$ rpki-client -vvf repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft File: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft (raw, json) Hash identifier: lGpK2s1W+/lfJADKRKyAv/YZbOZ44S382nndPRJBUbg= Subject key identifier: CC:01:BF:D7:89:9D:BF:E7:FD:1A:42:28:08:79:45:15:11:CC:84:79 Authority key identifier: C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E Certificate issuer: /CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Certificate serial: 51CCF6F62D4BF3FDA1F6970441A1E55882626B1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft Manifest number: 0440 Signing time: Sat 28 Feb 2026 18:31:01 +0000 Manifest this update: Sat 28 Feb 2026 18:26:01 +0000 Manifest next update: Tue 03 Mar 2026 20:38:01 +0000 Files and hashes: 1: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl (hash: mlG246H0kqe5WQY6ZqBBFHamen2KRBAjPdYDYMdOi24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 20:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:cc:f6:f6:2d:4b:f3:fd:a1:f6:97:04:41:a1:e5:58:82:62:6b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Validity Not Before: Feb 28 18:26:01 2026 GMT Not After : Mar 3 20:38:01 2026 GMT Subject: CN=CC01BFD7899DBFE7FD1A42280879451511CC8479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:73:07:19:b6:be:f6:d9:2e:c0:3d:df:16:47: 20:f6:23:71:05:ff:e9:79:06:4e:80:6e:6f:1f:4f: 2a:b2:58:23:14:64:30:e8:d4:36:d0:d8:53:95:98: b8:e9:d4:3a:67:b0:a1:18:ca:86:6f:28:b0:04:90: 53:01:4f:b5:98:2a:5f:af:4d:19:e2:15:bc:a3:40: 44:05:f4:13:eb:65:04:47:4d:1b:d4:ff:a4:36:d8: cd:cc:63:43:5a:36:f7:71:29:a4:84:81:84:f3:af: cb:0e:79:f0:ca:65:ee:60:58:94:8b:66:68:a4:ee: d4:56:07:4d:c2:c3:fa:94:ae:88:86:bf:78:80:60: c4:7b:33:0b:75:95:c3:29:5c:b1:47:f6:34:80:de: fa:e8:91:58:0d:d2:0b:9d:f4:63:43:88:74:53:ba: b7:97:dc:98:79:3e:e0:93:9d:c2:f0:7d:4e:a8:1f: 52:f5:43:1a:52:f7:88:30:a8:ae:76:be:29:99:df: 19:fd:ff:91:04:19:6d:d8:70:04:e9:41:95:70:63: 70:7a:46:0f:6b:70:44:4f:bb:60:8d:6e:e1:dc:7d: 63:f9:eb:f3:d5:4d:5a:81:34:f6:21:40:1c:78:ff: 9f:cb:87:f6:ed:56:29:47:65:0f:14:0b:b2:02:4b: 3b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:01:BF:D7:89:9D:BF:E7:FD:1A:42:28:08:79:45:15:11:CC:84:79 X509v3 Authority Key Identifier: keyid:C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:00:fb:cc:d2:68:ff:83:cf:b4:dd:27:d9:e6:4b:9f:22:97: e9:69:54:0c:8f:36:9d:2a:f4:8a:60:cb:ab:aa:58:b0:5b:10: f7:06:6c:51:38:ca:83:57:39:e9:3d:5d:6e:b0:4b:88:86:4a: c9:6c:e6:58:2d:eb:b8:e0:ee:6b:55:4a:63:cb:59:ce:20:44: 95:6d:b3:dd:43:c9:bc:73:82:d4:99:bb:a2:95:d5:90:fe:dd: 6f:4e:9b:39:e0:48:9d:d9:f1:23:4d:43:55:0a:09:34:8a:b3: 36:c5:f4:d1:c9:ed:a8:6e:1e:8d:09:06:45:09:ce:b9:9c:f7: b5:76:47:fc:0e:e2:c9:cb:ac:6e:63:ea:4a:21:b2:18:3f:8c: b3:9e:2b:0e:c7:37:c2:f0:bb:8d:48:dc:9a:4d:ab:56:a3:d1: f1:76:24:83:90:cf:5d:61:99:90:30:36:49:87:c4:62:11:86: 3b:bc:d4:e3:9d:ab:45:01:70:6e:a9:05:a6:e0:08:06:77:90: 47:3e:ae:a6:6d:d2:d4:7e:c9:77:9f:22:71:2f:62:00:c4:b0: 20:33:67:2a:57:5d:d5:9a:6b:7e:0a:4c:75:a9:fb:7e:12:5e: b7:47:55:f8:86:19:08:95:26:0e:2e:cc:f2:fe:bf:ef:95:57: 39:96:a2:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUcz29i1L8/2h9pcEQaHlWIJiaxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcy RkI0RkU2RTAeFw0yNjAyMjgxODI2MDFaFw0yNjAzMDMyMDM4MDFaMDMxMTAvBgNV BAMTKENDMDFCRkQ3ODk5REJGRTdGRDFBNDIyODA4Nzk0NTE1MTFDQzg0NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDScwcZtr722S7APd8WRyD2I3EF /+l5Bk6Abm8fTyqyWCMUZDDo1DbQ2FOVmLjp1DpnsKEYyoZvKLAEkFMBT7WYKl+v TRniFbyjQEQF9BPrZQRHTRvU/6Q22M3MY0NaNvdxKaSEgYTzr8sOefDKZe5gWJSL Zmik7tRWB03Cw/qUroiGv3iAYMR7Mwt1lcMpXLFH9jSA3vrokVgN0gud9GNDiHRT ureX3Jh5PuCTncLwfU6oH1L1QxpS94gwqK52vimZ3xn9/5EEGW3YcATpQZVwY3B6 Rg9rcERPu2CNbuHcfWP56/PVTVqBNPYhQBx4/5/Lh/btVilHZQ8UC7ICSzvXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzAG/14mdv+f9GkIoCHlFFRHMhHkwHwYDVR0j BBgwFoAUww3nH3yuFsotjattAcpD1y+0/m4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2I1OWNlNC02NmEyLTRmNGQtYjNkNi05Mjk5NDg0YmE1NmIvMC9DMzBERTcxRjdD QUUxNkNBMkQ4REFCNkQwMUNBNDNENzJGQjRGRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcyRkI0 RkU2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNiNTljZTQtNjZhMi00ZjRkLWIz ZDYtOTI5OTQ4NGJhNTZiLzAvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQz RDcyRkI0RkU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkA+8zSaP+Dz7TdJ9nmS58il+lpVAyPNp0q 9Ipgy6uqWLBbEPcGbFE4yoNXOek9XW6wS4iGSsls5lgt67jg7mtVSmPLWc4gRJVt s91DybxzgtSZu6KV1ZD+3W9OmzngSJ3Z8SNNQ1UKCTSKszbF9NHJ7ahuHo0JBkUJ zrmc97V2R/wO4snLrG5j6kohshg/jLOeKw7HN8Lwu41I3JpNq1aj0fF2JIOQz11h mZAwNkmHxGIRhju81OOdq0UBcG6pBabgCAZ3kEc+rqZt0tR+yXefInEvYgDEsCAz ZypXXdWaa34KTHWp+34SXrdHVfiGGQiVJg4uzPL+v++VVzmWoiY= -----END CERTIFICATE-----Generated at Mon Mar 2 06:41:08 2026 by rpki-client