$ rpki-client -vvf repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft File: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft (raw, json) Hash identifier: wxUMq+LPft8iJjmqSM/Ecp6bIt1kAemt3z7cdakbCk8= Subject key identifier: 58:A6:C7:20:02:DB:DE:AF:45:1B:C1:A9:71:0B:B8:2E:84:51:C3:6C Authority key identifier: B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 Certificate issuer: /CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Certificate serial: 100B7683DB2C0BB355088BD23AE67FC4F0C8F077 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft Manifest number: 017B Signing time: Sat 18 Oct 2025 13:11:07 +0000 Manifest this update: Sat 18 Oct 2025 13:06:07 +0000 Manifest next update: Wed 22 Oct 2025 01:08:07 +0000 Files and hashes: 1: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl (hash: Dz+j4KQhUipO/X1Ufa7PIzEibWRzgZcNv537RWm592s=) 2: 3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (hash: HxY+qbSnnto1Z4HzXSATggf6s2/jsThuJ9IKEWbevzQ=) 3: 3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (hash: 5p8DeVWE4ixdVzTUD+2z3ALmeQQXrFM+ymQAz8yvg9Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0b:76:83:db:2c:0b:b3:55:08:8b:d2:3a:e6:7f:c4:f0:c8:f0:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Validity Not Before: Oct 18 13:06:07 2025 GMT Not After : Oct 22 01:08:07 2025 GMT Subject: CN=58A6C72002DBDEAF451BC1A9710BB82E8451C36C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:99:d6:05:02:f9:e2:1a:5a:6b:d0:1e:84:7b: 45:9d:98:ff:52:33:f8:f8:ec:17:ea:5c:b6:d2:af: 53:d1:ca:19:a0:bf:c8:65:48:bb:53:27:03:92:af: 92:a0:cc:0d:e1:db:73:5d:8c:b9:07:ce:43:af:d6: 19:47:c8:d1:cb:a1:cf:19:9e:a5:ed:dc:00:4e:ba: 4e:2e:cb:5f:b0:aa:4c:b3:22:68:ce:0a:8b:bc:1e: dc:43:85:3e:bc:04:15:83:60:3b:f0:ef:e2:9c:d0: 5d:31:f7:65:ec:0e:64:ca:f3:5d:d5:a6:d4:c1:8c: 16:8f:a3:89:4f:a4:d5:82:29:26:5c:79:ed:3b:fe: 1f:80:e0:b9:10:9d:1f:5e:c5:79:85:36:2f:58:22: c8:aa:28:b7:de:b8:cb:c5:95:c7:1b:7c:2c:9b:12: 15:15:c9:6e:28:4a:80:62:97:eb:ee:80:52:8c:08: 01:2c:a6:23:f0:c9:4e:7b:74:d6:41:9a:a4:23:8c: 2e:e9:82:cb:d6:1e:60:04:35:91:3f:25:ce:ef:71: a0:c4:75:7b:b5:b1:f8:c4:9b:9e:07:b8:4d:6d:fa: 6d:eb:2b:5a:a6:06:d4:f3:b9:bb:b4:da:0e:7a:89: 7a:cf:c2:6b:04:0c:9f:45:a3:73:23:24:22:11:9b: 5a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A6:C7:20:02:DB:DE:AF:45:1B:C1:A9:71:0B:B8:2E:84:51:C3:6C X509v3 Authority Key Identifier: keyid:B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:18:99:34:d4:30:23:0b:38:7b:77:93:65:d8:48:e0:01:39: 77:ff:25:1a:ed:47:19:36:e3:81:aa:ae:6d:ad:d7:ab:7f:06: d7:bd:3f:36:f2:56:30:93:4e:31:1d:65:67:6a:94:a3:44:40: dc:de:54:58:73:14:71:21:c8:b4:89:e9:b8:c5:a7:df:28:c1: 6d:97:5f:02:66:dd:9f:9c:74:5c:7e:e6:3b:3f:7c:fa:b8:b6: 3a:99:a1:1b:aa:33:ab:4b:96:d8:f3:13:ff:a3:fd:a4:2a:cc: 95:0b:6e:e7:05:1a:aa:79:9c:10:c5:c2:c2:4d:76:f5:a0:8b: eb:ed:6b:75:18:a9:42:2c:ca:50:22:fa:9c:1e:73:79:6e:98: 21:e5:24:ce:7b:c2:f9:d2:17:db:cb:af:43:41:6c:a9:14:ba: 4b:a4:13:88:c8:25:f9:30:27:61:37:94:cd:58:7a:d7:f7:d3: c3:72:69:68:ec:d2:aa:3d:ae:ef:a6:a2:97:ed:53:47:1c:5f: 1f:1a:a6:33:4c:fa:89:09:b5:4d:4e:ec:51:6f:f2:bf:79:34: 69:82:ff:10:66:1d:fb:a4:13:3a:47:ed:c1:6e:0e:25:52:89: 65:bf:bf:e8:c9:ea:25:47:c6:7f:1b:22:2c:7e:21:63:4d:e9: 5a:8c:27:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEAt2g9ssC7NVCIvSOuZ/xPDI8HcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlC MTE5NEREODAeFw0yNTEwMTgxMzA2MDdaFw0yNTEwMjIwMTA4MDdaMDMxMTAvBgNV BAMTKDU4QTZDNzIwMDJEQkRFQUY0NTFCQzFBOTcxMEJCODJFODQ1MUMzNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEmdYFAvniGlpr0B6Ee0WdmP9S M/j47BfqXLbSr1PRyhmgv8hlSLtTJwOSr5KgzA3h23NdjLkHzkOv1hlHyNHLoc8Z nqXt3ABOuk4uy1+wqkyzImjOCou8HtxDhT68BBWDYDvw7+Kc0F0x92XsDmTK813V ptTBjBaPo4lPpNWCKSZcee07/h+A4LkQnR9exXmFNi9YIsiqKLfeuMvFlccbfCyb EhUVyW4oSoBil+vugFKMCAEspiPwyU57dNZBmqQjjC7pgsvWHmAENZE/Jc7vcaDE dXu1sfjEm54HuE1t+m3rK1qmBtTzubu02g56iXrPwmsEDJ9Fo3MjJCIRm1ovAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWKbHIALb3q9FG8GpcQu4LoRRw2wwHwYDVR0j BBgwFoAUsw/b3nD75wzETzxxC0ZwabEZTdgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDc1MDg4ZS00OWFmLTQ3MmItOWI2Mi04MWU3M2RhYWYxZDYvMC9CMzBGREJERTcw RkJFNzBDQzQ0RjNDNzEwQjQ2NzA2OUIxMTk0REQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlCMTE5 NEREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ3NTA4OGUtNDlhZi00NzJiLTli NjItODFlNzNkYWFmMWQ2LzAvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0Njcw NjlCMTE5NEREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYYmTTUMCMLOHt3k2XYSOABOXf/JRrtRxk2 44Gqrm2t16t/Bte9PzbyVjCTTjEdZWdqlKNEQNzeVFhzFHEhyLSJ6bjFp98owW2X XwJm3Z+cdFx+5js/fPq4tjqZoRuqM6tLltjzE/+j/aQqzJULbucFGqp5nBDFwsJN dvWgi+vta3UYqUIsylAi+pwec3lumCHlJM57wvnSF9vLr0NBbKkUukukE4jIJfkw J2E3lM1Yetf308NyaWjs0qo9ru+mopftU0ccXx8apjNM+okJtU1O7FFv8r95NGmC /xBmHfukEzpH7cFuDiVSiWW/v+jJ6iVHxn8bIix+IWNN6VqMJ44= -----END CERTIFICATE-----Generated at Mon Oct 20 20:43:21 2025 by rpki-client