$ rpki-client -vvf repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft File: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft (raw, json) Hash identifier: LJGvPf/DcAF+lzLrBSD9JYdIeJdQGIxZrMcQ/j6l0EI= Subject key identifier: 34:78:96:F2:6F:61:3C:BD:5E:FF:04:3C:B1:3A:74:3E:4C:CD:80:5F Authority key identifier: 30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C Certificate issuer: /CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Certificate serial: B9D607378AFDD0FF7A7B4BCCC2698F6BCC664A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft Manifest number: C9 Signing time: Sun 19 Oct 2025 22:40:51 +0000 Manifest this update: Sun 19 Oct 2025 22:35:51 +0000 Manifest next update: Thu 23 Oct 2025 05:33:51 +0000 Files and hashes: 1: 3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa (hash: 067j8zIqWRfiKYsv/8PNz7miyq3F672QljWEkk7m/9s=) 2: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl (hash: AdhdqIP6Fm51DZ+QrKz2zyGzLTPkFdFlhsqrS/OLJSQ=) 3: 323030313a6466333a346234303a3a2f34382d3438203d3e20313531393932.roa (hash: H0tMLPWT/xMzJjo+X3cfcs6u4yhbTyToHbzV+AgsIh8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: b9:d6:07:37:8a:fd:d0:ff:7a:7b:4b:cc:c2:69:8f:6b:cc:66:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Validity Not Before: Oct 19 22:35:51 2025 GMT Not After : Oct 23 05:33:51 2025 GMT Subject: CN=347896F26F613CBD5EFF043CB13A743E4CCD805F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6e:dd:c7:0e:3a:32:9b:b6:9e:81:ae:e8:89: e0:76:92:cc:13:57:d1:39:ab:64:fb:cc:e7:01:e7: 32:d0:79:74:83:0e:9f:e1:c9:cd:da:86:bd:74:d7: db:d7:b9:6f:33:3f:84:a8:d9:d0:8a:c7:5b:fb:46: f9:de:f2:a0:eb:3f:0b:b8:c7:ec:50:7f:29:dd:f8: bc:d6:f8:7c:a7:ca:29:1e:a5:76:f5:58:27:e9:0d: 70:57:d1:f8:01:3f:79:2d:81:7b:da:9a:7c:eb:e1: a7:3b:45:71:08:59:50:9e:57:e7:1a:c5:f2:c0:a0: ef:9d:7a:fc:87:5e:36:07:68:8b:6e:7c:7a:7d:75: 6d:76:04:3e:57:40:96:05:44:43:f0:83:12:18:68: 92:92:87:aa:8e:68:41:7d:50:58:fb:d5:1d:12:85: 7d:3b:e6:ae:92:d5:78:48:db:6b:f2:c4:dc:18:be: ac:f8:88:8e:01:51:8c:0b:a1:b0:76:26:c2:f5:01: 37:36:8d:ff:6e:4b:0e:5d:08:ad:ce:90:0d:4e:a9: 67:b0:03:39:23:5f:40:d7:b1:e1:b3:c4:42:02:12: 2e:eb:94:09:29:8e:45:e8:8f:ea:ef:51:94:ab:3a: da:f2:ae:28:f4:4f:9b:76:6d:19:a5:d3:80:b3:24: c5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:78:96:F2:6F:61:3C:BD:5E:FF:04:3C:B1:3A:74:3E:4C:CD:80:5F X509v3 Authority Key Identifier: keyid:30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:b5:7e:b1:b5:a9:3f:17:f2:c6:f3:30:57:9e:4f:2e:b4:0d: 64:9a:36:f9:b3:e7:df:e0:24:42:9b:2b:23:6e:42:7c:97:52: 19:b6:f5:be:83:c7:3b:46:fb:e5:d5:50:57:f8:35:6a:e7:00: 29:59:e9:64:a5:c4:42:02:75:e0:d4:12:98:21:1a:1b:5d:86: 4f:d4:06:2a:74:08:fa:82:fb:db:da:79:b7:58:43:63:17:7d: 9c:10:76:27:57:d7:9f:b7:c9:06:a3:6e:d1:db:47:9a:8d:20: 6c:d7:fe:ab:5c:ad:d8:c0:cc:b7:7f:00:0a:8d:eb:e5:76:ba: e9:6f:a8:cd:4f:3e:fd:87:56:85:f4:c9:9d:b0:fe:0f:fb:4a: 25:2f:7d:89:c3:c6:3b:74:3d:4d:2b:f6:df:13:27:5a:48:d5: de:23:d2:6b:9c:48:57:7a:3c:71:32:52:61:07:fa:2e:aa:c1: 21:fa:22:ee:fe:c5:5c:4f:de:58:2f:5e:cc:f0:99:7b:92:f2: 6d:b8:8f:3a:c6:67:32:a8:dd:c4:af:67:29:37:a9:a8:b5:66: 7f:11:99:c4:9d:07:9a:6c:c9:1a:08:2d:83:87:79:96:ca:3a: 5a:34:f9:4e:47:92:50:95:16:3b:6d:6b:d7:67:4b:e8:e0:c7: 00:32:0c:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUALnWBzeK/dD/entLzMJpj2vMZkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0Qzgw NjFBN0IxQzAeFw0yNTEwMTkyMjM1NTFaFw0yNTEwMjMwNTMzNTFaMDMxMTAvBgNV BAMTKDM0Nzg5NkYyNkY2MTNDQkQ1RUZGMDQzQ0IxM0E3NDNFNENDRDgwNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTbt3HDjoym7aega7oieB2kswT V9E5q2T7zOcB5zLQeXSDDp/hyc3ahr1019vXuW8zP4So2dCKx1v7Rvne8qDrPwu4 x+xQfynd+LzW+HynyikepXb1WCfpDXBX0fgBP3ktgXvamnzr4ac7RXEIWVCeV+ca xfLAoO+devyHXjYHaItufHp9dW12BD5XQJYFREPwgxIYaJKSh6qOaEF9UFj71R0S hX075q6S1XhI22vyxNwYvqz4iI4BUYwLobB2JsL1ATc2jf9uSw5dCK3OkA1OqWew AzkjX0DXseGzxEICEi7rlAkpjkXoj+rvUZSrOtryrij0T5t2bRml04CzJMWjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNHiW8m9hPL1e/wQ8sTp0PkzNgF8wHwYDVR0j BBgwFoAUMHpAjiqoImja025vFF1kyAYaexwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTdmMWY0My1jZTdlLTQ5NzAtYWFkMC03ODJiMDE5YmQwM2UvMC8zMDdBNDA4RTJB QTgyMjY4REFEMzZFNkYxNDVENjRDODA2MUE3QjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0QzgwNjFB N0IxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU3ZjFmNDMtY2U3ZS00OTcwLWFh ZDAtNzgyYjAxOWJkMDNlLzAvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0 QzgwNjFBN0IxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADC1frG1qT8X8sbzMFeeTy60DWSaNvmz59/g JEKbKyNuQnyXUhm29b6DxztG++XVUFf4NWrnAClZ6WSlxEICdeDUEpghGhtdhk/U Bip0CPqC+9vaebdYQ2MXfZwQdidX15+3yQajbtHbR5qNIGzX/qtcrdjAzLd/AAqN 6+V2uulvqM1PPv2HVoX0yZ2w/g/7SiUvfYnDxjt0PU0r9t8TJ1pI1d4j0mucSFd6 PHEyUmEH+i6qwSH6Iu7+xVxP3lgvXszwmXuS8m24jzrGZzKo3cSvZyk3qai1Zn8R mcSdB5psyRoILYOHeZbKOlo0+U5HklCVFjtta9dnS+jgxwAyDCE= -----END CERTIFICATE-----Generated at Mon Oct 20 13:04:17 2025 by rpki-client