$ rpki-client -vvf repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft File: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft (raw, json) Hash identifier: /m62/cr/Z1KGiicrTTYuQ6KOfeBwSb6fyIbcbXkGi0E= Subject key identifier: 85:7C:A4:F0:76:E8:4C:89:D6:65:84:A3:4A:74:C6:3E:32:B0:8C:2B Authority key identifier: 30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51 Certificate issuer: /CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51 Certificate serial: 42ED5553EE1DDE576E2C749E90DBBA839568593D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft Manifest number: 03BE Signing time: Mon 30 Jun 2025 02:01:40 +0000 Manifest this update: Mon 30 Jun 2025 01:56:40 +0000 Manifest next update: Thu 03 Jul 2025 13:19:40 +0000 Files and hashes: 1: 3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa (hash: FCHx6FaRMarTOvIyDDJKyaewpvcQNtFaDUPbc3o5Lx0=) 2: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl (hash: FJvLruHSu21n31xwmVoJv7p1QPJ8tzwCMA0jNTVLGkE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 13:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ed:55:53:ee:1d:de:57:6e:2c:74:9e:90:db:ba:83:95:68:59:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51 Validity Not Before: Jun 30 01:56:40 2025 GMT Not After : Jul 3 13:19:40 2025 GMT Subject: CN=857CA4F076E84C89D66584A34A74C63E32B08C2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e8:05:fc:11:30:30:b3:44:6d:9d:2b:52:e7: 2c:36:43:8c:31:5e:24:9f:63:8f:a3:04:d0:5a:7c: 6a:d4:3c:68:34:00:76:fb:41:cf:f6:bf:de:4b:e5: 24:11:8f:a3:74:50:c5:66:ee:c3:5a:d6:bf:28:45: 34:4d:f5:92:34:0c:02:09:d5:06:1e:97:ed:58:60: 6e:ff:43:24:5b:1c:83:6f:51:28:7e:f2:b8:50:04: aa:74:a6:1a:5e:51:8b:36:e0:1c:1b:c6:84:e0:40: 34:7f:35:db:d1:76:0d:fe:41:bf:cb:3f:cf:ff:d0: 1a:43:c6:c1:81:73:3e:05:3e:f4:3f:5d:01:e3:7f: f5:b5:63:a9:ee:cb:ae:36:e6:8e:02:a8:8e:28:59: a5:d4:bc:4d:59:41:b9:3d:b8:86:fb:f3:5e:af:5a: ae:59:f5:17:c5:51:5c:94:09:3d:b7:15:56:7d:9f: f6:f2:1b:85:60:04:54:07:52:29:c9:03:28:dd:2f: 27:e9:7d:b9:15:72:63:7e:e9:d8:35:32:00:8b:0d: 2b:8d:01:26:a9:cb:b3:ec:a9:86:9e:4f:8c:ea:7b: 33:88:51:5e:b7:fe:33:f0:be:20:97:d8:da:d7:6a: 79:f9:98:53:a4:55:ad:06:bd:e7:05:2b:a1:48:a3: f3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7C:A4:F0:76:E8:4C:89:D6:65:84:A3:4A:74:C6:3E:32:B0:8C:2B X509v3 Authority Key Identifier: keyid:30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:6c:44:2a:7c:2f:eb:d7:29:7d:1e:41:1e:0c:9f:78:b6:a4: a5:9c:6c:99:aa:fa:33:ca:5b:bb:06:1a:52:ed:98:55:0c:a4: 40:27:18:9f:8f:45:72:28:66:ab:05:9a:2c:ff:64:9d:80:ee: 50:6a:43:21:c0:d3:b7:6d:35:0c:38:43:bc:1a:bc:68:1a:5c: 92:5d:e3:7f:37:54:f0:57:df:41:3c:cf:c7:aa:2c:fb:35:31: e1:7a:80:07:b4:8a:78:ae:19:00:73:b6:e0:1b:bf:b0:6f:42: ef:8e:ee:07:ad:e8:23:b1:6e:ae:ba:33:0d:1b:2c:9f:ca:5a: 9a:cd:1d:86:92:e5:1c:79:f2:62:56:92:16:d0:09:50:f2:f9: b5:fc:18:cc:1c:0f:ac:d8:62:9b:55:42:18:d9:dc:bb:5e:aa: 21:ba:90:95:e0:da:d7:b5:af:f0:a2:87:10:92:3e:83:60:49: 94:2b:56:3b:3a:f2:d2:12:8f:61:aa:3e:28:6c:d2:b8:2e:a7: 97:01:7b:1a:04:02:15:5a:aa:5b:37:85:ad:38:a3:c7:a9:ee: 71:ac:f9:21:05:cb:00:60:25:70:72:0d:d5:dd:65:b0:2e:0c: 78:88:4e:2f:65:9c:26:aa:1d:d8:2c:83:5b:5f:13:9a:5f:85: 51:ed:4e:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQu1VU+4d3lduLHSekNu6g5VoWT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJDODAy NkEwQ0U1MTAeFw0yNTA2MzAwMTU2NDBaFw0yNTA3MDMxMzE5NDBaMDMxMTAvBgNV BAMTKDg1N0NBNEYwNzZFODRDODlENjY1ODRBMzRBNzRDNjNFMzJCMDhDMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT6AX8ETAws0RtnStS5yw2Q4wx XiSfY4+jBNBafGrUPGg0AHb7Qc/2v95L5SQRj6N0UMVm7sNa1r8oRTRN9ZI0DAIJ 1QYel+1YYG7/QyRbHINvUSh+8rhQBKp0phpeUYs24BwbxoTgQDR/NdvRdg3+Qb/L P8//0BpDxsGBcz4FPvQ/XQHjf/W1Y6nuy6425o4CqI4oWaXUvE1ZQbk9uIb7816v Wq5Z9RfFUVyUCT23FVZ9n/byG4VgBFQHUinJAyjdLyfpfbkVcmN+6dg1MgCLDSuN ASapy7PsqYaeT4zqezOIUV63/jPwviCX2NrXann5mFOkVa0GvecFK6FIo/OvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhXyk8HboTInWZYSjSnTGPjKwjCswHwYDVR0j BBgwFoAUMPwS6QOuDuh70aHligYsgCagzlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzExYzExMC03YWIxLTRhMzktYjljYS0zYTliMGU4MWJjZjUvMC8zMEZDMTJFOTAz QUUwRUU4N0JEMUExRTU4QTA2MkM4MDI2QTBDRTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJDODAyNkEw Q0U1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDcxMWMxMTAtN2FiMS00YTM5LWI5 Y2EtM2E5YjBlODFiY2Y1LzAvMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJD ODAyNkEwQ0U1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1sRCp8L+vXKX0eQR4Mn3i2pKWcbJmq+jPK W7sGGlLtmFUMpEAnGJ+PRXIoZqsFmiz/ZJ2A7lBqQyHA07dtNQw4Q7wavGgaXJJd 4383VPBX30E8z8eqLPs1MeF6gAe0iniuGQBztuAbv7BvQu+O7get6COxbq66Mw0b LJ/KWprNHYaS5Rx58mJWkhbQCVDy+bX8GMwcD6zYYptVQhjZ3LteqiG6kJXg2te1 r/CihxCSPoNgSZQrVjs68tISj2GqPihs0rgup5cBexoEAhVaqls3ha04o8ep7nGs +SEFywBgJXByDdXdZbAuDHiITi9lnCaqHdgsg1tfE5pfhVHtTu4= -----END CERTIFICATE-----Generated at Wed Jul 2 10:26:32 2025 by rpki-client