$ rpki-client -vvf repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft File: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft (raw, json) Hash identifier: 5wsacXI0rINZZQfvIHJCalxFvGqzqvC3J3OI3qqrOy0= Subject key identifier: 7C:EA:63:E6:DA:9C:F2:23:EE:5B:86:1C:4D:E4:21:73:F2:7A:C5:6C Authority key identifier: C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E Certificate issuer: /CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Certificate serial: 21811934DA78447EDBAC221BBE2F9F6EC7D3DA8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft Manifest number: 044C Signing time: Thu 26 Mar 2026 10:21:02 +0000 Manifest this update: Thu 26 Mar 2026 10:16:02 +0000 Manifest next update: Sun 29 Mar 2026 11:42:02 +0000 Files and hashes: 1: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl (hash: Y1llkZRdHURjocciucUvzdahJ8rIHOtX7GBPjP3uY/k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:81:19:34:da:78:44:7e:db:ac:22:1b:be:2f:9f:6e:c7:d3:da:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Validity Not Before: Mar 26 10:16:02 2026 GMT Not After : Mar 29 11:42:02 2026 GMT Subject: CN=7CEA63E6DA9CF223EE5B861C4DE42173F27AC56C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e5:fb:69:59:6c:a8:32:27:4a:7f:3d:37:d0: ee:f8:58:6c:63:11:56:db:88:9e:7e:8a:68:32:b5: 39:17:65:3d:f7:47:cf:68:54:ef:4d:b3:27:23:6d: 99:c7:89:35:e5:db:66:42:65:2e:8f:b5:54:8e:c2: 6e:7b:5f:24:64:eb:05:6d:a1:bf:b6:6e:46:52:f8: 22:cf:2e:39:d0:7a:40:52:c3:ad:89:44:45:5b:8f: 6f:ca:db:22:12:0c:9d:8c:aa:c5:89:7c:70:85:82: fc:fd:d8:47:98:ab:90:56:35:ca:5c:7a:6c:c7:81: a0:b0:ad:0d:76:65:89:90:6a:73:a1:e0:57:7b:7a: 9e:62:d5:49:19:d5:81:47:73:c0:b6:69:05:6d:94: b1:6f:c7:7f:23:ec:06:5d:00:33:d0:0b:79:93:88: 55:2a:0d:75:70:ee:49:14:e1:07:87:36:d3:20:65: 55:9f:f1:09:c3:09:0c:3b:75:81:33:7c:bb:00:72: 9d:b9:ea:f4:f6:74:9c:65:72:71:58:08:34:be:bb: 53:e9:44:de:05:29:af:03:56:09:b0:a7:0d:e4:d2: db:77:7b:ad:1c:ba:56:22:95:04:54:ff:6b:75:bd: 45:46:18:2b:ae:84:e1:21:6b:83:7f:09:7a:7a:f2: e4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EA:63:E6:DA:9C:F2:23:EE:5B:86:1C:4D:E4:21:73:F2:7A:C5:6C X509v3 Authority Key Identifier: keyid:C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0f:4d:cd:b8:33:7f:67:4d:dc:47:62:f7:fb:5d:28:1e:d6: 64:af:b2:37:4c:39:51:ea:7e:67:ef:46:c7:f2:e6:6d:2a:7e: f1:06:e9:4e:32:9f:0a:13:80:72:c2:42:63:76:f8:c7:db:61: b3:b8:c2:d3:de:a6:40:75:45:95:69:b7:da:cb:9e:22:e9:94: 49:f8:5c:55:30:08:76:b2:00:58:0e:87:97:ef:22:c4:8f:45: 67:0c:cf:78:4a:f6:13:4d:9a:e1:d1:7a:4f:c3:d6:87:a2:3d: fb:e2:e2:45:18:90:b2:d2:4f:8b:21:90:b3:75:3c:ae:6d:40: 79:2b:e9:04:d8:90:6d:b1:d5:9b:24:02:5e:ed:2d:c4:4b:53: e9:fd:19:97:78:a7:8a:c8:ee:3c:9e:fa:99:57:bc:73:26:07: df:12:51:39:a0:8f:07:19:74:ee:61:46:9c:2b:29:7f:dc:d3: bd:f6:a5:ec:ea:27:0e:b9:09:54:65:15:13:d8:21:d4:87:94: dc:4f:94:7c:66:e6:d3:ec:85:e5:1c:f9:ce:4a:0d:98:3c:e1: b0:7a:74:35:40:8a:c3:97:5d:da:13:bf:aa:67:99:b6:30:d3: bf:ff:49:41:a4:89:3b:da:12:00:9b:e2:8d:6f:b7:0d:66:38: 7d:61:23:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIYEZNNp4RH7brCIbvi+fbsfT2o0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcy RkI0RkU2RTAeFw0yNjAzMjYxMDE2MDJaFw0yNjAzMjkxMTQyMDJaMDMxMTAvBgNV BAMTKDdDRUE2M0U2REE5Q0YyMjNFRTVCODYxQzRERTQyMTczRjI3QUM1NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb5ftpWWyoMidKfz030O74WGxj EVbbiJ5+imgytTkXZT33R89oVO9NsycjbZnHiTXl22ZCZS6PtVSOwm57XyRk6wVt ob+2bkZS+CLPLjnQekBSw62JREVbj2/K2yISDJ2MqsWJfHCFgvz92EeYq5BWNcpc emzHgaCwrQ12ZYmQanOh4Fd7ep5i1UkZ1YFHc8C2aQVtlLFvx38j7AZdADPQC3mT iFUqDXVw7kkU4QeHNtMgZVWf8QnDCQw7dYEzfLsAcp256vT2dJxlcnFYCDS+u1Pp RN4FKa8DVgmwpw3k0tt3e60culYilQRU/2t1vUVGGCuuhOEha4N/CXp68uRTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfOpj5tqc8iPuW4YcTeQhc/J6xWwwHwYDVR0j BBgwFoAUww3nH3yuFsotjattAcpD1y+0/m4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2I1OWNlNC02NmEyLTRmNGQtYjNkNi05Mjk5NDg0YmE1NmIvMC9DMzBERTcxRjdD QUUxNkNBMkQ4REFCNkQwMUNBNDNENzJGQjRGRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcyRkI0 RkU2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNiNTljZTQtNjZhMi00ZjRkLWIz ZDYtOTI5OTQ4NGJhNTZiLzAvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQz RDcyRkI0RkU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0PTc24M39nTdxHYvf7XSge1mSvsjdMOVHq fmfvRsfy5m0qfvEG6U4ynwoTgHLCQmN2+MfbYbO4wtPepkB1RZVpt9rLniLplEn4 XFUwCHayAFgOh5fvIsSPRWcMz3hK9hNNmuHRek/D1oeiPfvi4kUYkLLST4shkLN1 PK5tQHkr6QTYkG2x1ZskAl7tLcRLU+n9GZd4p4rI7jye+plXvHMmB98SUTmgjwcZ dO5hRpwrKX/c0732pezqJw65CVRlFRPYIdSHlNxPlHxm5tPsheUc+c5KDZg84bB6 dDVAisOXXdoTv6pnmbYw07//SUGkiTvaEgCb4o1vtw1mOH1hI7E= -----END CERTIFICATE-----Generated at Thu Mar 26 12:45:59 2026 by rpki-client