$ rpki-client -vvf repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft File: 30C39359651C33B59AC32BC46831980108960568.mft (raw, json) Hash identifier: 3gBQ7vC8CWcYkBw6kq9uehYr0yqikvdKcJC1d+oEVuI= Subject key identifier: BB:9E:73:E5:94:90:A4:57:27:3D:B3:2E:DD:AC:6B:8C:37:36:49:A2 Authority key identifier: 30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68 Certificate issuer: /CN=30C39359651C33B59AC32BC46831980108960568 Certificate serial: 1A6638BFD61D621B4D74208268D67AA82509CC7E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft Manifest number: 04FC Signing time: Sat 23 Aug 2025 07:42:13 +0000 Manifest this update: Sat 23 Aug 2025 07:37:13 +0000 Manifest next update: Tue 26 Aug 2025 17:15:13 +0000 Files and hashes: 1: 3130332e3130372e3134302e302f32342d3234203d3e20313337323937.roa (hash: BHlKkUg0NjANH6Mliit3f4KGxxDlGbzPwZhqnWpcPcU=) 2: 323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa (hash: sSXWhrWvqzQ+vxHJjhskTpislSGynAyGOv8jxoTDXpU=) 3: 30C39359651C33B59AC32BC46831980108960568.crl (hash: d+BEG18q+kChrDvUHptcHTQbnzIYX0naiGcEYxe0WC0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:66:38:bf:d6:1d:62:1b:4d:74:20:82:68:d6:7a:a8:25:09:cc:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30C39359651C33B59AC32BC46831980108960568 Validity Not Before: Aug 23 07:37:13 2025 GMT Not After : Aug 26 17:15:13 2025 GMT Subject: CN=BB9E73E59490A457273DB32EDDAC6B8C373649A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fb:64:eb:1d:7f:53:d3:b5:3c:35:68:db:08: 25:01:45:7f:76:cf:f7:fe:08:55:3e:c3:d0:6a:63: c0:cb:80:31:d3:07:72:24:59:2a:b5:df:07:b4:0b: 7c:f0:ef:d8:83:1e:27:2d:5f:2b:c5:5f:72:2c:1d: 43:0e:38:2d:a6:3d:f6:0e:88:14:9c:9c:44:5c:08: 45:8d:24:ca:e5:d9:b1:c2:a9:05:1e:22:74:45:66: d2:2c:54:13:57:7f:5c:4b:f8:a3:ce:fa:13:6f:ae: 6d:d1:67:4f:47:95:bd:43:1e:75:8c:af:c6:47:fd: 05:59:b4:cf:d9:49:26:ef:cb:45:cd:e7:43:0f:ad: 26:24:75:6c:a6:83:9a:9e:73:e1:a7:d6:d8:4d:0d: 2e:78:fd:22:10:9c:15:56:4a:35:00:b0:43:29:fa: 9c:60:6d:8d:2b:b5:65:ae:6c:91:89:8e:ce:54:77: b0:5a:64:a0:e3:c8:16:37:ae:2a:5e:a1:cf:24:c3: 8f:55:a6:f1:83:a4:39:7c:a6:e3:33:e1:e1:ad:3d: 52:57:ef:62:15:29:f3:fa:16:84:14:ab:02:46:77: 11:f6:1f:05:bf:f8:64:80:69:c1:d4:89:f5:34:20: c8:22:08:a1:24:8a:2e:cc:3a:93:65:b5:69:6c:ad: 71:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9E:73:E5:94:90:A4:57:27:3D:B3:2E:DD:AC:6B:8C:37:36:49:A2 X509v3 Authority Key Identifier: keyid:30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e9:06:02:24:a7:5a:12:e2:fb:4a:55:ab:1d:63:b8:fa:d6: 2c:50:e2:d9:e6:71:17:1f:68:fb:2f:c6:d4:32:da:80:88:70: 52:7c:69:16:0f:3a:f7:f2:ce:91:56:b5:42:9a:a4:99:4f:c4: f2:e7:6d:db:f3:ce:83:bf:0b:07:76:d3:2e:d0:f5:2e:d2:45: d9:73:07:82:e6:0b:33:8e:77:bd:3f:da:0a:71:5d:73:f5:02: d7:6a:3b:15:a2:d9:a6:4c:ac:67:44:bb:8a:2e:f3:22:b8:f9: 77:e8:b8:33:4f:34:0e:69:7e:aa:95:b8:17:32:eb:b4:e6:9e: 53:1f:a4:9b:a5:c4:74:c0:ee:21:3b:f4:cb:81:2e:72:f5:3b: 85:51:3f:c8:46:a7:02:1b:2c:1e:83:a0:09:df:3b:a0:6f:70: c9:23:ce:95:34:24:b6:bf:d7:16:5f:94:a1:57:26:b5:d5:58: b2:84:b7:29:9a:c6:46:39:7c:ca:e2:5b:55:10:37:b7:3f:83: 13:3f:70:23:45:78:46:65:38:66:d4:24:0f:05:4f:9a:dc:b6: 61:f0:8b:04:ef:70:27:3b:40:48:e0:d6:f4:4b:f5:e2:06:6a: d8:d7:cb:49:5c:99:a1:4f:b6:fd:38:8b:c4:8a:e5:91:69:4d: 9e:c0:3e:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGmY4v9YdYhtNdCCCaNZ6qCUJzH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDMzkzNTk2NTFDMzNCNTlBQzMyQkM0NjgzMTk4MDEw ODk2MDU2ODAeFw0yNTA4MjMwNzM3MTNaFw0yNTA4MjYxNzE1MTNaMDMxMTAvBgNV BAMTKEJCOUU3M0U1OTQ5MEE0NTcyNzNEQjMyRUREQUM2QjhDMzczNjQ5QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa+2TrHX9T07U8NWjbCCUBRX92 z/f+CFU+w9BqY8DLgDHTB3IkWSq13we0C3zw79iDHictXyvFX3IsHUMOOC2mPfYO iBScnERcCEWNJMrl2bHCqQUeInRFZtIsVBNXf1xL+KPO+hNvrm3RZ09Hlb1DHnWM r8ZH/QVZtM/ZSSbvy0XN50MPrSYkdWymg5qec+Gn1thNDS54/SIQnBVWSjUAsEMp +pxgbY0rtWWubJGJjs5Ud7BaZKDjyBY3ripeoc8kw49VpvGDpDl8puMz4eGtPVJX 72IVKfP6FoQUqwJGdxH2HwW/+GSAacHUifU0IMgiCKEkii7MOpNltWlsrXHXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu55z5ZSQpFcnPbMu3axrjDc2SaIwHwYDVR0j BBgwFoAUMMOTWWUcM7WawyvEaDGYAQiWBWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTc5OTZmNS1hOTM0LTRiNDQtODU0Ny0xOWVjMzdjZjdjMTQvMC8zMEMzOTM1OTY1 MUMzM0I1OUFDMzJCQzQ2ODMxOTgwMTA4OTYwNTY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBDMzkzNTk2NTFDMzNCNTlBQzMyQkM0NjgzMTk4MDEwODk2 MDU2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU3OTk2ZjUtYTkzNC00YjQ0LTg1 NDctMTllYzM3Y2Y3YzE0LzAvMzBDMzkzNTk2NTFDMzNCNTlBQzMyQkM0NjgzMTk4 MDEwODk2MDU2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/pBgIkp1oS4vtKVasdY7j61ixQ4tnmcRcf aPsvxtQy2oCIcFJ8aRYPOvfyzpFWtUKapJlPxPLnbdvzzoO/Cwd20y7Q9S7SRdlz B4LmCzOOd70/2gpxXXP1AtdqOxWi2aZMrGdEu4ou8yK4+XfouDNPNA5pfqqVuBcy 67TmnlMfpJulxHTA7iE79MuBLnL1O4VRP8hGpwIbLB6DoAnfO6BvcMkjzpU0JLa/ 1xZflKFXJrXVWLKEtymaxkY5fMriW1UQN7c/gxM/cCNFeEZlOGbUJA8FT5rctmHw iwTvcCc7QEjg1vRL9eIGatjXy0lcmaFPtv04i8SK5ZFpTZ7APuM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:28:04 2025 by rpki-client