$ rpki-client -vvf repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft File: 30CE8572EA9DEDA805151BBD165E699D1191FED0.mft (raw, json) Hash identifier: dr9OW8+D4Wqk8Oco5v2KZ9FnZAUTkazIm6xMVIo3Kio= Subject key identifier: DE:06:0E:02:27:F5:9C:CF:2C:DB:A8:AC:88:CD:46:E0:35:4E:6C:87 Authority key identifier: 30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0 Certificate issuer: /CN=30CE8572EA9DEDA805151BBD165E699D1191FED0 Certificate serial: 24CAE1FD69FC24C49C9428E0066185CE91EA0BAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft Manifest number: 01CD Signing time: Sat 28 Feb 2026 06:21:49 +0000 Manifest this update: Sat 28 Feb 2026 06:16:49 +0000 Manifest next update: Tue 03 Mar 2026 12:34:49 +0000 Files and hashes: 1: 3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa (hash: zlk09GRQGlOz6ikUOZ0UX9sa8LEm6wh0kPli78xy+lM=) 2: 30CE8572EA9DEDA805151BBD165E699D1191FED0.crl (hash: Jztdv3fjmqoRbHR/3jLF4hSvpWLR6EYAWOHbaOS6xbA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 12:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ca:e1:fd:69:fc:24:c4:9c:94:28:e0:06:61:85:ce:91:ea:0b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30CE8572EA9DEDA805151BBD165E699D1191FED0 Validity Not Before: Feb 28 06:16:49 2026 GMT Not After : Mar 3 12:34:49 2026 GMT Subject: CN=DE060E0227F59CCF2CDBA8AC88CD46E0354E6C87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:46:d5:dc:d9:72:52:34:9a:52:b2:34:6c:18: d4:16:77:e4:e5:a6:02:26:a8:49:e6:59:45:11:80: f7:44:65:88:04:b1:fc:41:bb:f6:b1:d2:1b:a1:8d: 8e:7b:5c:e4:5d:31:7f:e4:54:fd:4e:ea:34:c3:13: 40:c5:a2:96:13:0b:7b:e1:55:c7:d4:85:74:d6:8f: e8:19:ae:b3:71:81:46:32:92:a4:35:9f:3f:38:50: f9:47:b3:52:c7:f2:e7:9f:26:1c:80:ef:db:ad:8e: 28:10:e8:64:53:04:83:3b:5c:25:6f:83:93:f0:e3: 82:96:dd:22:d1:b4:c4:c1:70:07:9c:f8:e4:a9:7c: 80:0f:56:7e:a6:b9:c1:79:42:d8:b7:8f:70:64:69: 54:7d:5b:59:2e:e4:b7:a1:be:d3:88:ac:83:06:d8: 00:a1:01:42:f2:52:04:c8:d5:a3:4d:02:19:57:88: f5:27:ee:50:eb:77:76:a6:2a:b1:98:cc:9f:e0:f4: 10:91:f0:d9:1d:10:28:6b:e6:7a:fc:70:39:26:7c: 01:c4:7d:3c:32:33:a7:70:18:e9:d3:ca:f9:bf:82: 89:ee:33:dc:7d:55:ae:05:53:3a:d4:c4:04:79:cb: 61:02:78:28:8c:09:d1:41:e5:af:a4:64:45:23:fd: d7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:06:0E:02:27:F5:9C:CF:2C:DB:A8:AC:88:CD:46:E0:35:4E:6C:87 X509v3 Authority Key Identifier: keyid:30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:d7:2d:b3:d5:f1:ba:c2:b3:ff:d0:6f:6a:e7:f0:f2:b7:4c: fe:72:93:4c:04:8f:1c:f9:73:71:33:a2:d7:67:7d:20:ff:32: 34:92:33:f6:8a:2e:4d:3c:e1:81:27:81:36:37:67:8a:f9:7b: 64:52:76:b5:6a:92:6b:85:cb:fe:5d:76:51:67:8b:a5:1d:f0: 51:02:67:8f:fd:cb:91:8c:60:50:32:fa:39:84:ec:41:ba:a8: 0e:e2:56:67:96:b0:d8:cb:55:9e:5b:87:4f:a7:5b:c5:2f:56: 2b:4c:99:d0:d8:28:4a:0c:d7:e5:0e:f4:a4:cb:66:a6:a3:79: 0b:f4:a5:14:6c:9d:a0:56:81:85:fb:8b:ae:51:68:c7:dc:0d: c4:0b:07:99:06:df:cc:a1:1c:eb:ee:76:14:03:ee:61:62:6c: 9c:0e:b6:40:27:58:56:5f:8e:62:ff:20:6e:2c:c0:0a:63:f4: 53:b7:9f:99:c8:e8:25:1a:6b:da:94:ed:1f:d0:20:d0:57:1d: 6a:c0:30:ee:6c:58:48:d9:80:38:1a:04:4c:43:72:97:4f:c7: f5:de:77:7a:0b:f7:a5:62:87:4e:36:38:78:05:dd:f7:77:a3: f1:46:fa:7a:df:c8:60:e4:e2:af:87:bd:aa:3f:2d:68:49:56: 8f:be:03:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJMrh/Wn8JMSclCjgBmGFzpHqC64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5OUQx MTkxRkVEMDAeFw0yNjAyMjgwNjE2NDlaFw0yNjAzMDMxMjM0NDlaMDMxMTAvBgNV BAMTKERFMDYwRTAyMjdGNTlDQ0YyQ0RCQThBQzg4Q0Q0NkUwMzU0RTZDODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnRtXc2XJSNJpSsjRsGNQWd+Tl pgImqEnmWUURgPdEZYgEsfxBu/ax0huhjY57XORdMX/kVP1O6jTDE0DFopYTC3vh VcfUhXTWj+gZrrNxgUYykqQ1nz84UPlHs1LH8uefJhyA79utjigQ6GRTBIM7XCVv g5Pw44KW3SLRtMTBcAec+OSpfIAPVn6mucF5Qti3j3BkaVR9W1ku5LehvtOIrIMG 2AChAULyUgTI1aNNAhlXiPUn7lDrd3amKrGYzJ/g9BCR8NkdEChr5nr8cDkmfAHE fTwyM6dwGOnTyvm/gonuM9x9Va4FUzrUxAR5y2ECeCiMCdFB5a+kZEUj/dfFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3gYOAif1nM8s26isiM1G4DVObIcwHwYDVR0j BBgwFoAUMM6Fcuqd7agFFRu9Fl5pnRGR/tAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDM4MDJlMi0wM2FmLTRkZDAtOGRjZS01NGMyOGE3MjU2M2QvMC8zMENFODU3MkVB OURFREE4MDUxNTFCQkQxNjVFNjk5RDExOTFGRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5OUQxMTkx RkVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAzODAyZTItMDNhZi00ZGQwLThk Y2UtNTRjMjhhNzI1NjNkLzAvMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5 OUQxMTkxRkVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjXLbPV8brCs//Qb2rn8PK3TP5yk0wEjxz5 c3EzotdnfSD/MjSSM/aKLk084YEngTY3Z4r5e2RSdrVqkmuFy/5ddlFni6Ud8FEC Z4/9y5GMYFAy+jmE7EG6qA7iVmeWsNjLVZ5bh0+nW8UvVitMmdDYKEoM1+UO9KTL ZqajeQv0pRRsnaBWgYX7i65RaMfcDcQLB5kG38yhHOvudhQD7mFibJwOtkAnWFZf jmL/IG4swApj9FO3n5nI6CUaa9qU7R/QINBXHWrAMO5sWEjZgDgaBExDcpdPx/Xe d3oL96Vih042OHgF3fd3o/FG+nrfyGDk4q+Hvao/LWhJVo++Ayk= -----END CERTIFICATE-----Generated at Mon Mar 2 06:51:50 2026 by rpki-client