$ rpki-client -vvf repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft File: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft (raw, json) Hash identifier: f9INxjaxxK/H4vJrDoriEdFfc2YNYeAvb/TY5dKVdq8= Subject key identifier: 3A:60:01:FC:AC:F4:0E:63:1A:62:24:0F:91:F9:BC:83:E9:7F:3F:69 Authority key identifier: 30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51 Certificate issuer: /CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51 Certificate serial: 284A116AEA31CAA64E04F8879CC88FF685F0D07D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft Manifest number: 03F6 Signing time: Sun 02 Nov 2025 14:31:43 +0000 Manifest this update: Sun 02 Nov 2025 14:26:43 +0000 Manifest next update: Wed 05 Nov 2025 16:31:43 +0000 Files and hashes: 1: 3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa (hash: FCHx6FaRMarTOvIyDDJKyaewpvcQNtFaDUPbc3o5Lx0=) 2: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl (hash: WRGR+nACyTeFi13F883pBfn4876WbxknPZLQ1Txe9B0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:4a:11:6a:ea:31:ca:a6:4e:04:f8:87:9c:c8:8f:f6:85:f0:d0:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51 Validity Not Before: Nov 2 14:26:43 2025 GMT Not After : Nov 5 16:31:43 2025 GMT Subject: CN=3A6001FCACF40E631A62240F91F9BC83E97F3F69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:13:7c:00:62:85:a1:36:46:f9:94:7d:94:66: ee:1c:61:c9:69:cd:bf:57:75:59:ce:4c:23:e7:9c: cf:59:df:73:56:53:e1:5c:a7:d9:72:c2:a8:92:0d: 2f:cb:fb:68:df:e0:7b:de:23:ec:7e:2d:4a:18:fa: 23:d4:c9:9e:8e:4f:25:5c:a5:ff:bc:25:b1:0e:b1: 7c:e2:24:23:ba:4a:11:51:22:b2:0e:51:ec:9e:53: ca:57:10:c8:a7:77:82:87:01:07:12:08:55:d3:96: b0:f9:51:bd:e1:be:76:67:f2:bd:2a:39:25:dc:8b: 82:72:93:f7:7b:97:31:d2:8e:4c:00:70:2a:ae:28: 49:c1:7c:85:d4:f1:d2:15:88:c2:81:1d:8c:d8:12: 01:d4:27:05:91:ef:e7:da:3d:a3:22:f5:37:80:51: f5:f1:9e:8a:d2:75:3e:06:c8:dc:04:d3:64:05:2d: a4:58:ea:d4:01:cd:d8:95:97:f0:83:ff:aa:3e:9e: 06:df:34:4a:65:cb:a5:e9:68:b7:39:84:9f:cf:08: 13:5c:84:6b:7c:b0:c1:0b:eb:52:67:25:bd:62:74: 3b:0d:d5:f7:bf:8a:47:1b:f6:32:63:01:e3:8b:fb: f8:c5:11:06:27:d6:69:09:9b:5b:1c:20:44:78:3d: 8e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:60:01:FC:AC:F4:0E:63:1A:62:24:0F:91:F9:BC:83:E9:7F:3F:69 X509v3 Authority Key Identifier: keyid:30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:62:cd:09:90:7d:f0:49:49:94:bd:ae:5d:d4:81:ff:2b:12: 4f:c1:74:96:6c:7c:ed:16:a6:50:90:6e:13:41:0c:a3:1f:61: 69:49:e4:eb:77:28:c6:31:79:ce:44:aa:cf:f0:ba:55:2f:c4: f2:8f:8a:12:ca:de:a1:1d:37:34:97:fd:13:1c:d7:0c:e6:a3: 8c:e9:38:ab:8e:c8:e4:6b:86:45:ae:87:13:cc:bc:f0:88:ce: bf:0a:23:be:50:e5:2a:12:f1:94:18:f5:b6:98:96:cb:17:db: b1:f3:fd:c9:92:ac:67:66:01:fd:6e:8e:ff:b6:8b:3d:45:bc: e3:0d:6f:eb:81:6c:62:ca:4a:4a:7b:e8:c3:54:57:a4:06:f7: f5:bb:9e:d7:5c:10:e7:ec:57:29:f4:de:15:0c:ec:3c:39:35: 9a:e7:b3:ae:aa:55:8c:42:36:3f:b9:88:74:b0:7b:ba:11:a1: 12:ac:54:f2:21:d7:2a:a7:3a:3d:22:f4:93:c5:5f:35:0a:6e: 37:3e:c4:44:7c:2a:fd:0b:ed:ff:dc:68:72:fc:c7:33:f7:27: e4:bb:38:fb:10:02:a5:a5:97:60:66:cc:f2:3c:56:53:b8:ee: cc:60:96:37:3e:ab:9f:50:7d:4b:8f:5f:1b:fa:00:2a:7c:df: 60:eb:b4:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKEoRauoxyqZOBPiHnMiP9oXw0H0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJDODAy NkEwQ0U1MTAeFw0yNTExMDIxNDI2NDNaFw0yNTExMDUxNjMxNDNaMDMxMTAvBgNV BAMTKDNBNjAwMUZDQUNGNDBFNjMxQTYyMjQwRjkxRjlCQzgzRTk3RjNGNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3E3wAYoWhNkb5lH2UZu4cYclp zb9XdVnOTCPnnM9Z33NWU+Fcp9lywqiSDS/L+2jf4HveI+x+LUoY+iPUyZ6OTyVc pf+8JbEOsXziJCO6ShFRIrIOUeyeU8pXEMind4KHAQcSCFXTlrD5Ub3hvnZn8r0q OSXci4Jyk/d7lzHSjkwAcCquKEnBfIXU8dIViMKBHYzYEgHUJwWR7+faPaMi9TeA UfXxnorSdT4GyNwE02QFLaRY6tQBzdiVl/CD/6o+ngbfNEply6XpaLc5hJ/PCBNc hGt8sMEL61JnJb1idDsN1fe/ikcb9jJjAeOL+/jFEQYn1mkJm1scIER4PY5jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOmAB/Kz0DmMaYiQPkfm8g+l/P2kwHwYDVR0j BBgwFoAUMPwS6QOuDuh70aHligYsgCagzlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzExYzExMC03YWIxLTRhMzktYjljYS0zYTliMGU4MWJjZjUvMC8zMEZDMTJFOTAz QUUwRUU4N0JEMUExRTU4QTA2MkM4MDI2QTBDRTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJDODAyNkEw Q0U1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDcxMWMxMTAtN2FiMS00YTM5LWI5 Y2EtM2E5YjBlODFiY2Y1LzAvMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJD ODAyNkEwQ0U1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRizQmQffBJSZS9rl3Ugf8rEk/BdJZsfO0W plCQbhNBDKMfYWlJ5Ot3KMYxec5Eqs/wulUvxPKPihLK3qEdNzSX/RMc1wzmo4zp OKuOyORrhkWuhxPMvPCIzr8KI75Q5SoS8ZQY9baYlssX27Hz/cmSrGdmAf1ujv+2 iz1FvOMNb+uBbGLKSkp76MNUV6QG9/W7ntdcEOfsVyn03hUM7Dw5NZrns66qVYxC Nj+5iHSwe7oRoRKsVPIh1yqnOj0i9JPFXzUKbjc+xER8Kv0L7f/caHL8xzP3J+S7 OPsQAqWll2BmzPI8VlO47sxgljc+q59QfUuPXxv6ACp832DrtGg= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:38 2025 by rpki-client