$ rpki-client -vvf repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft File: 30CE8572EA9DEDA805151BBD165E699D1191FED0.mft (raw, json) Hash identifier: IVehdR7dEuKuZKJcZ/niVxpOHGVxQzRXHadIfspZ6gk= Subject key identifier: 72:A9:13:2E:3C:8A:7E:03:BD:FB:E0:3F:17:26:BB:C8:FF:ED:3A:2D Authority key identifier: 30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0 Certificate issuer: /CN=30CE8572EA9DEDA805151BBD165E699D1191FED0 Certificate serial: 69E58D7F4154B901EB8138EFD51DEFBE026F929E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft Manifest number: 0162 Signing time: Tue 01 Jul 2025 00:41:42 +0000 Manifest this update: Tue 01 Jul 2025 00:36:42 +0000 Manifest next update: Fri 04 Jul 2025 08:08:42 +0000 Files and hashes: 1: 30CE8572EA9DEDA805151BBD165E699D1191FED0.crl (hash: JvtreNPgP1BJgsTn9Gg23eaKrdZ2ILPQNDj7OONDnnE=) 2: 3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa (hash: Q2j6s7F7V0sOCSPl3aHs6rPupunQzCX/dgkjx2YSfjU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 08:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:e5:8d:7f:41:54:b9:01:eb:81:38:ef:d5:1d:ef:be:02:6f:92:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30CE8572EA9DEDA805151BBD165E699D1191FED0 Validity Not Before: Jul 1 00:36:42 2025 GMT Not After : Jul 4 08:08:42 2025 GMT Subject: CN=72A9132E3C8A7E03BDFBE03F1726BBC8FFED3A2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e7:10:20:15:ff:30:79:bf:3b:ff:e3:ec:43: 95:63:89:2a:50:5d:a3:ce:93:88:b2:f1:f4:81:73: a7:4f:e7:ca:f6:85:87:55:d2:51:93:3f:c8:5f:1f: 84:8d:e6:95:1a:54:93:d5:d9:6e:de:d9:41:21:fb: e0:c7:96:c3:f6:ef:04:e9:ad:fe:ec:be:9c:77:fb: af:73:6c:4d:e3:58:cc:c8:7e:71:cf:c2:1b:3d:07: 46:52:4e:38:16:5f:80:7c:8a:91:58:34:ee:ca:ad: c3:1b:ea:2e:9d:38:07:29:06:e3:17:fe:dc:5a:71: 54:17:91:e4:0c:25:91:46:07:02:25:89:73:4d:7a: ee:05:9e:48:23:9a:fc:1a:2b:47:dd:31:f7:b2:0d: b5:25:58:21:62:96:5d:c5:1e:37:c5:0a:ad:61:9b: 22:5f:c5:41:e4:b1:4d:e6:6a:da:67:e8:64:2d:0c: 28:b5:00:1b:8a:e6:e3:f0:9d:22:1f:9f:c9:96:c7: 59:ee:f8:16:aa:3d:fc:04:19:7a:8b:91:62:ef:5e: 7e:65:9d:39:f5:39:d0:a6:a7:3a:c1:60:b2:84:3d: 9c:28:22:01:72:dc:a3:f9:a7:f4:77:36:c0:cb:57: 72:f1:32:89:0e:f2:0c:5f:cc:d4:87:e4:ef:9d:a2: 33:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A9:13:2E:3C:8A:7E:03:BD:FB:E0:3F:17:26:BB:C8:FF:ED:3A:2D X509v3 Authority Key Identifier: keyid:30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:9b:d2:90:86:6b:fc:39:a8:a2:b6:ca:75:71:6b:b9:f4:9c: 28:ee:bd:7d:04:57:b5:1b:23:fd:71:4e:a6:8f:5b:31:fe:59: 13:51:fb:79:b4:d0:21:a9:55:aa:1c:06:73:2a:f1:69:fc:4b: 96:a2:54:de:ed:fe:0f:b0:7d:5b:eb:50:0f:03:36:28:4f:6c: 46:89:4c:6d:1f:70:44:3b:52:7d:67:c3:d8:dc:e5:21:e5:7a: 87:f1:21:70:12:f2:29:c1:ac:f3:ed:6a:8b:c7:6d:18:f2:9d: 1d:e9:20:ba:4e:5e:cd:9c:34:40:96:77:0e:f5:9d:fc:fb:6e: b4:ab:57:d0:61:c2:57:f6:48:f6:c1:b1:f5:93:f5:21:4c:99: 98:8e:c6:96:99:27:f2:54:15:c5:27:b4:17:27:3d:3d:58:ba: ec:01:5c:16:a2:f3:51:0f:16:f6:bf:67:7d:ea:50:dc:d6:76: 12:7e:f1:f4:f7:47:ca:37:df:b9:81:b7:e6:7f:4b:8f:d5:cc: b0:f7:25:dd:21:b5:20:cf:fb:c6:9a:41:b6:a0:64:60:78:34: 20:f4:da:2b:a8:df:6d:5a:b0:6f:3a:a0:29:6b:1c:da:00:95: 61:98:29:78:5f:fc:bd:c3:45:03:6f:e1:24:e1:97:e5:ca:61: 0d:2e:e3:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaeWNf0FUuQHrgTjv1R3vvgJvkp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5OUQx MTkxRkVEMDAeFw0yNTA3MDEwMDM2NDJaFw0yNTA3MDQwODA4NDJaMDMxMTAvBgNV BAMTKDcyQTkxMzJFM0M4QTdFMDNCREZCRTAzRjE3MjZCQkM4RkZFRDNBMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo5xAgFf8web87/+PsQ5VjiSpQ XaPOk4iy8fSBc6dP58r2hYdV0lGTP8hfH4SN5pUaVJPV2W7e2UEh++DHlsP27wTp rf7svpx3+69zbE3jWMzIfnHPwhs9B0ZSTjgWX4B8ipFYNO7KrcMb6i6dOAcpBuMX /txacVQXkeQMJZFGBwIliXNNeu4FnkgjmvwaK0fdMfeyDbUlWCFill3FHjfFCq1h myJfxUHksU3matpn6GQtDCi1ABuK5uPwnSIfn8mWx1nu+BaqPfwEGXqLkWLvXn5l nTn1OdCmpzrBYLKEPZwoIgFy3KP5p/R3NsDLV3LxMokO8gxfzNSH5O+dojPnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcqkTLjyKfgO9++A/Fya7yP/tOi0wHwYDVR0j BBgwFoAUMM6Fcuqd7agFFRu9Fl5pnRGR/tAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDM4MDJlMi0wM2FmLTRkZDAtOGRjZS01NGMyOGE3MjU2M2QvMC8zMENFODU3MkVB OURFREE4MDUxNTFCQkQxNjVFNjk5RDExOTFGRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5OUQxMTkx RkVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAzODAyZTItMDNhZi00ZGQwLThk Y2UtNTRjMjhhNzI1NjNkLzAvMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5 OUQxMTkxRkVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeb0pCGa/w5qKK2ynVxa7n0nCjuvX0EV7Ub I/1xTqaPWzH+WRNR+3m00CGpVaocBnMq8Wn8S5aiVN7t/g+wfVvrUA8DNihPbEaJ TG0fcEQ7Un1nw9jc5SHleofxIXAS8inBrPPtaovHbRjynR3pILpOXs2cNECWdw71 nfz7brSrV9Bhwlf2SPbBsfWT9SFMmZiOxpaZJ/JUFcUntBcnPT1YuuwBXBai81EP Fva/Z33qUNzWdhJ+8fT3R8o337mBt+Z/S4/VzLD3Jd0htSDP+8aaQbagZGB4NCD0 2iuo321asG86oClrHNoAlWGYKXhf/L3DRQNv4SThl+XKYQ0u4wI= -----END CERTIFICATE-----Generated at Tue Jul 1 11:53:01 2025 by rpki-client