$ rpki-client -vvf repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft File: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft (raw, json) Hash identifier: /dixJlwEIRfLopdOPFkBtGxfo0u2V2KU6w/rZZQY/M0= Subject key identifier: A4:A9:EB:A0:2B:1E:4C:41:6F:50:F5:B6:C5:6E:3E:7A:77:C7:31:18 Authority key identifier: 30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 Certificate issuer: /CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Certificate serial: 7D8590CA3CFA6987F45EA303D0C3A293675DD85D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft Manifest number: 0230 Signing time: Wed 25 Mar 2026 08:11:18 +0000 Manifest this update: Wed 25 Mar 2026 08:06:18 +0000 Manifest next update: Sat 28 Mar 2026 19:30:18 +0000 Files and hashes: 1: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (hash: Udg26cCHQ+Qftm36Kch+i7dbSWtv7odm32FXa+73LYY=) 2: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (hash: xce0AmVhdIuoA0s5G07BTYqxfWM/i2bbCDllzfV1P80=) 3: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl (hash: Xs01u6/LcLbvq8QzT9cQCQnbUc07BQxbZ1bZCjbEarE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 19:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:85:90:ca:3c:fa:69:87:f4:5e:a3:03:d0:c3:a2:93:67:5d:d8:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Validity Not Before: Mar 25 08:06:18 2026 GMT Not After : Mar 28 19:30:18 2026 GMT Subject: CN=A4A9EBA02B1E4C416F50F5B6C56E3E7A77C73118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:57:bd:65:8b:24:2a:d9:fe:11:20:80:9a:c6: 8b:cd:8a:5f:8d:20:00:54:91:49:77:fb:c5:a8:13: b2:ae:a1:8e:ca:3a:71:fd:67:5b:f4:58:58:f9:c8: a7:c9:4e:f9:cf:c8:18:2c:3d:d5:b9:ec:43:54:6c: 78:8a:84:d0:ca:37:52:2e:c3:35:1a:2e:56:1d:10: 1d:8e:85:fe:cf:24:51:2a:1f:f0:25:a9:e1:4a:22: 57:fd:1f:f9:c9:a8:dc:77:5c:fc:d3:f5:5e:18:37: 4c:96:0b:7d:5b:39:67:4f:a7:6d:8d:9b:89:99:e5: 9b:f6:7c:3c:b0:4a:06:29:ce:89:3f:33:c6:45:ba: 48:b0:90:f7:9d:6e:1d:72:9d:b2:2a:61:7a:63:30: 98:28:64:01:88:b7:25:51:22:23:8f:2c:30:da:03: e1:4f:cb:61:c3:da:85:e1:06:39:c8:97:ee:6a:a4: fa:25:e2:54:3d:2c:c3:65:8f:de:a1:b1:52:08:e6: ea:68:3b:a6:41:96:f9:6e:c2:c0:c6:16:32:ad:dc: 6e:9f:6a:00:8a:cb:15:92:0b:82:78:73:28:86:b2: 68:bd:e7:33:d3:71:aa:aa:fe:35:b3:fa:6b:ad:89: 6a:67:23:b1:0d:22:77:24:60:a4:c0:e4:7a:a6:55: be:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A9:EB:A0:2B:1E:4C:41:6F:50:F5:B6:C5:6E:3E:7A:77:C7:31:18 X509v3 Authority Key Identifier: keyid:30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:2f:7b:dd:b3:76:45:73:07:88:a1:42:23:c8:ca:28:06:a1: d6:93:e0:6c:bd:92:37:aa:f3:61:43:4b:cc:54:2c:f0:a0:75: 23:df:9d:b9:18:69:be:21:f4:de:cb:96:fc:88:35:52:63:3e: 18:a1:90:1c:1a:0e:d1:16:86:8f:88:4a:c4:ca:2c:60:e1:f7: c6:4c:43:14:e3:02:73:71:f1:52:71:3b:cd:f5:c6:ab:1f:6d: 56:4a:1a:2d:65:09:dc:11:88:e7:bb:aa:0c:b0:ef:0a:b0:a4: 56:51:9b:fa:af:f8:47:53:45:58:2d:b8:6e:d1:a7:2f:7a:67: c3:05:06:01:bf:b4:da:0e:51:af:db:47:00:4f:f4:b2:7a:a1: 6d:23:8c:64:cb:f9:b0:83:40:42:b2:6e:c1:36:40:92:95:fe: 50:e8:20:21:10:63:a5:ac:fc:02:d7:cb:8b:c5:66:56:10:de: 65:3a:1f:a4:7e:5f:d3:59:dc:87:4c:4a:d8:60:9e:a9:05:f9: 70:95:49:cd:9e:c1:87:e1:c6:b2:1f:41:f5:f1:49:65:a5:80: 6d:ca:cd:84:50:eb:0f:9a:13:3c:ab:83:41:7c:4e:02:c5:cf: 41:f4:42:a6:eb:ad:4d:0f:e5:3b:e1:48:c7:2b:d1:76:ec:40: c9:f0:a2:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfYWQyjz6aYf0XqMD0MOik2dd2F0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3 RTkxMkQ0NTAeFw0yNjAzMjUwODA2MThaFw0yNjAzMjgxOTMwMThaMDMxMTAvBgNV BAMTKEE0QTlFQkEwMkIxRTRDNDE2RjUwRjVCNkM1NkUzRTdBNzdDNzMxMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRV71liyQq2f4RIICaxovNil+N IABUkUl3+8WoE7KuoY7KOnH9Z1v0WFj5yKfJTvnPyBgsPdW57ENUbHiKhNDKN1Iu wzUaLlYdEB2Ohf7PJFEqH/AlqeFKIlf9H/nJqNx3XPzT9V4YN0yWC31bOWdPp22N m4mZ5Zv2fDywSgYpzok/M8ZFukiwkPedbh1ynbIqYXpjMJgoZAGItyVRIiOPLDDa A+FPy2HD2oXhBjnIl+5qpPol4lQ9LMNlj96hsVII5upoO6ZBlvluwsDGFjKt3G6f agCKyxWSC4J4cyiGsmi95zPTcaqq/jWz+mutiWpnI7ENInckYKTA5HqmVb6/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpKnroCseTEFvUPW2xW4+enfHMRgwHwYDVR0j BBgwFoAUMOK0YXuLnPxPxXscWk10/H6RLUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjlmODkwMi0xYTA2LTQ1YTgtYTk5OC03MmU0NmFhYWU4ZmMvMC8zMEUyQjQ2MTdC OEI5Q0ZDNEZDNTdCMUM1QTRENzRGQzdFOTEyRDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3RTkx MkQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI5Zjg5MDItMWEwNi00NWE4LWE5 OTgtNzJlNDZhYWFlOGZjLzAvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0 RkM3RTkxMkQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAve92zdkVzB4ihQiPIyigGodaT4Gy9kjeq 82FDS8xULPCgdSPfnbkYab4h9N7LlvyINVJjPhihkBwaDtEWho+ISsTKLGDh98ZM QxTjAnNx8VJxO831xqsfbVZKGi1lCdwRiOe7qgyw7wqwpFZRm/qv+EdTRVgtuG7R py96Z8MFBgG/tNoOUa/bRwBP9LJ6oW0jjGTL+bCDQEKybsE2QJKV/lDoICEQY6Ws /ALXy4vFZlYQ3mU6H6R+X9NZ3IdMSthgnqkF+XCVSc2ewYfhxrIfQfXxSWWlgG3K zYRQ6w+aEzyrg0F8TgLFz0H0QqbrrU0P5TvhSMcr0XbsQMnwolc= -----END CERTIFICATE-----Generated at Thu Mar 26 15:50:44 2026 by rpki-client