$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft File: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft (raw, json) Hash identifier: sqGrlz0YrPOr4QAt6aPSTEIHke74kDoKs1G175MwIdM= Subject key identifier: C1:8E:79:0A:89:F6:8E:7D:25:02:78:40:79:B1:80:D0:9A:B2:BB:5E Authority key identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 Certificate issuer: /CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Certificate serial: 3AE017B9352A2C1A92C14EB77F0FD6863584396E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft Manifest number: E7 Signing time: Sun 19 Oct 2025 12:31:49 +0000 Manifest this update: Sun 19 Oct 2025 12:26:49 +0000 Manifest next update: Wed 22 Oct 2025 15:10:49 +0000 Files and hashes: 1: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl (hash: LE+uT58+7SI6pQiVUqn95UHYxASZHXRjtSXAao2uz5M=) 2: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: fMCHbxG1b40Dh8toSsRbGtu8leYZ/YXgsXlH0lO7T1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 15:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e0:17:b9:35:2a:2c:1a:92:c1:4e:b7:7f:0f:d6:86:35:84:39:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Validity Not Before: Oct 19 12:26:49 2025 GMT Not After : Oct 22 15:10:49 2025 GMT Subject: CN=C18E790A89F68E7D2502784079B180D09AB2BB5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ea:c1:46:99:f1:01:90:b9:e7:9d:3b:ba:4c: 45:4e:3c:a8:27:54:63:ad:81:d7:aa:59:f2:d7:1f: 8b:6e:df:4d:1c:b9:0e:db:ef:13:86:c4:b1:a8:fd: 57:97:02:c3:06:7a:37:4d:8c:4d:0b:ba:0c:99:92: 99:06:b7:18:8e:f5:1b:29:93:82:1d:6a:ce:af:8e: 5f:ba:28:54:5f:5b:74:7e:9f:03:43:31:11:5a:b6: 7a:25:be:b2:04:a5:09:db:c1:bf:f1:8a:ac:7e:77: fa:05:d3:04:05:ea:0c:f7:78:17:f5:98:ab:a1:6c: 65:62:cf:a5:37:71:b9:48:64:50:01:f0:67:6f:71: 27:2e:05:14:82:40:be:f0:05:f6:ab:37:a0:11:f0: 7b:d3:a7:92:ae:2e:12:7f:6a:d9:ed:6d:0e:e1:d1: 36:e9:82:fd:dc:a1:88:6d:1b:90:cb:99:80:08:1d: 7c:4a:0e:d2:e7:af:d0:7f:21:2d:3e:28:3e:97:a6: b6:3b:d6:f5:1d:9d:aa:a7:fb:21:2b:45:ba:e7:47: f6:5b:78:16:df:a5:2e:d4:f9:03:7d:ac:6f:7d:ec: 46:72:c1:32:d7:9a:f1:70:28:23:ac:76:19:f9:b4: 05:77:49:72:d2:54:3c:ce:04:57:d1:96:17:64:76: 89:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8E:79:0A:89:F6:8E:7D:25:02:78:40:79:B1:80:D0:9A:B2:BB:5E X509v3 Authority Key Identifier: keyid:30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:3c:4e:6c:23:f8:95:96:eb:af:a6:41:85:26:ac:d6:a4:72: a1:72:6d:dd:9b:cf:89:8a:0c:da:66:37:a9:e1:27:c3:8c:fc: 92:32:a0:30:1a:80:25:89:2d:ca:19:b6:cc:35:4c:bc:76:06: 90:c0:cf:b3:d7:a4:1f:3f:44:90:9e:d7:1f:3c:86:eb:1d:85: fc:7f:44:e3:7c:dd:39:6c:d8:be:cb:37:9f:2d:53:9c:85:da: 80:53:ca:a4:57:f2:0a:7a:02:66:5f:83:df:d8:64:a0:2c:05: 67:48:8a:05:0e:34:c2:10:bc:91:db:36:a2:0a:1e:0d:7a:ee: 66:36:a2:36:d6:1e:9e:e3:c2:39:fd:57:f3:aa:0b:54:19:d4: f1:b3:d5:3d:a6:03:3f:da:cb:a7:18:9a:6e:87:be:3d:dd:d5: 49:fb:0f:4f:fc:46:28:b2:0a:2f:26:ac:ff:e9:86:7d:ed:22: af:c2:78:bb:85:bf:75:e3:a0:ee:50:89:d9:8d:d0:69:3d:cd: 5b:fd:63:bb:ec:90:97:e7:3e:f9:a3:f1:34:47:b6:34:7f:44: 67:0e:7a:da:5f:ba:09:7b:f5:88:f1:18:d1:95:3d:78:14:ad: 6c:70:c6:fd:1d:7c:76:a2:60:5e:f6:83:63:c3:22:1f:46:c3: 77:c4:d7:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOuAXuTUqLBqSwU63fw/WhjWEOW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUy MTA2RjFCNDAeFw0yNTEwMTkxMjI2NDlaFw0yNTEwMjIxNTEwNDlaMDMxMTAvBgNV BAMTKEMxOEU3OTBBODlGNjhFN0QyNTAyNzg0MDc5QjE4MEQwOUFCMkJCNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD06sFGmfEBkLnnnTu6TEVOPKgn VGOtgdeqWfLXH4tu300cuQ7b7xOGxLGo/VeXAsMGejdNjE0LugyZkpkGtxiO9Rsp k4Idas6vjl+6KFRfW3R+nwNDMRFatnolvrIEpQnbwb/xiqx+d/oF0wQF6gz3eBf1 mKuhbGViz6U3cblIZFAB8GdvcScuBRSCQL7wBfarN6AR8HvTp5KuLhJ/atntbQ7h 0Tbpgv3coYhtG5DLmYAIHXxKDtLnr9B/IS0+KD6XprY71vUdnaqn+yErRbrnR/Zb eBbfpS7U+QN9rG997EZywTLXmvFwKCOsdhn5tAV3SXLSVDzOBFfRlhdkdomrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwY55Con2jn0lAnhAebGA0Jqyu14wHwYDVR0j BBgwFoAUMIpRAED9+bwot7Y9MgPkDiEG8bQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVkOGQ2Yy1mMGZhLTQ3Y2MtYWVhYS1iNGUzZWUxMTY4ODIvMC8zMDhBNTEwMDQw RkRGOUJDMjhCN0I2M0QzMjAzRTQwRTIxMDZGMUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUyMTA2 RjFCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0 MEUyMTA2RjFCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQ8Tmwj+JWW66+mQYUmrNakcqFybd2bz4mK DNpmN6nhJ8OM/JIyoDAagCWJLcoZtsw1TLx2BpDAz7PXpB8/RJCe1x88husdhfx/ RON83Tls2L7LN58tU5yF2oBTyqRX8gp6AmZfg9/YZKAsBWdIigUONMIQvJHbNqIK Hg167mY2ojbWHp7jwjn9V/OqC1QZ1PGz1T2mAz/ay6cYmm6Hvj3d1Un7D0/8Riiy Ci8mrP/phn3tIq/CeLuFv3XjoO5QidmN0Gk9zVv9Y7vskJfnPvmj8TRHtjR/RGcO etpfugl79YjxGNGVPXgUrWxwxv0dfHaiYF72g2PDIh9Gw3fE1xA= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:33 2025 by rpki-client