$ rpki-client -vvf repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft File: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft (raw, json) Hash identifier: DWRjDBnTIeHyEwq5m6JvrzX88DVKyI3lj590OmO+OjI= Subject key identifier: 2D:ED:B6:62:46:62:4E:F6:2E:85:C6:AD:E0:61:11:3B:5F:A4:03:8A Authority key identifier: B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 Certificate issuer: /CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Certificate serial: 7A65E9D967A3E08E5F75598BA7D0CF2A1C0F5326 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft Manifest number: 015B Signing time: Wed 06 Aug 2025 16:51:07 +0000 Manifest this update: Wed 06 Aug 2025 16:46:07 +0000 Manifest next update: Sat 09 Aug 2025 20:16:07 +0000 Files and hashes: 1: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl (hash: IxEnX187N2xgDPFqEn5aqFSNV6oQI1lht/fWeEYPso8=) 2: 3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (hash: 5p8DeVWE4ixdVzTUD+2z3ALmeQQXrFM+ymQAz8yvg9Q=) 3: 3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (hash: HxY+qbSnnto1Z4HzXSATggf6s2/jsThuJ9IKEWbevzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 20:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:65:e9:d9:67:a3:e0:8e:5f:75:59:8b:a7:d0:cf:2a:1c:0f:53:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Validity Not Before: Aug 6 16:46:07 2025 GMT Not After : Aug 9 20:16:07 2025 GMT Subject: CN=2DEDB66246624EF62E85C6ADE061113B5FA4038A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b5:45:64:bb:79:21:9f:a8:06:62:ff:b0:f5: e7:74:f8:bc:b7:26:26:34:0c:bc:9f:5f:eb:ee:16: 63:33:90:36:7f:db:7e:d4:11:d3:c6:ee:7f:85:6e: 2a:b4:00:ee:d6:1e:68:10:d9:3b:ac:71:b8:f9:99: 23:9b:38:26:07:60:8a:5d:d1:15:aa:a4:61:2d:07: f9:80:25:53:e0:f6:ee:1e:19:7e:18:6c:cd:3a:2b: f2:3d:62:06:d8:23:ae:f2:f1:c5:3a:e8:4e:94:a4: 57:aa:37:64:db:02:ba:0f:52:b9:a5:ce:dc:7c:a0: f7:a3:ed:34:33:d9:3d:9e:24:2a:29:42:50:3a:a6: e7:fe:97:67:b1:d1:b5:1a:07:7b:91:df:c2:7e:10: 8e:59:80:c3:0f:9e:77:f7:1e:e8:de:69:52:fd:98: c3:ff:84:84:db:7a:db:46:7d:de:3c:e4:8e:fb:73: 7c:ea:9a:e1:50:4c:96:30:ff:60:4a:48:1f:95:d7: 1a:4c:58:70:06:bf:6c:59:b4:10:c8:81:8b:c8:d9: 8d:0c:b7:ad:36:78:c6:f0:69:a4:0d:cc:66:b5:f9: 41:1a:0e:e7:e2:be:43:a7:2c:f7:81:b8:52:1e:53: ef:84:2f:57:cb:71:11:29:7a:88:bc:94:92:c9:da: be:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:ED:B6:62:46:62:4E:F6:2E:85:C6:AD:E0:61:11:3B:5F:A4:03:8A X509v3 Authority Key Identifier: keyid:B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:9a:d4:48:a1:4a:1f:b9:5a:1a:e2:d0:14:e2:fe:62:b7:fc: 57:50:91:b9:04:12:e8:c9:78:38:9d:a6:8a:1d:52:e4:5e:1e: 70:3b:b7:b8:e8:fc:aa:14:41:be:6a:64:5c:50:bf:00:47:19: 1e:35:68:1b:c1:3a:3e:86:e9:95:e4:71:53:5b:6d:ba:e1:63: 2e:2d:ce:71:45:b6:24:2b:d7:58:c1:83:2b:cb:42:e6:35:b1: 74:e8:69:f4:ea:ac:64:58:db:59:a3:bf:b5:8a:43:82:58:ea: 91:f2:e9:1b:17:b1:86:12:d1:83:e6:e6:2d:77:e0:8d:31:48: b5:c8:fa:70:8c:78:b8:29:17:a7:97:4b:44:3a:83:0e:02:6e: c9:ac:a9:f6:10:96:10:c0:72:ec:73:3b:25:77:e2:0f:9b:b4: 78:35:27:fb:17:12:91:e2:34:76:02:32:07:ca:72:df:82:f2: ee:c4:23:6b:7d:9f:cf:44:36:c3:a6:3e:07:83:2d:57:fe:43: 10:69:69:87:17:2f:8f:0b:5b:0a:0d:8b:e3:05:d1:c2:d1:c5: 98:dc:4a:62:5b:ce:88:fd:39:80:4b:eb:2e:fc:4a:1c:88:6c: ce:6f:69:d1:4c:97:a0:d8:74:e0:ad:99:4b:be:db:91:e9:25: ba:c2:10:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUemXp2Wej4I5fdVmLp9DPKhwPUyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlC MTE5NEREODAeFw0yNTA4MDYxNjQ2MDdaFw0yNTA4MDkyMDE2MDdaMDMxMTAvBgNV BAMTKDJERURCNjYyNDY2MjRFRjYyRTg1QzZBREUwNjExMTNCNUZBNDAzOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDItUVku3khn6gGYv+w9ed0+Ly3 JiY0DLyfX+vuFmMzkDZ/237UEdPG7n+Fbiq0AO7WHmgQ2Tuscbj5mSObOCYHYIpd 0RWqpGEtB/mAJVPg9u4eGX4YbM06K/I9YgbYI67y8cU66E6UpFeqN2TbAroPUrml ztx8oPej7TQz2T2eJCopQlA6puf+l2ex0bUaB3uR38J+EI5ZgMMPnnf3HujeaVL9 mMP/hITbettGfd485I77c3zqmuFQTJYw/2BKSB+V1xpMWHAGv2xZtBDIgYvI2Y0M t602eMbwaaQNzGa1+UEaDufivkOnLPeBuFIeU++EL1fLcREpeoi8lJLJ2r49AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULe22YkZiTvYuhcat4GERO1+kA4owHwYDVR0j BBgwFoAUsw/b3nD75wzETzxxC0ZwabEZTdgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDc1MDg4ZS00OWFmLTQ3MmItOWI2Mi04MWU3M2RhYWYxZDYvMC9CMzBGREJERTcw RkJFNzBDQzQ0RjNDNzEwQjQ2NzA2OUIxMTk0REQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlCMTE5 NEREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ3NTA4OGUtNDlhZi00NzJiLTli NjItODFlNzNkYWFmMWQ2LzAvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0Njcw NjlCMTE5NEREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMCa1EihSh+5Whri0BTi/mK3/FdQkbkEEujJ eDidpoodUuReHnA7t7jo/KoUQb5qZFxQvwBHGR41aBvBOj6G6ZXkcVNbbbrhYy4t znFFtiQr11jBgyvLQuY1sXToafTqrGRY21mjv7WKQ4JY6pHy6RsXsYYS0YPm5i13 4I0xSLXI+nCMeLgpF6eXS0Q6gw4CbsmsqfYQlhDAcuxzOyV34g+btHg1J/sXEpHi NHYCMgfKct+C8u7EI2t9n89ENsOmPgeDLVf+QxBpaYcXL48LWwoNi+MF0cLRxZjc SmJbzoj9OYBL6y78ShyIbM5vadFMl6DYdOCtmUu+25HpJbrCEL0= -----END CERTIFICATE-----Generated at Thu Aug 7 00:39:22 2025 by rpki-client