$ rpki-client -vvf repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft File: 30CE8572EA9DEDA805151BBD165E699D1191FED0.mft (raw, json) Hash identifier: VKbK2MSEpgNXud3fzBAUBuMtjdmlEZNR1bLFSMt07Hg= Subject key identifier: 3B:91:E7:4E:25:87:27:50:ED:89:EE:B4:B7:8B:43:BF:3E:23:EB:0F Authority key identifier: 30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0 Certificate issuer: /CN=30CE8572EA9DEDA805151BBD165E699D1191FED0 Certificate serial: 63F82D2207DA853FBA087DD19B8FE25333CD649E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft Manifest number: 0193 Signing time: Sun 19 Oct 2025 21:01:45 +0000 Manifest this update: Sun 19 Oct 2025 20:56:45 +0000 Manifest next update: Thu 23 Oct 2025 01:24:45 +0000 Files and hashes: 1: 3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa (hash: Q2j6s7F7V0sOCSPl3aHs6rPupunQzCX/dgkjx2YSfjU=) 2: 30CE8572EA9DEDA805151BBD165E699D1191FED0.crl (hash: 74tF1ZifdxUOBro/tDkDnKocex4Fi54ItExohgWOEss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f8:2d:22:07:da:85:3f:ba:08:7d:d1:9b:8f:e2:53:33:cd:64:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30CE8572EA9DEDA805151BBD165E699D1191FED0 Validity Not Before: Oct 19 20:56:45 2025 GMT Not After : Oct 23 01:24:45 2025 GMT Subject: CN=3B91E74E25872750ED89EEB4B78B43BF3E23EB0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:75:12:bc:3b:9b:6a:f7:ef:cf:07:e3:18:a9: 18:f8:96:9b:c8:5b:aa:7d:1a:ef:60:e1:0e:a2:12: 97:2f:83:d8:5d:44:b9:62:4c:42:da:a6:27:71:b6: cc:87:f9:f3:ad:b6:2d:f1:e3:59:7c:a1:25:a5:a5: 62:fb:b6:57:9e:53:47:e2:a2:f6:fc:b1:f1:90:6b: 88:c7:7f:13:8f:8c:2a:3a:42:41:54:fa:f9:7a:0f: 4e:64:c0:9e:db:68:e6:54:c5:2b:3d:9f:90:35:0c: c5:9f:f7:33:e9:13:9c:69:10:11:e4:fa:0d:c6:df: 51:6c:cc:2a:ab:43:00:a2:15:87:17:db:f0:4a:1b: 88:3a:46:c8:98:68:0d:8e:cb:d3:ba:76:9d:8d:cb: b8:87:f9:e8:81:0c:f3:d1:72:0d:e9:cd:36:5f:54: be:3d:4b:9d:3c:cd:1c:85:22:e7:c2:f5:35:6f:48: b1:6f:09:f3:c5:9b:fd:bf:87:40:f6:83:59:2c:75: 50:6e:fa:d4:45:17:80:fd:a6:1e:19:e7:6f:1f:a9: 84:86:04:b0:75:61:85:2c:45:dd:4d:df:67:c3:d8: f2:f7:e8:6d:98:5e:9b:b4:2f:c2:4c:ba:23:89:f0: 09:c8:c8:af:30:54:44:46:5c:9b:84:5b:e9:8c:40: 86:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:91:E7:4E:25:87:27:50:ED:89:EE:B4:B7:8B:43:BF:3E:23:EB:0F X509v3 Authority Key Identifier: keyid:30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:a0:aa:3e:36:72:17:0e:cb:ca:a3:39:03:11:c0:84:24:8d: 8c:0a:de:ad:33:30:f5:58:08:4f:2a:64:c0:53:74:0c:72:78: f4:0f:5d:f6:7a:71:37:9a:47:e2:46:2d:ad:44:43:3a:ad:6e: 67:f5:3d:28:09:67:b1:c3:d2:27:e0:a6:90:50:59:cf:47:74: de:3b:6d:e5:68:01:65:75:c6:ae:1d:3f:b0:82:38:c9:6a:e4: e5:fd:0d:4d:78:8c:2f:60:16:33:b2:75:09:1a:22:01:73:fa: f3:29:f6:f7:5c:47:8c:bf:9d:02:06:de:d6:dc:f9:f5:d0:3a: f1:9a:73:1d:29:2e:ce:00:29:e4:82:9b:af:0a:b7:fa:be:ff: ec:44:30:22:c9:79:73:8d:8d:21:f0:e7:47:6c:7b:5b:f0:83: b3:a1:6a:23:31:66:36:41:c3:f8:20:42:ae:64:57:8d:5d:f3: 2a:be:29:4d:bd:72:69:6b:82:d8:26:41:2d:3a:fa:51:0c:12: 0d:8a:41:9d:7d:6f:54:6c:08:6a:28:e9:f6:e9:95:21:2f:69: 5d:46:5d:23:40:c8:df:26:ba:54:69:58:2f:e5:18:54:e8:ed: 31:12:0e:46:f5:cd:31:51:c7:5f:3c:46:50:cf:27:09:39:a8: 6f:34:42:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY/gtIgfahT+6CH3Rm4/iUzPNZJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5OUQx MTkxRkVEMDAeFw0yNTEwMTkyMDU2NDVaFw0yNTEwMjMwMTI0NDVaMDMxMTAvBgNV BAMTKDNCOTFFNzRFMjU4NzI3NTBFRDg5RUVCNEI3OEI0M0JGM0UyM0VCMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dRK8O5tq9+/PB+MYqRj4lpvI W6p9Gu9g4Q6iEpcvg9hdRLliTELapidxtsyH+fOtti3x41l8oSWlpWL7tleeU0fi ovb8sfGQa4jHfxOPjCo6QkFU+vl6D05kwJ7baOZUxSs9n5A1DMWf9zPpE5xpEBHk +g3G31FszCqrQwCiFYcX2/BKG4g6RsiYaA2Oy9O6dp2Ny7iH+eiBDPPRcg3pzTZf VL49S508zRyFIufC9TVvSLFvCfPFm/2/h0D2g1ksdVBu+tRFF4D9ph4Z528fqYSG BLB1YYUsRd1N32fD2PL36G2YXpu0L8JMuiOJ8AnIyK8wVERGXJuEW+mMQIZpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO5HnTiWHJ1Dtie60t4tDvz4j6w8wHwYDVR0j BBgwFoAUMM6Fcuqd7agFFRu9Fl5pnRGR/tAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDM4MDJlMi0wM2FmLTRkZDAtOGRjZS01NGMyOGE3MjU2M2QvMC8zMENFODU3MkVB OURFREE4MDUxNTFCQkQxNjVFNjk5RDExOTFGRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5OUQxMTkx RkVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAzODAyZTItMDNhZi00ZGQwLThk Y2UtNTRjMjhhNzI1NjNkLzAvMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5 OUQxMTkxRkVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICgqj42chcOy8qjOQMRwIQkjYwK3q0zMPVY CE8qZMBTdAxyePQPXfZ6cTeaR+JGLa1EQzqtbmf1PSgJZ7HD0ifgppBQWc9HdN47 beVoAWV1xq4dP7CCOMlq5OX9DU14jC9gFjOydQkaIgFz+vMp9vdcR4y/nQIG3tbc +fXQOvGacx0pLs4AKeSCm68Kt/q+/+xEMCLJeXONjSHw50dse1vwg7OhaiMxZjZB w/ggQq5kV41d8yq+KU29cmlrgtgmQS06+lEMEg2KQZ19b1RsCGoo6fbplSEvaV1G XSNAyN8mulRpWC/lGFTo7TESDkb1zTFRx188RlDPJwk5qG80Qss= -----END CERTIFICATE-----Generated at Mon Oct 20 19:06:20 2025 by rpki-client