$ rpki-client -vvf repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft File: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft (raw, json) Hash identifier: TPKvHKUfkwdQ0mqrNhOiOq+yFAziUNFlRS1OIoOe9SY= Subject key identifier: C8:46:2E:43:B1:DA:56:5D:8C:4F:75:BD:83:47:E1:B3:58:FE:89:9E Authority key identifier: 30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 Certificate issuer: /CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Certificate serial: 2D419F93ED20D166471FE29810F31478BFD00AB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft Manifest number: A0 Signing time: Sat 23 Aug 2025 18:50:46 +0000 Manifest this update: Sat 23 Aug 2025 18:45:46 +0000 Manifest next update: Wed 27 Aug 2025 04:15:46 +0000 Files and hashes: 1: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl (hash: UzFyWgC8wC2WLiovA1N23TBFiM0nauU94jK1vI914us=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:41:9f:93:ed:20:d1:66:47:1f:e2:98:10:f3:14:78:bf:d0:0a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Validity Not Before: Aug 23 18:45:46 2025 GMT Not After : Aug 27 04:15:46 2025 GMT Subject: CN=C8462E43B1DA565D8C4F75BD8347E1B358FE899E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:30:05:62:9e:68:6c:55:0c:b1:e4:c4:99:6c: 6e:2b:a3:ef:9d:8b:df:f6:1d:72:26:1e:e6:52:66: cd:e4:4d:10:f8:c1:7c:80:61:80:55:3e:c5:21:15: 8f:18:3a:c5:15:5d:22:54:d8:c7:7e:7e:69:b2:35: f0:7d:96:d5:47:79:19:13:95:29:b9:15:e1:94:cf: 84:22:2a:bc:7b:08:65:24:c5:9e:57:c1:2b:c0:ee: f3:48:de:fc:54:72:02:e0:5b:50:46:8b:73:27:f9: f6:86:3b:ed:e8:22:dd:d6:5d:f2:aa:58:84:99:db: 65:88:76:2e:49:57:85:47:04:a6:b4:1a:25:5f:ec: dd:56:55:bb:88:56:f0:d3:d9:a7:04:e7:e4:47:b0: b6:79:9a:62:f5:60:03:2c:ca:c1:c0:0b:96:8d:0d: 23:0c:98:1b:10:b7:54:0f:54:a7:0a:27:0d:1c:cd: e9:e9:a1:9c:68:6e:b4:c1:93:8b:f0:76:17:ff:28: c0:be:2c:de:34:6d:f3:01:60:b2:87:68:e1:d5:ed: 30:1c:eb:e9:3b:b7:83:cc:ae:0b:f2:eb:62:55:9e: d4:15:82:37:94:26:af:e3:e1:81:bd:d7:bd:11:be: 99:9d:d2:08:76:36:a8:12:92:cd:11:c7:c7:a4:84: 11:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:46:2E:43:B1:DA:56:5D:8C:4F:75:BD:83:47:E1:B3:58:FE:89:9E X509v3 Authority Key Identifier: keyid:30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:67:7f:5b:e5:5c:b8:67:de:e9:90:ca:53:a0:b0:bc:9f:a3: cf:b1:dd:1d:07:55:7d:49:ee:2d:83:10:e9:6d:53:df:66:aa: e3:7b:bd:d3:e0:89:dc:f1:e1:a5:db:44:48:e1:3f:77:8d:84: c3:96:00:65:89:ab:8f:77:9f:d0:a3:65:03:43:9c:a0:96:c3: 48:54:05:2d:a0:cc:0b:11:b1:51:6e:28:30:95:fd:88:5e:b2: b9:8a:53:ac:b4:29:4a:4f:17:85:0e:78:68:0c:31:0a:31:e0: f4:ad:40:10:9d:c6:e2:99:71:bd:84:79:f1:b4:f1:f0:90:e4: e6:75:a2:c9:25:8f:ee:33:ab:61:51:e0:cd:cf:e4:2b:27:59: 19:c4:d3:b9:f5:d4:a7:fd:7c:68:e8:dd:bd:ba:85:8c:4b:3f: f5:09:3c:d5:08:6e:be:72:fb:25:7d:8c:38:64:3e:91:7e:0f: a8:c1:b2:65:61:6c:76:48:00:c6:95:da:33:a6:13:51:83:ce: 2e:3b:1b:a4:cd:cd:50:dd:95:8c:80:61:ef:03:30:b1:c5:ae: 4e:e0:a5:2e:cb:85:eb:3a:c1:c7:64:1b:26:98:44:49:2e:a4: bb:bc:ee:8d:ad:51:25:6c:c4:1a:77:bd:4a:2e:c7:be:4e:c3: 5f:d7:8c:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULUGfk+0g0WZHH+KYEPMUeL/QCrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5 QjlENjc3MDAeFw0yNTA4MjMxODQ1NDZaFw0yNTA4MjcwNDE1NDZaMDMxMTAvBgNV BAMTKEM4NDYyRTQzQjFEQTU2NUQ4QzRGNzVCRDgzNDdFMUIzNThGRTg5OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLMAVinmhsVQyx5MSZbG4ro++d i9/2HXImHuZSZs3kTRD4wXyAYYBVPsUhFY8YOsUVXSJU2Md+fmmyNfB9ltVHeRkT lSm5FeGUz4QiKrx7CGUkxZ5XwSvA7vNI3vxUcgLgW1BGi3Mn+faGO+3oIt3WXfKq WISZ22WIdi5JV4VHBKa0GiVf7N1WVbuIVvDT2acE5+RHsLZ5mmL1YAMsysHAC5aN DSMMmBsQt1QPVKcKJw0czenpoZxobrTBk4vwdhf/KMC+LN40bfMBYLKHaOHV7TAc 6+k7t4PMrgvy62JVntQVgjeUJq/j4YG9170Rvpmd0gh2NqgSks0Rx8ekhBHrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyEYuQ7HaVl2MT3W9g0fhs1j+iZ4wHwYDVR0j BBgwFoAUMJ/+MGledrpJUuKWW0/iT5udZ3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2NiNTBiMC00M2NjLTQ4ZDAtOTFmNC0wNWJiZGU3YWMxZDAvMC8zMDlGRkUzMDY5 NUU3NkJBNDk1MkUyOTY1QjRGRTI0RjlCOUQ2NzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5QjlE Njc3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNjYjUwYjAtNDNjYy00OGQwLTkx ZjQtMDViYmRlN2FjMWQwLzAvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUy NEY5QjlENjc3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNnf1vlXLhn3umQylOgsLyfo8+x3R0HVX1J 7i2DEOltU99mquN7vdPgidzx4aXbREjhP3eNhMOWAGWJq493n9CjZQNDnKCWw0hU BS2gzAsRsVFuKDCV/YhesrmKU6y0KUpPF4UOeGgMMQox4PStQBCdxuKZcb2EefG0 8fCQ5OZ1osklj+4zq2FR4M3P5CsnWRnE07n11Kf9fGjo3b26hYxLP/UJPNUIbr5y +yV9jDhkPpF+D6jBsmVhbHZIAMaV2jOmE1GDzi47G6TNzVDdlYyAYe8DMLHFrk7g pS7Lhes6wcdkGyaYREkupLu87o2tUSVsxBp3vUoux75Ow1/XjOQ= -----END CERTIFICATE-----Generated at Sun Aug 24 07:14:05 2025 by rpki-client