$ rpki-client -vvf repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft File: 30C896473FC5DE403F4651059F6BE1586BFAC473.mft (raw, json) Hash identifier: +48CMtdfKQHdLk9VtOa0WRN7PpP2J/GykkHSttQjfxU= Subject key identifier: 1C:3F:7B:8C:EC:6E:6A:B1:98:AE:28:AC:63:62:6F:DA:FB:2A:BF:A6 Authority key identifier: 30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 Certificate issuer: /CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Certificate serial: 6BE0642D212F34E559E12B12EDE7CCC99E366DE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft Manifest number: 8D Signing time: Wed 02 Jul 2025 21:41:40 +0000 Manifest this update: Wed 02 Jul 2025 21:36:40 +0000 Manifest next update: Sun 06 Jul 2025 07:21:40 +0000 Files and hashes: 1: 30C896473FC5DE403F4651059F6BE1586BFAC473.crl (hash: zLa4cDxursbYcxQiPj/EPhWBrnMPvy29ThYFVIYIY2I=) 2: 3135372e36362e36362e302f32342d3234203d3e20313532373831.roa (hash: x/vtNdgftiP2gNHQRXmqF+bNIt+0K74KbEvvSueFvXY=) 3: 3135372e36362e36372e302f32342d3234203d3e20313532373831.roa (hash: jM3o+qLgLitpWG9aIDTu7g7FqrNoiH7dHWh51KuZSvY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 07:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e0:64:2d:21:2f:34:e5:59:e1:2b:12:ed:e7:cc:c9:9e:36:6d:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Validity Not Before: Jul 2 21:36:40 2025 GMT Not After : Jul 6 07:21:40 2025 GMT Subject: CN=1C3F7B8CEC6E6AB198AE28AC63626FDAFB2ABFA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c1:ef:24:f7:2d:69:33:c5:08:df:0b:b3:04: bf:7d:33:c8:ae:c3:6f:86:a0:5f:c0:06:42:d6:7c: 76:a0:22:26:b1:fd:1e:a5:d7:ea:7f:b9:24:e1:56: 47:0b:9e:fb:27:ca:10:ce:ac:89:db:3f:03:77:9c: eb:02:3a:3d:04:5b:89:ef:d4:11:df:9a:e3:df:67: b4:7a:56:24:80:98:4c:59:bd:72:ca:4a:ea:41:11: fa:a1:0f:bf:63:65:54:1e:49:53:2b:ae:a2:87:f3: e0:ec:2f:ee:48:96:e3:47:91:05:65:03:53:16:85: fa:df:c0:d2:6d:34:95:59:bb:ed:24:01:45:84:2f: 02:e6:b9:19:a2:91:de:d0:93:99:35:b2:9e:e3:97: 37:5c:2e:94:07:6d:fb:4e:bf:4c:b7:69:45:0f:47: 24:02:c5:84:6f:fa:f1:33:44:27:f0:c1:2a:68:7d: a0:b5:cd:df:86:41:c9:ab:91:88:8b:ce:cf:f3:96: 02:67:56:da:58:f6:79:fe:7d:0f:d7:a6:f8:e3:52: 34:a3:61:5f:8b:f6:7a:b6:5a:03:90:ba:a9:a0:83: 25:e8:58:95:46:89:0b:c6:ea:c5:0d:ce:86:fa:b7: 3b:89:55:a9:40:1d:5d:a3:6c:fb:f1:0d:37:b9:98: 2b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3F:7B:8C:EC:6E:6A:B1:98:AE:28:AC:63:62:6F:DA:FB:2A:BF:A6 X509v3 Authority Key Identifier: keyid:30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:2a:f7:8c:82:f8:70:c3:bf:b9:d1:8d:8c:26:c2:3b:97:7f: 04:67:59:8c:de:b0:31:6f:af:84:db:df:b4:f0:ab:fe:fd:48: e1:83:9d:70:4a:9a:bd:3d:67:4a:66:f2:aa:6a:46:3a:26:01: 83:8a:b5:3b:86:5b:ef:af:39:1e:cb:b5:36:5d:e2:45:fc:ef: 32:4a:94:f4:e4:6c:ef:59:79:86:32:65:fd:fb:0e:7e:53:82: 8e:5f:34:65:22:67:c5:24:04:e5:15:c0:4f:17:c3:11:88:49: d4:5c:ac:db:58:d5:7b:e4:4d:54:d8:7d:59:3f:f7:73:19:d5: c0:0b:45:4f:bb:d0:79:90:58:91:bf:97:2e:80:32:49:cb:d5: 86:de:3d:f4:ec:b7:4e:90:72:63:65:41:e8:2b:a2:59:09:52: 76:0c:68:2a:ff:e6:b6:32:5b:a3:19:98:6a:3b:42:03:25:a6: da:a6:12:0d:f4:83:d1:c2:2e:90:08:c6:c5:42:52:43:67:18: b9:b0:d0:a4:d3:64:b1:a4:73:6c:cf:af:51:3a:97:61:0d:c5: d8:f7:31:44:9a:5d:8b:b7:37:b6:62:17:ea:df:c6:0b:46:63: 61:a2:b2:f7:a3:ad:57:71:1c:b3:f2:3a:de:86:49:2f:8c:53: 9e:c3:e7:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa+BkLSEvNOVZ4SsS7efMyZ42beUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2 QkZBQzQ3MzAeFw0yNTA3MDIyMTM2NDBaFw0yNTA3MDYwNzIxNDBaMDMxMTAvBgNV BAMTKDFDM0Y3QjhDRUM2RTZBQjE5OEFFMjhBQzYzNjI2RkRBRkIyQUJGQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLwe8k9y1pM8UI3wuzBL99M8iu w2+GoF/ABkLWfHagIiax/R6l1+p/uSThVkcLnvsnyhDOrInbPwN3nOsCOj0EW4nv 1BHfmuPfZ7R6ViSAmExZvXLKSupBEfqhD79jZVQeSVMrrqKH8+DsL+5IluNHkQVl A1MWhfrfwNJtNJVZu+0kAUWELwLmuRmikd7Qk5k1sp7jlzdcLpQHbftOv0y3aUUP RyQCxYRv+vEzRCfwwSpofaC1zd+GQcmrkYiLzs/zlgJnVtpY9nn+fQ/XpvjjUjSj YV+L9nq2WgOQuqmggyXoWJVGiQvG6sUNzob6tzuJValAHV2jbPvxDTe5mCvPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHD97jOxuarGYriisY2Jv2vsqv6YwHwYDVR0j BBgwFoAUMMiWRz/F3kA/RlEFn2vhWGv6xHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjcwYWU3Ni05NTk0LTQ5ODAtYjQxMC00OTFhNjMxOWZmM2EvMC8zMEM4OTY0NzNG QzVERTQwM0Y0NjUxMDU5RjZCRTE1ODZCRkFDNDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2QkZB QzQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY3MGFlNzYtOTU5NC00OTgwLWI0 MTAtNDkxYTYzMTlmZjNhLzAvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUx NTg2QkZBQzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQq94yC+HDDv7nRjYwmwjuXfwRnWYzesDFv r4Tb37Twq/79SOGDnXBKmr09Z0pm8qpqRjomAYOKtTuGW++vOR7LtTZd4kX87zJK lPTkbO9ZeYYyZf37Dn5Tgo5fNGUiZ8UkBOUVwE8XwxGISdRcrNtY1XvkTVTYfVk/ 93MZ1cALRU+70HmQWJG/ly6AMknL1YbePfTst06QcmNlQegrolkJUnYMaCr/5rYy W6MZmGo7QgMlptqmEg30g9HCLpAIxsVCUkNnGLmw0KTTZLGkc2zPr1E6l2ENxdj3 MUSaXYu3N7ZiF+rfxgtGY2GisvejrVdxHLPyOt6GSS+MU57D5yc= -----END CERTIFICATE-----Generated at Sat Jul 5 05:29:37 2025 by rpki-client