$ rpki-client -vvf repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft File: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft (raw, json) Hash identifier: jSvT70wfUM88IvDGE0E9tb6n813/TlkC0NDlMJOHlv8= Subject key identifier: 7D:AD:52:54:44:6D:02:B9:62:CF:1A:BA:7F:57:95:38:8B:4D:61:4D Authority key identifier: 30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C Certificate issuer: /CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Certificate serial: 74799963DA0E3295DA5F9AD68F75F9ABFDCDD92C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft Manifest number: AF Signing time: Fri 22 Aug 2025 15:40:50 +0000 Manifest this update: Fri 22 Aug 2025 15:35:50 +0000 Manifest next update: Tue 26 Aug 2025 00:05:50 +0000 Files and hashes: 1: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl (hash: oeaZxR/0VibUQhV+WP7ie6MZJfhk9PrKOZ0F1hZSAng=) 2: 3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa (hash: 067j8zIqWRfiKYsv/8PNz7miyq3F672QljWEkk7m/9s=) 3: 323030313a6466333a346234303a3a2f34382d3438203d3e20313531393932.roa (hash: H0tMLPWT/xMzJjo+X3cfcs6u4yhbTyToHbzV+AgsIh8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 00:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:79:99:63:da:0e:32:95:da:5f:9a:d6:8f:75:f9:ab:fd:cd:d9:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Validity Not Before: Aug 22 15:35:50 2025 GMT Not After : Aug 26 00:05:50 2025 GMT Subject: CN=7DAD5254446D02B962CF1ABA7F5795388B4D614D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:05:9c:9b:39:3f:11:21:6a:f1:88:b0:75:7f: 0d:89:6b:d3:1c:45:3c:74:f6:56:8b:ba:d1:e7:15: b2:f6:97:73:44:e8:62:dc:fa:00:4c:18:ec:f5:3f: 6d:c6:5e:c9:32:15:f6:9d:4d:63:f2:d1:29:ad:1d: 69:1c:d9:4e:8f:26:c8:98:e8:8f:0d:c5:07:39:79: a5:d1:39:80:fb:92:79:c8:cd:8e:a5:f6:49:bd:29: 88:cd:99:13:da:b3:eb:50:be:88:7a:f5:4c:d7:54: 3d:23:48:c6:40:2a:47:93:ce:b3:0e:b2:42:dc:31: 9c:a3:65:af:37:db:d9:ea:92:ca:57:e6:9a:fa:ba: 75:1d:4b:ae:d2:96:b9:99:1c:da:04:f8:8c:e0:3c: 5e:bf:73:b2:c9:07:96:81:a8:fb:ce:8b:84:5f:ad: fb:ef:7e:70:f2:89:38:2c:5d:30:5e:0b:cc:9b:81: a7:9e:5d:61:08:e2:9d:15:10:63:74:50:25:0b:e3: 27:3b:6d:b0:8d:4d:7c:11:33:ea:df:c0:dd:29:ee: 0f:83:ae:a0:66:b8:b0:a4:60:f2:1a:73:83:76:5b: 27:91:e6:17:6e:2e:f6:85:a0:29:40:ac:13:95:15: c2:1a:23:64:31:54:20:9b:33:e6:e2:08:31:d6:ad: d3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AD:52:54:44:6D:02:B9:62:CF:1A:BA:7F:57:95:38:8B:4D:61:4D X509v3 Authority Key Identifier: keyid:30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:43:3c:ef:8e:57:ff:fb:ef:47:45:d4:2b:1b:7c:d9:5d:d2: 43:e4:02:5d:a1:9f:d5:73:7c:b4:34:b8:0a:67:45:32:23:52: e2:8d:00:27:90:5f:4f:e9:23:43:d8:4a:ce:e7:d8:30:03:d0: d3:c9:c0:dd:1f:ec:5b:50:10:01:9a:82:52:ac:ec:a2:ee:b0: e9:c4:ac:38:68:59:28:76:dd:b8:5f:f4:62:fe:be:c9:b9:7b: d5:55:a2:99:ea:6e:10:d3:e4:67:ec:59:fc:1c:a1:11:44:62: d7:c7:27:7e:9d:9e:f8:06:47:05:fe:ea:69:d9:6c:da:a4:c4: 49:02:49:25:98:2c:96:5b:5d:7c:cd:bd:70:27:ac:69:6d:ac: 71:aa:e9:91:0e:13:8f:bb:37:32:30:5a:08:a9:78:14:6a:eb: 7f:b3:06:70:e5:03:f9:38:3d:5c:74:d8:cc:3c:ac:99:30:16: 26:ab:eb:1c:fa:7c:d2:9a:65:51:97:74:75:ce:a6:8a:0e:10: 11:a9:9b:e2:40:3d:67:f6:1d:8f:33:f2:ce:81:41:90:3f:7e: 20:ca:fd:42:42:d0:ce:f8:92:3a:46:f7:8b:4a:9b:47:67:f2: c5:97:b8:ed:e7:86:37:15:5e:c7:1f:28:80:e8:b1:b4:5e:aa: 28:b5:e3:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdHmZY9oOMpXaX5rWj3X5q/3N2SwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0Qzgw NjFBN0IxQzAeFw0yNTA4MjIxNTM1NTBaFw0yNTA4MjYwMDA1NTBaMDMxMTAvBgNV BAMTKDdEQUQ1MjU0NDQ2RDAyQjk2MkNGMUFCQTdGNTc5NTM4OEI0RDYxNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrBZybOT8RIWrxiLB1fw2Ja9Mc RTx09laLutHnFbL2l3NE6GLc+gBMGOz1P23GXskyFfadTWPy0SmtHWkc2U6PJsiY 6I8NxQc5eaXROYD7knnIzY6l9km9KYjNmRPas+tQvoh69UzXVD0jSMZAKkeTzrMO skLcMZyjZa8329nqkspX5pr6unUdS67SlrmZHNoE+IzgPF6/c7LJB5aBqPvOi4Rf rfvvfnDyiTgsXTBeC8ybgaeeXWEI4p0VEGN0UCUL4yc7bbCNTXwRM+rfwN0p7g+D rqBmuLCkYPIac4N2WyeR5hduLvaFoClArBOVFcIaI2QxVCCbM+biCDHWrdPdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfa1SVERtArlizxq6f1eVOItNYU0wHwYDVR0j BBgwFoAUMHpAjiqoImja025vFF1kyAYaexwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTdmMWY0My1jZTdlLTQ5NzAtYWFkMC03ODJiMDE5YmQwM2UvMC8zMDdBNDA4RTJB QTgyMjY4REFEMzZFNkYxNDVENjRDODA2MUE3QjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0QzgwNjFB N0IxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU3ZjFmNDMtY2U3ZS00OTcwLWFh ZDAtNzgyYjAxOWJkMDNlLzAvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0 QzgwNjFBN0IxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZDPO+OV//770dF1CsbfNld0kPkAl2hn9Vz fLQ0uApnRTIjUuKNACeQX0/pI0PYSs7n2DAD0NPJwN0f7FtQEAGaglKs7KLusOnE rDhoWSh23bhf9GL+vsm5e9VVopnqbhDT5GfsWfwcoRFEYtfHJ36dnvgGRwX+6mnZ bNqkxEkCSSWYLJZbXXzNvXAnrGltrHGq6ZEOE4+7NzIwWgipeBRq63+zBnDlA/k4 PVx02Mw8rJkwFiar6xz6fNKaZVGXdHXOpooOEBGpm+JAPWf2HY8z8s6BQZA/fiDK /UJC0M74kjpG94tKm0dn8sWXuO3nhjcVXscfKIDosbReqii14yo= -----END CERTIFICATE-----Generated at Sat Aug 23 14:07:18 2025 by rpki-client