$ rpki-client -vvf repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft File: 030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft (raw, json) Hash identifier: gHu7l5g3eO7xdK2aDYWPTfC2/b2dN+M5jCqpxBuGtHk= Subject key identifier: 41:60:10:B2:9C:F7:30:41:B3:37:74:90:7E:DA:49:E1:EA:FC:74:21 Authority key identifier: 03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F Certificate issuer: /CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F Certificate serial: 02A00F83420FD0A94E2D7947755635D432AAE52C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft Manifest number: 023D Signing time: Sat 18 Oct 2025 19:50:54 +0000 Manifest this update: Sat 18 Oct 2025 19:45:54 +0000 Manifest next update: Tue 21 Oct 2025 20:44:54 +0000 Files and hashes: 1: 3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa (hash: VRZHFUOGnmJp2lMdZGt7kB8GjqU3aUc9sCQrVZdvzM8=) 2: 030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl (hash: c0ZivFv8sUzU2LZ3QeTUcFmECEqee4TWUB3iFFBRrR4=) 3: 3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa (hash: UmBaN4f8daXm7YcJHiYwqui5FgHxOYUATLUGSQyoA5A=) 4: 3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa (hash: vtfkthTc4w7PTqVhacRm/ULh3HaRPjLVVlG+25ZUsBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a0:0f:83:42:0f:d0:a9:4e:2d:79:47:75:56:35:d4:32:aa:e5:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F Validity Not Before: Oct 18 19:45:54 2025 GMT Not After : Oct 21 20:44:54 2025 GMT Subject: CN=416010B29CF73041B33774907EDA49E1EAFC7421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:83:9e:db:13:d7:f6:fa:76:0e:4c:a9:66:a7: 3d:a8:62:f5:b3:ed:dd:0c:10:a9:f5:44:e4:79:49: f1:8c:7b:d1:c2:2a:da:3a:1e:de:0f:99:c7:c9:0f: 92:d8:02:06:78:8c:38:87:f7:68:08:b3:1c:1a:fc: 85:d0:4d:77:c4:9f:48:f5:13:a8:2b:95:d4:23:53: 02:4f:ed:1d:09:05:4b:d2:12:10:b1:fa:94:3b:8b: 0f:d3:c5:ff:4e:17:c3:27:4e:d3:5a:4c:bf:48:a4: 39:d5:a3:c5:65:5a:8d:51:13:96:94:a8:72:40:7b: db:7e:f7:0c:08:bf:e9:a1:51:f2:c7:ef:01:e1:4a: 52:f4:3a:be:3a:5f:d7:4b:49:7c:d6:0c:42:0f:1b: 7b:c9:34:b2:a1:7e:ab:46:06:37:6d:3b:3f:1b:63: 74:5b:ea:f1:7f:63:d2:4e:4a:7e:0d:ea:8d:49:f9: 26:c2:13:b3:47:4e:7c:24:02:fc:57:22:c3:5f:65: b1:51:86:d8:ae:e9:7a:ec:d9:f8:d3:56:3d:da:5c: e6:4b:1a:87:cd:0c:39:01:aa:7f:3b:e8:0d:ac:78: 5a:f3:b8:c3:32:0c:f7:fc:fd:ec:ea:51:d3:08:f0: 59:fb:cc:df:2c:45:08:47:47:aa:bc:3d:5b:66:f3: d1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:60:10:B2:9C:F7:30:41:B3:37:74:90:7E:DA:49:E1:EA:FC:74:21 X509v3 Authority Key Identifier: keyid:03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:88:b7:55:bc:ba:b0:49:9e:b2:35:4e:39:3d:09:ce:46:a8: bd:48:44:d3:a4:74:c5:0d:83:1a:67:d6:e3:60:b7:05:c5:14: f7:3a:16:a8:ab:cb:c7:f9:99:68:59:ce:e3:28:6b:77:a9:d1: 46:c8:59:d2:49:b7:79:fa:86:6f:da:4d:19:06:fa:db:72:d0: 78:12:30:55:7c:69:2c:aa:20:f3:ce:d5:a7:d2:0e:c8:70:79: d5:72:05:b3:53:f5:66:41:f3:5f:05:d8:41:3b:26:ac:84:08: 2b:12:53:9d:9d:76:f3:90:f8:d9:45:18:03:18:46:2c:f2:a8: fa:be:1c:ee:d3:d2:18:f9:2f:bc:1a:8a:35:a4:20:dc:8e:00: f0:b5:2c:1d:94:d0:af:f0:a1:52:cd:ae:ad:60:49:d7:d5:39: 31:fe:e5:c1:2f:a6:9c:eb:f7:3a:bf:f2:29:ba:a2:88:e2:93: ee:4d:51:b6:a2:a2:d6:0f:5f:9c:12:a9:e9:1b:aa:50:a1:08: 5b:31:b5:06:7a:96:66:80:25:1b:42:63:a5:68:48:5c:bb:c4: eb:fa:6e:d3:49:c5:75:a2:a5:43:e2:26:ae:6a:3a:f4:03:74: 20:aa:ca:17:aa:92:04:d5:21:40:68:e8:d2:8a:eb:77:2a:b7: b3:2f:9f:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAqAPg0IP0KlOLXlHdVY11DKq5SwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3OUQx NzhBQ0UxRjAeFw0yNTEwMTgxOTQ1NTRaFw0yNTEwMjEyMDQ0NTRaMDMxMTAvBgNV BAMTKDQxNjAxMEIyOUNGNzMwNDFCMzM3NzQ5MDdFREE0OUUxRUFGQzc0MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8g57bE9f2+nYOTKlmpz2oYvWz 7d0MEKn1ROR5SfGMe9HCKto6Ht4PmcfJD5LYAgZ4jDiH92gIsxwa/IXQTXfEn0j1 E6grldQjUwJP7R0JBUvSEhCx+pQ7iw/Txf9OF8MnTtNaTL9IpDnVo8VlWo1RE5aU qHJAe9t+9wwIv+mhUfLH7wHhSlL0Or46X9dLSXzWDEIPG3vJNLKhfqtGBjdtOz8b Y3Rb6vF/Y9JOSn4N6o1J+SbCE7NHTnwkAvxXIsNfZbFRhtiu6Xrs2fjTVj3aXOZL GofNDDkBqn876A2seFrzuMMyDPf8/ezqUdMI8Fn7zN8sRQhHR6q8PVtm89ELAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQWAQspz3MEGzN3SQftpJ4er8dCEwHwYDVR0j BBgwFoAUAwvlVyhtOk/m6apwY27HnReKzh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NThjOGY5Zi00MjEzLTRhMmEtODVjMy1iMjRiMGQwYjUxMDcvMC8wMzBCRTU1NzI4 NkQzQTRGRTZFOUFBNzA2MzZFQzc5RDE3OEFDRTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3OUQxNzhB Q0UxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU4YzhmOWYtNDIxMy00YTJhLTg1 YzMtYjI0YjBkMGI1MTA3LzAvMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3 OUQxNzhBQ0UxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmIt1W8urBJnrI1Tjk9Cc5GqL1IRNOkdMUN gxpn1uNgtwXFFPc6Fqiry8f5mWhZzuMoa3ep0UbIWdJJt3n6hm/aTRkG+tty0HgS MFV8aSyqIPPO1afSDshwedVyBbNT9WZB818F2EE7JqyECCsSU52ddvOQ+NlFGAMY RizyqPq+HO7T0hj5L7waijWkINyOAPC1LB2U0K/woVLNrq1gSdfVOTH+5cEvppzr 9zq/8im6oojik+5NUbaiotYPX5wSqekbqlChCFsxtQZ6lmaAJRtCY6VoSFy7xOv6 btNJxXWipUPiJq5qOvQDdCCqyheqkgTVIUBo6NKK63cqt7Mvnzs= -----END CERTIFICATE-----Generated at Mon Oct 20 18:06:14 2025 by rpki-client