$ rpki-client -vvf repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft File: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft (raw, json) Hash identifier: 4cy5ecDEM+6+YnTymG9Ka52eYZbcfkGfggm6VGVeTV0= Subject key identifier: 8A:93:B8:CF:25:43:66:57:F9:CD:92:48:F3:0F:D1:09:7B:8D:B8:8B Authority key identifier: C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 Certificate issuer: /CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Certificate serial: 304F852E0A39F3643613982A19F67B84DCF378EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft Manifest number: 034B Signing time: Fri 22 Aug 2025 09:32:13 +0000 Manifest this update: Fri 22 Aug 2025 09:27:13 +0000 Manifest next update: Mon 25 Aug 2025 18:52:13 +0000 Files and hashes: 1: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl (hash: HEsDNtRp2FryQk4I06PhdcvFAq7OOd05jTe3cfVmB/I=) 2: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (hash: tUeL2L2NZGxhk7lppCZ0ZmMoSziMiBP1aFhhhYxJa6g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:4f:85:2e:0a:39:f3:64:36:13:98:2a:19:f6:7b:84:dc:f3:78:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Validity Not Before: Aug 22 09:27:13 2025 GMT Not After : Aug 25 18:52:13 2025 GMT Subject: CN=8A93B8CF25436657F9CD9248F30FD1097B8DB88B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d6:8b:64:5e:13:91:dc:50:96:5c:81:b5:fc: 4a:04:8b:4c:65:44:e8:7d:08:de:e7:d2:43:cc:16: 52:5c:27:ac:56:02:2e:63:fa:01:d2:63:81:37:bd: 87:ec:c5:26:9f:e6:57:b8:0a:ab:6f:d5:0c:7b:9b: b0:42:38:c3:08:7d:f2:a4:85:05:8d:51:98:39:e5: 6a:0f:67:78:01:b3:4a:14:6a:08:8b:99:53:87:33: 9f:13:ee:2a:50:4a:04:31:1c:73:70:4d:0d:a3:d0: 10:1b:da:fc:03:c2:26:f0:d5:a0:2d:b7:f1:a0:09: 90:52:d1:97:45:bf:53:22:11:92:55:c0:cc:fe:3c: 9c:4a:fd:ce:0e:e9:1d:20:3f:19:c8:2e:df:e4:56: 89:89:7d:d3:2a:13:0e:fc:11:7d:f9:b2:69:85:fe: 6c:6b:9b:7a:ad:88:7a:89:04:00:c8:44:2a:71:6f: dd:de:25:65:70:54:c8:ab:c2:4d:94:1d:9d:e6:e9: 34:c7:eb:30:98:ff:eb:69:26:41:68:1f:6b:24:82: 4d:9c:04:bd:a5:54:7a:d9:54:98:31:ab:46:1e:68: 36:13:88:c5:ce:17:b6:41:2a:6a:60:fe:a8:9e:3f: 78:a2:fa:14:da:ab:23:df:35:6a:89:a4:1d:1a:97: 83:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:93:B8:CF:25:43:66:57:F9:CD:92:48:F3:0F:D1:09:7B:8D:B8:8B X509v3 Authority Key Identifier: keyid:C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:2d:bb:34:7b:55:a1:c2:f8:88:03:f9:f1:e8:52:47:6f:f5: 09:3f:b2:ab:e8:45:b0:b9:f3:24:65:82:c2:a9:9b:82:a0:4b: 31:32:98:c7:4f:9d:82:d8:5d:d6:39:56:3a:28:d7:98:fe:a4: 27:e3:e0:41:17:67:99:6d:3d:93:27:05:e0:e0:92:46:15:6b: db:36:e6:c6:bc:92:77:41:7f:16:19:41:fd:bd:62:72:fc:a9: 8d:7d:b7:ac:ab:a3:20:75:df:d4:c0:e5:49:6c:21:bf:27:37: 62:a4:0a:f2:2f:87:d3:4b:0c:6c:56:7a:10:16:7d:57:8f:29: 52:ee:18:a4:e3:16:3c:c9:18:25:27:11:d8:b9:48:fa:f8:b2: 44:cc:e3:1b:ce:d7:9e:f9:b5:8a:9e:f0:54:52:3d:1d:fd:a3: 94:1b:84:38:9b:96:09:9b:22:a9:d6:e5:ca:2a:87:ca:43:d4: 2a:d5:c1:9c:42:b3:a3:57:c5:15:73:69:b3:35:96:7a:49:0f: 50:10:3f:55:88:80:65:ae:f8:ab:12:d3:2d:c0:98:b0:ad:45: 1f:b4:c0:cc:d5:15:46:85:4e:38:b3:42:12:63:4c:07:65:7b: 09:10:95:10:f4:67:98:1f:65:43:32:26:25:8c:ec:13:e6:32: 78:b8:8b:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUME+FLgo582Q2E5gqGfZ7hNzzeOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzky Mjg2MzFGNzAeFw0yNTA4MjIwOTI3MTNaFw0yNTA4MjUxODUyMTNaMDMxMTAvBgNV BAMTKDhBOTNCOENGMjU0MzY2NTdGOUNEOTI0OEYzMEZEMTA5N0I4REI4OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC71otkXhOR3FCWXIG1/EoEi0xl ROh9CN7n0kPMFlJcJ6xWAi5j+gHSY4E3vYfsxSaf5le4Cqtv1Qx7m7BCOMMIffKk hQWNUZg55WoPZ3gBs0oUagiLmVOHM58T7ipQSgQxHHNwTQ2j0BAb2vwDwibw1aAt t/GgCZBS0ZdFv1MiEZJVwMz+PJxK/c4O6R0gPxnILt/kVomJfdMqEw78EX35smmF /mxrm3qtiHqJBADIRCpxb93eJWVwVMirwk2UHZ3m6TTH6zCY/+tpJkFoH2skgk2c BL2lVHrZVJgxq0YeaDYTiMXOF7ZBKmpg/qieP3ii+hTaqyPfNWqJpB0al4MlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUipO4zyVDZlf5zZJI8w/RCXuNuIswHwYDVR0j BBgwFoAUwwo3cezl92LW+m2HKPTAySKGMfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTFmNjI5OS1iMTU1LTQyMTItYjVlMS05ZjU3MDNjZDA5ODkvMC9DMzBBMzc3MUVD RTVGNzYyRDZGQTZEODcyOEY0QzBDOTIyODYzMUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzkyMjg2 MzFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ExZjYyOTktYjE1NS00MjEyLWI1 ZTEtOWY1NzAzY2QwOTg5LzAvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMw QzkyMjg2MzFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUtuzR7VaHC+IgD+fHoUkdv9Qk/sqvoRbC5 8yRlgsKpm4KgSzEymMdPnYLYXdY5Vjoo15j+pCfj4EEXZ5ltPZMnBeDgkkYVa9s2 5sa8kndBfxYZQf29YnL8qY19t6yroyB139TA5UlsIb8nN2KkCvIvh9NLDGxWehAW fVePKVLuGKTjFjzJGCUnEdi5SPr4skTM4xvO1575tYqe8FRSPR39o5QbhDiblgmb IqnW5coqh8pD1CrVwZxCs6NXxRVzabM1lnpJD1AQP1WIgGWu+KsS0y3AmLCtRR+0 wMzVFUaFTjizQhJjTAdlewkQlRD0Z5gfZUMyJiWM7BPmMni4iyA= -----END CERTIFICATE-----Generated at Sat Aug 23 17:51:08 2025 by rpki-client