$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft File: 430E302040DE11D8C84431B3397113EC969694A0.mft (raw, json) Hash identifier: PwdGp8/rgc6P+zvLU/2cLiLCABUKx6HSpMyURtlD3vg= Subject key identifier: 34:D1:6A:80:EE:79:DE:5C:C4:E2:0A:1A:78:97:42:A5:29:7E:A5:F0 Authority key identifier: 43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 Certificate issuer: /CN=430E302040DE11D8C84431B3397113EC969694A0 Certificate serial: 3980EC56A7CDA6D7AC84D38CF09D193B3336D60B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft Manifest number: 04B5 Signing time: Sun 19 Oct 2025 00:21:54 +0000 Manifest this update: Sun 19 Oct 2025 00:16:54 +0000 Manifest next update: Wed 22 Oct 2025 10:39:54 +0000 Files and hashes: 1: 430E302040DE11D8C84431B3397113EC969694A0.crl (hash: cRwq5vBu6Laap2GzTV/+x5fz1/+nvrhNEe0Gox//Fs8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:80:ec:56:a7:cd:a6:d7:ac:84:d3:8c:f0:9d:19:3b:33:36:d6:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430E302040DE11D8C84431B3397113EC969694A0 Validity Not Before: Oct 19 00:16:54 2025 GMT Not After : Oct 22 10:39:54 2025 GMT Subject: CN=34D16A80EE79DE5CC4E20A1A789742A5297EA5F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5d:e6:97:84:3d:11:76:c3:d0:db:51:15:fe: f2:0f:a8:3b:7d:d0:e6:e7:ae:84:e4:6b:fb:61:81: c5:93:82:7c:fa:c6:5d:2f:b7:75:09:f6:3b:53:8e: 16:80:00:f8:b9:b1:11:c9:56:4d:05:20:29:8b:17: 73:7d:4a:40:03:97:27:df:5c:29:0d:2a:4c:9d:38: 1d:8a:6d:14:1b:cc:b1:91:e3:0c:55:68:5d:34:dd: f1:b7:77:42:93:33:3a:fe:02:38:c5:74:65:b6:87: c8:f8:e4:bc:60:51:23:91:f9:4e:5d:20:6d:47:c0: 81:fd:b3:d5:c9:f8:e1:c7:70:85:df:8c:68:8f:ab: 49:e1:48:e6:07:cc:36:41:9b:86:ca:e4:dd:8a:39: 3d:ac:a7:55:cf:8c:8c:5e:53:91:6e:07:1c:7c:d2: 37:01:1f:33:c3:15:7f:d3:86:60:ba:a6:55:66:4e: 54:6e:e6:d9:00:f4:1d:da:b0:00:fe:35:f3:bf:62: af:57:48:f8:c8:d5:66:33:b0:60:c3:e5:9c:f0:2c: bb:81:98:af:0a:24:b3:90:7b:37:39:39:a4:61:43: 3c:6a:83:0c:72:f6:44:c3:5f:6b:89:b6:43:ef:85: 2e:03:f7:bb:49:29:c8:1d:12:91:80:09:8d:f0:6f: 99:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D1:6A:80:EE:79:DE:5C:C4:E2:0A:1A:78:97:42:A5:29:7E:A5:F0 X509v3 Authority Key Identifier: keyid:43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:1b:e5:7c:ff:d1:23:03:19:6e:05:b5:27:95:04:01:8a:8f: 7b:b4:d7:03:59:c7:3c:9b:97:94:5b:25:a4:7d:4d:8b:27:c7: e7:0c:91:63:a1:a6:34:c9:02:a6:71:21:61:c4:34:72:25:18: 5f:cd:18:a0:af:5c:3c:34:13:1a:7f:f1:96:72:47:91:15:c4: 47:6a:78:ae:44:01:c7:68:19:9c:6b:b0:67:0e:93:a5:c0:58: 41:41:a7:a0:12:33:ac:18:68:8b:1a:6c:4d:d0:25:a0:25:d0: d1:1c:f1:1a:7d:a6:a4:39:b5:35:a7:9a:5d:99:90:73:65:e7: a4:3f:7b:90:56:03:e9:78:ad:79:ca:b3:ce:5a:8f:45:5d:2d: f5:0f:03:49:57:68:1c:99:c4:ce:11:c6:98:12:b5:10:e8:20: 3f:9f:c4:cd:1e:9d:7c:b9:ab:36:92:6d:52:61:a6:8d:2a:1d: c9:ec:54:41:15:57:bb:77:4d:26:0b:7e:b3:b7:aa:c4:48:84: bf:1d:46:45:78:d2:fc:b7:79:ab:b4:1d:a4:44:17:1f:26:37: 77:d4:2e:c3:25:60:03:ed:84:21:38:31:34:4e:3f:7b:76:a5: 33:b3:93:41:2b:e1:b7:5b:7d:7d:fd:9a:9a:c5:3b:ec:0e:5d: a0:eb:93:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOYDsVqfNpteshNOM8J0ZOzM21gswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5 Njk2OTRBMDAeFw0yNTEwMTkwMDE2NTRaFw0yNTEwMjIxMDM5NTRaMDMxMTAvBgNV BAMTKDM0RDE2QTgwRUU3OURFNUNDNEUyMEExQTc4OTc0MkE1Mjk3RUE1RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzXeaXhD0RdsPQ21EV/vIPqDt9 0ObnroTka/thgcWTgnz6xl0vt3UJ9jtTjhaAAPi5sRHJVk0FICmLF3N9SkADlyff XCkNKkydOB2KbRQbzLGR4wxVaF003fG3d0KTMzr+AjjFdGW2h8j45LxgUSOR+U5d IG1HwIH9s9XJ+OHHcIXfjGiPq0nhSOYHzDZBm4bK5N2KOT2sp1XPjIxeU5FuBxx8 0jcBHzPDFX/ThmC6plVmTlRu5tkA9B3asAD+NfO/Yq9XSPjI1WYzsGDD5ZzwLLuB mK8KJLOQezc5OaRhQzxqgwxy9kTDX2uJtkPvhS4D97tJKcgdEpGACY3wb5nhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNNFqgO553lzE4goaeJdCpSl+pfAwHwYDVR0j BBgwFoAUQw4wIEDeEdjIRDGzOXET7JaWlKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTllMDFiYS01OWM5LTQwNDctYWMwYi1lOWIyZmU2NTg1M2MvMC80MzBFMzAyMDQw REUxMUQ4Qzg0NDMxQjMzOTcxMTNFQzk2OTY5NEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5Njk2 OTRBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEz RUM5Njk2OTRBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL4b5Xz/0SMDGW4FtSeVBAGKj3u01wNZxzyb l5RbJaR9TYsnx+cMkWOhpjTJAqZxIWHENHIlGF/NGKCvXDw0Exp/8ZZyR5EVxEdq eK5EAcdoGZxrsGcOk6XAWEFBp6ASM6wYaIsabE3QJaAl0NEc8Rp9pqQ5tTWnml2Z kHNl56Q/e5BWA+l4rXnKs85aj0VdLfUPA0lXaByZxM4RxpgStRDoID+fxM0enXy5 qzaSbVJhpo0qHcnsVEEVV7t3TSYLfrO3qsRIhL8dRkV40vy3eau0HaREFx8mN3fU LsMlYAPthCE4MTROP3t2pTOzk0Er4bdbfX39mprFO+wOXaDrk9k= -----END CERTIFICATE-----Generated at Mon Oct 20 23:31:07 2025 by rpki-client