$ rpki-client -vvf repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft File: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft (raw, json) Hash identifier: ue9JTI4wcwobmq2/fIECwcUWh1/XOLTWDSDKoyqffow= Subject key identifier: E6:17:8E:AD:42:B8:EE:0F:CE:61:04:61:AF:D3:9C:30:F2:3A:32:13 Authority key identifier: C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E Certificate issuer: /CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Certificate serial: 611014AA8D0C62C58A0E4C621164128D576EB49F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft Manifest number: 0405 Signing time: Sat 18 Oct 2025 12:50:54 +0000 Manifest this update: Sat 18 Oct 2025 12:45:54 +0000 Manifest next update: Tue 21 Oct 2025 23:01:54 +0000 Files and hashes: 1: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl (hash: SlR5sQ4wiajDxDb9Ux1XBYfUTSra8fUzQbcIm57WJ0Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 23:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:10:14:aa:8d:0c:62:c5:8a:0e:4c:62:11:64:12:8d:57:6e:b4:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Validity Not Before: Oct 18 12:45:54 2025 GMT Not After : Oct 21 23:01:54 2025 GMT Subject: CN=E6178EAD42B8EE0FCE610461AFD39C30F23A3213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:85:96:be:ee:5a:77:55:f8:9c:1e:61:8d:41: ca:ee:41:47:d4:ec:46:9c:69:ee:5d:fb:a5:d4:08: 3d:8c:ee:bf:ba:0b:b1:8d:7e:8b:db:64:30:39:41: 5d:24:41:e7:8d:b3:01:8c:e9:a2:89:e0:ee:97:b0: 6f:5c:ea:7a:64:3b:95:a5:fc:c4:0d:68:a1:46:a1: 67:c9:6f:24:b4:e8:74:64:b4:15:40:b2:00:9e:e6: 9e:4e:2a:9d:94:70:9d:cc:ef:78:d0:0e:01:2c:46: 18:2b:f9:48:5b:9e:ce:38:00:d5:22:43:19:0d:2c: e9:f8:3a:2d:af:9a:a4:1d:3b:66:84:6a:82:e0:23: 9e:38:04:12:9d:a0:31:a9:95:09:f6:4b:45:be:04: d0:32:ed:11:32:23:19:04:a1:c2:34:73:70:d0:61: af:fc:49:bf:62:55:d5:8b:33:b8:2e:d0:85:d6:ba: 2b:ce:7e:a2:f0:5b:0d:3d:d4:ee:c8:db:6d:ea:39: 69:76:07:b1:df:33:17:9d:c9:69:ab:95:c6:9d:6a: b1:8b:fa:95:fc:a2:ac:05:77:6d:65:b3:87:e5:66: 95:77:60:dc:3c:a8:8d:0f:c3:4e:ff:ab:29:4f:a3: 41:09:c1:90:a6:ca:c6:cc:f5:4c:5b:41:93:c3:28: 69:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:17:8E:AD:42:B8:EE:0F:CE:61:04:61:AF:D3:9C:30:F2:3A:32:13 X509v3 Authority Key Identifier: keyid:C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:4a:ef:e5:e5:b7:dd:8e:84:c1:a7:09:78:cf:b8:eb:34:6c: 83:62:18:60:06:23:ae:a6:02:25:f3:41:58:9a:6b:31:79:9e: f7:a8:42:29:2c:44:d3:70:4a:59:65:ba:06:a7:52:a7:c4:a3: 29:ff:69:87:b8:5b:a6:bf:4a:8c:79:a1:d6:7e:59:da:bf:91: d1:3d:29:5b:47:26:4d:b4:a5:d3:3d:be:8f:15:c7:e8:30:55: f4:e5:28:95:65:e5:ba:09:e2:52:0d:a6:e5:e7:5b:05:95:b9: 11:ba:fa:17:f2:6c:ba:65:e0:ec:26:7f:5e:e2:6e:d3:79:c0: 79:6e:25:64:21:0d:d6:f3:cd:e3:39:fd:f9:c0:7b:d9:c9:23: 09:b8:61:36:78:91:41:21:ce:9b:a1:01:db:3a:0f:2b:52:79: 14:37:ec:58:ff:7b:91:79:9f:12:8f:9f:fb:f7:aa:bd:2d:37: d4:1d:d3:09:59:13:a7:cf:22:f6:b8:05:27:e3:74:89:e1:a0: 48:27:61:e0:a7:bc:f0:1c:98:f4:65:0c:f1:9a:f4:32:51:39: 1f:2c:6f:85:ea:c8:6d:87:fe:64:ec:f3:1f:a3:f6:cd:fb:e3: d6:d5:1e:44:e3:a0:ea:15:2f:26:5a:ab:dd:76:a0:98:fa:1d: dd:68:dd:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYRAUqo0MYsWKDkxiEWQSjVdutJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcy RkI0RkU2RTAeFw0yNTEwMTgxMjQ1NTRaFw0yNTEwMjEyMzAxNTRaMDMxMTAvBgNV BAMTKEU2MTc4RUFENDJCOEVFMEZDRTYxMDQ2MUFGRDM5QzMwRjIzQTMyMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPhZa+7lp3VficHmGNQcruQUfU 7Eacae5d+6XUCD2M7r+6C7GNfovbZDA5QV0kQeeNswGM6aKJ4O6XsG9c6npkO5Wl /MQNaKFGoWfJbyS06HRktBVAsgCe5p5OKp2UcJ3M73jQDgEsRhgr+Uhbns44ANUi QxkNLOn4Oi2vmqQdO2aEaoLgI544BBKdoDGplQn2S0W+BNAy7REyIxkEocI0c3DQ Ya/8Sb9iVdWLM7gu0IXWuivOfqLwWw091O7I223qOWl2B7HfMxedyWmrlcadarGL +pX8oqwFd21ls4flZpV3YNw8qI0Pw07/qylPo0EJwZCmysbM9UxbQZPDKGllAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5heOrUK47g/OYQRhr9OcMPI6MhMwHwYDVR0j BBgwFoAUww3nH3yuFsotjattAcpD1y+0/m4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2I1OWNlNC02NmEyLTRmNGQtYjNkNi05Mjk5NDg0YmE1NmIvMC9DMzBERTcxRjdD QUUxNkNBMkQ4REFCNkQwMUNBNDNENzJGQjRGRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcyRkI0 RkU2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNiNTljZTQtNjZhMi00ZjRkLWIz ZDYtOTI5OTQ4NGJhNTZiLzAvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQz RDcyRkI0RkU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5K7+Xlt92OhMGnCXjPuOs0bINiGGAGI66m AiXzQViaazF5nveoQiksRNNwSllluganUqfEoyn/aYe4W6a/Sox5odZ+Wdq/kdE9 KVtHJk20pdM9vo8Vx+gwVfTlKJVl5boJ4lINpuXnWwWVuRG6+hfybLpl4Owmf17i btN5wHluJWQhDdbzzeM5/fnAe9nJIwm4YTZ4kUEhzpuhAds6DytSeRQ37Fj/e5F5 nxKPn/v3qr0tN9Qd0wlZE6fPIva4BSfjdInhoEgnYeCnvPAcmPRlDPGa9DJROR8s b4XqyG2H/mTs8x+j9s3749bVHkTjoOoVLyZaq912oJj6Hd1o3WQ= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:50 2025 by rpki-client