$ rpki-client -vvf repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft File: 30CE8572EA9DEDA805151BBD165E699D1191FED0.mft (raw, json) Hash identifier: b8izgZMf/pvlntyj5GAyRpjE7SWXYTIot1y6J1Gq5+8= Subject key identifier: 87:3E:01:B3:89:D7:7E:65:A5:E9:5F:BA:71:9F:E3:19:74:8D:AD:E5 Authority key identifier: 30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0 Certificate issuer: /CN=30CE8572EA9DEDA805151BBD165E699D1191FED0 Certificate serial: 31B7983FFA581F2BAA5F2DBBE1A1A460D7F30E52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft Manifest number: 0179 Signing time: Thu 21 Aug 2025 04:11:43 +0000 Manifest this update: Thu 21 Aug 2025 04:06:43 +0000 Manifest next update: Sun 24 Aug 2025 15:24:43 +0000 Files and hashes: 1: 30CE8572EA9DEDA805151BBD165E699D1191FED0.crl (hash: 3QMy/PHjp9JlFJ35nTE97imRZUAVYaFBlbPKHnNbIfc=) 2: 3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa (hash: Q2j6s7F7V0sOCSPl3aHs6rPupunQzCX/dgkjx2YSfjU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 15:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b7:98:3f:fa:58:1f:2b:aa:5f:2d:bb:e1:a1:a4:60:d7:f3:0e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30CE8572EA9DEDA805151BBD165E699D1191FED0 Validity Not Before: Aug 21 04:06:43 2025 GMT Not After : Aug 24 15:24:43 2025 GMT Subject: CN=873E01B389D77E65A5E95FBA719FE319748DADE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d2:94:19:15:15:dc:16:c1:17:af:20:41:12: 84:2f:ff:45:87:de:f4:b5:58:63:6d:ed:49:55:0f: 36:50:c7:49:d7:bf:54:3d:04:63:7a:26:31:bf:2a: 21:ef:db:cb:c5:fb:e9:dd:a8:f6:ee:5e:e0:7e:26: ba:c0:5f:6d:88:65:b5:e7:94:41:a1:44:90:71:72: a4:05:15:23:47:4f:cd:e7:04:c3:20:8c:9a:c2:9c: ad:b2:1a:d9:47:58:56:8e:8b:5f:2e:df:62:d0:2a: b4:4c:5d:4e:d5:67:5e:da:d3:f5:fc:85:32:31:ec: da:12:5e:9f:68:23:a7:7e:2a:69:76:52:53:ad:d5: 2d:93:38:b0:f3:02:ba:9e:98:ac:81:c8:62:f3:64: 51:8a:4a:ab:51:d3:02:e0:4c:fb:e6:bd:86:08:de: d6:01:6f:37:50:9e:e3:e4:2a:0b:88:8e:ff:7f:70: b4:57:b9:53:c2:9f:15:d5:49:77:9e:37:53:75:23: b8:99:45:1a:23:33:bb:ca:be:46:6d:fa:1a:1c:84: e1:15:c1:01:18:82:29:d7:22:92:71:13:7f:96:07: e9:11:27:eb:df:ba:69:21:9e:30:05:ad:d6:97:a0: bf:7b:61:d0:03:4f:2b:5f:8d:f9:87:fe:9f:36:e0: 33:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3E:01:B3:89:D7:7E:65:A5:E9:5F:BA:71:9F:E3:19:74:8D:AD:E5 X509v3 Authority Key Identifier: keyid:30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b3:32:d7:3a:91:37:5e:fb:96:d0:ce:d6:10:b0:15:76:7d: 31:24:a1:e8:a2:b6:94:67:68:f9:be:ce:4c:c3:08:58:35:3b: c9:0a:67:26:4e:d5:ef:75:4d:c9:a9:3f:bd:5b:1f:42:2f:f3: 3d:2e:21:7a:15:54:34:d5:b5:a1:5d:ae:0a:92:59:ac:b3:da: a9:bf:44:0c:1f:f2:0b:de:6c:0d:90:f5:a3:42:41:1d:64:b4: 48:b3:53:31:48:5e:64:dd:a2:0b:e7:43:16:5c:dd:03:42:ad: ae:09:d2:7b:60:c2:0d:db:de:ff:41:79:bf:b1:27:b0:a6:27: 95:8a:2c:74:0f:b0:d6:8b:78:fb:bd:89:ac:02:cb:db:fe:12: d8:5d:14:eb:fc:f9:3b:f2:e0:3a:4c:40:99:cd:94:a4:65:ad: cc:f4:86:10:0d:bf:e0:91:be:76:f7:7c:95:c1:ff:ce:2f:fb: ce:b0:2c:31:f6:be:4e:3a:ad:f8:67:87:12:66:07:02:7b:e0: 23:33:bd:31:b6:55:37:88:4e:1d:b5:5f:6b:9d:21:46:73:56: df:ce:4a:e6:ae:b2:49:ab:11:22:8e:90:9f:ea:98:85:dd:39: 77:0e:cb:7f:ee:b0:e2:1c:50:5a:65:d4:07:42:2f:af:dd:4f: 72:20:24:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMbeYP/pYHyuqXy274aGkYNfzDlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5OUQx MTkxRkVEMDAeFw0yNTA4MjEwNDA2NDNaFw0yNTA4MjQxNTI0NDNaMDMxMTAvBgNV BAMTKDg3M0UwMUIzODlENzdFNjVBNUU5NUZCQTcxOUZFMzE5NzQ4REFERTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr0pQZFRXcFsEXryBBEoQv/0WH 3vS1WGNt7UlVDzZQx0nXv1Q9BGN6JjG/KiHv28vF++ndqPbuXuB+JrrAX22IZbXn lEGhRJBxcqQFFSNHT83nBMMgjJrCnK2yGtlHWFaOi18u32LQKrRMXU7VZ17a0/X8 hTIx7NoSXp9oI6d+Kml2UlOt1S2TOLDzArqemKyByGLzZFGKSqtR0wLgTPvmvYYI 3tYBbzdQnuPkKguIjv9/cLRXuVPCnxXVSXeeN1N1I7iZRRojM7vKvkZt+hochOEV wQEYginXIpJxE3+WB+kRJ+vfumkhnjAFrdaXoL97YdADTytfjfmH/p824DPdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhz4Bs4nXfmWl6V+6cZ/jGXSNreUwHwYDVR0j BBgwFoAUMM6Fcuqd7agFFRu9Fl5pnRGR/tAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDM4MDJlMi0wM2FmLTRkZDAtOGRjZS01NGMyOGE3MjU2M2QvMC8zMENFODU3MkVB OURFREE4MDUxNTFCQkQxNjVFNjk5RDExOTFGRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5OUQxMTkx RkVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAzODAyZTItMDNhZi00ZGQwLThk Y2UtNTRjMjhhNzI1NjNkLzAvMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5 OUQxMTkxRkVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHizMtc6kTde+5bQztYQsBV2fTEkoeiitpRn aPm+zkzDCFg1O8kKZyZO1e91TcmpP71bH0Iv8z0uIXoVVDTVtaFdrgqSWayz2qm/ RAwf8gvebA2Q9aNCQR1ktEizUzFIXmTdogvnQxZc3QNCra4J0ntgwg3b3v9Beb+x J7CmJ5WKLHQPsNaLePu9iawCy9v+EthdFOv8+Tvy4DpMQJnNlKRlrcz0hhANv+CR vnb3fJXB/84v+86wLDH2vk46rfhnhxJmBwJ74CMzvTG2VTeITh21X2udIUZzVt/O SuauskmrESKOkJ/qmIXdOXcOy3/usOIcUFpl1AdCL6/dT3IgJAU= -----END CERTIFICATE-----Generated at Sat Aug 23 14:01:05 2025 by rpki-client