$ rpki-client -vvf repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft File: 30D21A97E1EED902F151C3022374D979F0A4A7EF.mft (raw, json) Hash identifier: b+hXH/boUbNvq/TAyserHq8n9YMGNzNv/mnn2hTfRww= Subject key identifier: 4D:EC:28:74:68:F6:C8:D7:C6:42:CF:61:90:CF:83:25:CF:73:BD:0C Authority key identifier: 30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF Certificate issuer: /CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Certificate serial: 0C33F0BE53CCF9CFB1C6E6D7411DB970C7B876F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft Manifest number: 0102 Signing time: Thu 03 Jul 2025 07:41:41 +0000 Manifest this update: Thu 03 Jul 2025 07:36:41 +0000 Manifest next update: Sun 06 Jul 2025 10:17:41 +0000 Files and hashes: 1: 34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa (hash: ROzSHjIj4d0A5I5xwPcr8qcP04vsXN3kHThsDDQGeag=) 2: 34352e3234392e3232342e302f32342d3234203d3e20313532303237.roa (hash: nmoiRM53K6xpzn1bErPhguSmoFMNRryI2xbTQlBLJ8Q=) 3: 30D21A97E1EED902F151C3022374D979F0A4A7EF.crl (hash: fGpTV8ZVruQXW9jBgcGWI8iNF1NaytHCJ/0rjWyuj9U=) 4: 34352e3234392e3232352e302f32342d3234203d3e20313532303237.roa (hash: lGxv0hhUzCj7M28hqKeyqRqBKDDJKTxW9siQxZRW/8Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 10:17:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:33:f0:be:53:cc:f9:cf:b1:c6:e6:d7:41:1d:b9:70:c7:b8:76:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Validity Not Before: Jul 3 07:36:41 2025 GMT Not After : Jul 6 10:17:41 2025 GMT Subject: CN=4DEC287468F6C8D7C642CF6190CF8325CF73BD0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:50:c3:b5:9b:e5:68:0f:8f:df:95:f7:67:6c: 2a:6d:d1:1e:76:0e:36:71:35:de:9c:d9:40:62:bf: 79:b3:e4:b1:7e:cd:3e:c4:e4:9e:59:a1:0a:05:14: a9:87:29:c6:93:07:75:27:1c:b8:7c:77:71:09:02: 23:fe:e1:6d:dc:9b:ce:e9:a7:72:f0:f6:89:c2:9b: 96:23:91:ad:73:c5:89:5c:ea:1d:ec:ad:03:e0:0d: d3:17:80:c9:6c:ff:1e:e4:d9:e0:8a:d2:30:81:25: 04:8e:d5:45:8d:26:25:72:d7:d3:7b:12:66:93:c7: 42:78:60:cb:04:b3:a8:2c:88:71:b8:01:30:4a:f4: 0d:8b:41:12:5b:20:4c:3e:da:4d:93:67:cf:89:56: d7:b3:8e:5a:20:fb:a5:1d:21:7d:32:ca:72:87:db: cc:44:35:90:d6:60:c0:63:bd:e5:b6:90:d1:bb:0e: 2f:8a:a2:44:3b:b4:e5:b5:9f:14:1c:f0:a5:94:a5: d3:b3:d1:36:c6:67:98:eb:43:7d:96:3e:bc:f5:c3: 80:d2:2a:98:65:0b:fd:65:24:bc:4d:09:18:79:fe: b5:75:5d:3a:10:9d:aa:83:98:5a:ff:13:ba:fa:c8: 4c:21:5b:d7:b5:78:aa:e9:55:81:9c:bf:db:67:c2: d8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EC:28:74:68:F6:C8:D7:C6:42:CF:61:90:CF:83:25:CF:73:BD:0C X509v3 Authority Key Identifier: keyid:30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:cb:61:44:db:bb:c9:dd:fc:b3:91:38:d4:57:61:d6:3a:db: cd:58:3e:7b:a0:d5:3e:eb:67:f7:a6:f9:4b:5b:dd:01:1d:91: b8:58:a8:ad:82:ea:b8:72:0c:c3:f0:5b:b2:35:95:3a:60:bd: f8:3c:9d:2f:3d:c0:59:6b:5a:70:31:4e:d5:02:20:b5:ba:12: 61:6c:17:12:01:ae:fe:72:78:bf:68:a4:b2:79:d0:0a:32:61: 02:1d:93:fc:68:4c:b7:15:29:38:81:ae:ee:90:b9:0a:88:e5: 1d:49:eb:e2:09:4d:80:de:6a:db:c6:6b:96:5a:9c:ed:48:35: 29:a3:a8:63:e5:1e:34:8d:81:57:82:c2:2b:7c:3b:7d:40:60: fb:c5:7e:b3:f4:37:b8:f6:5b:49:19:61:e4:06:b2:31:c7:dc: 0f:45:e7:2e:4d:d6:95:13:fe:89:7f:aa:6e:c6:b8:88:2b:0e: cb:87:b2:ae:4a:39:78:32:72:05:24:ba:8f:75:19:20:b0:23: 05:b2:2c:9f:1d:9c:73:4e:30:cf:f8:81:3d:9d:22:ef:f7:ed: e6:58:3f:a5:0f:e5:88:7e:79:5b:09:a8:84:fe:78:c4:d1:97: 0b:34:5e:a3:19:76:32:b1:c4:84:c7:19:b8:2a:12:f6:c2:39: 70:30:cf:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDDPwvlPM+c+xxubXQR25cMe4dvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlG MEE0QTdFRjAeFw0yNTA3MDMwNzM2NDFaFw0yNTA3MDYxMDE3NDFaMDMxMTAvBgNV BAMTKDRERUMyODc0NjhGNkM4RDdDNjQyQ0Y2MTkwQ0Y4MzI1Q0Y3M0JEMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzUMO1m+VoD4/flfdnbCpt0R52 DjZxNd6c2UBiv3mz5LF+zT7E5J5ZoQoFFKmHKcaTB3UnHLh8d3EJAiP+4W3cm87p p3Lw9onCm5Yjka1zxYlc6h3srQPgDdMXgMls/x7k2eCK0jCBJQSO1UWNJiVy19N7 EmaTx0J4YMsEs6gsiHG4ATBK9A2LQRJbIEw+2k2TZ8+JVtezjlog+6UdIX0yynKH 28xENZDWYMBjveW2kNG7Di+KokQ7tOW1nxQc8KWUpdOz0TbGZ5jrQ32WPrz1w4DS KphlC/1lJLxNCRh5/rV1XToQnaqDmFr/E7r6yEwhW9e1eKrpVYGcv9tnwtjBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTewodGj2yNfGQs9hkM+DJc9zvQwwHwYDVR0j BBgwFoAUMNIal+Hu2QLxUcMCI3TZefCkp+8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWI4OTlhYy00ODcwLTRlMjgtOGU0ZS0yYzIzNzUyYTRhNjAvMC8zMEQyMUE5N0Ux RUVEOTAyRjE1MUMzMDIyMzc0RDk3OUYwQTRBN0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlGMEE0 QTdFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDliODk5YWMtNDg3MC00ZTI4LThl NGUtMmMyMzc1MmE0YTYwLzAvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5 NzlGMEE0QTdFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTLYUTbu8nd/LORONRXYdY6281YPnug1T7r Z/em+Utb3QEdkbhYqK2C6rhyDMPwW7I1lTpgvfg8nS89wFlrWnAxTtUCILW6EmFs FxIBrv5yeL9opLJ50AoyYQIdk/xoTLcVKTiBru6QuQqI5R1J6+IJTYDeatvGa5Za nO1INSmjqGPlHjSNgVeCwit8O31AYPvFfrP0N7j2W0kZYeQGsjHH3A9F5y5N1pUT /ol/qm7GuIgrDsuHsq5KOXgycgUkuo91GSCwIwWyLJ8dnHNOMM/4gT2dIu/37eZY P6UP5Yh+eVsJqIT+eMTRlws0XqMZdjKxxITHGbgqEvbCOXAwz4Q= -----END CERTIFICATE-----Generated at Fri Jul 4 06:08:58 2025 by rpki-client