$ rpki-client -vvf repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft File: 30C896473FC5DE403F4651059F6BE1586BFAC473.mft (raw, json) Hash identifier: O300JjA8+YMJk8lURFSPLdH2WyAfA+nd6o6cFg6DMXE= Subject key identifier: D3:1C:11:DF:86:68:D6:F6:61:B2:39:6D:F1:E8:F9:E0:79:AD:97:76 Authority key identifier: 30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 Certificate issuer: /CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Certificate serial: 20CEA70D3EAB07EE16922B5BEBB5C0DB740AECD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft Manifest number: 010D Signing time: Mon 20 Apr 2026 04:32:00 +0000 Manifest this update: Mon 20 Apr 2026 04:27:00 +0000 Manifest next update: Thu 23 Apr 2026 09:06:00 +0000 Files and hashes: 1: 30C896473FC5DE403F4651059F6BE1586BFAC473.crl (hash: GgxPpijLbEvJdJi2kH0FXIFOFIHfmelpq5VuK8Tn3FU=) 2: 3135372e36362e36362e302f32342d3234203d3e20313532373831.roa (hash: x/vtNdgftiP2gNHQRXmqF+bNIt+0K74KbEvvSueFvXY=) 3: 3135372e36362e36372e302f32342d3234203d3e20313532373831.roa (hash: jM3o+qLgLitpWG9aIDTu7g7FqrNoiH7dHWh51KuZSvY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 09:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ce:a7:0d:3e:ab:07:ee:16:92:2b:5b:eb:b5:c0:db:74:0a:ec:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Validity Not Before: Apr 20 04:27:00 2026 GMT Not After : Apr 23 09:06:00 2026 GMT Subject: CN=D31C11DF8668D6F661B2396DF1E8F9E079AD9776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c5:dd:38:5c:8b:61:bd:b9:87:91:f7:17:0f: e9:88:63:5c:96:f1:e0:6e:81:12:1f:33:ab:40:64: 26:df:a2:3d:14:8f:27:c8:9a:5a:b9:88:01:d6:a6: b2:1e:53:73:9d:e6:47:ea:c5:c9:5b:31:61:f8:40: 52:35:8a:64:c1:27:a4:47:dc:ad:d9:b4:55:37:c5: 49:86:36:6d:0b:34:12:0d:ab:76:d9:e6:93:d2:cc: 6c:9e:12:d7:d9:8b:b6:1d:8e:2a:f4:70:85:48:f8: 82:69:f8:d4:06:1c:ca:47:2a:5c:f0:5b:a2:b9:77: 7d:2c:32:f1:85:13:05:70:fb:ee:6f:b7:ea:b7:e0: f7:99:b4:6b:98:03:a3:b0:62:d1:a3:7d:56:ec:6a: 45:e8:7b:92:0f:9e:3a:79:a1:0b:04:80:d2:e4:6a: 94:b4:58:46:da:5a:b1:de:4c:a7:74:55:4e:2f:e8: 05:ff:5d:5e:bd:f9:a7:09:34:ec:db:02:f7:34:82: 99:55:1b:8a:f1:81:df:ac:9b:d7:d2:75:39:b3:97: 35:a4:de:35:d5:65:61:f1:20:ce:0d:9c:10:11:13: 32:a5:3a:c8:b7:d9:46:23:04:6f:e7:20:0e:dc:d0: 01:d5:6b:bc:e1:a8:0d:97:16:99:4c:54:4e:d2:8f: 8b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1C:11:DF:86:68:D6:F6:61:B2:39:6D:F1:E8:F9:E0:79:AD:97:76 X509v3 Authority Key Identifier: keyid:30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:3f:d5:a3:d4:04:94:b1:90:53:1a:40:69:dd:36:56:26:1a: 0e:c0:54:7e:9e:60:d1:51:f3:2a:48:91:6b:50:b6:8b:1a:48: 0b:60:cd:9d:f0:02:36:87:bc:f9:9e:1a:06:13:df:5b:b2:c6: f6:f5:8f:87:28:6e:0c:96:19:a9:00:fc:d2:bf:8e:f9:b2:01: c8:f1:86:ad:91:70:f8:d6:35:23:7b:9c:80:96:86:19:ee:0e: f3:5b:df:d0:dd:8c:bd:64:ef:9c:65:12:81:f5:24:aa:74:0b: b2:a5:84:2d:e6:04:7c:4b:c5:b5:c9:97:d6:41:af:45:4e:90: ba:02:d3:5f:28:7a:4b:5c:2f:45:c1:ff:c0:2f:7c:2a:01:c8: 19:47:03:b3:5d:92:06:04:e6:5d:3d:d2:7c:a2:1a:0c:da:71: 2d:9b:ad:1e:be:f4:a3:8a:62:c0:6d:72:c4:14:6c:a4:c2:d5: a2:fd:c8:5a:37:26:0f:e6:8e:01:5c:eb:12:51:0f:2e:75:73: 0f:1e:92:0c:ba:d3:c6:91:14:3e:33:e3:a1:45:9f:18:5e:23: 48:a0:c0:33:a3:2b:18:c3:28:6e:8e:19:11:c1:77:f2:76:a4: f6:51:6f:f0:9e:6d:f9:1d:48:16:32:24:4e:7c:a3:d9:d3:76: 86:1a:78:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIM6nDT6rB+4Wkitb67XA23QK7NMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2 QkZBQzQ3MzAeFw0yNjA0MjAwNDI3MDBaFw0yNjA0MjMwOTA2MDBaMDMxMTAvBgNV BAMTKEQzMUMxMURGODY2OEQ2RjY2MUIyMzk2REYxRThGOUUwNzlBRDk3NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDExd04XIthvbmHkfcXD+mIY1yW 8eBugRIfM6tAZCbfoj0UjyfImlq5iAHWprIeU3Od5kfqxclbMWH4QFI1imTBJ6RH 3K3ZtFU3xUmGNm0LNBINq3bZ5pPSzGyeEtfZi7Ydjir0cIVI+IJp+NQGHMpHKlzw W6K5d30sMvGFEwVw++5vt+q34PeZtGuYA6OwYtGjfVbsakXoe5IPnjp5oQsEgNLk apS0WEbaWrHeTKd0VU4v6AX/XV69+acJNOzbAvc0gplVG4rxgd+sm9fSdTmzlzWk 3jXVZWHxIM4NnBAREzKlOsi32UYjBG/nIA7c0AHVa7zhqA2XFplMVE7Sj4uxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0xwR34Zo1vZhsjlt8ej54Hmtl3YwHwYDVR0j BBgwFoAUMMiWRz/F3kA/RlEFn2vhWGv6xHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjcwYWU3Ni05NTk0LTQ5ODAtYjQxMC00OTFhNjMxOWZmM2EvMC8zMEM4OTY0NzNG QzVERTQwM0Y0NjUxMDU5RjZCRTE1ODZCRkFDNDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2QkZB QzQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY3MGFlNzYtOTU5NC00OTgwLWI0 MTAtNDkxYTYzMTlmZjNhLzAvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUx NTg2QkZBQzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEI/1aPUBJSxkFMaQGndNlYmGg7AVH6eYNFR 8ypIkWtQtosaSAtgzZ3wAjaHvPmeGgYT31uyxvb1j4cobgyWGakA/NK/jvmyAcjx hq2RcPjWNSN7nICWhhnuDvNb39DdjL1k75xlEoH1JKp0C7KlhC3mBHxLxbXJl9ZB r0VOkLoC018oektcL0XB/8AvfCoByBlHA7NdkgYE5l090nyiGgzacS2brR6+9KOK YsBtcsQUbKTC1aL9yFo3Jg/mjgFc6xJRDy51cw8ekgy608aRFD4z46FFnxheI0ig wDOjKxjDKG6OGRHBd/J2pPZRb/CebfkdSBYyJE58o9nTdoYaeIw= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:43 2026 by rpki-client