$ rpki-client -vvf repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft File: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft (raw, json) Hash identifier: FT5mtEgBkcEmBaVSFGPB6OvF+FRE78KiJYA+gMPrKNE= Subject key identifier: DA:07:01:6A:2D:B1:96:97:84:12:D8:C0:7D:2D:A0:D8:1F:20:BA:42 Authority key identifier: 30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 Certificate issuer: /CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Certificate serial: 01B37C8BD95421AC038D753C1BD193767D994F5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft Manifest number: B9 Signing time: Sun 19 Oct 2025 03:10:45 +0000 Manifest this update: Sun 19 Oct 2025 03:05:45 +0000 Manifest next update: Wed 22 Oct 2025 03:47:45 +0000 Files and hashes: 1: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl (hash: UEZ4VmZLVVxf+JaaoOnu2zzxDzKkPxIqwrTSHy1cW+M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 03:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:b3:7c:8b:d9:54:21:ac:03:8d:75:3c:1b:d1:93:76:7d:99:4f:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Validity Not Before: Oct 19 03:05:45 2025 GMT Not After : Oct 22 03:47:45 2025 GMT Subject: CN=DA07016A2DB196978412D8C07D2DA0D81F20BA42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:16:21:3f:00:cc:39:70:98:80:42:0e:32:e1: ef:1d:72:11:b5:e8:62:1d:71:4f:c7:18:32:06:81: 70:39:b1:f8:78:28:3c:16:7a:51:d3:1b:36:97:5a: 50:6b:6f:a9:0c:dc:80:89:34:cf:92:af:77:17:80: 5e:59:f8:ed:29:8d:23:9d:23:be:49:39:59:e3:83: d5:a3:3e:56:13:2c:d9:8c:f7:a8:f6:dc:16:f0:aa: 12:89:90:40:32:a8:61:88:83:b3:03:37:f5:e7:71: ab:c9:40:4b:bb:3a:c4:a0:5d:d7:25:7b:b6:34:66: 09:58:1f:17:ef:2a:42:7e:41:10:64:1b:bd:ac:e8: a3:eb:f5:cc:e0:0b:bb:f3:17:86:37:17:83:3d:c6: 17:55:69:6a:ad:0c:dc:d1:53:47:da:dd:8d:09:cd: b6:fb:92:1e:3a:60:01:12:2f:a3:7d:29:55:41:7e: 0c:e2:57:09:ab:c5:ec:15:15:84:78:7b:ac:83:bf: ce:08:89:03:3e:5b:c7:df:1c:e1:47:b8:51:db:03: 3e:d0:4c:96:be:d7:a5:5d:53:af:eb:c2:41:e2:ff: 01:a8:78:5f:02:fb:e5:7e:58:d1:4d:e9:5d:64:dd: 3f:bd:45:9a:d8:cf:09:40:ea:4e:a1:5c:73:3b:8b: 36:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:07:01:6A:2D:B1:96:97:84:12:D8:C0:7D:2D:A0:D8:1F:20:BA:42 X509v3 Authority Key Identifier: keyid:30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:f3:24:7d:b1:22:a0:91:f6:2f:a2:5e:7a:13:8c:c3:3e:0d: ac:c3:00:47:9b:5c:09:91:21:32:f5:8d:34:c0:34:b3:68:8a: ce:28:05:a3:8e:46:ca:4e:a7:26:58:74:57:ca:85:dc:5a:10: af:9a:08:b5:d5:c9:33:98:33:be:e0:6c:1f:a6:55:13:b9:93: 2a:36:0a:b3:62:f7:7d:dd:ab:e8:76:8b:07:1c:15:3c:04:d0: 8a:e3:54:dc:7b:a6:2f:92:b4:ee:53:fb:e2:19:4f:66:f0:66: 0b:2d:ee:8f:0e:3e:49:f1:a0:d3:d3:90:45:06:e6:e3:46:08: c7:ee:c2:5b:78:d4:db:6b:b1:46:85:ca:44:dc:53:bb:3a:35: b4:58:b7:e1:10:03:f6:be:01:93:cc:ab:14:37:87:4d:e4:71: 78:32:19:c3:9c:53:d2:d3:dd:84:c9:c6:cd:e5:d8:77:5b:9c: 9b:9d:e5:43:67:a3:bf:e8:86:7d:21:5a:f8:c3:63:67:53:c3: c3:52:96:11:43:81:df:03:54:09:0c:da:57:ed:b1:ea:53:38: d1:26:1b:b1:ab:da:e8:cd:2f:16:a9:9d:8a:f6:4d:e0:59:74: df:9d:82:cb:5e:59:44:36:79:b2:55:05:d0:03:4d:61:cf:7c: b9:3c:9b:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAbN8i9lUIawDjXU8G9GTdn2ZT14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5 QjlENjc3MDAeFw0yNTEwMTkwMzA1NDVaFw0yNTEwMjIwMzQ3NDVaMDMxMTAvBgNV BAMTKERBMDcwMTZBMkRCMTk2OTc4NDEyRDhDMDdEMkRBMEQ4MUYyMEJBNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChFiE/AMw5cJiAQg4y4e8dchG1 6GIdcU/HGDIGgXA5sfh4KDwWelHTGzaXWlBrb6kM3ICJNM+Sr3cXgF5Z+O0pjSOd I75JOVnjg9WjPlYTLNmM96j23BbwqhKJkEAyqGGIg7MDN/XncavJQEu7OsSgXdcl e7Y0ZglYHxfvKkJ+QRBkG72s6KPr9czgC7vzF4Y3F4M9xhdVaWqtDNzRU0fa3Y0J zbb7kh46YAESL6N9KVVBfgziVwmrxewVFYR4e6yDv84IiQM+W8ffHOFHuFHbAz7Q TJa+16VdU6/rwkHi/wGoeF8C++V+WNFN6V1k3T+9RZrYzwlA6k6hXHM7izb3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2gcBai2xlpeEEtjAfS2g2B8gukIwHwYDVR0j BBgwFoAUMJ/+MGledrpJUuKWW0/iT5udZ3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2NiNTBiMC00M2NjLTQ4ZDAtOTFmNC0wNWJiZGU3YWMxZDAvMC8zMDlGRkUzMDY5 NUU3NkJBNDk1MkUyOTY1QjRGRTI0RjlCOUQ2NzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5QjlE Njc3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNjYjUwYjAtNDNjYy00OGQwLTkx ZjQtMDViYmRlN2FjMWQwLzAvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUy NEY5QjlENjc3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMnzJH2xIqCR9i+iXnoTjMM+DazDAEebXAmR ITL1jTTANLNois4oBaOORspOpyZYdFfKhdxaEK+aCLXVyTOYM77gbB+mVRO5kyo2 CrNi933dq+h2iwccFTwE0IrjVNx7pi+StO5T++IZT2bwZgst7o8OPknxoNPTkEUG 5uNGCMfuwlt41NtrsUaFykTcU7s6NbRYt+EQA/a+AZPMqxQ3h03kcXgyGcOcU9LT 3YTJxs3l2HdbnJud5UNno7/ohn0hWvjDY2dTw8NSlhFDgd8DVAkM2lftsepTONEm G7Gr2ujNLxapnYr2TeBZdN+dgsteWUQ2ebJVBdADTWHPfLk8m1A= -----END CERTIFICATE-----Generated at Mon Oct 20 14:36:11 2025 by rpki-client