$ rpki-client -vvf repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft File: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft (raw, json) Hash identifier: soIMSXj6oOCR4Es8AVQ4l4DrZH4F3ZNnhKFzMQMYurQ= Subject key identifier: 4B:2F:9F:0D:FF:69:C9:2B:97:7C:96:C6:08:90:14:F1:B1:8A:D4:6C Authority key identifier: C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E Certificate issuer: /CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Certificate serial: 6C9E9C6995E816BD5D9D11D6840CB33CA4AAEC41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft Manifest number: 0456 Signing time: Sat 18 Apr 2026 08:01:02 +0000 Manifest this update: Sat 18 Apr 2026 07:56:02 +0000 Manifest next update: Tue 21 Apr 2026 11:12:02 +0000 Files and hashes: 1: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl (hash: dzP1nrywOplLk09PDgwdj9FLTui899p3CIUFoIR6klU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 11:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:9e:9c:69:95:e8:16:bd:5d:9d:11:d6:84:0c:b3:3c:a4:aa:ec:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Validity Not Before: Apr 18 07:56:02 2026 GMT Not After : Apr 21 11:12:02 2026 GMT Subject: CN=4B2F9F0DFF69C92B977C96C6089014F1B18AD46C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:60:b5:cc:dd:0e:8e:a7:f9:30:20:28:e3:f8: 8f:e6:4a:3b:e8:15:31:fc:37:a4:c1:8a:5b:b7:79: 4c:6e:55:b1:61:18:ba:e6:43:55:3c:0d:da:8b:89: c4:51:ce:e7:1f:ab:a1:10:34:90:06:be:85:5b:8c: 11:8d:5c:72:41:a5:f6:4b:46:d5:aa:2d:68:89:66: dd:c9:2a:48:fa:65:d9:42:2b:7d:42:67:be:40:78: 8d:cf:a4:70:4d:52:9c:73:b3:28:1a:a6:88:ea:b4: be:0e:d8:7e:36:77:17:d5:da:44:f4:f3:2d:74:d8: 67:4a:39:fd:34:bc:3a:a1:8d:38:d7:cb:97:d1:b6: 21:01:fc:fb:d6:2e:17:69:a1:f5:72:04:89:8c:5d: ec:2b:d0:70:26:08:4c:43:92:a2:f5:2e:b0:af:f7: fd:d6:d6:34:d9:fc:71:b5:eb:44:24:c6:53:8e:f3: fc:d7:2b:33:7b:82:0d:ed:ce:97:bd:a7:e3:6f:f8: 3b:83:1e:7c:a0:97:77:39:2c:81:24:6a:ed:02:3e: 46:8d:d2:8d:c1:fd:0d:3b:75:91:25:7c:8a:e6:40: 5f:38:3d:82:39:12:b0:1f:c2:65:a0:71:1d:21:46: c1:87:53:22:0b:c0:9a:a5:95:62:12:a4:14:6e:61: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:2F:9F:0D:FF:69:C9:2B:97:7C:96:C6:08:90:14:F1:B1:8A:D4:6C X509v3 Authority Key Identifier: keyid:C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:84:3d:94:d0:c6:16:01:bf:a6:ec:29:05:01:60:20:52:df: 0c:d9:f0:f3:ad:e3:01:e2:29:00:db:e4:a1:11:58:83:e5:e0: 32:02:f9:23:3f:3e:5e:b7:af:1a:a0:79:89:93:82:ba:50:1e: 1b:89:fe:62:88:b7:a6:71:66:29:06:21:ef:35:cf:1a:12:57: b2:de:9a:92:13:fb:50:0a:bd:12:47:23:66:89:b2:c7:c8:19: 84:dc:7f:04:fe:6e:b3:3d:24:da:11:74:9c:cd:8f:3e:de:35: 16:37:3d:5a:46:24:2a:7a:c3:18:cd:fb:c5:8a:92:a9:91:33: 14:b5:56:34:c9:6d:36:3f:9e:2f:15:28:47:15:ba:97:b5:e6: 63:bb:e0:de:b3:8f:7f:94:cb:92:c6:c6:1e:2f:c3:7e:65:3c: 04:ab:75:8b:13:7b:4c:b1:20:36:22:29:6a:c0:43:da:b2:e7: ad:33:07:52:09:5c:f3:77:96:f2:b7:dc:d7:f7:34:ce:46:4a: 97:8f:e5:1b:9d:0d:9f:42:a2:f6:35:00:9a:e0:6b:4f:34:3d: 0f:88:0d:fe:41:ac:bc:00:b6:60:9b:52:7c:5f:46:a5:28:55: 9a:ed:24:4f:73:a8:f1:c1:8b:63:4e:b6:8c:59:b4:bd:4b:f4: 94:8e:8f:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbJ6caZXoFr1dnRHWhAyzPKSq7EEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcy RkI0RkU2RTAeFw0yNjA0MTgwNzU2MDJaFw0yNjA0MjExMTEyMDJaMDMxMTAvBgNV BAMTKDRCMkY5RjBERkY2OUM5MkI5NzdDOTZDNjA4OTAxNEYxQjE4QUQ0NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYLXM3Q6Op/kwICjj+I/mSjvo FTH8N6TBilu3eUxuVbFhGLrmQ1U8DdqLicRRzucfq6EQNJAGvoVbjBGNXHJBpfZL RtWqLWiJZt3JKkj6ZdlCK31CZ75AeI3PpHBNUpxzsygapojqtL4O2H42dxfV2kT0 8y102GdKOf00vDqhjTjXy5fRtiEB/PvWLhdpofVyBImMXewr0HAmCExDkqL1LrCv 9/3W1jTZ/HG160QkxlOO8/zXKzN7gg3tzpe9p+Nv+DuDHnygl3c5LIEkau0CPkaN 0o3B/Q07dZElfIrmQF84PYI5ErAfwmWgcR0hRsGHUyILwJqllWISpBRuYYcRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSy+fDf9pySuXfJbGCJAU8bGK1GwwHwYDVR0j BBgwFoAUww3nH3yuFsotjattAcpD1y+0/m4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2I1OWNlNC02NmEyLTRmNGQtYjNkNi05Mjk5NDg0YmE1NmIvMC9DMzBERTcxRjdD QUUxNkNBMkQ4REFCNkQwMUNBNDNENzJGQjRGRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcyRkI0 RkU2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNiNTljZTQtNjZhMi00ZjRkLWIz ZDYtOTI5OTQ4NGJhNTZiLzAvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQz RDcyRkI0RkU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICEPZTQxhYBv6bsKQUBYCBS3wzZ8POt4wHi KQDb5KERWIPl4DIC+SM/Pl63rxqgeYmTgrpQHhuJ/mKIt6ZxZikGIe81zxoSV7Le mpIT+1AKvRJHI2aJssfIGYTcfwT+brM9JNoRdJzNjz7eNRY3PVpGJCp6wxjN+8WK kqmRMxS1VjTJbTY/ni8VKEcVupe15mO74N6zj3+Uy5LGxh4vw35lPASrdYsTe0yx IDYiKWrAQ9qy560zB1IJXPN3lvK33Nf3NM5GSpeP5RudDZ9CovY1AJrga080PQ+I Df5BrLwAtmCbUnxfRqUoVZrtJE9zqPHBi2NOtoxZtL1L9JSOj+c= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:21 2026 by rpki-client