$ rpki-client -vvf repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft File: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft (raw, json) Hash identifier: /Tds2OnyyclJLWH5rOdC0t0qh+opa98672q2Yu+nALA= Subject key identifier: 14:71:D9:02:62:91:35:A5:8A:8B:67:EC:CF:58:ED:72:32:A9:2C:C9 Authority key identifier: C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 Certificate issuer: /CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Certificate serial: 3B39D80A5292E3659DA1C6EC8AA09224546B6E72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft Manifest number: 031B Signing time: Mon 05 May 2025 19:02:27 +0000 Manifest this update: Mon 05 May 2025 18:57:27 +0000 Manifest next update: Thu 08 May 2025 20:06:27 +0000 Files and hashes: 1: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl (hash: HHjALNFI+lulcgYmu29czf4MqSBVZYAFPIs6qLBkJ9E=) 2: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (hash: tUeL2L2NZGxhk7lppCZ0ZmMoSziMiBP1aFhhhYxJa6g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 20:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:39:d8:0a:52:92:e3:65:9d:a1:c6:ec:8a:a0:92:24:54:6b:6e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Validity Not Before: May 5 18:57:27 2025 GMT Not After : May 8 20:06:27 2025 GMT Subject: CN=1471D902629135A58A8B67ECCF58ED7232A92CC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:29:8b:07:d7:2d:78:77:74:c6:d7:9a:ae:8f: 82:54:50:60:90:ed:3d:9e:0f:c6:e0:08:41:f8:bc: 6b:94:1f:45:8c:f4:a9:90:25:d9:1b:f1:16:45:4b: 46:6b:0e:8e:14:52:b1:dd:08:f9:f8:68:db:2b:af: 71:4a:4a:9a:c5:db:92:dd:e9:e8:64:67:dd:4f:be: cf:2c:20:07:96:18:1c:3c:26:a0:5c:c7:d3:76:75: 0a:69:ce:8f:f3:a3:76:46:a3:57:26:e8:f9:56:dd: 93:4e:6f:fb:14:ee:9d:81:d9:ae:80:f3:44:3c:38: 05:d7:10:c1:c4:a6:38:7f:04:14:6c:a7:df:3b:a9: 33:dd:f2:3f:1a:9b:8a:f1:f9:2a:ba:d0:0e:1a:2a: 68:fd:9c:80:a0:a1:32:86:28:2a:d7:99:cb:d3:41: 29:63:f4:76:5d:3f:40:e2:e9:02:02:b7:41:03:df: b6:77:cf:b6:b7:cf:82:ca:3b:02:f4:d2:ce:a9:58: 7e:9e:0c:13:ac:a8:dc:89:5c:73:3d:fc:20:15:46: ac:28:a5:0e:f3:bf:33:05:f1:4a:e9:6d:ad:65:9b: a7:ca:e2:4f:eb:44:75:c8:f2:18:ad:d1:65:f2:e0: 7a:c3:d3:2f:4b:52:49:ea:6b:db:94:ea:e0:f5:06: e3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:71:D9:02:62:91:35:A5:8A:8B:67:EC:CF:58:ED:72:32:A9:2C:C9 X509v3 Authority Key Identifier: keyid:C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:72:70:d7:50:89:34:e6:30:03:f1:77:49:45:1b:8c:8b:0c: 9f:6b:d5:a8:ec:17:10:ed:19:24:42:02:a4:fb:36:45:db:e0: 5f:3a:19:b9:54:ef:4d:2f:56:7b:54:e2:d5:7d:56:81:85:68: 1a:67:c3:45:85:3b:fd:cf:1b:33:f0:94:5f:d9:52:b5:ee:d3: 14:cd:c6:3c:13:16:cb:1b:ea:70:35:d4:9f:23:c0:ab:76:b0: 84:13:b1:de:67:e3:83:5f:34:ea:8d:ad:aa:75:29:30:01:79: 74:dc:d9:64:36:70:82:45:c5:65:1a:6a:d9:39:e8:21:a3:85: 44:95:a8:10:7c:a4:1f:a4:5d:85:ca:7c:f6:48:24:be:35:ed: 5e:bf:e4:7a:d3:9f:a9:77:49:c2:6f:66:ed:ad:10:f9:cc:f0: f3:e2:1e:f7:28:7f:82:95:24:c6:86:b2:41:b4:2d:69:a6:a6: 0a:8d:38:d6:5f:1c:08:e0:74:8b:36:96:0e:16:54:21:49:d9: ab:c0:52:fc:24:68:8a:2e:ff:f3:2d:1f:27:3b:f8:ef:d3:24: 81:d7:75:0d:39:d8:92:26:44:d3:ec:7e:b4:9e:9c:25:98:6f: e0:6a:bf:17:fd:5d:b9:21:71:51:86:80:06:cc:47:e6:8a:51: 45:e4:2a:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOznYClKS42WdocbsiqCSJFRrbnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzky Mjg2MzFGNzAeFw0yNTA1MDUxODU3MjdaFw0yNTA1MDgyMDA2MjdaMDMxMTAvBgNV BAMTKDE0NzFEOTAyNjI5MTM1QTU4QThCNjdFQ0NGNThFRDcyMzJBOTJDQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEKYsH1y14d3TG15quj4JUUGCQ 7T2eD8bgCEH4vGuUH0WM9KmQJdkb8RZFS0ZrDo4UUrHdCPn4aNsrr3FKSprF25Ld 6ehkZ91Pvs8sIAeWGBw8JqBcx9N2dQppzo/zo3ZGo1cm6PlW3ZNOb/sU7p2B2a6A 80Q8OAXXEMHEpjh/BBRsp987qTPd8j8am4rx+Sq60A4aKmj9nICgoTKGKCrXmcvT QSlj9HZdP0Di6QICt0ED37Z3z7a3z4LKOwL00s6pWH6eDBOsqNyJXHM9/CAVRqwo pQ7zvzMF8Urpba1lm6fK4k/rRHXI8hit0WXy4HrD0y9LUknqa9uU6uD1BuPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFHHZAmKRNaWKi2fsz1jtcjKpLMkwHwYDVR0j BBgwFoAUwwo3cezl92LW+m2HKPTAySKGMfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTFmNjI5OS1iMTU1LTQyMTItYjVlMS05ZjU3MDNjZDA5ODkvMC9DMzBBMzc3MUVD RTVGNzYyRDZGQTZEODcyOEY0QzBDOTIyODYzMUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzkyMjg2 MzFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ExZjYyOTktYjE1NS00MjEyLWI1 ZTEtOWY1NzAzY2QwOTg5LzAvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMw QzkyMjg2MzFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANFycNdQiTTmMAPxd0lFG4yLDJ9r1ajsFxDt GSRCAqT7NkXb4F86GblU700vVntU4tV9VoGFaBpnw0WFO/3PGzPwlF/ZUrXu0xTN xjwTFssb6nA11J8jwKt2sIQTsd5n44NfNOqNrap1KTABeXTc2WQ2cIJFxWUaatk5 6CGjhUSVqBB8pB+kXYXKfPZIJL417V6/5HrTn6l3ScJvZu2tEPnM8PPiHvcof4KV JMaGskG0LWmmpgqNONZfHAjgdIs2lg4WVCFJ2avAUvwkaIou//MtHyc7+O/TJIHX dQ052JImRNPsfrSenCWYb+Bqvxf9XbkhcVGGgAbMR+aKUUXkKqk= -----END CERTIFICATE-----Generated at Wed May 7 21:06:04 2025 by rpki-client