$ rpki-client -vvf repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft File: 8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft (raw, json) Hash identifier: YPHP94IcGz3C7ezN48VbtCP7Ksgz/2PgnPxOnv3B9X0= Subject key identifier: 51:E3:AD:5E:7C:23:40:D2:F8:88:CE:50:EF:1C:9E:26:CA:1E:41:06 Authority key identifier: 80:30:ED:8A:48:ED:98:5A:5D:D8:8E:9B:C1:C0:D0:15:F4:36:FF:DF Certificate issuer: /CN=8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF Certificate serial: 670EAD7162AC929A9DA906A5DFFA5FA5B7278DA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft Manifest number: 0207 Signing time: Mon 03 Nov 2025 14:21:45 +0000 Manifest this update: Mon 03 Nov 2025 14:16:45 +0000 Manifest next update: Thu 06 Nov 2025 17:04:45 +0000 Files and hashes: 1: 8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl (hash: zYzJ8wCG9p0BdSVPlUpTWaad5sys11oW5KgBncrWy38=) 2: 3130332e3138392e3235342e302f32342d3234203d3e20313439393135.roa (hash: Fo/wu0BFSpF55NefZU/m5we3g29g18juirYZ6ANAiIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:0e:ad:71:62:ac:92:9a:9d:a9:06:a5:df:fa:5f:a5:b7:27:8d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF Validity Not Before: Nov 3 14:16:45 2025 GMT Not After : Nov 6 17:04:45 2025 GMT Subject: CN=51E3AD5E7C2340D2F888CE50EF1C9E26CA1E4106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:41:0f:4d:9f:51:52:bd:33:27:33:c5:43:6d: 40:60:28:89:53:4b:7c:d5:e8:40:a3:91:e0:fd:42: 03:0b:47:2b:85:46:ee:a8:24:c6:ed:b9:ea:4c:ff: 19:bc:2c:86:fd:f7:7a:26:35:29:2e:c4:fb:8a:f7: f9:26:bd:f5:78:6d:12:01:b9:3d:de:2c:b6:6a:b3: bd:ef:ff:65:0f:06:3a:15:a2:03:b3:82:29:38:11: 94:63:48:c0:7d:39:61:fc:ea:d6:bd:f6:8a:d4:09: 62:28:d7:e6:19:8e:50:67:af:ee:70:51:35:ef:b9: ec:49:7d:c7:3d:1f:6c:eb:f0:dc:92:fa:a8:5b:34: 21:62:b9:1d:ab:be:2c:ba:74:76:c2:87:70:31:e0: 6d:96:af:c8:9a:91:66:c7:d8:32:d0:b6:21:71:d9: 82:e7:2a:3b:1a:42:42:5f:bb:02:89:db:6f:97:e2: ea:dd:38:03:5e:6e:d8:13:ed:19:67:77:f6:06:33: 2e:93:cd:75:15:fe:14:a0:48:d3:a5:ed:11:84:cb: dc:02:59:45:d8:48:2e:c4:97:e7:07:da:16:88:3e: 34:53:e4:39:15:51:75:d5:8f:fc:cb:9a:8f:93:ba: 7f:1e:15:5f:fa:9b:e8:3c:52:9f:0c:d1:a6:04:14: a2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E3:AD:5E:7C:23:40:D2:F8:88:CE:50:EF:1C:9E:26:CA:1E:41:06 X509v3 Authority Key Identifier: keyid:80:30:ED:8A:48:ED:98:5A:5D:D8:8E:9B:C1:C0:D0:15:F4:36:FF:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:fa:18:d9:b8:93:f3:18:d4:d4:fe:e4:7f:17:5e:c3:43:b3: 69:7b:fb:42:7c:86:6f:74:53:02:af:12:45:2c:a9:23:06:4b: e8:1d:47:16:02:c9:50:f7:ab:73:af:f0:e9:7f:a3:05:01:27: 27:5e:e2:34:91:cb:9d:ce:66:47:8c:46:db:41:94:f6:9c:a9: c6:67:b0:a9:cb:f1:86:0b:84:04:eb:c1:5e:7a:02:42:0e:d0: 4a:7e:22:1a:f4:d2:1b:62:5d:dc:c4:6e:8a:65:17:67:f7:cc: 8c:41:72:4d:0c:12:62:ea:0f:74:15:92:01:70:46:b4:ea:a7: 2d:1e:d1:22:9a:46:26:97:85:5b:20:42:1a:94:27:1e:f7:16: 6f:b8:d9:e4:dd:d0:3e:1e:a5:17:eb:bc:db:c2:06:88:88:0c: c5:12:b7:c8:6f:8d:2a:15:cb:b0:29:2a:cb:1b:8d:9a:f1:34: 86:64:07:50:e8:3c:cf:a5:9b:95:0b:5b:67:39:80:79:83:85: 05:4f:54:16:bd:bf:af:8b:b0:f8:b8:dc:28:ab:d0:9f:a3:60: f4:53:be:7f:63:34:d7:64:bb:81:a6:fc:36:d7:17:09:9b:48: 82:ec:1f:96:3f:22:8b:86:af:3b:1d:6d:81:d2:bd:b4:1b:4d: 6b:8c:fc:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZw6tcWKskpqdqQal3/pfpbcnjaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQwMTVG NDM2RkZERjAeFw0yNTExMDMxNDE2NDVaFw0yNTExMDYxNzA0NDVaMDMxMTAvBgNV BAMTKDUxRTNBRDVFN0MyMzQwRDJGODg4Q0U1MEVGMUM5RTI2Q0ExRTQxMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQQ9Nn1FSvTMnM8VDbUBgKIlT S3zV6ECjkeD9QgMLRyuFRu6oJMbtuepM/xm8LIb993omNSkuxPuK9/kmvfV4bRIB uT3eLLZqs73v/2UPBjoVogOzgik4EZRjSMB9OWH86ta99orUCWIo1+YZjlBnr+5w UTXvuexJfcc9H2zr8NyS+qhbNCFiuR2rviy6dHbCh3Ax4G2Wr8iakWbH2DLQtiFx 2YLnKjsaQkJfuwKJ22+X4urdOANebtgT7Rlnd/YGMy6TzXUV/hSgSNOl7RGEy9wC WUXYSC7El+cH2haIPjRT5DkVUXXVj/zLmo+Tun8eFV/6m+g8Up8M0aYEFKLDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUeOtXnwjQNL4iM5Q7xyeJsoeQQYwHwYDVR0j BBgwFoAUgDDtikjtmFpd2I6bwcDQFfQ2/98wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzAwNTZiNC1mMDI3LTQ0ZmEtOTc0ZC00YTFlZDE5MWFlNTYvMC84MDMwRUQ4QTQ4 RUQ5ODVBNUREODhFOUJDMUMwRDAxNUY0MzZGRkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQwMTVGNDM2 RkZERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMwMDU2YjQtZjAyNy00NGZhLTk3 NGQtNGExZWQxOTFhZTU2LzAvODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQw MTVGNDM2RkZERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANH6GNm4k/MY1NT+5H8XXsNDs2l7+0J8hm90 UwKvEkUsqSMGS+gdRxYCyVD3q3Ov8Ol/owUBJyde4jSRy53OZkeMRttBlPacqcZn sKnL8YYLhATrwV56AkIO0Ep+Ihr00htiXdzEboplF2f3zIxBck0MEmLqD3QVkgFw RrTqpy0e0SKaRiaXhVsgQhqUJx73Fm+42eTd0D4epRfrvNvCBoiIDMUSt8hvjSoV y7ApKssbjZrxNIZkB1DoPM+lm5ULW2c5gHmDhQVPVBa9v6+LsPi43Cir0J+jYPRT vn9jNNdku4Gm/DbXFwmbSILsH5Y/IouGrzsdbYHSvbQbTWuM/Bk= -----END CERTIFICATE-----Generated at Tue Nov 4 23:13:35 2025 by rpki-client