$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft File: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft (raw, json) Hash identifier: GNujvheSZj71JFmfHFR/eqhqPwP/kueX7UxqbGYfvhM= Subject key identifier: 29:33:52:04:94:0B:08:C8:26:51:72:6B:57:CF:84:03:05:41:9C:E1 Authority key identifier: 8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 Certificate issuer: /CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Certificate serial: 7C37E5E564AAB8C2655DAC99E3C13096EB64A910 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft Manifest number: E2 Signing time: Mon 20 Apr 2026 17:31:09 +0000 Manifest this update: Mon 20 Apr 2026 17:26:09 +0000 Manifest next update: Fri 24 Apr 2026 03:51:09 +0000 Files and hashes: 1: 3136302e3139312e3233352e302f32342d3234203d3e20313534343130.roa (hash: zyDq4p7gaqzLKVL/LUrVeKcASK+xSzMyAANuaFKi9Qw=) 2: 3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa (hash: 057q45kqdRxLvAiRPvpE9xTv/5F62FgJizN22DjE3/s=) 3: 8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl (hash: AYeUv8b3W6aae0A4b205g9Q/n+PymHnketvRAU1177g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:37:e5:e5:64:aa:b8:c2:65:5d:ac:99:e3:c1:30:96:eb:64:a9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8 Validity Not Before: Apr 20 17:26:09 2026 GMT Not After : Apr 24 03:51:09 2026 GMT Subject: CN=29335204940B08C82651726B57CF840305419CE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e0:d9:99:cb:30:72:fd:4a:e0:f5:cd:8f:3a: 96:3d:f1:53:49:9f:10:5a:7e:55:47:dd:7e:5d:2d: f6:83:23:26:75:53:3e:43:42:af:dd:dd:11:bc:3b: fa:88:a9:26:e6:39:64:a3:87:14:8f:0a:86:91:d0: 3d:da:83:a9:a8:4f:b6:24:c5:d6:45:b8:fa:76:f0: 9a:a1:17:d6:a4:47:3a:33:ae:42:c1:0d:44:72:20: 21:c5:68:11:46:bb:78:b0:f4:0d:d7:2d:81:97:6c: db:f7:58:a4:aa:0e:ea:fa:45:81:a7:d0:90:e2:c9: b8:3e:d7:49:cf:d0:8e:04:72:19:01:44:fb:3b:9d: 1d:4c:ee:09:a4:fa:09:6c:17:ea:33:48:9e:4a:64: 78:0f:c2:fa:ed:b3:d7:05:6f:d1:98:d5:c2:c4:99: 29:af:19:91:a9:43:89:c5:0d:b0:f0:a5:99:05:db: 37:11:b5:71:52:ed:0c:a3:1e:1c:6a:e6:f3:48:1c: c1:79:39:3a:f0:d8:78:f5:ff:04:48:ff:e7:de:d8: 81:72:76:7e:11:23:3a:07:f4:86:d8:1c:fb:dc:1c: 2e:60:4b:3c:e8:50:3c:33:06:cc:a3:65:d5:9a:bb: fd:60:0e:00:a1:ea:8e:23:ad:db:81:4b:b0:8f:6f: 16:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:33:52:04:94:0B:08:C8:26:51:72:6B:57:CF:84:03:05:41:9C:E1 X509v3 Authority Key Identifier: keyid:8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:59:6f:b8:70:d5:03:a1:6d:39:bd:ab:b0:e1:47:a0:10:a4: 0d:c1:9c:15:bf:ca:e3:57:e3:b1:8f:5f:24:58:49:47:66:b8: f6:c0:af:9b:11:2d:e3:63:26:c4:38:00:f4:e9:05:05:3c:a0: 03:30:28:d9:d7:62:e2:fe:23:85:97:f2:ad:ef:6b:51:16:ec: 06:64:e6:36:db:db:97:45:74:87:1f:1c:ea:81:dc:65:80:62: e2:61:60:87:23:b1:4b:d9:6f:99:ac:5c:7c:31:bd:a1:11:91: 25:97:5c:92:ea:17:4f:2f:55:f9:ec:19:8c:58:73:0c:c3:f3: e2:59:74:63:45:19:93:5e:1c:74:31:41:26:90:37:3f:de:b8: bf:e2:bf:cd:16:fc:3a:e0:d4:23:41:0d:16:c8:0d:dc:81:de: b9:3d:08:ec:d8:a3:b0:1e:63:31:72:5f:3c:76:1b:2e:46:14: 4b:9d:bb:9a:11:ab:57:92:b1:f6:c3:e3:2b:05:0f:e6:e0:65: b0:14:9a:30:40:67:80:86:2b:a9:d8:a6:7d:ff:8d:9b:45:35: 67:30:9a:43:f8:95:a4:b0:7b:ab:1a:ca:cb:f5:46:56:00:57: 77:f4:65:5c:97:24:67:0f:c6:11:8c:1d:42:b4:f9:27:82:3c: f2:f6:fd:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfDfl5WSquMJlXayZ48EwlutkqRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIy N0U0MzBDODAeFw0yNjA0MjAxNzI2MDlaFw0yNjA0MjQwMzUxMDlaMDMxMTAvBgNV BAMTKDI5MzM1MjA0OTQwQjA4QzgyNjUxNzI2QjU3Q0Y4NDAzMDU0MTlDRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4NmZyzBy/Urg9c2POpY98VNJ nxBaflVH3X5dLfaDIyZ1Uz5DQq/d3RG8O/qIqSbmOWSjhxSPCoaR0D3ag6moT7Yk xdZFuPp28JqhF9akRzozrkLBDURyICHFaBFGu3iw9A3XLYGXbNv3WKSqDur6RYGn 0JDiybg+10nP0I4EchkBRPs7nR1M7gmk+glsF+ozSJ5KZHgPwvrts9cFb9GY1cLE mSmvGZGpQ4nFDbDwpZkF2zcRtXFS7QyjHhxq5vNIHMF5OTrw2Hj1/wRI/+fe2IFy dn4RIzoH9IbYHPvcHC5gSzzoUDwzBsyjZdWau/1gDgCh6o4jrduBS7CPbxY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKTNSBJQLCMgmUXJrV8+EAwVBnOEwHwYDVR0j BBgwFoAUizAWfNog/n7c/GR6yGsUuyfkMMgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMC84QjMwMTY3Q0RB MjBGRTdFRENGQzY0N0FDODZCMTRCQjI3RTQzMEM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0QkIyN0U0 MzBDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzAvOEIzMDE2N0NEQTIwRkU3RURDRkM2NDdBQzg2QjE0 QkIyN0U0MzBDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxZb7hw1QOhbTm9q7DhR6AQpA3BnBW/yuNX 47GPXyRYSUdmuPbAr5sRLeNjJsQ4APTpBQU8oAMwKNnXYuL+I4WX8q3va1EW7AZk 5jbb25dFdIcfHOqB3GWAYuJhYIcjsUvZb5msXHwxvaERkSWXXJLqF08vVfnsGYxY cwzD8+JZdGNFGZNeHHQxQSaQNz/euL/iv80W/Drg1CNBDRbIDdyB3rk9COzYo7Ae YzFyXzx2Gy5GFEudu5oRq1eSsfbD4ysFD+bgZbAUmjBAZ4CGK6nYpn3/jZtFNWcw mkP4laSwe6saysv1RlYAV3f0ZVyXJGcPxhGMHUK0+SeCPPL2/TA= -----END CERTIFICATE-----Generated at Wed Apr 22 07:26:51 2026 by rpki-client