$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft File: 430E302040DE11D8C84431B3397113EC969694A0.mft (raw, json) Hash identifier: HfJoY871pJeqEMDx4hc+yxVheG585+1l2kKF+IM2J0c= Subject key identifier: 43:B8:F3:9E:C7:4B:A9:54:0B:FB:8A:BE:7F:A1:80:E0:11:72:6D:54 Authority key identifier: 43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 Certificate issuer: /CN=430E302040DE11D8C84431B3397113EC969694A0 Certificate serial: 1B72EA684F683630198374C6222C5AEA8F957248 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft Manifest number: 0493 Signing time: Tue 05 Aug 2025 00:01:53 +0000 Manifest this update: Mon 04 Aug 2025 23:56:53 +0000 Manifest next update: Fri 08 Aug 2025 02:51:53 +0000 Files and hashes: 1: 430E302040DE11D8C84431B3397113EC969694A0.crl (hash: 1rrr/nuu1fMfVpLYiIoNe9kD3vwLKKfdTDNzntWL0kQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 02:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:72:ea:68:4f:68:36:30:19:83:74:c6:22:2c:5a:ea:8f:95:72:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430E302040DE11D8C84431B3397113EC969694A0 Validity Not Before: Aug 4 23:56:53 2025 GMT Not After : Aug 8 02:51:53 2025 GMT Subject: CN=43B8F39EC74BA9540BFB8ABE7FA180E011726D54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:27:64:e7:87:5e:a9:fd:a7:55:fc:92:80:b1: d8:a4:ba:65:5d:80:fe:b7:28:db:4a:21:34:e4:fb: e1:7b:94:5b:88:51:26:d3:3a:df:2f:b9:9f:5d:d5: e7:d2:7a:2f:20:e0:6b:00:23:68:77:be:c3:7b:83: 28:da:7a:ef:b7:21:e1:a2:37:60:24:95:77:f1:d5: 9d:27:18:51:82:14:1a:59:99:56:03:bc:4b:1e:7d: a7:08:5a:43:af:0b:3d:e4:fd:63:81:a2:b5:b5:67: 8c:31:28:aa:e3:39:bf:0b:62:b6:d0:21:39:09:62: 09:d4:a6:06:54:de:43:13:9b:bc:f3:f1:f0:d2:71: de:a0:c0:12:44:3b:3e:60:af:03:b1:a8:98:c3:15: 52:ab:be:ac:d5:95:e3:da:e5:cc:a6:46:06:8e:d9: c4:ed:79:d9:ac:31:f7:da:c9:11:92:57:64:46:bd: 5e:07:9a:9c:df:c5:02:41:39:38:23:8e:55:3c:0e: 10:ad:7a:3f:d9:81:08:46:6a:56:b7:85:3d:d8:ce: 4b:9c:1b:15:2b:d6:76:98:54:a6:8c:b8:ba:7f:cc: 63:b6:95:66:c6:5e:aa:e8:58:46:11:22:bf:7d:7a: 54:6a:99:94:6e:aa:5b:a6:52:ef:d7:27:5c:3e:4a: 26:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B8:F3:9E:C7:4B:A9:54:0B:FB:8A:BE:7F:A1:80:E0:11:72:6D:54 X509v3 Authority Key Identifier: keyid:43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2f:e5:dc:7d:9a:04:fc:74:96:a4:e3:4d:fa:98:4e:91:dc: f8:69:8e:a4:8d:15:cf:b4:15:fe:1e:06:b4:a4:49:ba:00:61: bb:24:a3:8e:f5:e2:a8:35:80:3d:38:33:ac:69:de:ce:54:ee: 3d:4b:93:c5:ca:ba:84:6e:5e:5c:3d:37:01:b6:9d:4f:71:35: e3:61:fc:10:69:8c:71:39:82:7f:8e:72:4e:ce:8f:80:de:3c: b5:cd:fd:98:a4:2a:4a:f9:31:43:7d:92:65:0a:94:af:9c:2e: 95:e2:f2:98:dd:a4:88:9a:61:8f:29:58:fa:ba:49:58:fd:ec: 14:a8:a6:ca:44:19:01:ec:d4:c5:8d:8b:b4:cc:ee:99:33:ea: 05:0a:83:74:aa:d4:c0:0a:94:9e:32:d0:8c:e9:1c:a8:13:ad: 1d:58:af:65:bb:94:bd:85:b6:88:52:a0:d2:01:de:01:b3:e8: 73:85:e3:1a:26:c3:76:5e:87:58:69:74:2e:55:ec:e1:8f:f2: 4f:1d:9c:40:9b:9b:25:bd:ba:6f:d0:a3:5a:9e:85:77:4d:c0: 07:7b:3e:e5:a1:be:97:96:e2:f6:06:ed:4b:c8:f4:8b:f4:7c: 57:bb:a6:6c:91:cd:5f:f9:ac:47:7c:9f:04:d8:d5:53:db:af: 79:96:1a:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG3LqaE9oNjAZg3TGIixa6o+VckgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5 Njk2OTRBMDAeFw0yNTA4MDQyMzU2NTNaFw0yNTA4MDgwMjUxNTNaMDMxMTAvBgNV BAMTKDQzQjhGMzlFQzc0QkE5NTQwQkZCOEFCRTdGQTE4MEUwMTE3MjZENTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmJ2Tnh16p/adV/JKAsdikumVd gP63KNtKITTk++F7lFuIUSbTOt8vuZ9d1efSei8g4GsAI2h3vsN7gyjaeu+3IeGi N2AklXfx1Z0nGFGCFBpZmVYDvEsefacIWkOvCz3k/WOBorW1Z4wxKKrjOb8LYrbQ ITkJYgnUpgZU3kMTm7zz8fDScd6gwBJEOz5grwOxqJjDFVKrvqzVlePa5cymRgaO 2cTtedmsMffayRGSV2RGvV4HmpzfxQJBOTgjjlU8DhCtej/ZgQhGala3hT3Yzkuc GxUr1naYVKaMuLp/zGO2lWbGXqroWEYRIr99elRqmZRuqlumUu/XJ1w+SibRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ7jznsdLqVQL+4q+f6GA4BFybVQwHwYDVR0j BBgwFoAUQw4wIEDeEdjIRDGzOXET7JaWlKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTllMDFiYS01OWM5LTQwNDctYWMwYi1lOWIyZmU2NTg1M2MvMC80MzBFMzAyMDQw REUxMUQ4Qzg0NDMxQjMzOTcxMTNFQzk2OTY5NEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5Njk2 OTRBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEz RUM5Njk2OTRBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGwv5dx9mgT8dJak4036mE6R3PhpjqSNFc+0 Ff4eBrSkSboAYbsko4714qg1gD04M6xp3s5U7j1Lk8XKuoRuXlw9NwG2nU9xNeNh /BBpjHE5gn+Ock7Oj4DePLXN/ZikKkr5MUN9kmUKlK+cLpXi8pjdpIiaYY8pWPq6 SVj97BSopspEGQHs1MWNi7TM7pkz6gUKg3Sq1MAKlJ4y0IzpHKgTrR1Yr2W7lL2F tohSoNIB3gGz6HOF4xomw3Zeh1hpdC5V7OGP8k8dnECbmyW9um/Qo1qehXdNwAd7 PuWhvpeW4vYG7UvI9Iv0fFe7pmyRzV/5rEd8nwTY1VPbr3mWGls= -----END CERTIFICATE-----Generated at Thu Aug 7 03:19:25 2025 by rpki-client