$ rpki-client -vvf repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft File: 030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft (raw, json) Hash identifier: oGUwH8iNqvWTVp1hh8L7AhcGOyGHKP+l49lYM4dW4Fg= Subject key identifier: 85:98:53:E8:7C:C5:FF:BB:43:44:F3:7B:75:F0:29:B8:C0:B3:9B:B4 Authority key identifier: 03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F Certificate issuer: /CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F Certificate serial: 3946AE53B2E8EFF2A82675A11542FC4DB1D81FD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft Manifest number: 020B Signing time: Sat 28 Jun 2025 05:40:52 +0000 Manifest this update: Sat 28 Jun 2025 05:35:52 +0000 Manifest next update: Tue 01 Jul 2025 17:27:52 +0000 Files and hashes: 1: 3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa (hash: b1v7Z/z2rGyMbLuAD869cDbmimid8dB76NCWwssz+2I=) 2: 3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa (hash: vtfkthTc4w7PTqVhacRm/ULh3HaRPjLVVlG+25ZUsBM=) 3: 030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl (hash: 4y8msoD7P+AR8UDpCE2OVqOKNeuOPv3UMyUjPdt0XIQ=) 4: 3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa (hash: VRZHFUOGnmJp2lMdZGt7kB8GjqU3aUc9sCQrVZdvzM8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 17:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:46:ae:53:b2:e8:ef:f2:a8:26:75:a1:15:42:fc:4d:b1:d8:1f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F Validity Not Before: Jun 28 05:35:52 2025 GMT Not After : Jul 1 17:27:52 2025 GMT Subject: CN=859853E87CC5FFBB4344F37B75F029B8C0B39BB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:79:02:8e:29:f8:45:55:1b:57:62:07:8d:af: 00:db:7d:42:bd:6e:6f:a6:9a:97:a1:d9:95:c5:5e: 2d:27:db:57:d0:eb:16:c3:52:8f:8b:4d:14:cf:d6: bf:ee:77:21:c0:61:0f:76:7b:28:ec:29:30:35:d3: f3:8b:7b:68:0b:06:f8:89:50:fe:5d:6c:01:63:a1: 46:08:7e:67:8e:8e:02:72:4a:ed:0e:01:65:80:cf: bc:15:4d:90:56:a5:46:95:e7:ba:47:d8:2e:5a:3b: 2b:79:47:89:71:0c:3c:91:3b:9f:dd:c2:7f:11:19: ed:c0:67:02:36:70:f1:46:d9:84:94:97:d9:23:56: 9f:b2:49:18:6f:36:32:30:22:2e:e9:36:ac:da:44: 6d:45:4c:37:b7:c9:fc:61:21:c3:1c:d6:fe:b2:48: ab:ba:8c:23:7c:1e:18:52:81:56:ca:1c:a2:ee:1d: 35:90:ac:3d:87:ce:3a:2e:32:fc:6b:ec:43:cc:20: 72:c1:35:4f:3e:6c:62:6d:cf:6d:5c:50:ef:e8:85: 4f:8a:bc:4c:fa:f2:7a:45:3c:00:ea:96:9d:17:ac: 55:80:9c:e7:b1:6a:8e:65:ad:81:80:cb:6d:0f:31: 32:e6:fd:05:79:99:d4:87:1f:11:09:97:af:e6:d3: 6b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:98:53:E8:7C:C5:FF:BB:43:44:F3:7B:75:F0:29:B8:C0:B3:9B:B4 X509v3 Authority Key Identifier: keyid:03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:d7:e6:28:e1:3c:46:7c:83:8c:42:f2:d9:ea:c0:02:f6:21: 42:24:b4:86:9d:65:74:ae:8f:f0:ff:90:1d:8f:11:57:8f:af: 07:f1:ba:b6:37:d6:23:cc:9b:3e:41:69:9b:db:7b:fa:2e:8b: ea:5b:c5:02:a4:82:34:39:ac:be:ee:49:f9:8d:6f:cf:7b:f1: 31:9d:f6:1d:c5:a8:b8:40:50:99:a4:61:46:c5:c0:f3:88:1c: b7:9e:38:9d:7d:0b:dc:7b:8b:46:4f:d2:68:06:61:a6:6e:49: d3:2d:8e:1d:63:67:6b:a3:f0:a3:42:87:d8:7c:56:95:87:bd: 51:bd:3d:71:d0:1f:22:cd:d7:e3:58:3c:7a:69:ff:29:a4:32: 43:86:ce:7c:81:03:00:65:87:93:87:8d:a6:74:67:8c:d8:8c: 15:43:cd:8c:eb:ea:6f:cc:51:8a:15:bd:e1:c9:97:af:30:38: f4:b5:0f:d7:40:eb:3c:d9:d8:79:6f:28:5e:5d:b8:66:74:7d: 26:62:72:53:64:57:2d:e0:19:be:8d:0f:60:b6:08:58:fb:e5: c6:f0:28:4c:cb:a3:f6:4b:dc:72:0f:2f:22:0d:bc:f4:5e:7c: ac:ff:3f:cb:20:91:d5:31:bd:70:13:65:4c:75:02:62:1e:f7: 5e:83:5b:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOUauU7Lo7/KoJnWhFUL8TbHYH9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3OUQx NzhBQ0UxRjAeFw0yNTA2MjgwNTM1NTJaFw0yNTA3MDExNzI3NTJaMDMxMTAvBgNV BAMTKDg1OTg1M0U4N0NDNUZGQkI0MzQ0RjM3Qjc1RjAyOUI4QzBCMzlCQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdeQKOKfhFVRtXYgeNrwDbfUK9 bm+mmpeh2ZXFXi0n21fQ6xbDUo+LTRTP1r/udyHAYQ92eyjsKTA10/OLe2gLBviJ UP5dbAFjoUYIfmeOjgJySu0OAWWAz7wVTZBWpUaV57pH2C5aOyt5R4lxDDyRO5/d wn8RGe3AZwI2cPFG2YSUl9kjVp+ySRhvNjIwIi7pNqzaRG1FTDe3yfxhIcMc1v6y SKu6jCN8HhhSgVbKHKLuHTWQrD2HzjouMvxr7EPMIHLBNU8+bGJtz21cUO/ohU+K vEz68npFPADqlp0XrFWAnOexao5lrYGAy20PMTLm/QV5mdSHHxEJl6/m02vxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhZhT6HzF/7tDRPN7dfApuMCzm7QwHwYDVR0j BBgwFoAUAwvlVyhtOk/m6apwY27HnReKzh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NThjOGY5Zi00MjEzLTRhMmEtODVjMy1iMjRiMGQwYjUxMDcvMC8wMzBCRTU1NzI4 NkQzQTRGRTZFOUFBNzA2MzZFQzc5RDE3OEFDRTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3OUQxNzhB Q0UxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU4YzhmOWYtNDIxMy00YTJhLTg1 YzMtYjI0YjBkMGI1MTA3LzAvMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3 OUQxNzhBQ0UxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfX5ijhPEZ8g4xC8tnqwAL2IUIktIadZXSu j/D/kB2PEVePrwfxurY31iPMmz5BaZvbe/oui+pbxQKkgjQ5rL7uSfmNb8978TGd 9h3FqLhAUJmkYUbFwPOIHLeeOJ19C9x7i0ZP0mgGYaZuSdMtjh1jZ2uj8KNCh9h8 VpWHvVG9PXHQHyLN1+NYPHpp/ymkMkOGznyBAwBlh5OHjaZ0Z4zYjBVDzYzr6m/M UYoVveHJl68wOPS1D9dA6zzZ2HlvKF5duGZ0fSZiclNkVy3gGb6ND2C2CFj75cbw KEzLo/ZL3HIPLyINvPRefKz/P8sgkdUxvXATZUx1AmIe916DWxU= -----END CERTIFICATE-----Generated at Sun Jun 29 22:11:46 2025 by rpki-client