$ rpki-client -vvf repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft File: 30D21A97E1EED902F151C3022374D979F0A4A7EF.mft (raw, json) Hash identifier: X+VcuwZO20o3ELYEibgzI3kZ2lOsgm76MSJ6CNnGBF4= Subject key identifier: 43:C1:1A:1F:35:94:9B:02:D4:79:2B:20:C9:AF:04:31:DF:FE:81:49 Authority key identifier: 30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF Certificate issuer: /CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Certificate serial: 7775A6FC2F5C44896B52404B15B0FB2E5628BA92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft Manifest number: 0177 Signing time: Tue 24 Mar 2026 21:21:56 +0000 Manifest this update: Tue 24 Mar 2026 21:16:56 +0000 Manifest next update: Sat 28 Mar 2026 03:37:56 +0000 Files and hashes: 1: 30D21A97E1EED902F151C3022374D979F0A4A7EF.crl (hash: OD6y7sjtH00enKgCXOJ/H1+xHj8EY5lgWdvs3kvu2E4=) 2: 34352e3234392e3232342e302f32342d3234203d3e20313532303237.roa (hash: Lbof0Eu5fIUUt+ZOnyAgcQnzposa001pRsoMaWB/hPw=) 3: 34352e3234392e3232352e302f32342d3234203d3e20313532303237.roa (hash: C52489RC5C7/6xA/AFGhqaTac2q7UpLljZUsc+WdOYU=) 4: 34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa (hash: dHytxOoYwuE6ev+ouL2C7HNOfk2qBxU0rZwmruiXqlc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:75:a6:fc:2f:5c:44:89:6b:52:40:4b:15:b0:fb:2e:56:28:ba:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Validity Not Before: Mar 24 21:16:56 2026 GMT Not After : Mar 28 03:37:56 2026 GMT Subject: CN=43C11A1F35949B02D4792B20C9AF0431DFFE8149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:49:b3:17:61:d0:a4:44:7b:2c:78:72:61:3f: 65:b5:42:cf:a9:4e:a8:92:d0:15:14:e0:ef:61:fa: 7c:0f:65:01:d7:e4:80:1d:02:d7:84:5e:f3:f9:36: 8d:df:12:34:9d:52:6e:0e:71:b0:5b:c9:38:d7:a0: 79:95:e5:3f:70:17:f8:7f:95:61:83:e7:66:ae:e1: d1:3e:2b:04:44:43:c9:04:6d:9e:08:e0:4f:b3:de: ba:75:37:db:fb:ca:c8:7d:9e:96:6e:22:a5:0e:0c: 7f:f4:60:20:7c:43:6d:64:1f:a5:82:11:d5:c6:60: 37:c8:4b:2f:f4:62:bb:b1:a1:f9:63:97:8d:18:ce: 35:a9:cb:04:0c:3a:5b:8e:99:ef:e5:c3:43:ad:bb: cc:de:95:7c:ff:32:7c:93:46:d3:14:e8:17:f0:34: b5:8f:9c:98:f5:a1:48:dc:49:1a:cb:ea:97:28:43: 42:43:0c:61:28:b6:d8:66:99:02:9c:20:a4:d0:25: 00:3f:a4:ae:8a:2a:a4:f0:3e:8a:4d:f0:69:09:26: 0f:a9:f5:ec:dd:7f:8c:14:ef:13:11:07:78:76:bb: ab:2c:d3:18:5f:a8:6f:0f:bc:19:4b:2c:6d:98:20: 02:ba:ed:c2:d2:cb:c0:68:f9:66:c5:11:a1:77:27: e9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C1:1A:1F:35:94:9B:02:D4:79:2B:20:C9:AF:04:31:DF:FE:81:49 X509v3 Authority Key Identifier: keyid:30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:6c:67:74:ab:07:3a:79:7d:7f:72:9d:50:bc:ea:14:10:e6: dd:ce:27:92:56:0f:36:d3:f5:b3:12:55:db:1f:65:8b:c5:df: 19:b3:af:47:e2:1a:7b:f1:a5:2f:32:9e:c8:30:db:8a:95:b4: 36:78:8f:81:26:e2:f5:9b:ab:90:2d:95:9a:4e:e9:a8:45:d5: 71:2d:b1:cd:76:ee:52:ff:b2:95:fd:b3:31:da:f5:78:93:a5: e6:7f:17:d4:a0:4b:08:44:8b:db:f1:91:96:d2:2e:99:ce:b7: 51:b2:4c:0f:20:8b:b2:1c:4c:c1:d2:4a:e5:58:74:36:13:6b: 55:80:1b:4c:0d:51:a0:4f:11:bc:e0:42:1e:80:e8:81:e4:2f: 1d:7c:9b:08:70:a7:5f:b0:8a:ac:09:e4:a3:e3:0f:ac:4b:4b: 24:23:ec:3d:7d:5c:0d:5e:a7:73:90:2d:ee:bb:1e:56:5c:1b: d0:ad:ba:3c:2d:bb:71:12:08:e4:05:e8:12:dd:c6:e4:20:c9: 1d:e0:d9:56:a6:1d:4f:0e:2c:60:86:20:89:df:f7:c9:0e:7b: c1:b1:8e:04:a1:d1:7b:51:c7:32:e8:60:e0:c2:b0:f2:79:6e: b5:94:26:3b:e4:10:b4:01:05:ba:a4:22:37:28:df:b3:89:d1: 86:36:3a:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd3Wm/C9cRIlrUkBLFbD7LlYoupIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlG MEE0QTdFRjAeFw0yNjAzMjQyMTE2NTZaFw0yNjAzMjgwMzM3NTZaMDMxMTAvBgNV BAMTKDQzQzExQTFGMzU5NDlCMDJENDc5MkIyMEM5QUYwNDMxREZGRTgxNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGSbMXYdCkRHsseHJhP2W1Qs+p TqiS0BUU4O9h+nwPZQHX5IAdAteEXvP5No3fEjSdUm4OcbBbyTjXoHmV5T9wF/h/ lWGD52au4dE+KwREQ8kEbZ4I4E+z3rp1N9v7ysh9npZuIqUODH/0YCB8Q21kH6WC EdXGYDfISy/0Yruxofljl40YzjWpywQMOluOme/lw0Otu8zelXz/MnyTRtMU6Bfw NLWPnJj1oUjcSRrL6pcoQ0JDDGEotthmmQKcIKTQJQA/pK6KKqTwPopN8GkJJg+p 9ezdf4wU7xMRB3h2u6ss0xhfqG8PvBlLLG2YIAK67cLSy8Bo+WbFEaF3J+khAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ8EaHzWUmwLUeSsgya8EMd/+gUkwHwYDVR0j BBgwFoAUMNIal+Hu2QLxUcMCI3TZefCkp+8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWI4OTlhYy00ODcwLTRlMjgtOGU0ZS0yYzIzNzUyYTRhNjAvMC8zMEQyMUE5N0Ux RUVEOTAyRjE1MUMzMDIyMzc0RDk3OUYwQTRBN0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlGMEE0 QTdFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDliODk5YWMtNDg3MC00ZTI4LThl NGUtMmMyMzc1MmE0YTYwLzAvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5 NzlGMEE0QTdFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhsZ3SrBzp5fX9ynVC86hQQ5t3OJ5JWDzbT 9bMSVdsfZYvF3xmzr0fiGnvxpS8ynsgw24qVtDZ4j4Em4vWbq5AtlZpO6ahF1XEt sc127lL/spX9szHa9XiTpeZ/F9SgSwhEi9vxkZbSLpnOt1GyTA8gi7IcTMHSSuVY dDYTa1WAG0wNUaBPEbzgQh6A6IHkLx18mwhwp1+wiqwJ5KPjD6xLSyQj7D19XA1e p3OQLe67HlZcG9Ctujwtu3ESCOQF6BLdxuQgyR3g2VamHU8OLGCGIInf98kOe8Gx jgSh0XtRxzLoYODCsPJ5brWUJjvkELQBBbqkIjco37OJ0YY2Oik= -----END CERTIFICATE-----Generated at Thu Mar 26 12:59:22 2026 by rpki-client