$ rpki-client -vvf repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft File: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft (raw, json) Hash identifier: 9iVlkTUegF5qxKz/Lr7IN4FhzkIaYStsKeEzOGMy4Ao= Subject key identifier: 39:8A:65:BD:75:D5:9A:1E:21:07:EA:82:B9:3D:33:EF:9F:5A:49:24 Authority key identifier: 30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 Certificate issuer: /CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Certificate serial: 5A76772BFD22CCE01D3E60326D271D25F2919575 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft Manifest number: 01EA Signing time: Mon 20 Oct 2025 07:11:11 +0000 Manifest this update: Mon 20 Oct 2025 07:06:11 +0000 Manifest next update: Thu 23 Oct 2025 13:35:11 +0000 Files and hashes: 1: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl (hash: TWtwO5FVXBZsjZh1YhnTC5QGRfiJwreJI40nxoAGLlw=) 2: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (hash: xce0AmVhdIuoA0s5G07BTYqxfWM/i2bbCDllzfV1P80=) 3: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (hash: Udg26cCHQ+Qftm36Kch+i7dbSWtv7odm32FXa+73LYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:76:77:2b:fd:22:cc:e0:1d:3e:60:32:6d:27:1d:25:f2:91:95:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Validity Not Before: Oct 20 07:06:11 2025 GMT Not After : Oct 23 13:35:11 2025 GMT Subject: CN=398A65BD75D59A1E2107EA82B93D33EF9F5A4924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:29:bd:c7:81:5d:90:e2:ee:ed:5b:29:10:01: a4:6a:c5:f8:f6:00:96:8b:55:e3:ba:7d:dd:a1:1b: 5c:60:2c:01:9e:c3:f4:b8:d1:5a:40:f5:90:65:ab: 74:9b:18:f0:33:e0:f8:3a:03:67:71:89:97:d0:8f: 6e:e3:e5:21:9d:ab:94:36:7e:00:3f:1f:7f:1f:a2: d0:40:93:81:f6:2b:89:83:d4:4d:4c:bf:06:de:76: ac:04:83:2b:8d:16:68:1f:97:2e:67:32:0c:8b:25: 4b:52:b9:ad:61:64:87:4d:fd:9b:91:1b:9d:48:eb: 6d:bc:22:37:39:5d:7f:dc:d1:d0:dc:84:ab:f1:64: 69:e1:7a:82:65:97:4f:85:96:a4:d4:61:c1:d0:f1: a7:54:eb:62:3b:b4:2a:1a:12:66:91:de:e9:67:69: be:bd:ed:e0:b8:c8:16:2c:07:1a:89:34:c1:91:db: 55:5f:31:4d:53:af:ae:06:70:bd:5c:1c:e8:e6:b0: df:92:0f:0d:99:ab:86:4b:cc:af:72:3a:72:82:1f: c4:0b:13:b2:8a:0e:28:06:1b:c2:38:a3:bc:63:53: 99:86:f3:16:9c:a7:10:1e:89:4b:85:d6:bb:51:1d: 40:e9:39:17:3c:c7:b0:8c:11:db:4f:f5:f5:4b:4a: bc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8A:65:BD:75:D5:9A:1E:21:07:EA:82:B9:3D:33:EF:9F:5A:49:24 X509v3 Authority Key Identifier: keyid:30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:41:6e:b0:41:43:18:e5:52:86:ea:71:d4:ef:37:7c:48:a1: 1a:67:22:76:2f:5b:a5:f2:0e:a2:fe:93:e7:c3:6e:1f:0c:e8: 22:6f:cb:e6:70:12:3d:d9:eb:ee:57:a2:72:01:4a:c3:8a:98: d5:50:29:70:ca:3c:44:78:27:2d:ba:94:3b:a8:94:15:e6:70: 33:b8:bb:94:29:56:28:71:22:e2:0a:f2:d3:da:26:be:ec:0e: a1:ce:c3:7b:cd:60:35:30:9f:9d:a0:0e:c4:9d:d4:cd:41:92: 99:27:50:9e:2e:c2:f5:ea:20:64:7a:54:a6:cb:cb:02:9b:f7: 79:e9:dd:ad:34:fe:f3:56:76:c2:33:2d:eb:7e:24:b5:d8:92: dc:e5:26:42:f9:df:c6:bf:a6:db:e2:a2:e6:61:6b:37:fd:e1: 70:3f:ac:ba:8a:fa:dc:f7:ae:9d:72:9e:bd:4e:eb:cc:59:38: ba:f2:6c:fd:74:5f:17:16:26:62:94:3e:64:21:c6:27:1f:ff: 77:06:c2:d4:04:4f:70:99:db:8e:28:a1:1c:3f:cf:34:f9:7c: b7:a2:10:81:56:73:8c:c1:55:b3:e3:1a:83:62:39:50:23:8c: 4b:88:da:59:3a:77:45:6a:2c:69:7d:72:38:b3:ca:17:e0:e2: 6f:82:44:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWnZ3K/0izOAdPmAybScdJfKRlXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3 RTkxMkQ0NTAeFw0yNTEwMjAwNzA2MTFaFw0yNTEwMjMxMzM1MTFaMDMxMTAvBgNV BAMTKDM5OEE2NUJENzVENTlBMUUyMTA3RUE4MkI5M0QzM0VGOUY1QTQ5MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Kb3HgV2Q4u7tWykQAaRqxfj2 AJaLVeO6fd2hG1xgLAGew/S40VpA9ZBlq3SbGPAz4Pg6A2dxiZfQj27j5SGdq5Q2 fgA/H38fotBAk4H2K4mD1E1MvwbedqwEgyuNFmgfly5nMgyLJUtSua1hZIdN/ZuR G51I6228Ijc5XX/c0dDchKvxZGnheoJll0+FlqTUYcHQ8adU62I7tCoaEmaR3uln ab697eC4yBYsBxqJNMGR21VfMU1Tr64GcL1cHOjmsN+SDw2Zq4ZLzK9yOnKCH8QL E7KKDigGG8I4o7xjU5mG8xacpxAeiUuF1rtRHUDpORc8x7CMEdtP9fVLSrxJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOYplvXXVmh4hB+qCuT0z759aSSQwHwYDVR0j BBgwFoAUMOK0YXuLnPxPxXscWk10/H6RLUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjlmODkwMi0xYTA2LTQ1YTgtYTk5OC03MmU0NmFhYWU4ZmMvMC8zMEUyQjQ2MTdC OEI5Q0ZDNEZDNTdCMUM1QTRENzRGQzdFOTEyRDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3RTkx MkQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI5Zjg5MDItMWEwNi00NWE4LWE5 OTgtNzJlNDZhYWFlOGZjLzAvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0 RkM3RTkxMkQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNBbrBBQxjlUobqcdTvN3xIoRpnInYvW6Xy DqL+k+fDbh8M6CJvy+ZwEj3Z6+5XonIBSsOKmNVQKXDKPER4Jy26lDuolBXmcDO4 u5QpVihxIuIK8tPaJr7sDqHOw3vNYDUwn52gDsSd1M1BkpknUJ4uwvXqIGR6VKbL ywKb93np3a00/vNWdsIzLet+JLXYktzlJkL538a/ptviouZhazf94XA/rLqK+tz3 rp1ynr1O68xZOLrybP10XxcWJmKUPmQhxicf/3cGwtQET3CZ244ooRw/zzT5fLei EIFWc4zBVbPjGoNiOVAjjEuI2lk6d0VqLGl9cjizyhfg4m+CRKk= -----END CERTIFICATE-----Generated at Mon Oct 20 20:55:12 2025 by rpki-client