c1:6f:87:da: 1e:0d:6a:c5:dc:e9:a4:3b:8c:17:a8:f1:66:21:f6: 7b:69:a1:21:dc:54:22:85:ed:33:c8:bf:1d:53:99: dd:e9:34:85:88:be:b0:5b:38:40:d1:5b:9f:a8:e8: 13:26:ad:6e:13:28:04:05:52:5c:41:de:f3:5f:25: 35:d5:15:c5:41:58:4d:a5:41:ed:c4:3a:39:00:07: a9:aa:57:d5:4c:d3:1d:82:8e:73:44:0f:a0:53:c8: 43:89:65:a0:18:91:63:7f:57:55:b2:7e:eb:c7:9a: 65:18:a6:a0:d3:00:b2:f4:ee:11:81:f8:61:a3:13: 8a:43:9c:55:cb:e1:82:e8:5c:95:e5:3c:ef:d9:72: 16:20:3a:a2:7e:46:f3:c8:67:74:13:61:78:59:1c: 84:38:a5:8a:c7:cb:5c:3f:ac:20:a4:c7:82:92:80: ff:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:86:5A:DE:2A:3C:6C:4B:CA:9D:00:63:B7:DF:CB:B4:AD:C2:EB:97 X509v3 Authority Key Identifier: keyid:30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:69:8f:e9:c8:55:5f:2f:7d:b1:f5:26:cc:a3:34:d6:6d:48: 16:e9:23:c0:80:7a:0a:ea:27:e5:b6:f5:1c:25:b1:3f:45:cd: ec:54:3b:05:da:73:01:72:6b:70:ef:61:33:ac:c3:55:72:65: 94:99:3a:29:41:6d:6b:15:cf:2b:83:67:20:4f:cf:cd:a6:52: 0d:8e:7b:2a:9a:43:f9:8e:f1:b8:79:04:4c:13:1e:9e:8f:ea: 67:d9:81:77:35:48:55:0a:43:ad:e8:ee:8b:6b:65:7e:3f:75: 4b:5a:84:74:87:41:6e:a5:fd:d0:6b:31:7c:b3:0b:3a:ea:2a: 2a:e7:dd:56:38:a0:a9:40:ce:92:75:3d:c9:21:25:1c:bd:56: ff:4a:aa:6b:e2:e1:63:8e:9a:86:ed:ec:a0:7c:3c:63:5a:14: 9e:28:0c:c7:33:85:cf:f1:b2:2a:e3:ee:d2:d3:69:2f:e2:ec: c1:60:3b:0b:a4:c7:87:94:9c:06:98:a4:40:a5:3b:f4:66:95: 7d:b9:da:52:cb:90:0f:2c:ff:97:d1:7b:f8:3e:4a:fe:c5:47: 5f:b3:6d:29:97:2e:18:c5:fd:cb:65:6b:db:ea:25:94:c0:48: 14:cc:f1:75:7f:c4:8a:92:5b:a2:e4:8b:75:11:0d:43:c6:02: 20:08:98:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGql4vqgLkQ2kBW4zNcav0p9IUwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5 QjlENjc3MDAeFw0yNjA0MTYwNDQ0MjZaFw0yNjA0MTkxMTU5MjZaMDMxMTAvBgNV BAMTKEZDODY1QURFMkEzQzZDNEJDQTlEMDA2M0I3REZDQkI0QURDMkVCOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIuVDghaqQfAJqOO9zwxq0zWZh qNFDOp2WCJi0Sm7G9ii1BQCcxVt9k31rKlzZ49tB+ogOZILL4XQl1TeeX7doY6F0 +OpM+8w3Pc5MXMfgHwVlBE4uwW+H2h4NasXc6aQ7jBeo8WYh9ntpoSHcVCKF7TPI vx1Tmd3pNIWIvrBbOEDRW5+o6BMmrW4TKAQFUlxB3vNfJTXVFcVBWE2lQe3EOjkA B6mqV9VM0x2CjnNED6BTyEOJZaAYkWN/V1WyfuvHmmUYpqDTALL07hGB+GGjE4pD nFXL4YLoXJXlPO/ZchYgOqJ+RvPIZ3QTYXhZHIQ4pYrHy1w/rCCkx4KSgP9FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/IZa3io8bEvKnQBjt9/LtK3C65cwHwYDVR0j BBgwFoAUMJ/+MGledrpJUuKWW0/iT5udZ3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2NiNTBiMC00M2NjLTQ4ZDAtOTFmNC0wNWJiZGU3YWMxZDAvMC8zMDlGRkUzMDY5 NUU3NkJBNDk1MkUyOTY1QjRGRTI0RjlCOUQ2NzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5QjlE Njc3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNjYjUwYjAtNDNjYy00OGQwLTkx ZjQtMDViYmRlN2FjMWQwLzAvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUy NEY5QjlENjc3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVpj+nIVV8vfbH1JsyjNNZtSBbpI8CAegrq J+W29RwlsT9FzexUOwXacwFya3DvYTOsw1VyZZSZOilBbWsVzyuDZyBPz82mUg2O eyqaQ/mO8bh5BEwTHp6P6mfZgXc1SFUKQ63o7otrZX4/dUtahHSHQW6l/dBrMXyz CzrqKirn3VY4oKlAzpJ1PckhJRy9Vv9Kqmvi4WOOmobt7KB8PGNaFJ4oDMczhc/x sirj7tLTaS/i7MFgOwukx4eUnAaYpEClO/RmlX252lLLkA8s/5fRe/g+Sv7FR1+z bSmXLhjF/ctla9vqJZTASBTM8XV/xIqSW6Lki3URDUPGAiAImPY= -----END CERTIFICATE-----Generated at Fri Apr 17 14:35:13 2026 by rpki-client