$ rpki-client -vvf repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft File: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft (raw, json) Hash identifier: IBxazNAiSzwLK+QRWlCE1xMmgvdozQcXKiZ5MCAILxU= Subject key identifier: BD:EC:6E:B3:C0:4A:9F:62:18:04:21:C5:97:33:81:47:FD:45:1A:7B Authority key identifier: C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 Certificate issuer: /CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Certificate serial: 3887C542F337E5AFB5E43CEA5A1B695F3CE4A610 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft Manifest number: 0333 Signing time: Sun 29 Jun 2025 00:02:13 +0000 Manifest this update: Sat 28 Jun 2025 23:57:13 +0000 Manifest next update: Wed 02 Jul 2025 05:39:13 +0000 Files and hashes: 1: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (hash: tUeL2L2NZGxhk7lppCZ0ZmMoSziMiBP1aFhhhYxJa6g=) 2: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl (hash: fWW7XwwJQSi3LrMvoM+DLntqSrPfWQZXM37FSZhPBKE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 05:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:87:c5:42:f3:37:e5:af:b5:e4:3c:ea:5a:1b:69:5f:3c:e4:a6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Validity Not Before: Jun 28 23:57:13 2025 GMT Not After : Jul 2 05:39:13 2025 GMT Subject: CN=BDEC6EB3C04A9F62180421C597338147FD451A7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4f:25:25:d5:59:51:56:5a:22:52:67:c9:88: 91:36:66:16:91:44:d0:6a:d6:62:96:4c:d1:a9:11: f0:40:84:84:38:9f:a8:70:c0:39:58:63:33:61:c1: fa:6d:58:26:84:03:e7:14:38:96:a5:c8:41:ff:c0: 8d:2f:96:08:8a:b1:41:60:60:ef:c9:d9:9e:25:0d: 8c:af:0a:90:be:b8:9c:8e:ef:1b:90:26:74:da:f6: fa:ff:30:26:48:19:45:3c:c6:95:bf:4d:03:44:f3: b4:ae:51:16:ae:cb:5e:98:04:34:4d:fc:56:23:6a: b2:e5:a3:59:5b:a9:b0:41:01:d0:5c:93:e2:86:d6: e5:14:e1:e5:36:fb:c9:29:07:bb:e0:74:95:49:fc: 9c:1e:c1:28:be:26:d9:bf:25:64:61:b3:63:a9:11: db:62:b3:a4:17:33:68:ef:ee:11:0d:d3:48:ea:b1: d5:b3:de:80:34:7b:36:cc:9e:4b:41:27:0e:61:54: 0d:ae:16:4e:19:1c:2c:48:75:15:ac:7e:d6:82:29: bf:c2:bb:eb:be:d9:bb:ea:7f:f3:b4:c9:13:d1:61: 4f:fc:0e:a5:fe:2c:a7:71:34:91:ac:93:22:21:17: f9:a6:79:f8:35:ac:e7:03:57:95:41:f7:db:4c:87: b1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:EC:6E:B3:C0:4A:9F:62:18:04:21:C5:97:33:81:47:FD:45:1A:7B X509v3 Authority Key Identifier: keyid:C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:3f:c4:4b:56:41:cf:e2:5d:94:da:3e:6a:66:b1:b6:c4:ce: 1d:74:a1:64:3e:79:18:12:c8:a4:39:dc:1b:6c:78:a8:fb:11: 37:16:1a:f4:1a:7c:d5:ae:14:4b:fb:2e:78:81:4b:ed:46:6f: f0:d6:7f:9e:84:c3:9b:56:f7:93:33:06:2a:0e:9b:83:ea:7d: c9:5c:7b:a3:86:5e:a9:05:da:5c:c4:6a:54:e1:42:d7:0a:c6: 32:02:67:91:49:3a:ab:60:e6:8c:d3:fe:6f:cb:3c:a8:ef:27: 18:70:9d:c6:8b:2b:0b:53:f2:2a:ff:80:2b:f0:13:76:f4:74: 22:f0:7a:9e:08:cb:7c:db:62:67:bf:83:c4:2c:1c:f1:72:24: aa:f7:ff:d1:07:f0:ff:3c:3d:43:c2:d2:8c:e8:9d:95:57:8c: 10:09:1e:e6:39:0f:1b:4e:41:b7:ac:51:94:98:6e:7b:d8:39: c4:9c:6e:14:ec:69:a9:db:a3:15:c8:9e:ec:07:0a:66:68:d8: 9f:b6:5d:28:32:dd:f0:9f:a2:26:cb:21:e1:55:44:e1:fb:4c: eb:a8:27:bf:ea:d2:ca:f6:d3:fd:09:9d:6b:81:76:1b:ab:88: ed:2f:ee:ae:ec:a5:fb:9c:4a:e9:a3:58:53:72:6e:dc:ed:f2: 45:df:e2:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOIfFQvM35a+15DzqWhtpXzzkphAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzky Mjg2MzFGNzAeFw0yNTA2MjgyMzU3MTNaFw0yNTA3MDIwNTM5MTNaMDMxMTAvBgNV BAMTKEJERUM2RUIzQzA0QTlGNjIxODA0MjFDNTk3MzM4MTQ3RkQ0NTFBN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnTyUl1VlRVloiUmfJiJE2ZhaR RNBq1mKWTNGpEfBAhIQ4n6hwwDlYYzNhwfptWCaEA+cUOJalyEH/wI0vlgiKsUFg YO/J2Z4lDYyvCpC+uJyO7xuQJnTa9vr/MCZIGUU8xpW/TQNE87SuURauy16YBDRN /FYjarLlo1lbqbBBAdBck+KG1uUU4eU2+8kpB7vgdJVJ/JwewSi+Jtm/JWRhs2Op Edtis6QXM2jv7hEN00jqsdWz3oA0ezbMnktBJw5hVA2uFk4ZHCxIdRWsftaCKb/C u+u+2bvqf/O0yRPRYU/8DqX+LKdxNJGskyIhF/mmefg1rOcDV5VB99tMh7HnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvexus8BKn2IYBCHFlzOBR/1FGnswHwYDVR0j BBgwFoAUwwo3cezl92LW+m2HKPTAySKGMfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTFmNjI5OS1iMTU1LTQyMTItYjVlMS05ZjU3MDNjZDA5ODkvMC9DMzBBMzc3MUVD RTVGNzYyRDZGQTZEODcyOEY0QzBDOTIyODYzMUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzkyMjg2 MzFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ExZjYyOTktYjE1NS00MjEyLWI1 ZTEtOWY1NzAzY2QwOTg5LzAvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMw QzkyMjg2MzFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADI/xEtWQc/iXZTaPmpmsbbEzh10oWQ+eRgS yKQ53BtseKj7ETcWGvQafNWuFEv7LniBS+1Gb/DWf56Ew5tW95MzBioOm4Pqfclc e6OGXqkF2lzEalThQtcKxjICZ5FJOqtg5ozT/m/LPKjvJxhwncaLKwtT8ir/gCvw E3b0dCLwep4Iy3zbYme/g8QsHPFyJKr3/9EH8P88PUPC0ozonZVXjBAJHuY5DxtO QbesUZSYbnvYOcScbhTsaanboxXInuwHCmZo2J+2XSgy3fCfoibLIeFVROH7TOuo J7/q0sr20/0JnWuBdhuriO0v7q7spfucSumjWFNybtzt8kXf4ks= -----END CERTIFICATE-----Generated at Sun Jun 29 19:33:33 2025 by rpki-client