$ rpki-client -vvf repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft File: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft (raw, json) Hash identifier: 5stKqZTYWmyFtxbWsnTBPU/M7iPFy1o3v8bi1i7Q8ag= Subject key identifier: F5:D4:AC:4E:A6:E4:16:DF:47:66:71:44:4C:7A:94:37:96:DF:78:88 Authority key identifier: 30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 Certificate issuer: /CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Certificate serial: 2927D21B6DD7DF87522FEECD1A67131444693836 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft Manifest number: 023A Signing time: Thu 16 Apr 2026 07:31:18 +0000 Manifest this update: Thu 16 Apr 2026 07:26:18 +0000 Manifest next update: Sun 19 Apr 2026 19:12:18 +0000 Files and hashes: 1: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (hash: xce0AmVhdIuoA0s5G07BTYqxfWM/i2bbCDllzfV1P80=) 2: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (hash: Udg26cCHQ+Qftm36Kch+i7dbSWtv7odm32FXa+73LYY=) 3: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl (hash: BDhGjC06z337T6KlEGW/TD3o5wJZQTAllug1djS23tw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 19:12:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:27:d2:1b:6d:d7:df:87:52:2f:ee:cd:1a:67:13:14:44:69:38:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Validity Not Before: Apr 16 07:26:18 2026 GMT Not After : Apr 19 19:12:18 2026 GMT Subject: CN=F5D4AC4EA6E416DF476671444C7A943796DF7888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4b:46:fd:c3:07:5f:d0:c3:a2:8c:09:ae:8f: 3d:d6:ca:24:af:69:72:90:92:a8:bd:f0:1f:94:02: 52:63:dd:78:7d:80:8d:cd:7e:b8:43:7c:43:66:f5: 04:87:b9:08:e9:d6:24:b4:90:96:30:6a:24:a6:0e: 8e:7e:1e:d7:81:96:b5:0a:9d:70:fb:46:89:2d:e8: b3:ec:1c:3b:d9:31:9c:12:5c:8e:0b:50:36:9e:6c: 2e:dd:9c:f2:e3:2d:6e:f8:46:34:3e:b2:b9:c5:4f: d4:f6:d2:f4:0f:e2:11:7b:86:19:d9:69:64:58:12: 78:98:42:2b:ef:98:78:f1:fe:e8:ea:7b:d0:5a:fa: 79:c3:49:1d:0a:3b:cd:66:0c:24:5e:7b:a4:77:65: 64:39:99:92:df:0a:80:d5:c5:a1:47:a2:fb:96:df: 5c:a0:9e:67:2d:20:13:9e:2c:b1:62:97:0c:77:b1: 56:e1:4e:fd:c6:5b:8d:0b:06:6d:c2:fb:bc:eb:1a: ef:ec:51:6a:06:b7:27:73:87:dd:27:36:7c:08:18: 3c:96:54:63:71:b6:e4:76:af:3d:90:08:b4:16:4b: 35:f3:87:08:6c:29:af:92:df:89:f0:7b:3a:d1:e5: e9:bb:12:8c:f7:47:86:8f:f2:a9:8e:39:19:be:9f: 1a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D4:AC:4E:A6:E4:16:DF:47:66:71:44:4C:7A:94:37:96:DF:78:88 X509v3 Authority Key Identifier: keyid:30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:40:3e:3d:f7:cb:9b:76:26:9a:a3:63:68:cc:ab:c0:ac:66: 6a:9d:47:e4:5f:c7:b8:10:48:5c:0d:7c:c5:e9:2b:e1:c9:a9: 22:c0:d1:f4:36:66:82:5c:77:d8:0e:1c:13:52:12:77:ac:f4: a5:93:af:f1:ec:7f:ce:85:65:ba:2a:d2:64:e4:e8:b3:44:0f: 5c:29:7d:04:dc:b1:13:34:0c:39:32:fe:c2:0a:68:6e:1b:43: 82:2f:59:6f:79:eb:d0:e5:1b:65:4f:7c:a3:77:5d:7d:0b:e3: b9:05:dd:fb:e5:67:30:6a:4f:38:48:4d:c9:ab:c8:78:75:31: 0a:76:fa:3b:85:83:9f:47:70:b0:41:11:8c:f9:b7:54:ba:ce: 2f:de:b7:e2:9e:32:9a:c0:7e:44:dd:49:57:d7:3f:ba:eb:0d: 61:14:e3:03:f9:bf:d6:f7:aa:2d:a9:f1:b2:29:84:e4:36:6d: 17:bc:ad:bf:39:ea:31:86:05:50:1b:15:07:a3:7c:d7:ec:f0: fa:f7:c8:e9:a7:63:d0:8e:f0:e5:f8:ef:48:fd:37:2b:1d:16: fc:fa:bf:6c:6a:38:35:94:90:44:b9:b4:ca:3f:a6:52:76:e9: 16:4f:4e:22:7d:ec:0e:75:e6:32:d4:c4:b5:9a:87:f3:a5:08: 85:55:fb:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKSfSG23X34dSL+7NGmcTFERpODYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3 RTkxMkQ0NTAeFw0yNjA0MTYwNzI2MThaFw0yNjA0MTkxOTEyMThaMDMxMTAvBgNV BAMTKEY1RDRBQzRFQTZFNDE2REY0NzY2NzE0NDRDN0E5NDM3OTZERjc4ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZS0b9wwdf0MOijAmujz3WyiSv aXKQkqi98B+UAlJj3Xh9gI3NfrhDfENm9QSHuQjp1iS0kJYwaiSmDo5+HteBlrUK nXD7Rokt6LPsHDvZMZwSXI4LUDaebC7dnPLjLW74RjQ+srnFT9T20vQP4hF7hhnZ aWRYEniYQivvmHjx/ujqe9Ba+nnDSR0KO81mDCRee6R3ZWQ5mZLfCoDVxaFHovuW 31ygnmctIBOeLLFilwx3sVbhTv3GW40LBm3C+7zrGu/sUWoGtydzh90nNnwIGDyW VGNxtuR2rz2QCLQWSzXzhwhsKa+S34nwezrR5em7Eoz3R4aP8qmOORm+nxptAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9dSsTqbkFt9HZnFETHqUN5bfeIgwHwYDVR0j BBgwFoAUMOK0YXuLnPxPxXscWk10/H6RLUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjlmODkwMi0xYTA2LTQ1YTgtYTk5OC03MmU0NmFhYWU4ZmMvMC8zMEUyQjQ2MTdC OEI5Q0ZDNEZDNTdCMUM1QTRENzRGQzdFOTEyRDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3RTkx MkQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI5Zjg5MDItMWEwNi00NWE4LWE5 OTgtNzJlNDZhYWFlOGZjLzAvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0 RkM3RTkxMkQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRAPj33y5t2JpqjY2jMq8CsZmqdR+Rfx7gQ SFwNfMXpK+HJqSLA0fQ2ZoJcd9gOHBNSEnes9KWTr/Hsf86FZboq0mTk6LNED1wp fQTcsRM0DDky/sIKaG4bQ4IvWW9569DlG2VPfKN3XX0L47kF3fvlZzBqTzhITcmr yHh1MQp2+juFg59HcLBBEYz5t1S6zi/et+KeMprAfkTdSVfXP7rrDWEU4wP5v9b3 qi2p8bIphOQ2bRe8rb856jGGBVAbFQejfNfs8Pr3yOmnY9CO8OX470j9NysdFvz6 v2xqODWUkES5tMo/plJ26RZPTiJ97A515jLUxLWah/OlCIVV+/0= -----END CERTIFICATE-----Generated at Fri Apr 17 19:07:39 2026 by rpki-client