$ rpki-client -vvf repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft File: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft (raw, json) Hash identifier: DxAb4thm9tD2hx7600Ud73f5vkzBKSHpwCD6ZwZSV40= Subject key identifier: 6A:55:38:BB:48:12:78:8E:3F:B6:5D:85:57:05:EE:B0:E0:3A:1E:07 Authority key identifier: 30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C Certificate issuer: /CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Certificate serial: 6E63223D919347701799A84AF709769337E83262 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft Manifest number: 97 Signing time: Mon 30 Jun 2025 10:02:52 +0000 Manifest this update: Mon 30 Jun 2025 09:57:52 +0000 Manifest next update: Thu 03 Jul 2025 20:05:52 +0000 Files and hashes: 1: 3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa (hash: 067j8zIqWRfiKYsv/8PNz7miyq3F672QljWEkk7m/9s=) 2: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl (hash: qAFIGeeNpAowsGBcMsX8do/4JT0PGKHM56LdXYo3fss=) 3: 323030313a6466333a346234303a3a2f34382d3438203d3e20313531393932.roa (hash: H0tMLPWT/xMzJjo+X3cfcs6u4yhbTyToHbzV+AgsIh8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 20:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:63:22:3d:91:93:47:70:17:99:a8:4a:f7:09:76:93:37:e8:32:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Validity Not Before: Jun 30 09:57:52 2025 GMT Not After : Jul 3 20:05:52 2025 GMT Subject: CN=6A5538BB4812788E3FB65D855705EEB0E03A1E07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8b:79:fa:25:4f:2a:16:07:d6:ad:e9:02:f7: 73:63:a5:f2:79:2a:3d:32:bd:9d:df:50:b0:bb:1b: 53:91:25:c5:02:f5:77:4b:18:16:df:64:70:32:32: cc:e8:0d:4b:de:cd:7b:75:9f:c8:42:ea:31:b7:71: fd:5f:fc:ae:28:1b:27:bb:67:5a:cd:fa:b0:c8:46: 6c:ec:3b:67:4e:9d:12:ff:9c:10:ff:b2:e0:cc:5d: 77:35:6b:6b:2c:0c:06:90:83:43:5b:6b:d7:92:40: 4f:b1:64:83:0f:48:92:aa:cd:8d:7e:fd:15:6e:73: ee:3c:00:b5:95:6e:ac:69:8b:f0:c6:45:1b:a5:95: 82:43:57:fc:c1:f7:f6:94:8b:a0:be:b0:87:99:27: e6:81:fb:11:c6:bc:55:86:42:b2:57:d2:f9:78:4a: 37:aa:90:00:32:71:d7:13:0c:69:52:07:18:43:df: 68:bd:43:91:05:27:d1:f0:8b:04:49:1d:2c:f3:f9: 53:12:d8:40:93:e5:e8:5f:e4:7e:dc:16:09:fa:55: 90:15:77:4e:ee:c7:94:cc:66:d5:3b:c1:d1:df:0c: 49:a6:a3:3f:e1:1d:7f:cf:c2:a3:d7:be:1d:19:59: 46:02:b0:80:c0:c3:c5:dc:67:78:8f:3d:87:b6:a3: d3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:55:38:BB:48:12:78:8E:3F:B6:5D:85:57:05:EE:B0:E0:3A:1E:07 X509v3 Authority Key Identifier: keyid:30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:10:5a:a0:e7:63:56:0a:b3:68:97:ec:5f:b8:96:95:10:39: 6f:d2:ca:5d:a2:6d:90:2f:db:49:09:e8:c5:0f:24:45:40:9a: ed:56:63:c7:69:74:f4:b2:d4:24:2c:e0:39:31:2f:38:1d:26: 0f:40:d9:00:6a:5f:7d:ee:ae:48:51:17:59:48:1f:c9:b7:96: f0:8e:a6:79:20:83:7b:c4:65:f5:88:6d:18:7a:2d:7c:10:75: 15:cb:b2:98:de:a4:bd:29:3d:75:56:a1:c7:88:6e:a9:a0:83: f3:71:b4:18:58:12:7c:32:92:07:eb:df:cf:04:42:79:b6:cb: 17:21:f4:f5:60:d6:58:1b:44:d5:f1:f3:bf:63:35:9d:7a:71: ef:59:7f:18:2b:05:9d:9f:97:a0:55:bb:bf:21:99:0a:33:63: cb:37:b9:d6:bd:6e:68:e3:dc:1a:9f:75:b3:43:1c:e8:21:9a: 0c:c8:13:9a:41:fd:61:43:b9:b4:7a:48:ea:b1:2f:09:f2:ee: ec:7c:f3:7a:e4:d1:61:ce:94:9c:ff:d7:e1:94:4f:eb:65:11: 62:1e:9a:68:76:a9:32:bb:c9:d3:c4:bd:86:21:b6:f0:f4:76: 88:43:71:fc:62:0d:b2:f5:e4:2d:89:76:a5:8b:ff:2b:ae:54: a0:db:fa:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbmMiPZGTR3AXmahK9wl2kzfoMmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0Qzgw NjFBN0IxQzAeFw0yNTA2MzAwOTU3NTJaFw0yNTA3MDMyMDA1NTJaMDMxMTAvBgNV BAMTKDZBNTUzOEJCNDgxMjc4OEUzRkI2NUQ4NTU3MDVFRUIwRTAzQTFFMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDei3n6JU8qFgfWrekC93NjpfJ5 Kj0yvZ3fULC7G1ORJcUC9XdLGBbfZHAyMszoDUvezXt1n8hC6jG3cf1f/K4oGye7 Z1rN+rDIRmzsO2dOnRL/nBD/suDMXXc1a2ssDAaQg0Nba9eSQE+xZIMPSJKqzY1+ /RVuc+48ALWVbqxpi/DGRRullYJDV/zB9/aUi6C+sIeZJ+aB+xHGvFWGQrJX0vl4 SjeqkAAycdcTDGlSBxhD32i9Q5EFJ9HwiwRJHSzz+VMS2ECT5ehf5H7cFgn6VZAV d07ux5TMZtU7wdHfDEmmoz/hHX/PwqPXvh0ZWUYCsIDAw8XcZ3iPPYe2o9PxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUalU4u0gSeI4/tl2FVwXusOA6HgcwHwYDVR0j BBgwFoAUMHpAjiqoImja025vFF1kyAYaexwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTdmMWY0My1jZTdlLTQ5NzAtYWFkMC03ODJiMDE5YmQwM2UvMC8zMDdBNDA4RTJB QTgyMjY4REFEMzZFNkYxNDVENjRDODA2MUE3QjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0QzgwNjFB N0IxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU3ZjFmNDMtY2U3ZS00OTcwLWFh ZDAtNzgyYjAxOWJkMDNlLzAvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0 QzgwNjFBN0IxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQQWqDnY1YKs2iX7F+4lpUQOW/Syl2ibZAv 20kJ6MUPJEVAmu1WY8dpdPSy1CQs4DkxLzgdJg9A2QBqX33urkhRF1lIH8m3lvCO pnkgg3vEZfWIbRh6LXwQdRXLspjepL0pPXVWoceIbqmgg/NxtBhYEnwykgfr388E Qnm2yxch9PVg1lgbRNXx879jNZ16ce9ZfxgrBZ2fl6BVu78hmQozY8s3uda9bmjj 3BqfdbNDHOghmgzIE5pB/WFDubR6SOqxLwny7ux883rk0WHOlJz/1+GUT+tlEWIe mmh2qTK7ydPEvYYhtvD0dohDcfxiDbL15C2JdqWL/yuuVKDb+t8= -----END CERTIFICATE-----Generated at Tue Jul 1 09:06:47 2025 by rpki-client