$ rpki-client -vvf repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft File: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft (raw, json) Hash identifier: jN4DRdTNAHH8hI6rbFTd/ettwna8qdhwrHTpxABo8rc= Subject key identifier: AF:61:A4:C2:EC:D8:2C:A5:C5:6C:EC:46:8D:A4:11:A4:20:F1:AF:82 Authority key identifier: 30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 Certificate issuer: /CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Certificate serial: 2CEA02A561DA5D3E559A6FD9FE3431DBDCF9C0C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft Manifest number: 01B8 Signing time: Sat 28 Jun 2025 21:31:08 +0000 Manifest this update: Sat 28 Jun 2025 21:26:08 +0000 Manifest next update: Wed 02 Jul 2025 07:04:08 +0000 Files and hashes: 1: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (hash: D8GjnN9iSeoHD+w8PHTjqQPYgM2654viBTgPlB7vaQ8=) 2: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (hash: 26YINQme/iBjXm8kI77CvEcmVoMDQs4ckNihzd85Z90=) 3: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl (hash: iCL8Ou8hUnhk7GIcFD6rRzLabxiUAhtTVF8Zk9ev0ig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ea:02:a5:61:da:5d:3e:55:9a:6f:d9:fe:34:31:db:dc:f9:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Validity Not Before: Jun 28 21:26:08 2025 GMT Not After : Jul 2 07:04:08 2025 GMT Subject: CN=AF61A4C2ECD82CA5C56CEC468DA411A420F1AF82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5e:7e:5f:a4:84:a2:7c:1f:9f:a7:6f:35:96: ab:04:d7:6e:af:15:f9:c3:6c:2c:48:51:b8:02:95: ac:b6:53:ad:29:62:d7:69:4b:28:5e:3f:98:ee:6c: 0b:65:b0:3a:44:31:28:fa:e3:4d:92:76:91:a2:f0: 78:0a:f9:eb:54:0c:ef:97:f2:42:cc:1b:00:1c:2b: 3e:ab:82:ff:c4:80:94:48:f0:5a:c3:a3:66:a5:92: e0:24:e0:b0:75:a0:a2:ea:13:41:3c:d9:a9:57:d1: 2b:3b:07:70:93:34:c8:98:cd:3e:6b:8f:2f:70:9d: 9d:23:09:8d:32:ef:5f:ef:c9:00:35:4a:4d:96:46: b8:e9:2d:e6:e0:5a:f3:d3:59:dd:7c:56:4c:85:20: 59:54:0c:91:99:5d:46:b4:a5:7b:45:7d:f2:76:ae: 0d:b4:7c:ae:c7:ed:cd:06:b4:a5:b3:16:b6:93:e5: 0a:ca:88:2d:7b:63:56:9c:63:13:5f:68:7a:f5:db: 2c:ed:e9:48:92:d7:b6:8c:86:75:78:c9:cd:77:54: 89:df:31:c8:94:3a:6f:d0:23:40:07:95:46:d4:2a: 01:0e:85:79:63:4d:56:c5:69:1b:29:51:a0:4b:3a: aa:a7:1a:ff:bb:2e:9d:de:98:9f:46:0d:fe:79:8f: 20:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:61:A4:C2:EC:D8:2C:A5:C5:6C:EC:46:8D:A4:11:A4:20:F1:AF:82 X509v3 Authority Key Identifier: keyid:30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ff:9a:db:2f:3f:d0:97:98:35:91:79:a2:34:a8:a7:a3:11: 1c:12:c6:1c:a0:b3:34:d5:24:e9:16:56:39:dd:dc:da:5e:35: e2:18:80:dc:98:af:5c:0f:64:df:b9:37:4f:2e:0a:1d:c5:16: 37:4a:b7:23:36:21:49:f3:a2:07:6c:b5:a4:10:ee:36:f0:f5: 32:01:08:32:05:33:5b:1f:95:12:d9:45:4a:99:f7:02:db:3e: f3:16:2a:5e:b1:ca:e9:c6:f9:56:c5:5f:5b:dc:b1:ed:8f:b2: fe:c5:1f:93:8e:c5:0a:7d:57:ec:9c:09:95:d3:92:4f:3e:69: 92:31:89:fa:af:e9:e2:03:25:c2:3f:30:65:6b:ad:41:72:6d: 98:a7:e5:26:17:b6:72:5f:36:a0:e9:ea:cd:30:51:88:4f:06: 34:25:6c:0f:06:b7:99:c5:78:9b:21:37:5a:fc:46:56:71:f2: 08:32:b0:64:44:54:dc:0a:25:02:b1:dc:ca:3a:0d:5d:e4:69: fc:46:c7:c9:7f:2d:8b:15:d3:92:e2:6d:e0:e4:93:b6:46:f9: 59:5a:24:06:e1:04:c1:d3:ad:79:7d:06:73:ac:b7:a8:85:f4: 9b:fc:b8:63:ca:53:2f:65:bc:24:ac:83:50:3a:69:ef:e5:71: ec:87:c6:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULOoCpWHaXT5Vmm/Z/jQx29z5wMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3 RTkxMkQ0NTAeFw0yNTA2MjgyMTI2MDhaFw0yNTA3MDIwNzA0MDhaMDMxMTAvBgNV BAMTKEFGNjFBNEMyRUNEODJDQTVDNTZDRUM0NjhEQTQxMUE0MjBGMUFGODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXn5fpISifB+fp281lqsE126v FfnDbCxIUbgClay2U60pYtdpSyheP5jubAtlsDpEMSj6402SdpGi8HgK+etUDO+X 8kLMGwAcKz6rgv/EgJRI8FrDo2alkuAk4LB1oKLqE0E82alX0Ss7B3CTNMiYzT5r jy9wnZ0jCY0y71/vyQA1Sk2WRrjpLebgWvPTWd18VkyFIFlUDJGZXUa0pXtFffJ2 rg20fK7H7c0GtKWzFraT5QrKiC17Y1acYxNfaHr12yzt6UiS17aMhnV4yc13VInf MciUOm/QI0AHlUbUKgEOhXljTVbFaRspUaBLOqqnGv+7Lp3emJ9GDf55jyATAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr2GkwuzYLKXFbOxGjaQRpCDxr4IwHwYDVR0j BBgwFoAUMOK0YXuLnPxPxXscWk10/H6RLUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjlmODkwMi0xYTA2LTQ1YTgtYTk5OC03MmU0NmFhYWU4ZmMvMC8zMEUyQjQ2MTdC OEI5Q0ZDNEZDNTdCMUM1QTRENzRGQzdFOTEyRDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3RTkx MkQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI5Zjg5MDItMWEwNi00NWE4LWE5 OTgtNzJlNDZhYWFlOGZjLzAvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0 RkM3RTkxMkQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGz/mtsvP9CXmDWReaI0qKejERwSxhygszTV JOkWVjnd3NpeNeIYgNyYr1wPZN+5N08uCh3FFjdKtyM2IUnzogdstaQQ7jbw9TIB CDIFM1sflRLZRUqZ9wLbPvMWKl6xyunG+VbFX1vcse2Psv7FH5OOxQp9V+ycCZXT kk8+aZIxifqv6eIDJcI/MGVrrUFybZin5SYXtnJfNqDp6s0wUYhPBjQlbA8Gt5nF eJshN1r8RlZx8ggysGREVNwKJQKx3Mo6DV3kafxGx8l/LYsV05LibeDkk7ZG+Vla JAbhBMHTrXl9BnOst6iF9Jv8uGPKUy9lvCSsg1A6ae/lceyHxoY= -----END CERTIFICATE-----Generated at Sun Jun 29 18:45:10 2025 by rpki-client