$ rpki-client -vvf repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft File: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft (raw, json) Hash identifier: sDlkRW93V1mzhRAWzOHbOk6D5mCpb1fK7UW9o+b08HM= Subject key identifier: B6:D2:F6:61:A5:00:B5:75:84:33:A7:6B:54:1A:20:30:04:51:B5:AD Authority key identifier: 30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 Certificate issuer: /CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Certificate serial: 73846CC53A45D205D24ED4227A902669DA267634 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft Manifest number: 01A1 Signing time: Thu 08 May 2025 06:01:08 +0000 Manifest this update: Thu 08 May 2025 05:56:08 +0000 Manifest next update: Sun 11 May 2025 12:04:08 +0000 Files and hashes: 1: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl (hash: sP5h6I9KjF0PhV2R31BAqQ0rRP1arVuLFbbcBfiiPUo=) 2: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (hash: D8GjnN9iSeoHD+w8PHTjqQPYgM2654viBTgPlB7vaQ8=) 3: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (hash: 26YINQme/iBjXm8kI77CvEcmVoMDQs4ckNihzd85Z90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 12:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:84:6c:c5:3a:45:d2:05:d2:4e:d4:22:7a:90:26:69:da:26:76:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Validity Not Before: May 8 05:56:08 2025 GMT Not After : May 11 12:04:08 2025 GMT Subject: CN=B6D2F661A500B5758433A76B541A20300451B5AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8f:44:17:1d:84:0e:cf:c0:b7:52:97:d7:7b: c4:f3:50:6b:84:e5:a2:4c:11:a4:d2:17:85:a7:b0: aa:ee:23:19:38:16:4f:df:4a:cb:70:1f:bf:c8:34: 1f:33:d2:2a:ff:e3:c3:aa:ec:3b:d3:09:21:e0:64: 75:6d:f8:ab:8d:11:4d:14:81:c7:58:0e:9b:06:6b: dc:a7:c6:2f:33:18:e2:46:e8:30:8a:d3:52:1d:30: b3:55:35:3d:09:9c:59:0f:73:23:9e:cf:d3:0b:c5: b7:f0:1c:5e:88:55:48:7b:91:a4:e4:5d:8e:72:fb: 97:b2:84:34:61:ef:fe:b6:de:6c:b5:d4:85:a1:67: c2:87:54:b9:1c:d1:cc:5a:92:a6:90:f6:15:94:99: 2b:5b:28:e3:33:56:b5:68:7a:c4:b5:d1:07:f7:2f: dd:1b:ad:59:f9:59:f0:2d:84:9d:a3:d9:fe:22:a7: 70:e9:47:32:28:0a:d7:c1:9a:4b:da:a8:c3:bb:6f: 57:b1:f9:ef:31:91:37:d9:90:d1:2f:4c:33:db:97: 4c:f9:7d:15:41:ae:00:64:9b:4a:8c:8a:cc:23:9f: f8:10:f2:82:24:a8:d7:df:07:91:0e:d0:ac:e2:28: 88:0d:5c:ed:60:3e:2a:99:5f:2f:33:92:d9:67:55: 4f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D2:F6:61:A5:00:B5:75:84:33:A7:6B:54:1A:20:30:04:51:B5:AD X509v3 Authority Key Identifier: keyid:30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:06:10:49:c7:2e:f3:b4:f0:5a:58:76:a7:6a:9f:9d:62:d6: 6b:bc:81:05:57:73:9e:0e:70:57:0d:be:3a:32:c1:04:4d:1e: dd:d0:f5:fc:0e:b6:bf:34:26:2e:19:cf:65:6b:03:79:ef:29: 5c:ed:1f:6b:c8:e7:30:b9:bd:04:fa:ca:a4:cf:e6:38:7c:a0: dc:df:20:2d:25:86:e7:6c:d3:b7:8b:51:33:fb:25:59:bb:c3: 0d:e3:16:19:8a:e9:e3:db:e4:4b:40:8e:09:96:c7:e4:02:b6: e1:73:80:f7:cd:f3:2f:01:cd:99:86:02:7c:43:a4:d3:39:57: 7e:7e:1c:06:82:f9:a2:8a:7a:aa:03:ed:e2:df:24:29:7d:56: bd:04:07:70:be:d7:b2:7d:62:5b:7f:4c:a2:58:45:fc:ad:7f: b3:7a:ed:7f:15:6d:fa:87:16:b5:62:8a:f6:7b:7f:a8:72:ea: ce:59:11:db:cf:e2:be:f2:b6:29:f9:80:57:01:5d:5e:6f:a0: f3:fa:f6:88:d1:34:cf:71:91:3c:3f:ca:25:5f:e4:9a:fb:d1: 63:91:a5:f3:3d:c4:d6:02:94:a5:15:27:34:f3:38:2e:48:c9: 31:70:d4:cb:ad:bf:60:5c:55:ec:33:51:00:2f:7a:38:0f:2d: 0a:d9:51:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc4RsxTpF0gXSTtQiepAmadomdjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3 RTkxMkQ0NTAeFw0yNTA1MDgwNTU2MDhaFw0yNTA1MTExMjA0MDhaMDMxMTAvBgNV BAMTKEI2RDJGNjYxQTUwMEI1NzU4NDMzQTc2QjU0MUEyMDMwMDQ1MUI1QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQj0QXHYQOz8C3UpfXe8TzUGuE 5aJMEaTSF4WnsKruIxk4Fk/fSstwH7/INB8z0ir/48Oq7DvTCSHgZHVt+KuNEU0U gcdYDpsGa9ynxi8zGOJG6DCK01IdMLNVNT0JnFkPcyOez9MLxbfwHF6IVUh7kaTk XY5y+5eyhDRh7/623my11IWhZ8KHVLkc0cxakqaQ9hWUmStbKOMzVrVoesS10Qf3 L90brVn5WfAthJ2j2f4ip3DpRzIoCtfBmkvaqMO7b1ex+e8xkTfZkNEvTDPbl0z5 fRVBrgBkm0qMiswjn/gQ8oIkqNffB5EO0KziKIgNXO1gPiqZXy8zktlnVU8BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUttL2YaUAtXWEM6drVBogMARRta0wHwYDVR0j BBgwFoAUMOK0YXuLnPxPxXscWk10/H6RLUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjlmODkwMi0xYTA2LTQ1YTgtYTk5OC03MmU0NmFhYWU4ZmMvMC8zMEUyQjQ2MTdC OEI5Q0ZDNEZDNTdCMUM1QTRENzRGQzdFOTEyRDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3RTkx MkQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI5Zjg5MDItMWEwNi00NWE4LWE5 OTgtNzJlNDZhYWFlOGZjLzAvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0 RkM3RTkxMkQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALoGEEnHLvO08FpYdqdqn51i1mu8gQVXc54O cFcNvjoywQRNHt3Q9fwOtr80Ji4Zz2VrA3nvKVztH2vI5zC5vQT6yqTP5jh8oNzf IC0lhuds07eLUTP7JVm7ww3jFhmK6ePb5EtAjgmWx+QCtuFzgPfN8y8BzZmGAnxD pNM5V35+HAaC+aKKeqoD7eLfJCl9Vr0EB3C+17J9Ylt/TKJYRfytf7N67X8VbfqH FrViivZ7f6hy6s5ZEdvP4r7ytin5gFcBXV5voPP69ojRNM9xkTw/yiVf5Jr70WOR pfM9xNYClKUVJzTzOC5IyTFw1Mutv2BcVewzUQAvejgPLQrZURo= -----END CERTIFICATE-----Generated at Fri May 9 21:30:29 2025 by rpki-client