$ rpki-client -vvf repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft File: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft (raw, json) Hash identifier: /5WOmSfcfqZoHvGqfhDyMu4ItLD436cnkjyNyCY3fmY= Subject key identifier: 84:01:C9:D5:EC:4F:94:D6:D6:07:95:5A:60:B4:C9:EF:49:48:77:60 Authority key identifier: B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 Certificate issuer: /CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Certificate serial: 4D47F549909087D8EC3D0B1270C7B66B75822720 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft Manifest number: 0162 Signing time: Fri 22 Aug 2025 11:51:05 +0000 Manifest this update: Fri 22 Aug 2025 11:46:05 +0000 Manifest next update: Mon 25 Aug 2025 22:09:05 +0000 Files and hashes: 1: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl (hash: QFNO29X+FO7WEkZnoIfkTotuHOiibCyeaAZN0VGqKsk=) 2: 3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (hash: HxY+qbSnnto1Z4HzXSATggf6s2/jsThuJ9IKEWbevzQ=) 3: 3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (hash: 5p8DeVWE4ixdVzTUD+2z3ALmeQQXrFM+ymQAz8yvg9Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:47:f5:49:90:90:87:d8:ec:3d:0b:12:70:c7:b6:6b:75:82:27:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Validity Not Before: Aug 22 11:46:05 2025 GMT Not After : Aug 25 22:09:05 2025 GMT Subject: CN=8401C9D5EC4F94D6D607955A60B4C9EF49487760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:92:76:a5:6f:ac:86:49:3c:7c:a0:00:34:f4: 93:63:20:95:ce:18:e7:e2:07:e4:ba:72:86:aa:1e: 00:22:98:61:80:44:e3:16:24:98:a4:ab:d7:b0:65: 20:26:03:3c:70:07:0d:9f:37:da:36:c9:04:7a:53: 2c:9a:22:a2:c5:be:8a:8f:05:98:09:54:30:7b:fd: b6:37:9a:de:a0:5d:f8:11:8d:96:fb:70:b1:00:35: 7d:9e:37:de:17:7d:ee:59:93:0f:a9:b9:ec:a1:d8: 9c:52:8d:96:f9:4e:52:a3:35:3e:0d:c0:e6:ff:af: c9:78:17:b5:2c:9d:18:1a:45:2c:e7:d6:24:ca:73: 15:93:bf:07:d5:34:05:1d:dd:62:df:58:3e:1c:54: 6e:bc:14:a5:d2:0d:ee:c9:d4:5d:00:a7:fa:6f:f9: 9e:61:d1:42:0d:62:6f:b6:dc:86:f6:51:a4:6b:7c: 19:0a:e2:71:06:4d:eb:3c:31:86:5a:7e:59:92:36: 06:04:85:15:3b:5a:ed:01:be:25:13:7f:16:d8:1b: 12:ee:28:5c:10:2c:52:66:cd:74:d6:ac:23:1a:6d: d7:5b:fe:96:05:db:33:39:5f:54:37:ba:9a:18:4f: 24:cf:00:0a:a7:12:49:be:bb:f8:21:3b:0e:a5:f5: f9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:01:C9:D5:EC:4F:94:D6:D6:07:95:5A:60:B4:C9:EF:49:48:77:60 X509v3 Authority Key Identifier: keyid:B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ec:68:d0:b5:dc:e7:ce:c1:f8:0c:be:94:d5:ad:11:6c:7b: 99:3d:fb:e9:cb:74:0b:24:a2:83:9a:4d:20:9d:39:c1:eb:72: 28:32:13:ed:8b:85:c3:4b:8e:7a:f0:54:12:5e:d0:8c:06:07: 7e:b4:1b:e0:8c:62:02:bc:52:e0:cd:c9:b4:d2:92:3b:25:f7: ee:be:4e:56:de:64:5f:d2:3f:9d:b3:7a:f3:f3:0b:d6:2f:df: 27:60:fb:d2:f7:7f:73:de:0c:d6:96:44:e5:eb:7e:42:97:e0: 31:40:2c:55:e6:c2:cb:37:0d:da:a9:ec:38:2c:93:92:06:28: 4f:42:96:3c:c1:6c:e7:e0:05:6d:1f:20:4a:7b:06:3a:e3:f8: 8a:41:67:57:bd:72:37:eb:31:ae:73:94:e9:d2:38:42:66:76: 10:30:4b:0f:64:e0:f6:fd:ed:35:f7:66:61:d6:b7:2a:79:a0: 3a:d9:7a:39:8c:d6:c3:9a:9f:88:e1:57:90:09:ad:da:e2:ae: 8e:ac:78:0b:d3:58:08:88:02:80:84:82:81:d3:ba:62:b8:d6: eb:b9:de:21:ad:61:02:86:95:74:59:0f:18:5c:c2:7d:b4:e1: 9b:55:ba:b9:23:11:b4:e1:7f:2f:21:87:b6:e0:b6:fc:19:82: 84:d4:11:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTUf1SZCQh9jsPQsScMe2a3WCJyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlC MTE5NEREODAeFw0yNTA4MjIxMTQ2MDVaFw0yNTA4MjUyMjA5MDVaMDMxMTAvBgNV BAMTKDg0MDFDOUQ1RUM0Rjk0RDZENjA3OTU1QTYwQjRDOUVGNDk0ODc3NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6knalb6yGSTx8oAA09JNjIJXO GOfiB+S6coaqHgAimGGAROMWJJikq9ewZSAmAzxwBw2fN9o2yQR6UyyaIqLFvoqP BZgJVDB7/bY3mt6gXfgRjZb7cLEANX2eN94Xfe5Zkw+pueyh2JxSjZb5TlKjNT4N wOb/r8l4F7UsnRgaRSzn1iTKcxWTvwfVNAUd3WLfWD4cVG68FKXSDe7J1F0Ap/pv +Z5h0UINYm+23Ib2UaRrfBkK4nEGTes8MYZaflmSNgYEhRU7Wu0BviUTfxbYGxLu KFwQLFJmzXTWrCMabddb/pYF2zM5X1Q3upoYTyTPAAqnEkm+u/ghOw6l9fntAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhAHJ1exPlNbWB5VaYLTJ70lId2AwHwYDVR0j BBgwFoAUsw/b3nD75wzETzxxC0ZwabEZTdgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDc1MDg4ZS00OWFmLTQ3MmItOWI2Mi04MWU3M2RhYWYxZDYvMC9CMzBGREJERTcw RkJFNzBDQzQ0RjNDNzEwQjQ2NzA2OUIxMTk0REQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlCMTE5 NEREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ3NTA4OGUtNDlhZi00NzJiLTli NjItODFlNzNkYWFmMWQ2LzAvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0Njcw NjlCMTE5NEREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfsaNC13OfOwfgMvpTVrRFse5k9++nLdAsk ooOaTSCdOcHrcigyE+2LhcNLjnrwVBJe0IwGB360G+CMYgK8UuDNybTSkjsl9+6+ TlbeZF/SP52zevPzC9Yv3ydg+9L3f3PeDNaWROXrfkKX4DFALFXmwss3Ddqp7Dgs k5IGKE9CljzBbOfgBW0fIEp7Bjrj+IpBZ1e9cjfrMa5zlOnSOEJmdhAwSw9k4Pb9 7TX3ZmHWtyp5oDrZejmM1sOan4jhV5AJrdriro6seAvTWAiIAoCEgoHTumK41uu5 3iGtYQKGlXRZDxhcwn204ZtVurkjEbThfy8hh7bgtvwZgoTUETg= -----END CERTIFICATE-----Generated at Sat Aug 23 14:00:25 2025 by rpki-client