$ rpki-client -vvf repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft File: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft (raw, json) Hash identifier: llflCozc9/DrSQEmzfo7fHKiDcrJCw6sSibqLw06K10= Subject key identifier: 44:51:40:DF:86:12:38:1B:4F:9E:8B:CB:FF:CB:19:DE:75:09:9C:36 Authority key identifier: C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 Certificate issuer: /CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Certificate serial: 3FB8E3A9F204512325633AB53DC1AB63CA5A708F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft Manifest number: 0365 Signing time: Sat 18 Oct 2025 23:42:15 +0000 Manifest this update: Sat 18 Oct 2025 23:37:15 +0000 Manifest next update: Wed 22 Oct 2025 00:08:15 +0000 Files and hashes: 1: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl (hash: K2n0/QX8DAVta34GDDeKrfuBbCinb41f775uSK8WEL4=) 2: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (hash: MTg1tuijanT/fwfxdf3hwp8GNR+2Cd4sBdhUtmiigzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b8:e3:a9:f2:04:51:23:25:63:3a:b5:3d:c1:ab:63:ca:5a:70:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Validity Not Before: Oct 18 23:37:15 2025 GMT Not After : Oct 22 00:08:15 2025 GMT Subject: CN=445140DF8612381B4F9E8BCBFFCB19DE75099C36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:95:2b:16:cb:0a:29:47:8b:cf:76:89:71:cf: ae:66:02:87:d1:cc:8e:27:02:61:18:0c:c6:e6:cd: bd:d9:d0:30:24:03:b8:55:e7:1d:2f:6e:d2:ac:6b: 4a:ca:8a:1b:aa:15:ea:7e:f9:e8:d6:76:28:88:c2: e4:5a:73:e5:8b:b0:fe:fd:f6:fb:c9:98:97:b4:5f: 9e:66:63:7d:00:b7:d2:24:3f:5d:93:a7:0e:f0:69: 8a:b8:ac:14:4e:24:62:9f:3a:88:7e:75:3b:47:f7: 57:3c:7c:c3:6d:47:43:52:59:cf:db:89:41:a1:56: 99:13:6d:da:00:a5:84:31:5a:04:44:5e:c4:4d:92: b8:ed:74:05:c7:c7:4e:67:37:98:5b:39:31:fc:93: 67:ce:0d:d0:77:36:9a:ea:72:72:e9:32:8d:a4:b0: 24:d8:fa:0f:59:6b:db:de:b8:e1:1c:2b:92:07:73: ec:93:db:52:6e:7b:cc:c8:8b:21:9d:c8:a1:37:9d: 83:91:59:fd:8f:ec:3a:52:38:51:be:2e:ed:87:ac: 13:e5:6e:4b:76:a0:96:21:6b:5a:1a:c4:0a:d9:98: cc:7d:3f:e3:8f:48:b7:d8:fd:a6:1b:06:be:f9:2e: 4b:b7:a2:99:a2:1f:0b:ca:58:b6:e4:bb:f5:19:ca: 3d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:51:40:DF:86:12:38:1B:4F:9E:8B:CB:FF:CB:19:DE:75:09:9C:36 X509v3 Authority Key Identifier: keyid:C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:1c:d2:ab:da:68:22:d1:53:4f:8c:3f:d1:e5:c4:09:e1:7d: f0:82:2f:67:b5:18:1d:9b:70:e1:3a:64:8a:d3:2f:45:f8:fb: 01:40:2e:32:2a:1b:f2:1d:34:f1:49:da:b6:cd:1e:92:96:b1: c1:dc:cd:c1:1d:ce:e3:a8:18:14:75:f4:7e:f5:83:bd:4b:c9: 9d:cb:c7:d7:86:90:b5:a9:00:da:05:c6:b4:5b:0d:0b:9f:fd: fc:17:1d:15:d6:3d:3a:16:11:58:cf:14:b8:0c:7d:f1:9c:9e: 58:31:3c:d6:be:83:04:36:a2:8c:6b:f2:e3:52:2b:f5:05:34: d5:8e:78:9e:06:28:c6:20:47:97:9f:79:9b:1b:fd:b1:b1:9a: 16:5b:f9:da:08:b9:fe:1e:ae:8d:92:87:a5:ed:ac:80:dd:97: 40:f5:eb:1b:37:e0:0b:af:64:f3:2f:ca:a7:72:76:9b:68:8a: 53:cf:79:6b:5e:87:3e:89:71:04:b1:d1:98:db:33:ec:f9:53: a6:5e:c1:22:9f:c5:f3:44:2b:97:09:03:0e:44:e9:6b:48:d0: c9:98:d0:62:8f:5f:17:09:e2:a8:46:06:1b:fb:b2:f2:f2:30: b0:7f:ee:ed:fe:e2:79:15:81:f4:60:f2:76:9c:b6:e2:70:ce: 87:6a:e9:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP7jjqfIEUSMlYzq1PcGrY8pacI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzky Mjg2MzFGNzAeFw0yNTEwMTgyMzM3MTVaFw0yNTEwMjIwMDA4MTVaMDMxMTAvBgNV BAMTKDQ0NTE0MERGODYxMjM4MUI0RjlFOEJDQkZGQ0IxOURFNzUwOTlDMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDolSsWywopR4vPdolxz65mAofR zI4nAmEYDMbmzb3Z0DAkA7hV5x0vbtKsa0rKihuqFep++ejWdiiIwuRac+WLsP79 9vvJmJe0X55mY30At9IkP12Tpw7waYq4rBROJGKfOoh+dTtH91c8fMNtR0NSWc/b iUGhVpkTbdoApYQxWgREXsRNkrjtdAXHx05nN5hbOTH8k2fODdB3NprqcnLpMo2k sCTY+g9Za9veuOEcK5IHc+yT21Jue8zIiyGdyKE3nYORWf2P7DpSOFG+Lu2HrBPl bkt2oJYha1oaxArZmMx9P+OPSLfY/aYbBr75Lku3opmiHwvKWLbku/UZyj2jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURFFA34YSOBtPnovL/8sZ3nUJnDYwHwYDVR0j BBgwFoAUwwo3cezl92LW+m2HKPTAySKGMfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTFmNjI5OS1iMTU1LTQyMTItYjVlMS05ZjU3MDNjZDA5ODkvMC9DMzBBMzc3MUVD RTVGNzYyRDZGQTZEODcyOEY0QzBDOTIyODYzMUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzkyMjg2 MzFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ExZjYyOTktYjE1NS00MjEyLWI1 ZTEtOWY1NzAzY2QwOTg5LzAvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMw QzkyMjg2MzFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIc0qvaaCLRU0+MP9HlxAnhffCCL2e1GB2b cOE6ZIrTL0X4+wFALjIqG/IdNPFJ2rbNHpKWscHczcEdzuOoGBR19H71g71LyZ3L x9eGkLWpANoFxrRbDQuf/fwXHRXWPToWEVjPFLgMffGcnlgxPNa+gwQ2ooxr8uNS K/UFNNWOeJ4GKMYgR5efeZsb/bGxmhZb+doIuf4ero2Sh6XtrIDdl0D16xs34Auv ZPMvyqdydptoilPPeWtehz6JcQSx0ZjbM+z5U6ZewSKfxfNEK5cJAw5E6WtI0MmY 0GKPXxcJ4qhGBhv7svLyMLB/7u3+4nkVgfRg8nactuJwzodq6UY= -----END CERTIFICATE-----Generated at Mon Oct 20 20:18:41 2025 by rpki-client