$ rpki-client -vvf repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft File: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft (raw, json) Hash identifier: nZUSHlOoYr+wGliEw3q8OzgT1fWtcecVqBfK2d0jAWc= Subject key identifier: 65:C9:0E:14:13:91:8D:24:DD:AC:E3:79:71:4E:83:A4:4B:D4:64:F1 Authority key identifier: C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E Certificate issuer: /CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Certificate serial: 53CDA411885C7D7BE45098FB24B07C6B9F945B36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft Manifest number: 03D4 Signing time: Sat 28 Jun 2025 11:30:53 +0000 Manifest this update: Sat 28 Jun 2025 11:25:53 +0000 Manifest next update: Tue 01 Jul 2025 19:45:53 +0000 Files and hashes: 1: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl (hash: wrU6YlaaakhNK951U1INz4b0e7/7xYd55tZyu3LzT6c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 19:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:cd:a4:11:88:5c:7d:7b:e4:50:98:fb:24:b0:7c:6b:9f:94:5b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Validity Not Before: Jun 28 11:25:53 2025 GMT Not After : Jul 1 19:45:53 2025 GMT Subject: CN=65C90E1413918D24DDACE379714E83A44BD464F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:fd:ce:63:57:38:36:75:03:1b:9f:54:c8: f4:23:bf:e8:1a:fc:1b:7d:b0:76:68:15:db:31:62: c3:e7:f5:d0:7f:28:38:85:cc:7a:39:28:a7:27:03: 8a:43:2c:20:4b:52:47:9e:20:23:47:d6:44:75:0f: ca:a3:a1:eb:84:02:8c:67:cd:72:f6:d7:ad:a6:54: d0:d8:15:d1:ad:3e:e1:ba:58:e3:95:cb:10:f3:03: 6e:1b:85:8c:3f:fa:38:c8:60:39:d5:1f:e5:fc:86: 0d:91:cd:15:66:3f:87:d5:fe:2a:78:16:d3:be:5a: da:0b:a7:fa:0a:3d:d0:de:75:81:95:76:f9:33:0b: dc:ae:05:3d:ac:68:5d:8d:13:2f:8d:a4:c1:05:66: 92:08:b1:03:18:ac:2a:4f:a7:9c:8c:9a:7d:40:ae: 12:83:70:7f:41:1c:65:7a:9a:f9:80:de:4b:bd:7b: 3e:7e:7d:ce:39:0d:8b:19:0a:09:43:6d:8f:1a:d1: 66:19:fd:3c:d2:50:1c:c5:b7:f2:3f:8b:15:ab:51: 56:7e:59:2d:d8:04:74:4b:e5:a0:06:ff:da:13:9b: f8:d1:d1:d3:e7:13:61:5e:52:31:2f:36:49:e0:82: 22:a1:04:80:9a:a2:16:2f:d2:0b:0e:9e:9e:c1:7f: 84:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C9:0E:14:13:91:8D:24:DD:AC:E3:79:71:4E:83:A4:4B:D4:64:F1 X509v3 Authority Key Identifier: keyid:C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:c8:a2:0f:53:28:5b:8b:d7:a7:55:e3:98:0c:51:71:0c:fb: a7:5e:d6:92:e5:96:c2:a5:10:6b:e9:5a:19:d0:0a:cf:f1:93: d2:05:34:f1:c4:4f:fe:f0:a3:87:d3:fd:82:8d:d5:d7:7c:a1: af:2f:f3:24:12:9e:c2:70:68:e7:e4:86:91:ce:db:ef:f8:b7: e7:6d:09:33:56:1b:bd:af:fd:c9:6d:c3:8c:7d:c8:88:ed:2f: a8:62:c6:be:87:43:95:f1:73:e5:9d:30:fb:2d:25:17:e6:93: 03:ba:d8:a5:c8:35:2f:b0:80:04:f2:58:3e:32:c5:4f:fd:8e: 3c:94:bd:3a:64:06:0b:c3:e0:2a:00:5f:19:26:e3:03:f1:ea: 03:77:99:ac:2b:00:9e:f8:24:37:f2:32:3a:c1:b1:eb:54:f2: 74:8a:e7:a1:a1:86:e9:b4:ed:e0:00:91:11:1e:da:a1:1e:87: c8:40:95:59:77:37:f3:01:15:85:3e:a6:73:bc:3c:87:88:ca: cc:f1:ee:f1:13:28:5c:11:71:1d:d3:f5:ab:cc:ce:8e:c3:ae: 8c:ef:19:57:18:52:c7:b7:80:5b:6a:a0:ad:7d:e6:8a:fe:e0: 3b:97:77:8b:8c:e0:ea:c7:23:08:b6:32:c7:ed:ad:bd:c5:47: 6e:c6:80:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU82kEYhcfXvkUJj7JLB8a5+UWzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcy RkI0RkU2RTAeFw0yNTA2MjgxMTI1NTNaFw0yNTA3MDExOTQ1NTNaMDMxMTAvBgNV BAMTKDY1QzkwRTE0MTM5MThEMjREREFDRTM3OTcxNEU4M0E0NEJENDY0RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Hf3OY1c4NnUDG59UyPQjv+ga /Bt9sHZoFdsxYsPn9dB/KDiFzHo5KKcnA4pDLCBLUkeeICNH1kR1D8qjoeuEAoxn zXL2162mVNDYFdGtPuG6WOOVyxDzA24bhYw/+jjIYDnVH+X8hg2RzRVmP4fV/ip4 FtO+WtoLp/oKPdDedYGVdvkzC9yuBT2saF2NEy+NpMEFZpIIsQMYrCpPp5yMmn1A rhKDcH9BHGV6mvmA3ku9ez5+fc45DYsZCglDbY8a0WYZ/TzSUBzFt/I/ixWrUVZ+ WS3YBHRL5aAG/9oTm/jR0dPnE2FeUjEvNknggiKhBICaohYv0gsOnp7Bf4ThAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZckOFBORjSTdrON5cU6DpEvUZPEwHwYDVR0j BBgwFoAUww3nH3yuFsotjattAcpD1y+0/m4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2I1OWNlNC02NmEyLTRmNGQtYjNkNi05Mjk5NDg0YmE1NmIvMC9DMzBERTcxRjdD QUUxNkNBMkQ4REFCNkQwMUNBNDNENzJGQjRGRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcyRkI0 RkU2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNiNTljZTQtNjZhMi00ZjRkLWIz ZDYtOTI5OTQ4NGJhNTZiLzAvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQz RDcyRkI0RkU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHIog9TKFuL16dV45gMUXEM+6de1pLllsKl EGvpWhnQCs/xk9IFNPHET/7wo4fT/YKN1dd8oa8v8yQSnsJwaOfkhpHO2+/4t+dt CTNWG72v/cltw4x9yIjtL6hixr6HQ5Xxc+WdMPstJRfmkwO62KXINS+wgATyWD4y xU/9jjyUvTpkBgvD4CoAXxkm4wPx6gN3mawrAJ74JDfyMjrBsetU8nSK56Ghhum0 7eAAkREe2qEeh8hAlVl3N/MBFYU+pnO8PIeIyszx7vETKFwRcR3T9avMzo7Drozv GVcYUse3gFtqoK195or+4DuXd4uM4OrHIwi2Msftrb3FR27GgCg= -----END CERTIFICATE-----Generated at Sun Jun 29 21:59:45 2025 by rpki-client