$ rpki-client -vvf repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft File: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft (raw, json) Hash identifier: dG8h9+i2/IykcosxV99IpBi5MKHgHYyUo0CupuF6CN4= Subject key identifier: 33:A2:F1:CF:57:75:7A:1C:D5:F5:EC:09:6B:AC:22:2F:75:E5:64:45 Authority key identifier: B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 Certificate issuer: /CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Certificate serial: 1FCBA9AE338AAFDA660FEBB1385B66786FBD4BB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft Manifest number: 0143 Signing time: Sat 14 Jun 2025 08:01:06 +0000 Manifest this update: Sat 14 Jun 2025 07:56:06 +0000 Manifest next update: Tue 17 Jun 2025 16:24:06 +0000 Files and hashes: 1: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl (hash: ZAS4dfFU4d97rKJgIpTe/Z4EkJegNEnHanlb4HvSY8o=) 2: 3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (hash: TgbYPBARci4k4FFuDC/BjaqPrp8JHyui9Gbu10x+DcY=) 3: 3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (hash: 7At0OH1CsdZeT1tWdKcV4ul/BqEWnSHntfndOrIgjxM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 16:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:cb:a9:ae:33:8a:af:da:66:0f:eb:b1:38:5b:66:78:6f:bd:4b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Validity Not Before: Jun 14 07:56:06 2025 GMT Not After : Jun 17 16:24:06 2025 GMT Subject: CN=33A2F1CF57757A1CD5F5EC096BAC222F75E56445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:92:dc:e0:67:6b:59:55:73:a6:ed:87:7b:47: cd:eb:6c:0e:aa:6c:08:94:7f:9c:ce:dc:33:bc:5b: 8d:31:5f:ac:41:33:bb:62:23:65:8f:c4:62:d2:f0: 0d:f2:6c:33:80:d4:26:fe:da:2f:44:38:1b:7f:a2: cd:3c:7a:ab:b4:5c:92:64:01:70:39:e0:98:68:62: 19:e0:c1:6b:06:62:6e:27:0e:32:e2:dc:6d:b1:8c: b8:97:5a:7a:29:b0:25:f6:dd:be:4a:c6:eb:36:f3: 56:53:a2:cf:92:1a:f8:86:6b:94:2e:69:e8:40:7b: c3:a4:b6:e9:d0:e3:b8:1e:ba:ba:cf:f8:ef:c5:72: 8c:82:4b:10:ec:03:32:2d:0f:d2:06:b2:86:d5:a7: e1:a2:7e:e3:9b:45:ee:94:22:c6:fd:7a:20:a2:d0: 82:f0:b7:da:44:bb:38:2d:e4:d0:42:8d:5f:88:fa: 7e:fb:c8:5b:ee:b3:77:74:12:96:25:a0:b7:87:27: 53:bd:23:af:ea:b0:fa:3a:54:e2:a4:df:4d:7a:25: 4f:3c:b0:55:8b:1e:74:a7:cc:ea:f5:54:99:c2:55: 7f:30:7a:b2:dd:3f:67:e8:0c:63:b4:81:bc:b9:8b: 74:3a:a1:34:c8:3d:a3:ed:15:4f:f8:a7:5c:2b:ee: a4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A2:F1:CF:57:75:7A:1C:D5:F5:EC:09:6B:AC:22:2F:75:E5:64:45 X509v3 Authority Key Identifier: keyid:B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:9b:13:d9:db:bc:fa:0a:fd:e9:2e:9d:33:74:62:7c:9b:0d: ff:8b:52:7a:e9:83:1c:b5:d4:44:51:60:eb:c5:64:85:b5:2a: c7:1e:75:16:05:c6:c0:ac:12:8d:1d:ca:ff:fd:72:00:0f:ea: a4:7f:df:1e:4f:9c:a7:57:4f:52:94:ea:4d:5a:94:08:06:10: cf:cb:b8:bc:ff:66:45:bd:3f:12:47:8d:b9:b5:d0:68:2b:02: 06:dc:86:0c:4f:ff:fb:70:09:8f:ee:d8:83:6e:86:59:1c:fa: d5:8c:a4:12:a8:74:13:23:2b:89:18:24:67:81:43:c9:4f:38: ff:ae:87:82:80:bf:83:27:bb:9d:85:e7:42:30:47:b1:4f:39: 29:65:89:23:8e:63:0a:a5:69:3e:4a:1b:59:f8:62:13:00:06: d9:37:68:48:ce:55:d1:4b:ed:62:ec:72:a4:47:2f:01:dc:7c: 10:61:fe:da:75:2d:1e:fe:20:b7:c9:26:68:0f:a9:a4:0c:41: e5:c6:5a:3f:d8:41:e1:73:32:c6:a5:8b:52:c3:37:a6:99:f6: 70:0f:48:7c:52:ea:5b:28:cb:4b:68:e2:89:a0:b0:10:a0:38: bc:a3:de:4a:14:66:26:ed:b5:ca:15:b0:cc:1f:e5:44:25:64: 71:af:2e:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH8uprjOKr9pmD+uxOFtmeG+9S7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlC MTE5NEREODAeFw0yNTA2MTQwNzU2MDZaFw0yNTA2MTcxNjI0MDZaMDMxMTAvBgNV BAMTKDMzQTJGMUNGNTc3NTdBMUNENUY1RUMwOTZCQUMyMjJGNzVFNTY0NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDektzgZ2tZVXOm7Yd7R83rbA6q bAiUf5zO3DO8W40xX6xBM7tiI2WPxGLS8A3ybDOA1Cb+2i9EOBt/os08equ0XJJk AXA54JhoYhngwWsGYm4nDjLi3G2xjLiXWnopsCX23b5Kxus281ZTos+SGviGa5Qu aehAe8OktunQ47geurrP+O/FcoyCSxDsAzItD9IGsobVp+GifuObRe6UIsb9eiCi 0ILwt9pEuzgt5NBCjV+I+n77yFvus3d0EpYloLeHJ1O9I6/qsPo6VOKk3016JU88 sFWLHnSnzOr1VJnCVX8werLdP2foDGO0gby5i3Q6oTTIPaPtFU/4p1wr7qRLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM6Lxz1d1ehzV9ewJa6wiL3XlZEUwHwYDVR0j BBgwFoAUsw/b3nD75wzETzxxC0ZwabEZTdgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDc1MDg4ZS00OWFmLTQ3MmItOWI2Mi04MWU3M2RhYWYxZDYvMC9CMzBGREJERTcw RkJFNzBDQzQ0RjNDNzEwQjQ2NzA2OUIxMTk0REQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlCMTE5 NEREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ3NTA4OGUtNDlhZi00NzJiLTli NjItODFlNzNkYWFmMWQ2LzAvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0Njcw NjlCMTE5NEREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6bE9nbvPoK/ekunTN0YnybDf+LUnrpgxy1 1ERRYOvFZIW1KscedRYFxsCsEo0dyv/9cgAP6qR/3x5PnKdXT1KU6k1alAgGEM/L uLz/ZkW9PxJHjbm10GgrAgbchgxP//twCY/u2INuhlkc+tWMpBKodBMjK4kYJGeB Q8lPOP+uh4KAv4Mnu52F50IwR7FPOSlliSOOYwqlaT5KG1n4YhMABtk3aEjOVdFL 7WLscqRHLwHcfBBh/tp1LR7+ILfJJmgPqaQMQeXGWj/YQeFzMsali1LDN6aZ9nAP SHxS6lsoy0to4omgsBCgOLyj3koUZibttcoVsMwf5UQlZHGvLs4= -----END CERTIFICATE-----Generated at Mon Jun 16 04:03:35 2025 by rpki-client