$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft File: 430E302040DE11D8C84431B3397113EC969694A0.mft (raw, json) Hash identifier: FljoyMVOcr08jx0JDL88VGYUcf9GdSF1X/GlF5R3VSg= Subject key identifier: DB:6A:05:52:1E:9B:1E:2A:0C:4E:11:EC:C4:F9:CF:5C:B6:05:FD:56 Authority key identifier: 43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 Certificate issuer: /CN=430E302040DE11D8C84431B3397113EC969694A0 Certificate serial: 5A1C00189BD04BD283747FA42BE5473F932C9B81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft Manifest number: 049B Signing time: Fri 22 Aug 2025 03:31:56 +0000 Manifest this update: Fri 22 Aug 2025 03:26:56 +0000 Manifest next update: Mon 25 Aug 2025 06:29:56 +0000 Files and hashes: 1: 430E302040DE11D8C84431B3397113EC969694A0.crl (hash: js9tr2cZL83yq4H2C1epe6Vz7FZiC9/OYgulD4a7W1I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 06:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1c:00:18:9b:d0:4b:d2:83:74:7f:a4:2b:e5:47:3f:93:2c:9b:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430E302040DE11D8C84431B3397113EC969694A0 Validity Not Before: Aug 22 03:26:56 2025 GMT Not After : Aug 25 06:29:56 2025 GMT Subject: CN=DB6A05521E9B1E2A0C4E11ECC4F9CF5CB605FD56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:13:2a:9a:3f:24:89:f5:21:38:0a:4c:c7: 38:f0:26:a6:9c:ef:b8:a6:dd:49:80:9a:7f:d9:a7: 7c:f2:0a:f7:ca:89:ce:f4:68:b2:3b:63:c7:19:c9: f7:de:b2:1e:06:97:59:c4:79:51:b8:ea:b8:14:e9: df:06:4a:60:5e:a3:8b:bc:6b:88:4e:70:53:58:50: 6f:72:4b:b3:70:d8:7d:3c:4f:65:fa:b7:81:7c:d9: ad:4c:89:53:8d:ce:25:83:c9:92:a6:03:51:79:84: c5:6a:22:57:4f:db:c8:b9:c3:74:86:25:8a:75:57: f0:a3:87:6c:a2:ef:c9:75:ac:cc:70:84:60:51:5a: dd:72:86:69:4d:a4:9b:fd:0d:69:c7:25:fb:a4:a8: a8:70:ef:86:d4:6c:cc:cf:86:89:a5:45:32:25:b0: 4f:ff:76:c9:3f:c4:52:06:77:02:c2:44:8d:a2:aa: c0:b9:10:f1:7b:b3:0e:df:3b:4d:34:32:9d:d4:5e: 1f:86:01:4a:bf:8a:af:da:fa:40:71:d4:56:3b:eb: 49:3c:40:20:e9:eb:7d:6a:48:94:c8:67:da:ec:0c: 44:f5:e7:92:1b:e9:e1:9a:f4:f4:04:64:f3:be:b1: c5:91:72:58:04:0b:f6:a6:1c:f8:4c:4f:c4:35:65: 04:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:6A:05:52:1E:9B:1E:2A:0C:4E:11:EC:C4:F9:CF:5C:B6:05:FD:56 X509v3 Authority Key Identifier: keyid:43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b9:96:e7:0d:89:cb:df:48:2d:a5:a4:be:ac:be:71:27:1f: cc:47:a2:5c:16:d3:b7:93:da:9e:79:f6:45:68:aa:94:c6:40: 75:59:b7:db:3d:72:7d:f7:f3:f8:3c:62:31:ac:3f:b6:06:ff: f4:ae:ed:95:49:b6:a9:ac:e4:a1:a7:3d:bd:fc:29:5a:6f:32: fb:fc:f3:1b:76:4e:fe:d4:ae:59:ab:9b:09:9c:15:3d:e6:4e: c8:5f:cd:bc:38:1a:25:a3:ed:db:ad:a1:3b:c8:42:4f:52:9e: 5b:0a:91:af:31:e2:69:e0:2f:25:ef:d5:6c:4e:82:62:59:34: 00:0b:6c:24:f9:c7:07:34:1d:f3:88:1c:9c:e5:56:11:a3:fa: 2e:6b:18:13:5e:5b:4e:da:ca:ea:bd:7c:f1:4f:ba:7d:ea:6d: 39:28:fe:1a:3f:e3:e5:cf:af:b5:03:48:aa:8c:d4:e7:76:df: 50:74:d5:2e:28:2b:db:39:6d:e5:3f:67:3f:40:f8:fc:2f:5f: 86:2a:a4:78:ba:2c:09:ab:a4:f0:ac:a7:96:96:2b:a2:18:7b: 1e:e5:02:59:5b:5c:10:3c:3b:d7:5a:f9:19:0d:e9:67:2e:55: c6:83:80:87:ab:be:ca:4d:34:71:7b:88:75:0d:a7:e9:e2:6d: 29:84:da:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWhwAGJvQS9KDdH+kK+VHP5Msm4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5 Njk2OTRBMDAeFw0yNTA4MjIwMzI2NTZaFw0yNTA4MjUwNjI5NTZaMDMxMTAvBgNV BAMTKERCNkEwNTUyMUU5QjFFMkEwQzRFMTFFQ0M0RjlDRjVDQjYwNUZENTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpDRMqmj8kifUhOApMxzjwJqac 77im3UmAmn/Zp3zyCvfKic70aLI7Y8cZyffesh4Gl1nEeVG46rgU6d8GSmBeo4u8 a4hOcFNYUG9yS7Nw2H08T2X6t4F82a1MiVONziWDyZKmA1F5hMVqIldP28i5w3SG JYp1V/Cjh2yi78l1rMxwhGBRWt1yhmlNpJv9DWnHJfukqKhw74bUbMzPhomlRTIl sE//dsk/xFIGdwLCRI2iqsC5EPF7sw7fO000Mp3UXh+GAUq/iq/a+kBx1FY760k8 QCDp631qSJTIZ9rsDET155Ib6eGa9PQEZPO+scWRclgEC/amHPhMT8Q1ZQQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU22oFUh6bHioMThHsxPnPXLYF/VYwHwYDVR0j BBgwFoAUQw4wIEDeEdjIRDGzOXET7JaWlKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTllMDFiYS01OWM5LTQwNDctYWMwYi1lOWIyZmU2NTg1M2MvMC80MzBFMzAyMDQw REUxMUQ4Qzg0NDMxQjMzOTcxMTNFQzk2OTY5NEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5Njk2 OTRBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEz RUM5Njk2OTRBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHK5lucNicvfSC2lpL6svnEnH8xHolwW07eT 2p559kVoqpTGQHVZt9s9cn338/g8YjGsP7YG//Su7ZVJtqms5KGnPb38KVpvMvv8 8xt2Tv7UrlmrmwmcFT3mTshfzbw4GiWj7dutoTvIQk9SnlsKka8x4mngLyXv1WxO gmJZNAALbCT5xwc0HfOIHJzlVhGj+i5rGBNeW07ayuq9fPFPun3qbTko/ho/4+XP r7UDSKqM1Od231B01S4oK9s5beU/Zz9A+PwvX4YqpHi6LAmrpPCsp5aWK6IYex7l AllbXBA8O9da+RkN6WcuVcaDgIervspNNHF7iHUNp+nibSmE2gQ= -----END CERTIFICATE-----Generated at Sat Aug 23 10:33:53 2025 by rpki-client