$ rpki-client -vvf repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft File: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft (raw, json) Hash identifier: AqyPs/KbRVF42WTiuCg48qxZUaiudFQZpBCQPXiHRug= Subject key identifier: 27:48:C2:AC:C6:53:69:1D:37:26:E1:BF:C3:1F:1C:B9:39:F9:40:0F Authority key identifier: C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 Certificate issuer: /CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Certificate serial: 4672B9880AEF6BD099142BCE1FE0692648B04BF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft Manifest number: 03B6 Signing time: Mon 20 Apr 2026 21:12:32 +0000 Manifest this update: Mon 20 Apr 2026 21:07:32 +0000 Manifest next update: Fri 24 Apr 2026 08:49:32 +0000 Files and hashes: 1: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl (hash: PyuNbI0kler2QSxN/10MO8h6/FbEvSGRf2DdhWGgkLw=) 2: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (hash: MTg1tuijanT/fwfxdf3hwp8GNR+2Cd4sBdhUtmiigzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:72:b9:88:0a:ef:6b:d0:99:14:2b:ce:1f:e0:69:26:48:b0:4b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Validity Not Before: Apr 20 21:07:32 2026 GMT Not After : Apr 24 08:49:32 2026 GMT Subject: CN=2748C2ACC653691D3726E1BFC31F1CB939F9400F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:50:32:1f:9d:0d:c2:20:66:4a:fe:1f:35:0a: c3:0c:a1:b7:1d:a2:38:e3:cb:25:77:84:08:d4:3e: b0:0c:ed:9d:c3:e2:61:8d:08:59:14:00:94:8d:68: 8b:ca:71:4a:83:da:ca:01:e6:5e:64:ad:8b:ab:06: 20:45:37:1f:dc:eb:43:ad:90:f4:09:c3:20:83:e3: 31:e5:ea:66:43:cc:f9:d3:94:e2:68:1c:cb:d6:b8: 2f:b1:f7:81:21:12:59:50:6c:09:56:0e:e6:99:ea: ca:c8:36:c9:85:c1:0d:84:ea:80:54:87:4a:1e:c8: 4a:f6:e2:eb:d3:6c:dd:09:c1:3b:df:de:f9:5f:d2: 21:b4:da:53:84:66:a7:bf:a8:95:ea:ca:42:be:0a: 20:02:d0:89:02:d8:4e:71:d5:9c:bf:fa:1c:2c:d1: d0:dc:0d:ad:83:77:5c:99:fb:59:a0:e5:9d:27:d7: 8a:b0:fe:56:a5:34:6d:6a:0f:c8:73:c4:b6:9a:57: 82:4d:7e:aa:af:3a:f0:67:0e:e5:0a:99:a4:9b:20: 28:60:00:d9:d5:3b:42:37:92:d9:98:12:05:95:a6: b4:f6:6b:b9:ee:4c:39:41:a0:77:85:3d:6e:d2:c4: 8e:ac:a0:a6:9d:e5:03:77:90:05:bd:2c:a5:7c:69: 99:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:48:C2:AC:C6:53:69:1D:37:26:E1:BF:C3:1F:1C:B9:39:F9:40:0F X509v3 Authority Key Identifier: keyid:C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:9c:ec:52:a7:60:d2:30:28:24:26:ae:34:3b:92:ed:64:56: 6f:34:a9:b8:06:bd:c8:71:cf:37:e9:6a:91:71:69:80:65:84: 9b:39:7d:7f:79:c8:e0:11:41:ed:8c:44:06:e7:4e:19:ad:1a: 91:f9:a0:7e:c6:27:06:f1:45:b2:70:87:04:35:6f:88:f8:ec: 49:12:1a:56:a8:cd:5b:a0:5a:d9:e5:19:ed:ad:97:96:ef:b2: ec:ff:d9:e9:9e:41:32:8d:97:a1:f5:43:d1:a5:45:9e:15:95: 23:eb:06:ce:b1:48:81:3f:df:f6:8b:92:3b:7b:5d:d1:70:84: e2:b1:59:3d:44:86:ba:33:c7:41:44:b3:e0:07:3b:d0:6d:45: a2:45:e5:aa:4e:36:c2:73:a6:31:26:1f:4a:08:d6:19:c6:a0: 1c:4b:ae:99:72:87:21:44:6c:c2:1f:82:a4:78:00:0f:ce:4b: 0e:4a:bf:6c:36:bf:e2:85:f4:b4:6a:8e:da:13:95:94:a2:9f: ce:77:f3:51:fe:81:c5:d0:38:6a:fa:d0:e3:3a:fc:3e:01:e4: 26:70:88:78:42:21:85:cf:06:d0:4e:05:ca:48:11:08:7f:22: c7:86:0d:69:49:e7:f9:02:80:fa:8e:5f:ee:83:58:a8:1f:3c: 34:5f:b0:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURnK5iArva9CZFCvOH+BpJkiwS/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzky Mjg2MzFGNzAeFw0yNjA0MjAyMTA3MzJaFw0yNjA0MjQwODQ5MzJaMDMxMTAvBgNV BAMTKDI3NDhDMkFDQzY1MzY5MUQzNzI2RTFCRkMzMUYxQ0I5MzlGOTQwMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdUDIfnQ3CIGZK/h81CsMMobcd ojjjyyV3hAjUPrAM7Z3D4mGNCFkUAJSNaIvKcUqD2soB5l5krYurBiBFNx/c60Ot kPQJwyCD4zHl6mZDzPnTlOJoHMvWuC+x94EhEllQbAlWDuaZ6srINsmFwQ2E6oBU h0oeyEr24uvTbN0JwTvf3vlf0iG02lOEZqe/qJXqykK+CiAC0IkC2E5x1Zy/+hws 0dDcDa2Dd1yZ+1mg5Z0n14qw/lalNG1qD8hzxLaaV4JNfqqvOvBnDuUKmaSbIChg ANnVO0I3ktmYEgWVprT2a7nuTDlBoHeFPW7SxI6soKad5QN3kAW9LKV8aZnvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ0jCrMZTaR03JuG/wx8cuTn5QA8wHwYDVR0j BBgwFoAUwwo3cezl92LW+m2HKPTAySKGMfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTFmNjI5OS1iMTU1LTQyMTItYjVlMS05ZjU3MDNjZDA5ODkvMC9DMzBBMzc3MUVD RTVGNzYyRDZGQTZEODcyOEY0QzBDOTIyODYzMUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzkyMjg2 MzFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ExZjYyOTktYjE1NS00MjEyLWI1 ZTEtOWY1NzAzY2QwOTg5LzAvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMw QzkyMjg2MzFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKac7FKnYNIwKCQmrjQ7ku1kVm80qbgGvchx zzfpapFxaYBlhJs5fX95yOARQe2MRAbnThmtGpH5oH7GJwbxRbJwhwQ1b4j47EkS GlaozVugWtnlGe2tl5bvsuz/2emeQTKNl6H1Q9GlRZ4VlSPrBs6xSIE/3/aLkjt7 XdFwhOKxWT1Ehrozx0FEs+AHO9BtRaJF5apONsJzpjEmH0oI1hnGoBxLrplyhyFE bMIfgqR4AA/OSw5Kv2w2v+KF9LRqjtoTlZSin85381H+gcXQOGr60OM6/D4B5CZw iHhCIYXPBtBOBcpIEQh/IseGDWlJ5/kCgPqOX+6DWKgfPDRfsOQ= -----END CERTIFICATE-----Generated at Wed Apr 22 07:28:25 2026 by rpki-client