$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft File: 430E302040DE11D8C84431B3397113EC969694A0.mft (raw, json) Hash identifier: 8US65yYvsxOrIUiYVsaz6Rjsoif2nsaaOypIG4OGvWU= Subject key identifier: 1C:76:4C:2C:F3:74:5E:4A:1C:DC:78:0A:3D:66:1B:E0:98:EF:18:F2 Authority key identifier: 43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 Certificate issuer: /CN=430E302040DE11D8C84431B3397113EC969694A0 Certificate serial: 70C4699087E39EAD8B0544517AE3E49FDE150CC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft Manifest number: 047D Signing time: Sun 15 Jun 2025 09:31:53 +0000 Manifest this update: Sun 15 Jun 2025 09:26:53 +0000 Manifest next update: Wed 18 Jun 2025 18:05:53 +0000 Files and hashes: 1: 430E302040DE11D8C84431B3397113EC969694A0.crl (hash: ZsuP6ekbygQT3mP94YeTq5sqLL1+UmlUmWG+apddskk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 18:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c4:69:90:87:e3:9e:ad:8b:05:44:51:7a:e3:e4:9f:de:15:0c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430E302040DE11D8C84431B3397113EC969694A0 Validity Not Before: Jun 15 09:26:53 2025 GMT Not After : Jun 18 18:05:53 2025 GMT Subject: CN=1C764C2CF3745E4A1CDC780A3D661BE098EF18F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:85:77:3c:89:47:48:72:56:7c:a9:af:f3:e6: 7d:57:72:47:2b:25:fa:f9:c6:f4:34:b7:be:20:73: 11:90:96:bf:75:5f:d9:91:1c:b7:1a:1f:de:64:1e: 3e:2d:2f:e7:b1:63:ca:8c:85:8a:43:8b:98:9c:ce: a5:46:5a:65:79:b0:8f:69:59:6b:59:c8:d1:9f:0c: 38:7f:5b:3f:c8:e8:62:78:2e:41:de:b0:36:ec:5d: ab:63:24:b2:07:3f:81:ad:69:8f:b8:62:f9:7c:c5: 20:51:e1:8a:c2:70:d4:e3:5c:93:b1:2b:50:bf:ac: a8:5e:6b:a5:ab:0b:47:71:a9:c3:06:90:39:19:c3: fc:21:90:2f:15:09:fe:01:11:d0:50:f7:8f:73:a5: 8a:56:30:18:e6:a6:4f:21:0d:f5:54:d5:57:ff:b4: 77:69:0c:7d:99:e6:43:df:0e:76:69:18:90:69:a4: ba:5c:42:8e:80:ef:3d:e4:b6:3f:8c:47:1e:00:38: 12:37:d3:7b:7a:41:b5:2b:aa:83:d3:1a:87:0e:13: 9e:ca:3f:29:ce:8c:6a:1d:73:93:49:17:88:01:f0: 5f:ea:9b:29:d3:ce:74:84:43:ba:ae:ef:f2:54:80: 84:1c:a8:ab:b5:06:c2:dd:8d:10:80:1c:08:ba:19: fb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:76:4C:2C:F3:74:5E:4A:1C:DC:78:0A:3D:66:1B:E0:98:EF:18:F2 X509v3 Authority Key Identifier: keyid:43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:35:c5:6a:58:2f:91:20:dd:cd:97:eb:01:72:7d:26:d2:91: 2a:6a:9c:c0:0e:aa:05:07:1f:71:81:7d:7e:51:1d:ea:ea:5a: 26:24:ba:67:30:30:56:31:72:33:bd:60:22:45:cc:cb:f7:7f: 01:80:0c:c8:d2:39:9a:71:c5:62:5b:70:6b:c4:b2:9b:94:7f: 26:36:b8:7a:3a:ac:e8:3e:6c:dc:ce:3a:10:40:fc:70:73:f8: 61:f1:e9:b8:6e:54:10:aa:83:f1:62:0c:46:af:74:b5:0e:ec: 2d:4a:02:36:45:ee:5b:d4:cb:87:0f:64:d4:c8:9f:aa:0f:f3: 3a:d7:35:95:04:f3:8e:92:f2:7d:3d:53:aa:c5:9c:2b:c2:d6: 25:64:8c:48:f0:7f:fb:83:c2:d8:3c:da:67:ae:48:f1:83:35: 49:ed:4f:e6:df:18:07:cb:2e:2c:7a:af:08:3c:b3:eb:f6:b0: 20:88:86:a9:31:3e:30:81:2d:74:98:6d:37:d1:1b:12:b9:cf: 20:34:0f:b8:b4:51:80:9d:0c:4a:58:03:06:27:bc:12:f9:77: 21:b0:9e:f4:46:94:0e:76:0c:05:fe:49:84:62:89:57:24:b6: e8:c0:75:24:76:c0:a4:39:46:b1:21:b9:cf:45:3f:cf:2e:85: e8:04:e2:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcMRpkIfjnq2LBURReuPkn94VDMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5 Njk2OTRBMDAeFw0yNTA2MTUwOTI2NTNaFw0yNTA2MTgxODA1NTNaMDMxMTAvBgNV BAMTKDFDNzY0QzJDRjM3NDVFNEExQ0RDNzgwQTNENjYxQkUwOThFRjE4RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDChXc8iUdIclZ8qa/z5n1Xckcr Jfr5xvQ0t74gcxGQlr91X9mRHLcaH95kHj4tL+exY8qMhYpDi5iczqVGWmV5sI9p WWtZyNGfDDh/Wz/I6GJ4LkHesDbsXatjJLIHP4GtaY+4Yvl8xSBR4YrCcNTjXJOx K1C/rKhea6WrC0dxqcMGkDkZw/whkC8VCf4BEdBQ949zpYpWMBjmpk8hDfVU1Vf/ tHdpDH2Z5kPfDnZpGJBppLpcQo6A7z3ktj+MRx4AOBI303t6QbUrqoPTGocOE57K PynOjGodc5NJF4gB8F/qmynTznSEQ7qu7/JUgIQcqKu1BsLdjRCAHAi6GfuPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHHZMLPN0Xkoc3HgKPWYb4JjvGPIwHwYDVR0j BBgwFoAUQw4wIEDeEdjIRDGzOXET7JaWlKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTllMDFiYS01OWM5LTQwNDctYWMwYi1lOWIyZmU2NTg1M2MvMC80MzBFMzAyMDQw REUxMUQ4Qzg0NDMxQjMzOTcxMTNFQzk2OTY5NEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5Njk2 OTRBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEz RUM5Njk2OTRBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALE1xWpYL5Eg3c2X6wFyfSbSkSpqnMAOqgUH H3GBfX5RHerqWiYkumcwMFYxcjO9YCJFzMv3fwGADMjSOZpxxWJbcGvEspuUfyY2 uHo6rOg+bNzOOhBA/HBz+GHx6bhuVBCqg/FiDEavdLUO7C1KAjZF7lvUy4cPZNTI n6oP8zrXNZUE846S8n09U6rFnCvC1iVkjEjwf/uDwtg82meuSPGDNUntT+bfGAfL Lix6rwg8s+v2sCCIhqkxPjCBLXSYbTfRGxK5zyA0D7i0UYCdDEpYAwYnvBL5dyGw nvRGlA52DAX+SYRiiVcktujAdSR2wKQ5RrEhuc9FP88uhegE4oo= -----END CERTIFICATE-----Generated at Tue Jun 17 08:26:00 2025 by rpki-client