$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft File: 430E302040DE11D8C84431B3397113EC969694A0.mft (raw, json) Hash identifier: M2wFJrS0oRB5jMOToUI6jKFJwrwLxp84H5Sys8Qxf74= Subject key identifier: CC:84:AE:EC:C9:A2:51:99:09:56:D0:59:24:AD:5F:10:52:CE:4B:5B Authority key identifier: 43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 Certificate issuer: /CN=430E302040DE11D8C84431B3397113EC969694A0 Certificate serial: 0114C1F66D8280AF7FF024656F75BFB2A50AA896 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft Manifest number: 04F9 Signing time: Tue 24 Mar 2026 04:52:08 +0000 Manifest this update: Tue 24 Mar 2026 04:47:08 +0000 Manifest next update: Fri 27 Mar 2026 15:31:08 +0000 Files and hashes: 1: 430E302040DE11D8C84431B3397113EC969694A0.crl (hash: xkdFMTx0WCtdowKLmpv4pE17KrlX1p2WylSbKhasr1I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 15:31:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:14:c1:f6:6d:82:80:af:7f:f0:24:65:6f:75:bf:b2:a5:0a:a8:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430E302040DE11D8C84431B3397113EC969694A0 Validity Not Before: Mar 24 04:47:08 2026 GMT Not After : Mar 27 15:31:08 2026 GMT Subject: CN=CC84AEECC9A251990956D05924AD5F1052CE4B5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c8:e8:70:23:ca:24:5b:98:a9:9a:30:4f:5c: 39:a1:f7:2f:d2:e9:86:f1:08:0b:10:51:c0:45:89: 07:13:0a:eb:2d:54:87:93:46:08:26:c2:ab:5c:42: 3d:d8:0b:88:b7:27:bc:5e:e9:3c:37:21:76:1c:0b: 69:c0:86:7f:e1:7f:25:11:76:94:9d:2d:e2:9e:f3: 69:1e:05:8d:0c:83:39:55:49:fc:95:b1:bf:45:5b: a0:18:08:9d:9a:f6:58:b8:6a:88:5d:d7:ef:ce:d9: 55:10:9a:63:82:29:b3:4b:90:7c:39:69:2c:61:b2: 4a:76:e1:d1:bb:8c:37:d2:b6:29:4b:89:ec:3b:55: 8e:8f:28:e8:d8:16:ea:94:01:41:92:04:1f:8f:68: fa:d8:5a:de:05:44:75:64:58:27:84:44:bb:47:ec: 49:16:04:58:a4:01:9b:ea:f2:c4:5f:10:23:a3:dc: 2f:19:31:35:8f:f2:24:e4:38:a4:6a:42:85:33:66: 05:a5:8c:22:08:ed:98:4a:d8:db:81:a3:ca:4d:77: a4:76:9b:3c:9c:b1:0e:2c:82:58:79:18:6a:11:c2: e9:b7:a6:29:cf:aa:38:d1:14:07:7d:f7:42:4e:bb: be:fd:80:b8:f0:2f:80:8d:a2:55:b3:a5:2d:79:cb: d6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:84:AE:EC:C9:A2:51:99:09:56:D0:59:24:AD:5F:10:52:CE:4B:5B X509v3 Authority Key Identifier: keyid:43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:03:90:28:6c:37:de:c1:4a:3d:93:de:d7:d1:12:bd:e5:d0: 1f:fe:51:2a:e8:da:1b:93:0c:39:18:5e:e8:47:82:dc:21:2c: bf:c0:20:42:82:1f:90:0c:67:1a:c3:19:77:17:cd:0b:c0:3a: 41:51:ac:49:65:b6:c2:f6:8c:8f:b9:9c:4d:89:c8:ed:b8:27: 93:12:90:bb:ce:bc:ca:a8:31:4f:08:1e:19:18:2d:6c:f4:0a: d0:bf:e5:cc:a4:66:b7:81:98:44:e5:45:1b:62:98:31:1b:58: 5c:4a:42:bc:6d:47:28:82:96:11:31:fc:3d:07:17:a1:72:62: ca:36:54:22:42:98:48:a5:b9:c1:36:32:c0:98:4b:63:3e:e1: 66:cf:22:73:8c:89:a1:c3:41:8d:e7:c1:b6:59:ad:b7:76:bd: bd:e4:40:43:fb:a9:5b:83:5c:56:0e:d2:b4:40:77:6c:ef:4c: a9:f7:19:2e:0b:66:e3:43:e8:f1:55:e1:b1:e7:f3:9d:82:fe: 48:08:e9:5d:b5:89:a9:a6:3e:c2:48:71:a6:3e:d5:d4:c8:68: b2:e8:2c:37:21:bb:69:0f:68:db:39:68:ca:4b:81:89:98:ce: d6:f8:a9:48:47:41:83:4a:bc:8c:9a:61:a8:25:fc:10:9b:ef: 8f:45:0e:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUARTB9m2CgK9/8CRlb3W/sqUKqJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5 Njk2OTRBMDAeFw0yNjAzMjQwNDQ3MDhaFw0yNjAzMjcxNTMxMDhaMDMxMTAvBgNV BAMTKENDODRBRUVDQzlBMjUxOTkwOTU2RDA1OTI0QUQ1RjEwNTJDRTRCNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWyOhwI8okW5ipmjBPXDmh9y/S 6YbxCAsQUcBFiQcTCustVIeTRggmwqtcQj3YC4i3J7xe6Tw3IXYcC2nAhn/hfyUR dpSdLeKe82keBY0MgzlVSfyVsb9FW6AYCJ2a9li4aohd1+/O2VUQmmOCKbNLkHw5 aSxhskp24dG7jDfStilLiew7VY6PKOjYFuqUAUGSBB+PaPrYWt4FRHVkWCeERLtH 7EkWBFikAZvq8sRfECOj3C8ZMTWP8iTkOKRqQoUzZgWljCII7ZhK2NuBo8pNd6R2 mzycsQ4sglh5GGoRwum3pinPqjjRFAd990JOu779gLjwL4CNolWzpS15y9aXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzISu7MmiUZkJVtBZJK1fEFLOS1swHwYDVR0j BBgwFoAUQw4wIEDeEdjIRDGzOXET7JaWlKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTllMDFiYS01OWM5LTQwNDctYWMwYi1lOWIyZmU2NTg1M2MvMC80MzBFMzAyMDQw REUxMUQ4Qzg0NDMxQjMzOTcxMTNFQzk2OTY5NEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5Njk2 OTRBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEz RUM5Njk2OTRBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgDkChsN97BSj2T3tfREr3l0B/+USro2huT DDkYXuhHgtwhLL/AIEKCH5AMZxrDGXcXzQvAOkFRrElltsL2jI+5nE2JyO24J5MS kLvOvMqoMU8IHhkYLWz0CtC/5cykZreBmETlRRtimDEbWFxKQrxtRyiClhEx/D0H F6FyYso2VCJCmEilucE2MsCYS2M+4WbPInOMiaHDQY3nwbZZrbd2vb3kQEP7qVuD XFYO0rRAd2zvTKn3GS4LZuND6PFV4bHn852C/kgI6V21iammPsJIcaY+1dTIaLLo LDchu2kPaNs5aMpLgYmYztb4qUhHQYNKvIyaYagl/BCb749FDk8= -----END CERTIFICATE-----Generated at Thu Mar 26 17:01:15 2026 by rpki-client