$ rpki-client -vvf repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft File: 30D21A97E1EED902F151C3022374D979F0A4A7EF.mft (raw, json) Hash identifier: /Pqle0IMh5/LoT8uwb5dHHX3iNjb6d+SFwGzOzaHOPE= Subject key identifier: 98:6C:F7:52:28:9F:D7:33:A1:F4:0A:24:8D:5B:C4:58:40:98:84:90 Authority key identifier: 30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF Certificate issuer: /CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Certificate serial: 52D4E3A40665EBD306ABA9B5079503CB261EA4C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft Manifest number: 0132 Signing time: Mon 20 Oct 2025 04:51:43 +0000 Manifest this update: Mon 20 Oct 2025 04:46:43 +0000 Manifest next update: Thu 23 Oct 2025 07:05:43 +0000 Files and hashes: 1: 30D21A97E1EED902F151C3022374D979F0A4A7EF.crl (hash: G53hu8DjFPv0FtETWA2kxgNmS+8GKJoifUbz8uW4x6s=) 2: 34352e3234392e3232352e302f32342d3234203d3e20313532303237.roa (hash: C52489RC5C7/6xA/AFGhqaTac2q7UpLljZUsc+WdOYU=) 3: 34352e3234392e3232342e302f32342d3234203d3e20313532303237.roa (hash: Lbof0Eu5fIUUt+ZOnyAgcQnzposa001pRsoMaWB/hPw=) 4: 34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa (hash: dHytxOoYwuE6ev+ouL2C7HNOfk2qBxU0rZwmruiXqlc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 07:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d4:e3:a4:06:65:eb:d3:06:ab:a9:b5:07:95:03:cb:26:1e:a4:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Validity Not Before: Oct 20 04:46:43 2025 GMT Not After : Oct 23 07:05:43 2025 GMT Subject: CN=986CF752289FD733A1F40A248D5BC45840988490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:52:7d:b2:5f:16:e3:d5:59:22:ef:14:ce:7c: 55:0a:23:5c:1e:2c:62:ca:24:58:6e:93:78:83:61: 6f:c4:66:48:80:41:9c:7f:1c:51:34:b1:fa:db:1a: 77:83:fb:9e:14:ea:b1:b5:52:31:6f:48:e7:7a:73: ec:a3:55:57:05:9e:48:dc:4a:4e:96:20:9e:f6:00: 04:80:7f:3d:aa:a1:f1:35:78:14:c4:37:21:3e:e8: 8f:06:8e:bf:db:97:b1:c7:40:f3:0f:77:b1:05:93: 7a:f2:33:5f:8a:8a:50:d9:d8:7d:11:70:65:6b:8d: f1:8f:1d:1f:05:b6:4c:43:be:21:bd:4e:ba:ed:f5: 71:39:d0:67:15:db:29:8a:47:c6:30:85:86:f9:8e: 70:72:4a:c1:28:cf:8c:5e:70:ec:02:f2:5f:84:80: b5:77:9d:22:ab:89:b5:22:fe:37:70:9d:e9:32:1c: 7b:25:c8:1d:08:63:c5:c4:7a:c4:88:c0:08:09:28: cc:d7:07:56:ff:19:de:3c:e0:74:85:da:a9:60:9b: 9e:8c:62:41:c7:bf:8b:e5:be:8a:20:1f:63:87:e0: ec:58:29:06:49:18:ca:43:00:33:af:9f:0e:5e:62: 6c:dd:b2:5c:c6:45:07:5b:33:c4:a4:27:c4:e8:d9: 05:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6C:F7:52:28:9F:D7:33:A1:F4:0A:24:8D:5B:C4:58:40:98:84:90 X509v3 Authority Key Identifier: keyid:30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:85:1d:b3:fc:57:30:ea:bd:cc:1f:46:3d:7c:1a:04:cd:12: 80:ff:9e:0d:d6:59:15:d4:bc:f6:15:1d:73:2b:2a:79:06:8e: d9:39:0d:32:60:5e:77:19:e4:d7:f7:a5:82:17:94:6c:fd:82: 76:72:ec:68:ef:36:53:cf:cc:04:d3:27:0b:39:c8:c6:c1:f8: 3e:d3:e0:1a:67:21:74:77:30:f4:ce:97:a1:09:68:f3:85:e8: be:b2:b5:e8:19:42:04:f9:12:75:64:bd:47:87:e6:d0:e8:b6: 74:be:07:7c:3f:1a:18:31:8d:bb:46:db:b3:20:37:0d:1f:ff: e3:09:cc:23:85:92:f6:5b:3c:87:db:14:87:bb:0e:76:1d:aa: 9a:a9:8e:f2:63:4a:23:70:f0:d6:8c:93:fe:a8:9a:50:3e:ec: 63:49:2f:76:a9:27:16:f6:b9:0b:55:0f:cf:e4:bd:24:da:ec: be:9c:86:5c:e4:9d:2a:53:9c:1f:d5:ed:5f:58:63:e9:40:2f: 17:b2:70:83:c7:d8:9a:42:29:c1:f1:a0:5d:d0:db:86:e7:a7: 09:8a:ec:ed:a9:b5:fe:49:2d:fc:de:db:98:58:7b:ca:f7:c0: 90:7d:b5:dd:28:a5:30:f6:86:08:3f:b0:af:bd:17:33:d4:11: e9:eb:c3:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUtTjpAZl69MGq6m1B5UDyyYepMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlG MEE0QTdFRjAeFw0yNTEwMjAwNDQ2NDNaFw0yNTEwMjMwNzA1NDNaMDMxMTAvBgNV BAMTKDk4NkNGNzUyMjg5RkQ3MzNBMUY0MEEyNDhENUJDNDU4NDA5ODg0OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4Un2yXxbj1Vki7xTOfFUKI1we LGLKJFhuk3iDYW/EZkiAQZx/HFE0sfrbGneD+54U6rG1UjFvSOd6c+yjVVcFnkjc Sk6WIJ72AASAfz2qofE1eBTENyE+6I8Gjr/bl7HHQPMPd7EFk3ryM1+KilDZ2H0R cGVrjfGPHR8FtkxDviG9Trrt9XE50GcV2ymKR8YwhYb5jnBySsEoz4xecOwC8l+E gLV3nSKribUi/jdwnekyHHslyB0IY8XEesSIwAgJKMzXB1b/Gd484HSF2qlgm56M YkHHv4vlvoogH2OH4OxYKQZJGMpDADOvnw5eYmzdslzGRQdbM8SkJ8To2QXRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmGz3Uiif1zOh9AokjVvEWECYhJAwHwYDVR0j BBgwFoAUMNIal+Hu2QLxUcMCI3TZefCkp+8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWI4OTlhYy00ODcwLTRlMjgtOGU0ZS0yYzIzNzUyYTRhNjAvMC8zMEQyMUE5N0Ux RUVEOTAyRjE1MUMzMDIyMzc0RDk3OUYwQTRBN0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlGMEE0 QTdFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDliODk5YWMtNDg3MC00ZTI4LThl NGUtMmMyMzc1MmE0YTYwLzAvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5 NzlGMEE0QTdFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqFHbP8VzDqvcwfRj18GgTNEoD/ng3WWRXU vPYVHXMrKnkGjtk5DTJgXncZ5Nf3pYIXlGz9gnZy7GjvNlPPzATTJws5yMbB+D7T 4BpnIXR3MPTOl6EJaPOF6L6ytegZQgT5EnVkvUeH5tDotnS+B3w/GhgxjbtG27Mg Nw0f/+MJzCOFkvZbPIfbFIe7DnYdqpqpjvJjSiNw8NaMk/6omlA+7GNJL3apJxb2 uQtVD8/kvSTa7L6chlzknSpTnB/V7V9YY+lALxeycIPH2JpCKcHxoF3Q24bnpwmK 7O2ptf5JLfze25hYe8r3wJB9td0opTD2hgg/sK+9FzPUEenrw2Q= -----END CERTIFICATE-----Generated at Mon Oct 20 09:41:26 2025 by rpki-client