$ rpki-client -vvf repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft File: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft (raw, json) Hash identifier: QujiYP4SWuMv3GsObdyGzTJ9EQ3QLRWNkCkVCpjCVi4= Subject key identifier: BF:66:28:AB:76:68:E0:5C:86:E9:89:46:46:E3:43:7E:68:16:D9:34 Authority key identifier: 30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 Certificate issuer: /CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Certificate serial: 01BD27378C65C1F713D6382ECD7AC9472CF1786F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft Manifest number: 01F1 Signing time: Tue 04 Nov 2025 17:41:11 +0000 Manifest this update: Tue 04 Nov 2025 17:36:11 +0000 Manifest next update: Fri 07 Nov 2025 20:43:11 +0000 Files and hashes: 1: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (hash: xce0AmVhdIuoA0s5G07BTYqxfWM/i2bbCDllzfV1P80=) 2: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (hash: Udg26cCHQ+Qftm36Kch+i7dbSWtv7odm32FXa+73LYY=) 3: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl (hash: 7XuQhKnKpNatWCXUIrF81H1EDbk19q+TDdMax27/Wo8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 20:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:bd:27:37:8c:65:c1:f7:13:d6:38:2e:cd:7a:c9:47:2c:f1:78:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Validity Not Before: Nov 4 17:36:11 2025 GMT Not After : Nov 7 20:43:11 2025 GMT Subject: CN=BF6628AB7668E05C86E9894646E3437E6816D934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ab:e6:92:29:9c:cb:cb:16:62:75:5c:b1:c3: a6:c9:93:4d:25:ea:47:07:36:dd:07:e0:7a:cf:a3: f3:6f:b3:03:81:e9:ae:3a:7b:36:11:1d:c4:eb:dc: 1f:57:1e:77:49:fc:5d:e2:17:18:6e:f2:d8:49:50: 92:2c:95:af:2c:4a:f8:e9:ac:b9:13:3b:69:cf:7f: 59:11:9c:5a:4f:34:71:56:a5:0c:af:72:9c:b2:7f: b3:4f:94:81:7a:7a:21:4b:d6:a9:c2:b1:38:2c:45: c9:f5:da:83:41:fe:28:2b:5c:ba:41:6f:07:65:44: b5:ca:da:11:84:4e:e6:9b:b8:85:24:c8:d0:4b:55: b9:a4:7a:54:0b:f7:70:18:1e:a2:8c:33:5e:0c:d6: 64:f2:fb:88:5f:06:f2:64:a0:03:f3:c8:4e:cd:72: 0f:6b:85:74:e2:44:5c:c7:3c:e3:c0:e0:63:08:10: d6:4d:1c:12:90:01:c7:5f:66:0a:bd:96:03:d3:84: f9:a1:ba:ca:19:5a:b8:a7:40:14:30:27:e7:29:f4: ff:d1:54:30:f0:fc:6c:76:10:b5:51:7c:da:f1:24: 85:92:13:21:85:c8:74:ae:b4:45:1b:22:c4:36:bf: 69:83:e6:d3:e9:d2:65:40:19:b2:39:bd:73:fe:4d: 10:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:66:28:AB:76:68:E0:5C:86:E9:89:46:46:E3:43:7E:68:16:D9:34 X509v3 Authority Key Identifier: keyid:30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:92:dc:c4:70:84:49:5e:12:39:9e:5d:ff:6c:98:23:01:2f: 32:98:c5:73:53:00:87:ec:d1:35:ed:aa:38:c1:44:59:eb:82: 1d:b1:7e:08:49:9f:36:e0:82:0c:e4:3a:ec:55:26:6d:53:5e: 8c:b4:25:76:90:ee:33:62:0e:6a:6b:94:5c:b0:87:44:8a:a9: eb:c0:d0:c8:e2:0f:35:97:8e:8f:71:c8:71:31:9b:53:df:3d: 8c:b6:43:8e:f8:50:05:7c:af:a4:03:3f:24:4a:0c:03:08:0f: 48:ed:1a:24:cc:a2:81:5b:ad:0f:e1:76:3b:86:00:42:1e:bd: 74:40:42:45:d9:60:7c:5f:9d:54:77:3a:d3:3e:42:a9:5d:0c: ac:8d:fd:f6:96:cf:5f:3c:a7:8b:1d:07:a5:c7:8a:20:fd:6d: 1d:46:db:49:37:78:03:ac:8f:3a:67:cc:90:0c:76:b1:f7:65: 44:35:d1:1c:fb:d3:b6:11:7a:4d:29:8c:39:a5:7a:27:64:2d: 85:ca:84:d1:79:b6:70:50:47:b5:a7:44:3f:7b:1a:b0:56:19: 2e:8a:d1:d3:b3:68:31:aa:1a:1a:7e:50:f7:ee:bd:b3:48:0b: 72:d3:85:73:51:c5:55:23:1a:2f:da:12:a3:54:6e:d0:82:05: 29:0b:a6:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAb0nN4xlwfcT1jguzXrJRyzxeG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3 RTkxMkQ0NTAeFw0yNTExMDQxNzM2MTFaFw0yNTExMDcyMDQzMTFaMDMxMTAvBgNV BAMTKEJGNjYyOEFCNzY2OEUwNUM4NkU5ODk0NjQ2RTM0MzdFNjgxNkQ5MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRq+aSKZzLyxZidVyxw6bJk00l 6kcHNt0H4HrPo/NvswOB6a46ezYRHcTr3B9XHndJ/F3iFxhu8thJUJIsla8sSvjp rLkTO2nPf1kRnFpPNHFWpQyvcpyyf7NPlIF6eiFL1qnCsTgsRcn12oNB/igrXLpB bwdlRLXK2hGETuabuIUkyNBLVbmkelQL93AYHqKMM14M1mTy+4hfBvJkoAPzyE7N cg9rhXTiRFzHPOPA4GMIENZNHBKQAcdfZgq9lgPThPmhusoZWrinQBQwJ+cp9P/R VDDw/Gx2ELVRfNrxJIWSEyGFyHSutEUbIsQ2v2mD5tPp0mVAGbI5vXP+TRBdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv2Yoq3Zo4FyG6YlGRuNDfmgW2TQwHwYDVR0j BBgwFoAUMOK0YXuLnPxPxXscWk10/H6RLUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjlmODkwMi0xYTA2LTQ1YTgtYTk5OC03MmU0NmFhYWU4ZmMvMC8zMEUyQjQ2MTdC OEI5Q0ZDNEZDNTdCMUM1QTRENzRGQzdFOTEyRDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3RTkx MkQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI5Zjg5MDItMWEwNi00NWE4LWE5 OTgtNzJlNDZhYWFlOGZjLzAvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0 RkM3RTkxMkQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+S3MRwhEleEjmeXf9smCMBLzKYxXNTAIfs 0TXtqjjBRFnrgh2xfghJnzbgggzkOuxVJm1TXoy0JXaQ7jNiDmprlFywh0SKqevA 0MjiDzWXjo9xyHExm1PfPYy2Q474UAV8r6QDPyRKDAMID0jtGiTMooFbrQ/hdjuG AEIevXRAQkXZYHxfnVR3OtM+QqldDKyN/faWz188p4sdB6XHiiD9bR1G20k3eAOs jzpnzJAMdrH3ZUQ10Rz707YRek0pjDmleidkLYXKhNF5tnBQR7WnRD97GrBWGS6K 0dOzaDGqGhp+UPfuvbNIC3LThXNRxVUjGi/aEqNUbtCCBSkLpkM= -----END CERTIFICATE-----Generated at Thu Nov 6 04:21:01 2025 by rpki-client