
$ rpki-client -vvf repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft
File: 30C39359651C33B59AC32BC46831980108960568.mft (raw, json)
Hash identifier: g8c/VQPnaPC9MZeSgBx4gj+ppblCUgE/zRYBR9XmpS8=
Subject key identifier: AB:DF:85:4E:6F:FA:A9:FA:E9:A2:9E:C3:1A:C8:BA:5A:96:97:9B:77
Authority key identifier: 30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68
Certificate issuer: /CN=30C39359651C33B59AC32BC46831980108960568
Certificate serial: 5CD9A3615C13562ADACF6FF8BA977966CC61C4EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft
Manifest number: 0558
Signing time: Wed 18 Mar 2026 22:32:25 +0000
Manifest this update: Wed 18 Mar 2026 22:27:25 +0000
Manifest next update: Sun 22 Mar 2026 03:16:25 +0000
Files and hashes: 1: 30C39359651C33B59AC32BC46831980108960568.crl (hash: lekofRiFiis7cYQTtmrVcSISmYVbL9f+ddPl0IndMYE=)
2: 3130332e3130372e3134302e302f32342d3234203d3e20313337323937.roa (hash: BHlKkUg0NjANH6Mliit3f4KGxxDlGbzPwZhqnWpcPcU=)
3: 323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa (hash: dFQhxxhIxqRHu+YRpdoF0va5NYJwS4I6YJDx/CCdh1g=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl
rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Mar 2026 03:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:d9:a3:61:5c:13:56:2a:da:cf:6f:f8:ba:97:79:66:cc:61:c4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30C39359651C33B59AC32BC46831980108960568
Validity
Not Before: Mar 18 22:27:25 2026 GMT
Not After : Mar 22 03:16:25 2026 GMT
Subject: CN=ABDF854E6FFAA9FAE9A29EC31AC8BA5A96979B77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d1:fa:44:1a:69:26:32:c5:8b:79:cd:9c:02:
0e:d7:98:75:2e:c4:de:61:22:09:d8:c5:22:29:52:
78:11:8e:41:e7:55:ed:68:34:0a:65:1b:aa:cf:34:
0b:a3:4c:37:fb:33:19:16:b9:cc:ed:3b:64:c9:31:
24:24:c5:02:15:31:ad:4a:f3:98:0a:d6:91:15:7d:
c0:61:49:d0:bc:b4:83:a0:32:3c:2e:11:29:28:aa:
7b:1e:00:13:1d:b7:6a:28:47:29:21:6f:f8:11:5e:
e6:ee:3a:3c:fd:82:dc:b2:c7:77:82:18:1b:3c:4d:
26:8f:3d:38:e6:11:df:14:c1:2c:b5:5a:0a:4b:9e:
85:90:5f:0c:6b:2b:db:2e:01:d8:74:8e:7b:e3:72:
34:6d:ba:18:a6:4c:d7:3b:ac:c2:90:fa:6a:f7:16:
53:a4:30:16:60:36:f0:61:30:a2:cc:f5:68:07:81:
3d:68:d4:61:6c:d1:76:37:60:12:1b:72:9d:12:2e:
9a:84:04:d3:a7:53:07:d6:61:08:56:f8:49:64:32:
ff:b7:f6:2c:f7:cd:a8:e3:fd:30:3d:da:c6:76:aa:
43:0f:90:34:7a:0f:06:02:a4:7d:f8:00:66:af:2a:
ca:eb:55:aa:38:0e:65:22:be:c6:cb:a5:fd:51:2d:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DF:85:4E:6F:FA:A9:FA:E9:A2:9E:C3:1A:C8:BA:5A:96:97:9B:77
X509v3 Authority Key Identifier:
keyid:30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:33:89:12:15:22:a9:bd:4d:bc:9d:c8:7f:5f:19:23:ef:15:
a8:04:55:d0:b7:bd:8c:ea:39:9c:32:7e:f9:9a:db:fd:71:1c:
95:fa:2c:45:e1:fc:2c:57:be:6d:14:d4:a7:49:d2:33:30:76:
bf:b7:d1:6d:d6:e5:dd:20:f2:20:5d:16:c4:67:5e:ca:ab:88:
d9:ab:1d:84:51:1d:bd:1d:78:db:4c:9b:2e:71:97:a2:22:ca:
29:76:14:fa:66:6d:37:3e:a3:5d:de:b5:94:7f:69:4e:29:af:
2f:a2:12:3f:db:dd:f9:d8:56:c2:91:72:84:d8:b8:ee:0c:ed:
05:80:33:e6:81:db:6e:39:66:69:b9:2b:d1:6b:50:2d:94:84:
64:58:04:6b:39:ee:e4:c9:60:ff:04:4b:26:7a:f7:90:c4:bd:
68:2e:3f:59:54:5e:34:e9:ed:8e:fc:f7:90:28:55:6a:ae:aa:
27:5f:67:9e:ff:40:72:68:b9:95:bb:37:f7:a4:0d:48:47:38:
f6:67:d1:07:b5:13:e6:86:fb:8b:18:7e:85:73:df:da:e0:10:
45:04:90:1b:05:39:0f:73:8c:f1:5c:54:10:d6:0c:1c:6c:0f:
de:21:8b:09:26:30:95:69:d0:72:38:9b:94:bd:51:e3:90:1a:
9c:84:4f:b5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXNmjYVwTViraz2/4upd5ZsxhxO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBDMzkzNTk2NTFDMzNCNTlBQzMyQkM0NjgzMTk4MDEw
ODk2MDU2ODAeFw0yNjAzMTgyMjI3MjVaFw0yNjAzMjIwMzE2MjVaMDMxMTAvBgNV
BAMTKEFCREY4NTRFNkZGQUE5RkFFOUEyOUVDMzFBQzhCQTVBOTY5NzlCNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW0fpEGmkmMsWLec2cAg7XmHUu
xN5hIgnYxSIpUngRjkHnVe1oNAplG6rPNAujTDf7MxkWucztO2TJMSQkxQIVMa1K
85gK1pEVfcBhSdC8tIOgMjwuESkoqnseABMdt2ooRykhb/gRXubuOjz9gtyyx3eC
GBs8TSaPPTjmEd8UwSy1WgpLnoWQXwxrK9suAdh0jnvjcjRtuhimTNc7rMKQ+mr3
FlOkMBZgNvBhMKLM9WgHgT1o1GFs0XY3YBIbcp0SLpqEBNOnUwfWYQhW+ElkMv+3
9iz3zajj/TA92sZ2qkMPkDR6DwYCpH34AGavKsrrVao4DmUivsbLpf1RLU6VAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUq9+FTm/6qfrpop7DGsi6WpaXm3cwHwYDVR0j
BBgwFoAUMMOTWWUcM7WawyvEaDGYAQiWBWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NTc5OTZmNS1hOTM0LTRiNDQtODU0Ny0xOWVjMzdjZjdjMTQvMC8zMEMzOTM1OTY1
MUMzM0I1OUFDMzJCQzQ2ODMxOTgwMTA4OTYwNTY4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzBDMzkzNTk2NTFDMzNCNTlBQzMyQkM0NjgzMTk4MDEwODk2
MDU2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU3OTk2ZjUtYTkzNC00YjQ0LTg1
NDctMTllYzM3Y2Y3YzE0LzAvMzBDMzkzNTk2NTFDMzNCNTlBQzMyQkM0NjgzMTk4
MDEwODk2MDU2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEAziRIVIqm9TbydyH9fGSPvFagEVdC3vYzq
OZwyfvma2/1xHJX6LEXh/CxXvm0U1KdJ0jMwdr+30W3W5d0g8iBdFsRnXsqriNmr
HYRRHb0deNtMmy5xl6Iiyil2FPpmbTc+o13etZR/aU4pry+iEj/b3fnYVsKRcoTY
uO4M7QWAM+aB2245Zmm5K9FrUC2UhGRYBGs57uTJYP8ESyZ695DEvWguP1lUXjTp
7Y7895AoVWquqidfZ57/QHJouZW7N/ekDUhHOPZn0Qe1E+aG+4sYfoVz39rgEEUE
kBsFOQ9zjPFcVBDWDBxsD94hiwkmMJVp0HI4m5S9UeOQGpyET7U=
-----END CERTIFICATE-----
Generated at Thu Mar 19 09:41:53 2026 by rpki-client