$ rpki-client -vvf repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft File: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft (raw, json) Hash identifier: G/V1kdwZKpzXJmI2KH07cXhfTdHICFy02Ybdg5/q0BE= Subject key identifier: 67:B0:00:F6:D5:67:03:33:21:C0:D5:6F:AA:1B:A8:93:3F:8F:E1:32 Authority key identifier: C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E Certificate issuer: /CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Certificate serial: 4D514264C8CB531C8B018EDDADDC1233BDACD34E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft Manifest number: 03EC Signing time: Fri 22 Aug 2025 20:40:56 +0000 Manifest this update: Fri 22 Aug 2025 20:35:56 +0000 Manifest next update: Tue 26 Aug 2025 00:52:56 +0000 Files and hashes: 1: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl (hash: /0H2xDp7eIzGMaEkmeK4GP2E4bSALpkubRYWXB6OLhg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 00:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:51:42:64:c8:cb:53:1c:8b:01:8e:dd:ad:dc:12:33:bd:ac:d3:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Validity Not Before: Aug 22 20:35:56 2025 GMT Not After : Aug 26 00:52:56 2025 GMT Subject: CN=67B000F6D567033321C0D56FAA1BA8933F8FE132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d1:e5:27:71:fa:0c:95:45:14:77:e9:7b:e2: ad:51:e6:c6:6f:b7:3a:e6:df:99:9d:c1:2f:b4:bc: 98:9a:1c:f5:11:ff:d5:3a:ff:cf:89:94:f8:ad:75: 0f:49:84:eb:f4:50:a0:c0:ff:d8:e5:5a:c9:28:33: 95:3b:19:d7:57:8f:c5:ad:c9:31:83:97:76:bc:8a: 1d:74:3f:e7:03:8d:e3:1f:43:30:22:d6:e5:5b:1f: a5:3c:ea:12:9f:52:e6:bf:26:71:07:52:53:18:ee: b5:0d:8c:da:bc:9f:be:6f:60:ca:ff:1c:d0:2a:80: 8e:57:a3:82:43:76:5e:cd:f2:85:fa:f1:f2:96:bf: 5b:14:96:4e:92:f3:ab:06:c3:91:ec:c3:d6:e8:ba: 27:48:a3:2d:ff:30:c6:ab:3a:ad:1e:f5:80:51:4b: 6d:e3:47:ea:f7:c3:78:84:74:f7:d0:14:f4:e9:b1: cc:44:98:a3:e4:0a:ea:06:d6:9b:01:e0:3e:de:10: 49:db:2c:10:13:35:50:12:b0:df:15:82:11:d3:2f: bb:d7:e5:24:e5:6c:d8:c2:61:8f:4c:85:a4:2d:5c: a9:fc:02:be:c9:f9:ae:eb:7b:51:53:6c:7a:02:1a: 6c:ef:96:ce:4b:2c:4d:d3:e4:49:53:15:ec:13:02: 44:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B0:00:F6:D5:67:03:33:21:C0:D5:6F:AA:1B:A8:93:3F:8F:E1:32 X509v3 Authority Key Identifier: keyid:C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c3:0e:9a:05:30:53:e1:ec:1b:f2:43:d5:50:64:31:fa:42: 8c:95:42:c6:b9:92:a5:dd:cd:7a:d4:92:03:c9:0d:fd:d8:66: 69:43:55:79:97:10:a8:b9:85:df:c7:34:b4:87:3d:08:4b:b2: 18:5e:3c:a0:f9:cf:51:e7:55:e1:ae:c0:72:f3:57:9e:19:80: 03:a4:cd:6f:81:22:30:97:d4:bc:ce:2a:c2:7e:70:95:4d:28: 1c:36:8e:75:b9:a0:d3:46:14:3f:f7:af:1a:ef:30:76:ef:6e: b3:73:5d:c8:88:2b:08:dd:8d:d4:0c:36:6e:c2:8f:81:99:be: 4e:8e:43:b3:84:45:bd:7a:7f:5c:f4:7a:b9:84:d9:45:ac:79: 81:b3:eb:38:aa:6d:19:48:d4:1e:32:ac:65:4a:01:f4:c5:dc: d6:96:28:bb:07:c7:b8:d3:d0:ab:e0:82:82:6c:fb:7e:0a:eb: 5c:58:11:39:b2:a7:8d:cf:e3:b6:1b:13:67:0f:6d:d8:f3:a7: 4b:7a:45:e6:ba:96:7d:c3:be:09:05:44:33:a8:1b:fd:9b:e4: 2e:75:80:b6:a3:10:77:70:61:a6:5a:e5:ca:f9:1f:82:48:1c: 43:ef:47:2b:92:32:40:d0:83:a0:30:45:a2:5b:8d:3a:e6:76: 75:e2:42:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTVFCZMjLUxyLAY7drdwSM72s004wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcy RkI0RkU2RTAeFw0yNTA4MjIyMDM1NTZaFw0yNTA4MjYwMDUyNTZaMDMxMTAvBgNV BAMTKDY3QjAwMEY2RDU2NzAzMzMyMUMwRDU2RkFBMUJBODkzM0Y4RkUxMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC40eUncfoMlUUUd+l74q1R5sZv tzrm35mdwS+0vJiaHPUR/9U6/8+JlPitdQ9JhOv0UKDA/9jlWskoM5U7GddXj8Wt yTGDl3a8ih10P+cDjeMfQzAi1uVbH6U86hKfUua/JnEHUlMY7rUNjNq8n75vYMr/ HNAqgI5Xo4JDdl7N8oX68fKWv1sUlk6S86sGw5Hsw9bouidIoy3/MMarOq0e9YBR S23jR+r3w3iEdPfQFPTpscxEmKPkCuoG1psB4D7eEEnbLBATNVASsN8VghHTL7vX 5STlbNjCYY9MhaQtXKn8Ar7J+a7re1FTbHoCGmzvls5LLE3T5ElTFewTAkS5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ7AA9tVnAzMhwNVvqhuokz+P4TIwHwYDVR0j BBgwFoAUww3nH3yuFsotjattAcpD1y+0/m4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2I1OWNlNC02NmEyLTRmNGQtYjNkNi05Mjk5NDg0YmE1NmIvMC9DMzBERTcxRjdD QUUxNkNBMkQ4REFCNkQwMUNBNDNENzJGQjRGRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcyRkI0 RkU2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNiNTljZTQtNjZhMi00ZjRkLWIz ZDYtOTI5OTQ4NGJhNTZiLzAvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQz RDcyRkI0RkU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPDDpoFMFPh7BvyQ9VQZDH6QoyVQsa5kqXd zXrUkgPJDf3YZmlDVXmXEKi5hd/HNLSHPQhLshhePKD5z1HnVeGuwHLzV54ZgAOk zW+BIjCX1LzOKsJ+cJVNKBw2jnW5oNNGFD/3rxrvMHbvbrNzXciIKwjdjdQMNm7C j4GZvk6OQ7OERb16f1z0ermE2UWseYGz6ziqbRlI1B4yrGVKAfTF3NaWKLsHx7jT 0KvggoJs+34K61xYETmyp43P47YbE2cPbdjzp0t6Rea6ln3DvgkFRDOoG/2b5C51 gLajEHdwYaZa5cr5H4JIHEPvRyuSMkDQg6AwRaJbjTrmdnXiQt0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:33:03 2025 by rpki-client