$ rpki-client -vvf repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft File: 30D21A97E1EED902F151C3022374D979F0A4A7EF.mft (raw, json) Hash identifier: P94V2mqcO9DzaCmgV7/hLoe0grNcPJRrCF/z+Xr4Afg= Subject key identifier: CC:74:E7:2F:F3:34:26:9B:DF:72:6A:91:50:D8:B5:D0:93:A1:08:64 Authority key identifier: 30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF Certificate issuer: /CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Certificate serial: 56CBE2BE3ECD1538158D4563163D5ABFA81A2702 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft Manifest number: 0182 Signing time: Sat 18 Apr 2026 15:31:59 +0000 Manifest this update: Sat 18 Apr 2026 15:26:59 +0000 Manifest next update: Tue 21 Apr 2026 18:41:59 +0000 Files and hashes: 1: 30D21A97E1EED902F151C3022374D979F0A4A7EF.crl (hash: Rz4iCYwNjqUR4rVksxWHFvmmDf2GYVy28pdyjr0tubk=) 2: 34352e3234392e3232342e302f32342d3234203d3e20313532303237.roa (hash: Lbof0Eu5fIUUt+ZOnyAgcQnzposa001pRsoMaWB/hPw=) 3: 34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa (hash: dHytxOoYwuE6ev+ouL2C7HNOfk2qBxU0rZwmruiXqlc=) 4: 34352e3234392e3232352e302f32342d3234203d3e20313532303237.roa (hash: C52489RC5C7/6xA/AFGhqaTac2q7UpLljZUsc+WdOYU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 18:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:cb:e2:be:3e:cd:15:38:15:8d:45:63:16:3d:5a:bf:a8:1a:27:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Validity Not Before: Apr 18 15:26:59 2026 GMT Not After : Apr 21 18:41:59 2026 GMT Subject: CN=CC74E72FF334269BDF726A9150D8B5D093A10864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c6:cd:91:36:7b:6c:c5:23:7f:af:e3:e3:7a: 6d:13:73:ae:1a:1a:16:f0:67:b2:85:1b:0e:60:d7: 26:85:e7:3e:74:0a:a4:c2:6f:85:92:29:88:14:f2: ba:58:39:fa:e3:11:3d:33:17:c7:ef:5b:a5:6c:55: 15:85:8c:7b:d5:aa:24:c5:88:cc:f4:6c:d6:b3:7e: 21:d3:9c:00:ea:e1:98:b2:a8:ea:da:88:56:5f:7a: 79:75:02:e8:30:4a:a4:6e:4b:ab:3c:43:5b:ca:c3: d4:6d:05:b9:d8:d7:d9:53:ac:9a:87:c8:e8:86:3d: 16:81:2e:77:b5:00:42:2e:73:e2:29:67:ad:4b:c2: c7:65:03:6b:56:d4:97:6c:b0:1d:a8:1a:f4:83:96: 4b:d7:66:94:21:b2:e5:f9:c0:75:98:dd:53:92:4a: a6:e8:e2:ee:2c:56:4a:84:1f:c8:30:05:b8:28:ec: a8:26:30:6f:47:57:9a:c7:d3:f5:eb:fd:13:d3:e1: 44:49:bd:1a:ef:b7:05:5e:56:24:4f:13:b0:a2:7a: b6:34:87:93:8b:eb:5d:c1:28:5c:c7:cd:d9:c0:97: 24:a4:3b:6a:bf:8b:62:00:95:49:ef:d6:d6:67:82: 37:9f:4e:fd:fe:bb:91:82:c0:40:e2:b2:ae:0c:a6: 92:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:74:E7:2F:F3:34:26:9B:DF:72:6A:91:50:D8:B5:D0:93:A1:08:64 X509v3 Authority Key Identifier: keyid:30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:7f:e9:0b:4d:1a:74:6f:d8:7a:ed:54:f9:9e:80:94:dc:36: af:f1:16:52:1a:16:bf:51:27:dd:44:23:8f:ac:51:b9:43:03: c7:a1:8c:cd:64:6d:bc:af:2d:f1:e7:dc:6b:07:68:de:c9:69: c8:ee:1b:25:2e:0c:86:60:cd:1a:28:bf:2b:17:9f:73:27:27: 51:dd:7a:8b:52:58:ae:07:e8:3e:95:b8:bf:7c:60:56:a8:49: 25:0e:80:cf:85:f3:2c:9f:5a:0d:12:b0:02:77:fd:e4:3f:12: d8:c5:bf:fd:7e:bc:73:6b:eb:84:d4:e6:6a:3b:ed:54:5b:33: e1:45:49:f8:9c:e1:cc:12:28:24:84:6b:09:f6:27:e2:e6:47: ae:90:1f:37:86:20:0c:79:4a:8b:d8:b8:4b:65:6e:9c:d8:2a: 2d:60:b8:50:5c:9f:dd:59:21:08:d4:5b:ba:3b:8a:e2:f0:68: 31:77:0b:b7:15:e3:1e:a1:67:35:e2:b0:77:fb:77:dc:d0:40: 64:e5:46:52:9c:09:95:ce:7d:b3:57:c9:eb:53:85:c7:b0:68: 3f:df:6b:bc:0a:f5:26:97:f4:c4:d4:02:00:e5:5d:fd:3f:e3: ec:33:ad:a4:b9:89:ab:7b:e5:e4:dd:1d:c2:69:d5:b5:42:ec: 0d:28:ec:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVsvivj7NFTgVjUVjFj1av6gaJwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlG MEE0QTdFRjAeFw0yNjA0MTgxNTI2NTlaFw0yNjA0MjExODQxNTlaMDMxMTAvBgNV BAMTKENDNzRFNzJGRjMzNDI2OUJERjcyNkE5MTUwRDhCNUQwOTNBMTA4NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/xs2RNntsxSN/r+Pjem0Tc64a GhbwZ7KFGw5g1yaF5z50CqTCb4WSKYgU8rpYOfrjET0zF8fvW6VsVRWFjHvVqiTF iMz0bNazfiHTnADq4ZiyqOraiFZfenl1AugwSqRuS6s8Q1vKw9RtBbnY19lTrJqH yOiGPRaBLne1AEIuc+IpZ61LwsdlA2tW1JdssB2oGvSDlkvXZpQhsuX5wHWY3VOS Sqbo4u4sVkqEH8gwBbgo7KgmMG9HV5rH0/Xr/RPT4URJvRrvtwVeViRPE7CierY0 h5OL613BKFzHzdnAlySkO2q/i2IAlUnv1tZngjefTv3+u5GCwEDisq4MppJrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzHTnL/M0JpvfcmqRUNi10JOhCGQwHwYDVR0j BBgwFoAUMNIal+Hu2QLxUcMCI3TZefCkp+8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWI4OTlhYy00ODcwLTRlMjgtOGU0ZS0yYzIzNzUyYTRhNjAvMC8zMEQyMUE5N0Ux RUVEOTAyRjE1MUMzMDIyMzc0RDk3OUYwQTRBN0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlGMEE0 QTdFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDliODk5YWMtNDg3MC00ZTI4LThl NGUtMmMyMzc1MmE0YTYwLzAvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5 NzlGMEE0QTdFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMB/6QtNGnRv2HrtVPmegJTcNq/xFlIaFr9R J91EI4+sUblDA8ehjM1kbbyvLfHn3GsHaN7JacjuGyUuDIZgzRoovysXn3MnJ1Hd eotSWK4H6D6VuL98YFaoSSUOgM+F8yyfWg0SsAJ3/eQ/EtjFv/1+vHNr64TU5mo7 7VRbM+FFSfic4cwSKCSEawn2J+LmR66QHzeGIAx5SovYuEtlbpzYKi1guFBcn91Z IQjUW7o7iuLwaDF3C7cV4x6hZzXisHf7d9zQQGTlRlKcCZXOfbNXyetThcewaD/f a7wK9SaX9MTUAgDlXf0/4+wzraS5iat75eTdHcJp1bVC7A0o7GM= -----END CERTIFICATE-----Generated at Sun Apr 19 13:00:42 2026 by rpki-client