$ rpki-client -vvf repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft File: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft (raw, json) Hash identifier: v9q4GvEe6DYub9tYZe+0uyGijCrtpcmc6Z9sGSVwYL4= Subject key identifier: 3F:E7:19:F1:0C:36:61:8F:66:60:5E:B0:5D:69:9D:60:54:B7:C2:5A Authority key identifier: 30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51 Certificate issuer: /CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51 Certificate serial: 1D4B87E5D2B7F1868441B9BEEAB2C0B1AFE5A527 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft Manifest number: 03CF Signing time: Thu 07 Aug 2025 10:21:44 +0000 Manifest this update: Thu 07 Aug 2025 10:16:44 +0000 Manifest next update: Sun 10 Aug 2025 13:39:44 +0000 Files and hashes: 1: 3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa (hash: FCHx6FaRMarTOvIyDDJKyaewpvcQNtFaDUPbc3o5Lx0=) 2: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl (hash: /eE5LDiCeKGVgB8E0vaRVdyGc8rirHEE63ctkdgdpgE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 13:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:4b:87:e5:d2:b7:f1:86:84:41:b9:be:ea:b2:c0:b1:af:e5:a5:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51 Validity Not Before: Aug 7 10:16:44 2025 GMT Not After : Aug 10 13:39:44 2025 GMT Subject: CN=3FE719F10C36618F66605EB05D699D6054B7C25A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:70:2b:0a:25:82:42:2b:98:e2:e3:5e:9d:c2: 26:5c:50:22:de:cf:15:0c:4f:49:df:d9:0b:c6:15: fa:c9:ac:bb:c5:0d:09:81:2b:03:02:71:3b:ec:73: 07:5f:83:c6:1e:02:b5:1d:e1:c2:66:0e:3e:0e:ef: 5e:aa:49:43:03:b2:7a:17:56:93:04:86:38:6c:70: 79:af:bf:51:d5:6d:e3:94:13:4d:ab:35:16:be:e4: 9e:02:65:85:df:a5:25:b6:42:29:52:be:b5:62:05: 4d:b6:42:3d:70:98:d4:0a:a7:5a:cd:14:7d:06:48: de:6e:41:84:2c:37:94:95:ef:b4:eb:60:74:9d:d9: 41:e6:fc:58:6e:13:31:dd:6c:0c:e6:a9:ab:36:a0: c1:9e:6e:60:e2:87:e0:80:d6:2d:65:0b:6f:b9:cc: 27:06:a1:e4:0c:fb:b7:20:ea:ca:ca:66:df:c7:ce: 59:fa:98:54:e3:d6:96:02:90:bd:74:80:07:b3:3e: c2:82:86:3e:37:db:8c:9e:13:e5:70:63:14:c6:df: ed:90:48:0c:79:09:02:d1:20:3d:a2:70:53:11:75: 13:3a:79:6c:2c:60:13:3d:b8:2e:63:dd:ee:2b:2e: 40:20:af:c8:19:bb:86:bd:a4:fa:b3:f3:b2:9b:07: 38:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E7:19:F1:0C:36:61:8F:66:60:5E:B0:5D:69:9D:60:54:B7:C2:5A X509v3 Authority Key Identifier: keyid:30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:ce:ca:af:05:f9:31:b9:1b:f6:a9:f4:0f:4a:16:2c:6d:81: 68:6a:96:81:1d:73:9d:74:c6:df:a2:09:d3:8b:78:78:ff:45: 67:56:de:e4:ba:b6:04:3f:81:25:30:f9:9d:c9:0e:14:c4:ea: cf:df:73:a8:ae:ec:7f:61:9d:0c:bd:54:96:7f:23:82:53:a2: 5a:fb:1a:da:68:ea:ac:eb:1f:06:7a:ba:a0:20:85:d3:b7:cb: 39:50:09:39:40:bd:f8:d3:74:d5:b5:24:8d:b0:2a:ab:7d:61: f8:cb:13:3c:b8:77:ba:a1:c2:a1:68:ed:1a:19:46:fb:59:cc: 78:89:51:07:1f:32:99:18:8a:10:7d:61:d4:11:61:b8:53:5a: e2:e6:8a:78:90:38:c3:a7:b1:0a:18:86:ef:e4:aa:c6:32:74: 0a:19:70:08:09:a3:72:a2:fb:f9:a5:9f:44:6c:b5:de:a5:f4: 2b:15:0e:4e:d7:25:13:d4:c9:88:15:39:70:c2:47:6c:80:35: d7:af:36:97:c0:b7:01:0e:ce:88:85:f6:cc:4e:6d:7e:45:98: 0f:cc:76:7c:79:a1:6d:c4:f0:18:72:3d:b0:38:61:6a:6a:c2: a3:4f:dd:6c:78:ca:82:a8:b5:7f:52:49:7b:62:0b:ae:99:09: e2:63:c2:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHUuH5dK38YaEQbm+6rLAsa/lpScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJDODAy NkEwQ0U1MTAeFw0yNTA4MDcxMDE2NDRaFw0yNTA4MTAxMzM5NDRaMDMxMTAvBgNV BAMTKDNGRTcxOUYxMEMzNjYxOEY2NjYwNUVCMDVENjk5RDYwNTRCN0MyNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCocCsKJYJCK5ji416dwiZcUCLe zxUMT0nf2QvGFfrJrLvFDQmBKwMCcTvscwdfg8YeArUd4cJmDj4O716qSUMDsnoX VpMEhjhscHmvv1HVbeOUE02rNRa+5J4CZYXfpSW2QilSvrViBU22Qj1wmNQKp1rN FH0GSN5uQYQsN5SV77TrYHSd2UHm/FhuEzHdbAzmqas2oMGebmDih+CA1i1lC2+5 zCcGoeQM+7cg6srKZt/Hzln6mFTj1pYCkL10gAezPsKChj4324yeE+VwYxTG3+2Q SAx5CQLRID2icFMRdRM6eWwsYBM9uC5j3e4rLkAgr8gZu4a9pPqz87KbBzi/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP+cZ8Qw2YY9mYF6wXWmdYFS3wlowHwYDVR0j BBgwFoAUMPwS6QOuDuh70aHligYsgCagzlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzExYzExMC03YWIxLTRhMzktYjljYS0zYTliMGU4MWJjZjUvMC8zMEZDMTJFOTAz QUUwRUU4N0JEMUExRTU4QTA2MkM4MDI2QTBDRTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJDODAyNkEw Q0U1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDcxMWMxMTAtN2FiMS00YTM5LWI5 Y2EtM2E5YjBlODFiY2Y1LzAvMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJD ODAyNkEwQ0U1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMXOyq8F+TG5G/ap9A9KFixtgWhqloEdc510 xt+iCdOLeHj/RWdW3uS6tgQ/gSUw+Z3JDhTE6s/fc6iu7H9hnQy9VJZ/I4JTolr7 Gtpo6qzrHwZ6uqAghdO3yzlQCTlAvfjTdNW1JI2wKqt9YfjLEzy4d7qhwqFo7RoZ RvtZzHiJUQcfMpkYihB9YdQRYbhTWuLminiQOMOnsQoYhu/kqsYydAoZcAgJo3Ki +/mln0Rstd6l9CsVDk7XJRPUyYgVOXDCR2yANdevNpfAtwEOzoiF9sxObX5FmA/M dnx5oW3E8BhyPbA4YWpqwqNP3Wx4yoKotX9SSXtiC66ZCeJjwqg= -----END CERTIFICATE-----Generated at Sat Aug 9 05:35:30 2025 by rpki-client