$ rpki-client -vvf repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft File: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft (raw, json) Hash identifier: 85w3tHXlPaZn3LYAgyC9TSaVchIyBzm2MUpdmczhcHQ= Subject key identifier: 27:1B:65:B4:54:7D:A6:DD:37:2B:86:2F:C7:61:69:6A:7D:5E:CC:A4 Authority key identifier: C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 Certificate issuer: /CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Certificate serial: 496BB0EFA7CF3E473D93F39BA620424B811629C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft Manifest number: 0344 Signing time: Wed 06 Aug 2025 21:52:16 +0000 Manifest this update: Wed 06 Aug 2025 21:47:16 +0000 Manifest next update: Sun 10 Aug 2025 08:14:16 +0000 Files and hashes: 1: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl (hash: lRYy7ObN6sD//xX+NjFbncIumiNA2sLZDFQBBrHmSoE=) 2: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (hash: tUeL2L2NZGxhk7lppCZ0ZmMoSziMiBP1aFhhhYxJa6g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 08:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:6b:b0:ef:a7:cf:3e:47:3d:93:f3:9b:a6:20:42:4b:81:16:29:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Validity Not Before: Aug 6 21:47:16 2025 GMT Not After : Aug 10 08:14:16 2025 GMT Subject: CN=271B65B4547DA6DD372B862FC761696A7D5ECCA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e9:d4:cd:27:a9:96:bc:e0:9f:4e:02:f5:4b: f5:ff:3a:83:b3:a4:58:c1:0f:a5:44:ff:0e:4f:a7: df:0c:a2:54:c0:21:f1:8d:6e:58:72:d5:65:25:53: df:5a:48:ed:a6:ec:b8:3d:4d:6a:61:a8:38:30:ef: a9:82:03:73:88:a4:6a:61:0a:2e:08:8d:ad:21:dc: 2f:d5:2a:bc:e9:3c:3b:97:c7:1b:f3:57:80:26:e4: f3:99:e7:45:2a:66:c9:73:17:0d:65:fe:25:ac:68: 1d:2a:cf:03:bc:4d:f0:86:33:e4:1e:c4:54:ec:cf: d5:9c:85:dd:0a:a1:55:ca:65:94:9c:88:b4:19:4e: 0a:93:58:d5:0c:f5:61:70:7f:57:ff:9d:cd:68:d8: a6:b8:49:e1:d0:2c:22:99:55:f9:f5:8b:47:1a:27: f0:b0:03:f3:df:6e:8c:6c:2b:63:dd:82:5e:51:4f: f3:01:ca:f3:d7:eb:ae:86:b6:e7:25:e7:27:ab:a4: 8f:f0:39:ea:94:32:98:ce:3f:fb:fd:9e:fe:47:ca: e1:90:c0:ff:25:9b:d3:5f:47:8c:87:09:14:78:bb: 58:53:84:2b:50:12:f9:02:98:1e:62:74:b6:60:18: 87:26:3f:17:e0:91:9b:c7:f5:14:be:c4:24:8d:11: da:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1B:65:B4:54:7D:A6:DD:37:2B:86:2F:C7:61:69:6A:7D:5E:CC:A4 X509v3 Authority Key Identifier: keyid:C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:be:ed:20:7b:ae:cd:b2:47:2e:e6:6a:96:68:31:17:dd:d1: 40:e7:61:c2:8d:bf:06:f4:83:0e:b3:c1:ed:9e:c9:57:ab:8f: 62:aa:f1:30:ca:6d:1a:7e:3c:bf:a4:dd:34:8a:0e:87:78:84: 62:b0:8e:fc:12:53:c9:4b:a6:73:3c:7d:96:48:84:81:21:b6: 1e:71:c7:c4:a2:29:8e:f2:1e:ea:fd:df:1e:5c:d5:29:71:52: ba:83:bc:c4:0b:ac:9e:05:f4:5a:59:96:b7:6e:4f:d0:59:26: d4:63:cc:24:cb:e8:ca:c5:46:c9:3c:4b:78:36:a9:bf:cc:16: 30:87:a4:ab:96:8b:41:3e:4a:29:04:79:9c:70:9c:1f:de:2f: 17:41:19:fc:fc:82:0e:2b:df:a0:b6:14:5b:f2:16:27:1c:06: 5a:ac:3c:cc:0c:03:76:c1:8b:4f:1a:01:84:83:58:4e:82:a1: 73:67:b6:dd:61:7b:e9:86:65:dd:4f:9c:34:e3:02:6a:08:fc: 85:68:bb:af:9d:d4:07:49:6f:8f:26:2a:84:26:5f:1d:83:aa: 99:41:19:a9:6c:28:1b:93:bf:8a:f5:71:69:7c:67:0f:a5:8b: 7a:63:b3:a7:1a:96:6c:8f:fb:22:f8:11:60:f0:2b:24:52:07: a3:d5:8f:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSWuw76fPPkc9k/ObpiBCS4EWKcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzky Mjg2MzFGNzAeFw0yNTA4MDYyMTQ3MTZaFw0yNTA4MTAwODE0MTZaMDMxMTAvBgNV BAMTKDI3MUI2NUI0NTQ3REE2REQzNzJCODYyRkM3NjE2OTZBN0Q1RUNDQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6dTNJ6mWvOCfTgL1S/X/OoOz pFjBD6VE/w5Pp98MolTAIfGNblhy1WUlU99aSO2m7Lg9TWphqDgw76mCA3OIpGph Ci4Ija0h3C/VKrzpPDuXxxvzV4Am5POZ50UqZslzFw1l/iWsaB0qzwO8TfCGM+Qe xFTsz9Wchd0KoVXKZZSciLQZTgqTWNUM9WFwf1f/nc1o2Ka4SeHQLCKZVfn1i0ca J/CwA/PfboxsK2Pdgl5RT/MByvPX666Gtucl5yerpI/wOeqUMpjOP/v9nv5HyuGQ wP8lm9NfR4yHCRR4u1hThCtQEvkCmB5idLZgGIcmPxfgkZvH9RS+xCSNEdoVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJxtltFR9pt03K4Yvx2Fpan1ezKQwHwYDVR0j BBgwFoAUwwo3cezl92LW+m2HKPTAySKGMfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTFmNjI5OS1iMTU1LTQyMTItYjVlMS05ZjU3MDNjZDA5ODkvMC9DMzBBMzc3MUVD RTVGNzYyRDZGQTZEODcyOEY0QzBDOTIyODYzMUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzkyMjg2 MzFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ExZjYyOTktYjE1NS00MjEyLWI1 ZTEtOWY1NzAzY2QwOTg5LzAvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMw QzkyMjg2MzFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEi+7SB7rs2yRy7mapZoMRfd0UDnYcKNvwb0 gw6zwe2eyVerj2Kq8TDKbRp+PL+k3TSKDod4hGKwjvwSU8lLpnM8fZZIhIEhth5x x8SiKY7yHur93x5c1SlxUrqDvMQLrJ4F9FpZlrduT9BZJtRjzCTL6MrFRsk8S3g2 qb/MFjCHpKuWi0E+SikEeZxwnB/eLxdBGfz8gg4r36C2FFvyFiccBlqsPMwMA3bB i08aAYSDWE6CoXNntt1he+mGZd1PnDTjAmoI/IVou6+d1AdJb48mKoQmXx2DqplB GalsKBuTv4r1cWl8Zw+li3pjs6calmyP+yL4EWDwKyRSB6PVj9U= -----END CERTIFICATE-----Generated at Thu Aug 7 11:11:24 2025 by rpki-client