$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft File: 430E302040DE11D8C84431B3397113EC969694A0.mft (raw, json) Hash identifier: i1fVuSr/dYpIclmdfIz/yjSQgBq96cmIWQeL96lx+4k= Subject key identifier: 0E:13:3F:56:8E:EC:7B:A0:E7:F4:67:16:E4:3D:F8:9B:6C:32:BF:7D Authority key identifier: 43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 Certificate issuer: /CN=430E302040DE11D8C84431B3397113EC969694A0 Certificate serial: 3DDDA00F7820C1B61B4FB5CAC2EEE7ED79F10E26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft Manifest number: 04EF Signing time: Sat 28 Feb 2026 17:32:12 +0000 Manifest this update: Sat 28 Feb 2026 17:27:12 +0000 Manifest next update: Wed 04 Mar 2026 04:34:12 +0000 Files and hashes: 1: 430E302040DE11D8C84431B3397113EC969694A0.crl (hash: GfUSYB6W334hV+lbva7p4MJ343/r4VtRMKld92muIqw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 04:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:dd:a0:0f:78:20:c1:b6:1b:4f:b5:ca:c2:ee:e7:ed:79:f1:0e:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430E302040DE11D8C84431B3397113EC969694A0 Validity Not Before: Feb 28 17:27:12 2026 GMT Not After : Mar 4 04:34:12 2026 GMT Subject: CN=0E133F568EEC7BA0E7F46716E43DF89B6C32BF7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:47:e1:13:c0:d7:28:e8:a3:a2:d3:33:b0:ca: fc:35:5d:25:ff:36:37:b4:f2:48:e2:5a:ad:b3:c1: 02:c1:2e:fe:94:86:b2:36:0a:58:36:26:04:3b:d5: 9c:96:45:d8:f5:2e:86:a0:22:ce:3a:ce:1e:1d:64: ed:1c:1e:0c:9b:27:71:33:e4:ad:62:e2:c9:ef:1c: 40:11:38:d8:c5:38:13:52:e5:5c:ea:1a:56:21:f6: 3c:8c:91:6e:e3:84:1e:9a:bb:a2:41:af:b2:0a:1d: 1e:ce:a7:06:07:59:71:d9:55:47:9c:6b:36:1a:d1: b8:83:c8:95:2c:27:12:88:c2:70:e5:ca:1e:f9:79: 61:6f:48:25:26:63:17:9b:31:8b:9e:0f:e4:a4:0b: 25:b9:44:73:7b:f3:7b:96:c3:ae:62:3f:20:82:21: f4:36:0c:60:14:39:44:1a:6a:5e:b2:b0:a7:b7:46: 26:8e:97:46:a9:9a:04:19:12:fa:e4:b4:71:14:e9: 28:ee:5d:67:05:ae:cd:8f:8c:08:5f:06:c2:e9:83: b0:45:06:d6:b6:ed:b6:8b:ad:a0:93:ce:d7:9c:ee: 79:b1:26:f7:4a:ff:61:45:64:a2:ab:d1:f8:6a:b5: 70:96:70:85:e7:34:8a:7f:dd:8e:e0:00:c4:43:3c: db:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:13:3F:56:8E:EC:7B:A0:E7:F4:67:16:E4:3D:F8:9B:6C:32:BF:7D X509v3 Authority Key Identifier: keyid:43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:b3:6e:6e:96:4c:28:98:86:98:3a:3c:2c:70:39:02:b0:3f: b8:c9:ae:fa:74:14:11:a4:28:84:3e:42:c2:03:d5:d1:f1:ff: 09:07:47:79:06:f4:4c:0d:db:28:b1:f9:c1:2d:36:f1:67:31: f5:71:8c:48:bf:7c:20:bf:a4:bd:e4:b4:ab:f4:63:5a:1d:d0: a4:85:43:ea:3e:86:5b:d7:b0:cf:04:a8:91:6e:2f:e6:f3:7a: 54:3d:94:15:0e:a0:2b:27:8c:5a:81:a4:06:ac:a6:41:16:3f: cb:63:05:a5:70:96:f4:2a:b4:6e:f2:ea:57:2b:18:df:1c:a7: da:1c:fd:be:77:6e:dd:86:70:d3:2c:db:f7:56:8c:4d:54:f5: 5d:51:73:43:8c:49:6a:ac:f6:91:57:db:d9:59:3a:40:22:be: df:97:f6:85:f7:93:bc:f4:b8:13:0f:db:1d:90:a1:84:38:93: c9:f4:8b:10:c3:d8:54:c4:79:ce:59:3f:08:66:7f:54:b3:e3: 6f:f5:70:31:ab:4f:7a:ce:0d:20:4e:f7:c5:82:32:84:c4:49: 44:f1:96:c3:a0:7e:73:83:48:cc:8d:3b:5b:f6:39:0a:34:db: 4c:cc:40:b1:c1:7e:e1:d8:f4:e0:ac:cf:0e:64:1d:01:b9:36: 6f:0d:44:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPd2gD3ggwbYbT7XKwu7n7XnxDiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5 Njk2OTRBMDAeFw0yNjAyMjgxNzI3MTJaFw0yNjAzMDQwNDM0MTJaMDMxMTAvBgNV BAMTKDBFMTMzRjU2OEVFQzdCQTBFN0Y0NjcxNkU0M0RGODlCNkMzMkJGN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQR+ETwNco6KOi0zOwyvw1XSX/ Nje08kjiWq2zwQLBLv6UhrI2Clg2JgQ71ZyWRdj1LoagIs46zh4dZO0cHgybJ3Ez 5K1i4snvHEARONjFOBNS5VzqGlYh9jyMkW7jhB6au6JBr7IKHR7OpwYHWXHZVUec azYa0biDyJUsJxKIwnDlyh75eWFvSCUmYxebMYueD+SkCyW5RHN783uWw65iPyCC IfQ2DGAUOUQaal6ysKe3RiaOl0apmgQZEvrktHEU6SjuXWcFrs2PjAhfBsLpg7BF Bta27baLraCTztec7nmxJvdK/2FFZKKr0fhqtXCWcIXnNIp/3Y7gAMRDPNt7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDhM/Vo7se6Dn9GcW5D34m2wyv30wHwYDVR0j BBgwFoAUQw4wIEDeEdjIRDGzOXET7JaWlKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTllMDFiYS01OWM5LTQwNDctYWMwYi1lOWIyZmU2NTg1M2MvMC80MzBFMzAyMDQw REUxMUQ4Qzg0NDMxQjMzOTcxMTNFQzk2OTY5NEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5Njk2 OTRBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEz RUM5Njk2OTRBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWzbm6WTCiYhpg6PCxwOQKwP7jJrvp0FBGk KIQ+QsID1dHx/wkHR3kG9EwN2yix+cEtNvFnMfVxjEi/fCC/pL3ktKv0Y1od0KSF Q+o+hlvXsM8EqJFuL+bzelQ9lBUOoCsnjFqBpAaspkEWP8tjBaVwlvQqtG7y6lcr GN8cp9oc/b53bt2GcNMs2/dWjE1U9V1Rc0OMSWqs9pFX29lZOkAivt+X9oX3k7z0 uBMP2x2QoYQ4k8n0ixDD2FTEec5ZPwhmf1Sz42/1cDGrT3rODSBO98WCMoTESUTx lsOgfnODSMyNO1v2OQo020zMQLHBfuHY9OCszw5kHQG5Nm8NRJM= -----END CERTIFICATE-----Generated at Mon Mar 2 18:33:50 2026 by rpki-client