$ rpki-client -vvf repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft File: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft (raw, json) Hash identifier: b2Z9L5nq/K9wydWK5uX56ROSt/sQj4/wRK6/qdBuy9I= Subject key identifier: 4D:87:88:5B:7B:6A:F1:7F:6F:11:DD:86:C4:9F:85:1C:9B:14:78:7F Authority key identifier: 30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 Certificate issuer: /CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Certificate serial: 35BA7E43B99727448B82D58134B0B46C4809534A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft Manifest number: 01D0 Signing time: Fri 22 Aug 2025 15:51:09 +0000 Manifest this update: Fri 22 Aug 2025 15:46:09 +0000 Manifest next update: Mon 25 Aug 2025 21:46:09 +0000 Files and hashes: 1: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl (hash: AV8iOem4VdTy5awiMOy/zTfEFDysOVCVqaoQ+DwxVZk=) 2: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (hash: xce0AmVhdIuoA0s5G07BTYqxfWM/i2bbCDllzfV1P80=) 3: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (hash: Udg26cCHQ+Qftm36Kch+i7dbSWtv7odm32FXa+73LYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:46:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ba:7e:43:b9:97:27:44:8b:82:d5:81:34:b0:b4:6c:48:09:53:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Validity Not Before: Aug 22 15:46:09 2025 GMT Not After : Aug 25 21:46:09 2025 GMT Subject: CN=4D87885B7B6AF17F6F11DD86C49F851C9B14787F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:67:d1:db:b6:3d:0e:d6:ac:55:59:83:9e:46: 4d:90:45:53:03:7e:59:22:3d:78:94:49:ae:af:32: 55:d1:a9:79:69:f1:bc:f6:e7:06:f3:fd:32:5f:b6: 82:e9:71:9b:9a:0c:2d:fc:f5:43:e4:ad:92:c1:2f: 4b:b5:7a:f0:2c:0e:9c:63:b2:0b:24:27:06:cc:d4: 9f:12:53:90:84:3e:a2:3c:5d:ed:97:ce:ce:21:8e: 0a:05:de:39:4f:2a:a2:d4:0b:1a:27:10:d8:ee:12: ca:fa:8d:ba:fb:53:39:69:4d:b6:02:04:c6:ec:3e: ce:6d:1f:d3:f8:c9:ba:ea:87:77:95:2d:83:c9:81: 16:70:d6:58:76:a3:75:2b:84:34:73:d0:c9:ca:28: 0d:2f:fb:9e:41:48:23:73:b4:03:24:a8:9f:79:54: f4:d8:fb:3f:b6:34:71:50:44:fb:d7:44:b2:aa:b7: 42:63:2a:2c:30:61:78:1b:d5:a7:71:4a:21:00:44: 9d:d2:eb:a6:15:1b:b1:64:4d:de:16:18:a6:4d:62: 5d:36:c6:a1:65:41:e1:ef:84:f0:4f:03:2b:21:91: 9f:5a:b4:d4:b3:37:28:cf:65:89:db:96:70:1f:40: e2:55:5a:83:59:61:a7:99:ea:2b:e2:a0:14:b2:96: bc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:87:88:5B:7B:6A:F1:7F:6F:11:DD:86:C4:9F:85:1C:9B:14:78:7F X509v3 Authority Key Identifier: keyid:30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:72:4a:87:28:d6:d1:d2:0a:bc:58:7d:7c:af:eb:b2:8a:e0: 92:dd:c7:ed:ff:e7:d8:8b:cd:75:1b:5c:a1:a6:43:64:fe:5c: be:0f:33:a4:62:be:bb:a3:8f:ea:d5:1e:a1:e6:dd:e3:13:75: d3:39:4e:5a:a6:c1:3c:09:1e:05:2d:46:5f:d3:a4:dc:c5:64: 63:80:6c:14:5e:d5:b2:a5:dc:11:c1:e0:10:1b:6c:dd:3a:4d: 72:b9:a9:2a:1a:f0:5e:54:2a:18:60:f9:aa:05:2e:dc:be:c6: 4b:9f:d8:9c:16:93:73:9a:d4:46:1c:0e:1b:75:71:a4:f5:fc: 64:cb:2e:90:cc:de:a9:d4:41:4d:fa:a3:75:ef:46:1c:5c:58: db:ac:61:92:8c:15:66:8b:30:c2:d0:c1:68:d8:25:74:28:8d: 3e:e3:97:cb:8a:8e:89:9d:7f:30:99:e0:48:c9:a3:f6:4c:2d: f7:1e:e5:49:98:83:50:f1:21:23:87:27:0d:88:39:57:92:2a: 9a:e9:c5:da:45:30:35:1c:26:be:3b:d0:60:30:09:a8:4e:dc: 95:8d:76:06:f7:f7:a1:9f:ab:20:9e:2a:3e:f9:43:0e:07:5b: bd:51:32:8d:76:3c:de:e3:6f:22:e3:fa:07:4f:f2:79:e5:5b: 1b:aa:58:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNbp+Q7mXJ0SLgtWBNLC0bEgJU0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3 RTkxMkQ0NTAeFw0yNTA4MjIxNTQ2MDlaFw0yNTA4MjUyMTQ2MDlaMDMxMTAvBgNV BAMTKDREODc4ODVCN0I2QUYxN0Y2RjExREQ4NkM0OUY4NTFDOUIxNDc4N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmZ9Hbtj0O1qxVWYOeRk2QRVMD flkiPXiUSa6vMlXRqXlp8bz25wbz/TJftoLpcZuaDC389UPkrZLBL0u1evAsDpxj sgskJwbM1J8SU5CEPqI8Xe2Xzs4hjgoF3jlPKqLUCxonENjuEsr6jbr7UzlpTbYC BMbsPs5tH9P4ybrqh3eVLYPJgRZw1lh2o3UrhDRz0MnKKA0v+55BSCNztAMkqJ95 VPTY+z+2NHFQRPvXRLKqt0JjKiwwYXgb1adxSiEARJ3S66YVG7FkTd4WGKZNYl02 xqFlQeHvhPBPAyshkZ9atNSzNyjPZYnblnAfQOJVWoNZYaeZ6ivioBSylryvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTYeIW3tq8X9vEd2GxJ+FHJsUeH8wHwYDVR0j BBgwFoAUMOK0YXuLnPxPxXscWk10/H6RLUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjlmODkwMi0xYTA2LTQ1YTgtYTk5OC03MmU0NmFhYWU4ZmMvMC8zMEUyQjQ2MTdC OEI5Q0ZDNEZDNTdCMUM1QTRENzRGQzdFOTEyRDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3RTkx MkQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI5Zjg5MDItMWEwNi00NWE4LWE5 OTgtNzJlNDZhYWFlOGZjLzAvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0 RkM3RTkxMkQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJySoco1tHSCrxYfXyv67KK4JLdx+3/59iL zXUbXKGmQ2T+XL4PM6Rivrujj+rVHqHm3eMTddM5TlqmwTwJHgUtRl/TpNzFZGOA bBRe1bKl3BHB4BAbbN06TXK5qSoa8F5UKhhg+aoFLty+xkuf2JwWk3Oa1EYcDht1 caT1/GTLLpDM3qnUQU36o3XvRhxcWNusYZKMFWaLMMLQwWjYJXQojT7jl8uKjomd fzCZ4EjJo/ZMLfce5UmYg1DxISOHJw2IOVeSKprpxdpFMDUcJr470GAwCahO3JWN dgb396GfqyCeKj75Qw4HW71RMo12PN7jbyLj+gdP8nnlWxuqWEI= -----END CERTIFICATE-----Generated at Sat Aug 23 12:04:59 2025 by rpki-client