$ rpki-client -vvf repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft File: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft (raw, json) Hash identifier: mXr4I8tBGMLv2qKG+VQWKXmeNyOcVG/HzY9k9uQSCQY= Subject key identifier: FC:46:99:A2:4E:F1:BF:5F:63:08:82:28:AD:86:85:77:D8:31:F9:C2 Authority key identifier: B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 Certificate issuer: /CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Certificate serial: 2FE3390CAC0C9EB9A66E3A46BE1998468B5A204E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft Manifest number: 014A Signing time: Sun 29 Jun 2025 02:41:05 +0000 Manifest this update: Sun 29 Jun 2025 02:36:05 +0000 Manifest next update: Wed 02 Jul 2025 12:30:05 +0000 Files and hashes: 1: 3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (hash: HxY+qbSnnto1Z4HzXSATggf6s2/jsThuJ9IKEWbevzQ=) 2: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl (hash: kQTRugs/9DdwK5tPeiNM6Q0NCxrbOTq/pIz6sYJzLbQ=) 3: 3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (hash: 5p8DeVWE4ixdVzTUD+2z3ALmeQQXrFM+ymQAz8yvg9Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e3:39:0c:ac:0c:9e:b9:a6:6e:3a:46:be:19:98:46:8b:5a:20:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Validity Not Before: Jun 29 02:36:05 2025 GMT Not After : Jul 2 12:30:05 2025 GMT Subject: CN=FC4699A24EF1BF5F63088228AD868577D831F9C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:89:bf:7b:2f:01:c3:55:47:db:47:55:fe:42: 5b:31:89:a8:a2:86:4a:65:9b:41:67:1a:a7:b1:d7: 03:d4:fa:13:39:54:9f:a3:16:e4:8f:c9:08:eb:45: 8e:6f:18:2d:30:18:7a:ba:3e:1f:13:04:37:62:ab: c3:fe:c8:be:40:4c:b2:e6:f0:2a:97:a7:8c:7f:2f: 6d:e2:25:8e:2f:07:68:c9:47:4e:4b:1b:2a:9a:e9: 0b:1b:ee:fd:85:de:92:76:54:44:c5:40:4f:d1:5f: d5:9f:e4:92:89:10:42:45:05:2b:95:7f:bc:86:8f: b7:17:83:d1:6b:8c:98:8d:b5:35:e7:d3:8e:d2:33: 95:40:78:9f:33:49:27:72:a5:17:d5:b6:da:f0:9c: 85:26:6b:46:fa:69:c3:87:15:64:a3:ca:39:fe:ae: 35:d8:92:16:75:59:30:fc:59:40:2a:17:4a:00:e8: ea:ce:1f:b3:33:73:ca:c0:43:d9:09:8f:5b:fb:ef: c0:26:e3:0f:98:1c:bd:1d:48:47:58:be:2a:3b:2e: d1:6f:04:e8:e2:2c:79:04:57:62:8e:18:4d:ea:65: 65:4c:f7:b6:59:d3:cc:9b:f6:26:fc:32:b6:ce:2b: 6e:49:42:f2:10:c1:49:d8:8e:50:6a:71:e3:ab:2c: 26:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:46:99:A2:4E:F1:BF:5F:63:08:82:28:AD:86:85:77:D8:31:F9:C2 X509v3 Authority Key Identifier: keyid:B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:12:54:c4:d1:65:6b:13:d0:03:0f:d8:68:29:df:7c:8d:0a: 7f:95:a3:9c:c4:a6:17:85:0c:e7:e4:0d:d4:ee:4e:2f:c8:36: 66:14:1a:df:76:bb:4c:ea:ce:96:15:b6:1f:fd:6a:bd:77:e8: 50:d6:14:7a:a0:61:fe:33:43:2b:0e:5f:20:52:db:9c:4b:33: fc:6d:03:3a:ff:7f:78:2a:bc:37:7c:94:a0:ae:29:ad:e1:c5: c1:11:3f:9a:de:71:89:36:db:15:a2:30:a7:80:ae:31:44:ee: 53:48:d1:86:3c:a5:10:8f:04:2c:2f:32:32:80:85:6a:8d:50: 53:5e:3d:48:0d:3e:4b:87:89:f7:e9:c2:5c:04:f4:bd:78:a5: c3:3b:63:55:03:d2:46:06:fd:ba:5e:74:a7:d2:88:2f:63:f3: d8:49:ae:3c:32:96:f2:a4:2d:58:fa:2e:40:48:8f:57:81:b8: ec:ac:0c:16:d2:63:05:48:6c:14:90:21:19:97:b3:4f:81:2b: dd:a9:78:00:a9:08:c8:9a:32:bf:ba:11:88:1d:13:bb:15:c2: 96:c1:7f:f3:d4:98:a7:cc:f8:7f:d9:26:55:04:6f:fc:2f:52: 11:76:ec:80:1d:bf:a2:23:26:8f:2a:2e:63:04:ac:7a:ab:fc: f7:a0:75:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+M5DKwMnrmmbjpGvhmYRotaIE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlC MTE5NEREODAeFw0yNTA2MjkwMjM2MDVaFw0yNTA3MDIxMjMwMDVaMDMxMTAvBgNV BAMTKEZDNDY5OUEyNEVGMUJGNUY2MzA4ODIyOEFEODY4NTc3RDgzMUY5QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiib97LwHDVUfbR1X+Qlsxiaii hkplm0FnGqex1wPU+hM5VJ+jFuSPyQjrRY5vGC0wGHq6Ph8TBDdiq8P+yL5ATLLm 8CqXp4x/L23iJY4vB2jJR05LGyqa6Qsb7v2F3pJ2VETFQE/RX9Wf5JKJEEJFBSuV f7yGj7cXg9FrjJiNtTXn047SM5VAeJ8zSSdypRfVttrwnIUma0b6acOHFWSjyjn+ rjXYkhZ1WTD8WUAqF0oA6OrOH7Mzc8rAQ9kJj1v778Am4w+YHL0dSEdYvio7LtFv BOjiLHkEV2KOGE3qZWVM97ZZ08yb9ib8MrbOK25JQvIQwUnYjlBqceOrLCYfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/EaZok7xv19jCIIorYaFd9gx+cIwHwYDVR0j BBgwFoAUsw/b3nD75wzETzxxC0ZwabEZTdgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDc1MDg4ZS00OWFmLTQ3MmItOWI2Mi04MWU3M2RhYWYxZDYvMC9CMzBGREJERTcw RkJFNzBDQzQ0RjNDNzEwQjQ2NzA2OUIxMTk0REQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlCMTE5 NEREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ3NTA4OGUtNDlhZi00NzJiLTli NjItODFlNzNkYWFmMWQ2LzAvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0Njcw NjlCMTE5NEREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgSVMTRZWsT0AMP2Ggp33yNCn+Vo5zEpheF DOfkDdTuTi/INmYUGt92u0zqzpYVth/9ar136FDWFHqgYf4zQysOXyBS25xLM/xt Azr/f3gqvDd8lKCuKa3hxcERP5recYk22xWiMKeArjFE7lNI0YY8pRCPBCwvMjKA hWqNUFNePUgNPkuHiffpwlwE9L14pcM7Y1UD0kYG/bpedKfSiC9j89hJrjwylvKk LVj6LkBIj1eBuOysDBbSYwVIbBSQIRmXs0+BK92peACpCMiaMr+6EYgdE7sVwpbB f/PUmKfM+H/ZJlUEb/wvUhF27IAdv6IjJo8qLmMErHqr/Pegdcw= -----END CERTIFICATE-----Generated at Sun Jun 29 20:03:41 2025 by rpki-client