$ rpki-client -vvf repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft File: 30C896473FC5DE403F4651059F6BE1586BFAC473.mft (raw, json) Hash identifier: 7gWe3WO/q4xZ5lA+/i1AdLTqXfj/oOotZcEJxnSwESY= Subject key identifier: 97:AB:1B:CA:46:6A:57:D4:C7:A5:7A:28:92:4A:8B:0C:4F:B6:15:7B Authority key identifier: 30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 Certificate issuer: /CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Certificate serial: 48179F2C6FCAB863FB51D232BADBFCD174473267 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft Manifest number: BD Signing time: Mon 20 Oct 2025 08:11:45 +0000 Manifest this update: Mon 20 Oct 2025 08:06:45 +0000 Manifest next update: Thu 23 Oct 2025 18:54:45 +0000 Files and hashes: 1: 3135372e36362e36362e302f32342d3234203d3e20313532373831.roa (hash: x/vtNdgftiP2gNHQRXmqF+bNIt+0K74KbEvvSueFvXY=) 2: 30C896473FC5DE403F4651059F6BE1586BFAC473.crl (hash: 546pS7Qy9GcYJq6mG42BP/HS2zjicOS5pw1LipYP0T4=) 3: 3135372e36362e36372e302f32342d3234203d3e20313532373831.roa (hash: jM3o+qLgLitpWG9aIDTu7g7FqrNoiH7dHWh51KuZSvY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:17:9f:2c:6f:ca:b8:63:fb:51:d2:32:ba:db:fc:d1:74:47:32:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Validity Not Before: Oct 20 08:06:45 2025 GMT Not After : Oct 23 18:54:45 2025 GMT Subject: CN=97AB1BCA466A57D4C7A57A28924A8B0C4FB6157B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d8:13:d2:a6:db:eb:0c:6e:73:80:9e:01:1d: e4:1e:5a:05:f9:ee:35:6e:53:5f:03:36:f4:12:da: 0a:9c:eb:29:02:11:cf:98:56:03:0e:88:a3:83:5d: e1:9b:82:b8:af:c6:ca:6f:12:d4:e6:b0:96:bf:f9: 4a:49:e4:34:cd:11:a8:61:29:0e:7d:0a:fc:b0:31: 9b:56:24:2f:4a:a1:1a:b8:6d:49:10:5f:32:17:59: f1:2f:3e:8f:6a:88:83:8c:80:90:f5:26:e4:c0:f6: 29:cb:9f:ec:10:fb:0b:1f:a7:80:b5:19:57:b3:88: 48:15:a9:12:aa:63:15:42:76:4f:a1:5d:ea:84:ae: df:a1:b4:cd:e9:f9:ed:c6:98:0f:9e:05:41:c7:a8: 16:90:d8:85:cc:0c:d7:5f:64:0b:ab:be:38:c1:03: 63:c5:5a:87:22:8f:84:67:2f:42:77:86:31:c4:68: 3b:36:7f:90:2f:da:55:b7:a4:4a:68:9c:f6:2f:42: c4:56:74:cd:51:18:c9:21:81:16:6e:67:c6:a7:6b: c9:37:57:b7:51:84:8f:d4:93:e7:e5:5f:2d:d0:79: f2:e9:03:eb:92:96:e9:b4:78:f8:4e:a9:f5:5a:e1: b6:07:0b:7b:56:f6:8d:16:52:4b:92:d0:b8:84:ca: 68:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AB:1B:CA:46:6A:57:D4:C7:A5:7A:28:92:4A:8B:0C:4F:B6:15:7B X509v3 Authority Key Identifier: keyid:30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:a6:b7:5e:a5:fd:83:bf:07:75:cf:52:bd:97:d1:fd:df:93: 62:87:fa:21:f7:3b:38:82:9a:66:9a:91:d6:d7:b5:ee:24:31: c9:fd:51:7d:aa:96:a4:3b:6b:fa:aa:e8:c2:9f:a0:45:0f:e9: 86:3d:33:51:7f:7d:59:a8:c7:ee:2d:8e:c9:88:65:b6:a4:f3: c1:21:8b:6d:e1:17:a6:c5:75:ed:93:21:f0:fb:28:6e:fe:74: 64:e6:c2:eb:40:f6:6f:da:5b:25:08:6d:ce:e9:c3:5f:1e:a6: a5:81:a5:c7:60:19:b6:9d:31:b2:b7:f0:4e:5c:6b:8c:46:0e: 13:1d:88:35:d7:8e:11:13:2a:6f:fb:8f:75:84:f8:c9:75:24: f9:4e:33:ae:9f:0a:b3:db:cd:3f:5c:e8:ee:e1:c1:27:10:3a: c9:5e:d8:f1:9d:d8:04:c0:54:55:c9:f5:b8:4e:af:6c:77:75: 77:a5:8a:f1:6d:eb:43:32:11:db:d7:69:8e:dc:48:aa:33:2c: 7e:0a:f2:9e:df:fc:54:1c:a5:8f:d7:de:60:6b:b5:d4:a5:07: b7:65:32:51:a8:c9:f2:5f:4a:ea:56:e3:f6:a3:95:bb:cf:79: 1c:f7:ec:c7:15:e7:3f:3f:e7:69:fc:b1:b1:41:18:5a:b2:28: 98:2a:b9:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSBefLG/KuGP7UdIyutv80XRHMmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2 QkZBQzQ3MzAeFw0yNTEwMjAwODA2NDVaFw0yNTEwMjMxODU0NDVaMDMxMTAvBgNV BAMTKDk3QUIxQkNBNDY2QTU3RDRDN0E1N0EyODkyNEE4QjBDNEZCNjE1N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF2BPSptvrDG5zgJ4BHeQeWgX5 7jVuU18DNvQS2gqc6ykCEc+YVgMOiKODXeGbgrivxspvEtTmsJa/+UpJ5DTNEahh KQ59CvywMZtWJC9KoRq4bUkQXzIXWfEvPo9qiIOMgJD1JuTA9inLn+wQ+wsfp4C1 GVeziEgVqRKqYxVCdk+hXeqErt+htM3p+e3GmA+eBUHHqBaQ2IXMDNdfZAurvjjB A2PFWocij4RnL0J3hjHEaDs2f5Av2lW3pEponPYvQsRWdM1RGMkhgRZuZ8ana8k3 V7dRhI/Uk+flXy3QefLpA+uSlum0ePhOqfVa4bYHC3tW9o0WUkuS0LiEymjTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl6sbykZqV9THpXookkqLDE+2FXswHwYDVR0j BBgwFoAUMMiWRz/F3kA/RlEFn2vhWGv6xHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjcwYWU3Ni05NTk0LTQ5ODAtYjQxMC00OTFhNjMxOWZmM2EvMC8zMEM4OTY0NzNG QzVERTQwM0Y0NjUxMDU5RjZCRTE1ODZCRkFDNDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2QkZB QzQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY3MGFlNzYtOTU5NC00OTgwLWI0 MTAtNDkxYTYzMTlmZjNhLzAvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUx NTg2QkZBQzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGmt16l/YO/B3XPUr2X0f3fk2KH+iH3OziC mmaakdbXte4kMcn9UX2qlqQ7a/qq6MKfoEUP6YY9M1F/fVmox+4tjsmIZbak88Eh i23hF6bFde2TIfD7KG7+dGTmwutA9m/aWyUIbc7pw18epqWBpcdgGbadMbK38E5c a4xGDhMdiDXXjhETKm/7j3WE+Ml1JPlOM66fCrPbzT9c6O7hwScQOsle2PGd2ATA VFXJ9bhOr2x3dXelivFt60MyEdvXaY7cSKozLH4K8p7f/FQcpY/X3mBrtdSlB7dl MlGoyfJfSupW4/ajlbvPeRz37McV5z8/52n8sbFBGFqyKJgquY4= -----END CERTIFICATE-----Generated at Tue Oct 21 00:40:55 2025 by rpki-client