$ rpki-client -vvf repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft File: 030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft (raw, json) Hash identifier: 80FhAc6WfJRp/5snXcrRNzkGx2IVFbIfbjA4NGg/tuE= Subject key identifier: E2:34:A3:F4:36:AB:B2:A6:74:49:F3:CE:C6:4F:25:52:63:2B:B6:F6 Authority key identifier: 03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F Certificate issuer: /CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F Certificate serial: 7DAA50487C4A26FB39868A906ED97C3D5B2A9B68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft Manifest number: 0244 Signing time: Tue 04 Nov 2025 03:50:53 +0000 Manifest this update: Tue 04 Nov 2025 03:45:53 +0000 Manifest next update: Fri 07 Nov 2025 08:04:53 +0000 Files and hashes: 1: 3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa (hash: VRZHFUOGnmJp2lMdZGt7kB8GjqU3aUc9sCQrVZdvzM8=) 2: 3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa (hash: vtfkthTc4w7PTqVhacRm/ULh3HaRPjLVVlG+25ZUsBM=) 3: 030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl (hash: 9KTopneek9+6ffPbznQURIEJIZT+0t1Uadn7RtaPiqU=) 4: 3130332e3136322e3232302e302f32332d3233203d3e20313339393532.roa (hash: UmBaN4f8daXm7YcJHiYwqui5FgHxOYUATLUGSQyoA5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:aa:50:48:7c:4a:26:fb:39:86:8a:90:6e:d9:7c:3d:5b:2a:9b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F Validity Not Before: Nov 4 03:45:53 2025 GMT Not After : Nov 7 08:04:53 2025 GMT Subject: CN=E234A3F436ABB2A67449F3CEC64F2552632BB6F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:49:9b:b6:cf:df:68:e7:59:4a:97:dd:8f:94: 82:95:a6:9f:fc:7e:84:c7:c3:6b:fb:99:2c:9e:0b: 22:8a:33:03:b1:10:bf:41:ca:11:5f:b0:60:5c:4e: 7a:27:cd:ae:e8:f4:0c:97:a0:42:f7:b4:92:7d:ff: 66:1a:46:7b:61:09:73:b0:97:18:35:8f:d5:f3:72: 33:c7:67:99:2a:ef:47:aa:22:7b:d5:e4:1c:42:23: fe:be:33:60:49:48:8e:eb:c7:53:a5:1b:50:9d:14: 5a:5f:e8:27:9f:f2:1f:73:ee:7d:ba:4a:d7:3b:df: e7:8d:54:4e:8f:69:7c:8c:1b:97:e1:e3:7a:02:1d: 89:0c:cb:77:fa:4b:d2:af:4f:71:fa:e6:ef:bf:f9: 40:28:53:c5:5c:8a:b5:6c:3e:f4:ef:55:3e:82:3c: 11:b1:0f:11:02:62:2f:20:a7:58:07:e8:3a:70:44: 15:23:d4:82:5f:07:05:a9:6b:a5:ce:57:45:d2:e6: 10:9e:fe:a9:1c:68:ac:5b:42:de:d6:82:3e:0a:c2: 6e:7b:fc:a9:ce:30:fc:33:11:a3:f7:3e:0f:7a:c6: d3:f9:07:77:80:e1:4a:24:4f:9d:ed:d1:a2:f0:e0: 6f:5e:8b:69:f8:8d:0e:ea:14:f0:80:2d:9e:cd:a3: bb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:34:A3:F4:36:AB:B2:A6:74:49:F3:CE:C6:4F:25:52:63:2B:B6:F6 X509v3 Authority Key Identifier: keyid:03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:2d:25:b7:19:10:4a:03:b2:07:f3:c3:03:a7:31:4b:32:14: d7:3f:47:ab:91:01:63:00:b9:fe:af:95:9c:5f:dd:a7:16:74: d2:ad:19:74:c4:f8:df:c2:f4:24:cb:b1:b9:00:9a:9e:8d:70: ed:83:0b:15:b6:7b:dd:36:99:7e:f9:00:06:c7:50:67:08:c6: ce:ce:90:62:c5:0d:2e:ea:78:a0:ce:75:45:5b:d5:0a:4a:b1: 78:f2:6c:2e:3d:a3:02:70:df:c7:8c:e2:54:e1:cd:1c:96:ac: 40:4f:14:70:3e:ec:1c:73:01:09:ef:65:e7:cb:7b:9a:34:b1: 23:d0:89:36:c2:7d:91:d2:10:ab:25:d7:d5:8e:ab:7c:19:46: 4b:be:25:ce:11:fc:d6:b1:95:c6:e6:99:67:d1:2c:2a:76:88: ba:6b:2b:f2:09:e8:d2:45:95:c3:82:cd:4d:fe:2c:58:14:15: b3:90:64:63:9d:7f:47:69:90:62:1e:31:b4:6c:2c:59:eb:c3: 70:76:c7:5d:a0:14:07:52:08:8c:d6:04:8c:e8:f3:b6:1b:16: da:71:af:8b:c3:46:11:7c:72:48:9c:73:23:ac:f4:06:aa:7c: 55:b0:dd:9d:f9:8d:f9:70:ac:f3:63:3d:bc:2d:7c:80:e7:a4: 74:65:5e:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfapQSHxKJvs5hoqQbtl8PVsqm2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3OUQx NzhBQ0UxRjAeFw0yNTExMDQwMzQ1NTNaFw0yNTExMDcwODA0NTNaMDMxMTAvBgNV BAMTKEUyMzRBM0Y0MzZBQkIyQTY3NDQ5RjNDRUM2NEYyNTUyNjMyQkI2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWSZu2z99o51lKl92PlIKVpp/8 foTHw2v7mSyeCyKKMwOxEL9ByhFfsGBcTnonza7o9AyXoEL3tJJ9/2YaRnthCXOw lxg1j9XzcjPHZ5kq70eqInvV5BxCI/6+M2BJSI7rx1OlG1CdFFpf6Cef8h9z7n26 Stc73+eNVE6PaXyMG5fh43oCHYkMy3f6S9KvT3H65u+/+UAoU8VcirVsPvTvVT6C PBGxDxECYi8gp1gH6DpwRBUj1IJfBwWpa6XOV0XS5hCe/qkcaKxbQt7Wgj4Kwm57 /KnOMPwzEaP3Pg96xtP5B3eA4UokT53t0aLw4G9ei2n4jQ7qFPCALZ7No7s3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4jSj9DarsqZ0SfPOxk8lUmMrtvYwHwYDVR0j BBgwFoAUAwvlVyhtOk/m6apwY27HnReKzh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NThjOGY5Zi00MjEzLTRhMmEtODVjMy1iMjRiMGQwYjUxMDcvMC8wMzBCRTU1NzI4 NkQzQTRGRTZFOUFBNzA2MzZFQzc5RDE3OEFDRTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3OUQxNzhB Q0UxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU4YzhmOWYtNDIxMy00YTJhLTg1 YzMtYjI0YjBkMGI1MTA3LzAvMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3 OUQxNzhBQ0UxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQtJbcZEEoDsgfzwwOnMUsyFNc/R6uRAWMA uf6vlZxf3acWdNKtGXTE+N/C9CTLsbkAmp6NcO2DCxW2e902mX75AAbHUGcIxs7O kGLFDS7qeKDOdUVb1QpKsXjybC49owJw38eM4lThzRyWrEBPFHA+7BxzAQnvZefL e5o0sSPQiTbCfZHSEKsl19WOq3wZRku+Jc4R/NaxlcbmmWfRLCp2iLprK/IJ6NJF lcOCzU3+LFgUFbOQZGOdf0dpkGIeMbRsLFnrw3B2x12gFAdSCIzWBIzo87YbFtpx r4vDRhF8ckiccyOs9AaqfFWw3Z35jflwrPNjPbwtfIDnpHRlXnk= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:33 2025 by rpki-client