$ rpki-client -vvf repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft File: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft (raw, json) Hash identifier: QzfT5KWNdxPD5lxa+ajaSz7SObtNB2K8NyeqU8eVw2g= Subject key identifier: 2D:72:0D:00:75:1E:7A:0D:E4:56:A0:C4:4E:BD:70:77:42:6E:84:57 Authority key identifier: 30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C Certificate issuer: /CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Certificate serial: 174A44A0A1E3F5E33BEAB1D2DF3658B746321313 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft Manifest number: CF Signing time: Sat 01 Nov 2025 19:50:54 +0000 Manifest this update: Sat 01 Nov 2025 19:45:54 +0000 Manifest next update: Wed 05 Nov 2025 04:57:54 +0000 Files and hashes: 1: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl (hash: KgKEE7dWZywk/mcw/o9hkklTjF4I9n38WjwaH8JNrBw=) 2: 323030313a6466333a346234303a3a2f34382d3438203d3e20313531393932.roa (hash: H0tMLPWT/xMzJjo+X3cfcs6u4yhbTyToHbzV+AgsIh8=) 3: 3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa (hash: 067j8zIqWRfiKYsv/8PNz7miyq3F672QljWEkk7m/9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 04:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:4a:44:a0:a1:e3:f5:e3:3b:ea:b1:d2:df:36:58:b7:46:32:13:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Validity Not Before: Nov 1 19:45:54 2025 GMT Not After : Nov 5 04:57:54 2025 GMT Subject: CN=2D720D00751E7A0DE456A0C44EBD7077426E8457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c6:4b:44:19:7f:fa:e8:c1:38:a6:95:0a:5a: 60:3f:4e:62:0c:c3:c2:20:f7:83:1f:53:7d:56:b4: 24:6d:1a:51:45:27:f9:f4:9a:91:cc:5f:5b:4c:2b: 2b:45:93:6c:3a:52:03:93:45:a6:7a:e6:ca:60:bc: 58:97:fa:b8:ff:95:8a:4b:dc:35:f6:31:6e:5b:72: 98:c7:a8:9c:52:89:a2:cb:e1:3c:a6:e4:9f:8a:f1: d4:e5:83:0b:48:d1:f1:b1:dc:49:49:44:b1:99:6b: a2:cf:82:74:f6:f3:7f:8d:60:c4:58:46:a5:df:5e: 82:51:aa:0b:d3:43:f8:7f:70:c2:eb:05:24:65:f4: 4f:29:d4:21:9b:25:50:d6:bd:36:56:b9:eb:9d:e7: 52:88:17:ee:dc:b8:16:61:35:c9:cd:a3:a5:b4:3e: 67:d7:ae:9b:7b:2b:be:3f:27:fd:6c:e2:1c:d7:d9: 49:d9:0c:4e:d1:d1:c6:8e:e9:b5:f3:f9:86:4d:8d: 3e:fc:a7:fc:ef:72:14:fe:41:f3:06:1b:c2:2c:98: 5b:58:f3:56:7a:40:c7:ac:87:bf:f7:d3:4c:a6:d0: 86:4b:6d:95:23:d3:54:79:74:cf:fa:75:88:27:f0: 2d:b1:70:64:5e:af:35:35:9c:15:88:56:e1:f4:9b: 9c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:72:0D:00:75:1E:7A:0D:E4:56:A0:C4:4E:BD:70:77:42:6E:84:57 X509v3 Authority Key Identifier: keyid:30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:ba:51:34:8c:62:18:16:51:78:b6:19:62:0d:f0:b1:0f:37: fe:a9:e1:25:b5:8b:5e:e0:5e:99:1b:cf:20:4f:e5:6e:0b:4d: 29:e6:99:f9:5e:ea:46:93:4d:58:09:2b:19:7d:e1:b8:7d:ed: c2:5f:e4:13:f9:25:8f:f6:9d:5c:94:4e:97:63:9e:6a:11:c3: 2b:e1:46:06:30:4d:f1:c6:6a:93:0c:ce:0f:31:e1:ad:36:18: f5:67:fb:5d:e6:b0:e7:42:75:c8:61:3a:18:80:ea:2d:28:60: ed:31:83:ee:5f:d3:ce:d7:58:d7:07:e3:5f:4b:ac:8e:34:91: 1c:db:3a:d2:77:81:a3:8f:65:7e:39:49:a4:57:7f:34:d7:71: b4:76:75:31:7f:b5:75:98:b7:84:6d:5c:02:8b:b1:96:c5:b0: 00:4b:b9:45:ca:df:77:87:2f:ea:42:4d:6a:71:bb:45:95:08: f2:d0:d3:f7:5e:7e:6a:c1:aa:18:e7:a8:72:f4:f9:f8:29:34: bc:f0:77:38:a0:66:c0:d3:9f:86:e2:86:ec:c3:ba:39:9d:49: 70:b8:5f:04:04:6e:bd:90:fd:e3:ae:0b:7e:ae:17:ab:76:95: d5:41:ec:f5:18:2c:08:ac:ea:04:ff:b4:88:31:62:b6:3e:df: 37:ac:ec:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF0pEoKHj9eM76rHS3zZYt0YyExMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0Qzgw NjFBN0IxQzAeFw0yNTExMDExOTQ1NTRaFw0yNTExMDUwNDU3NTRaMDMxMTAvBgNV BAMTKDJENzIwRDAwNzUxRTdBMERFNDU2QTBDNDRFQkQ3MDc3NDI2RTg0NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4xktEGX/66ME4ppUKWmA/TmIM w8Ig94MfU31WtCRtGlFFJ/n0mpHMX1tMKytFk2w6UgOTRaZ65spgvFiX+rj/lYpL 3DX2MW5bcpjHqJxSiaLL4Tym5J+K8dTlgwtI0fGx3ElJRLGZa6LPgnT283+NYMRY RqXfXoJRqgvTQ/h/cMLrBSRl9E8p1CGbJVDWvTZWueud51KIF+7cuBZhNcnNo6W0 PmfXrpt7K74/J/1s4hzX2UnZDE7R0caO6bXz+YZNjT78p/zvchT+QfMGG8IsmFtY 81Z6QMesh7/300ym0IZLbZUj01R5dM/6dYgn8C2xcGRerzU1nBWIVuH0m5zBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULXINAHUeeg3kVqDETr1wd0JuhFcwHwYDVR0j BBgwFoAUMHpAjiqoImja025vFF1kyAYaexwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTdmMWY0My1jZTdlLTQ5NzAtYWFkMC03ODJiMDE5YmQwM2UvMC8zMDdBNDA4RTJB QTgyMjY4REFEMzZFNkYxNDVENjRDODA2MUE3QjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0QzgwNjFB N0IxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU3ZjFmNDMtY2U3ZS00OTcwLWFh ZDAtNzgyYjAxOWJkMDNlLzAvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0 QzgwNjFBN0IxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJC6UTSMYhgWUXi2GWIN8LEPN/6p4SW1i17g XpkbzyBP5W4LTSnmmfle6kaTTVgJKxl94bh97cJf5BP5JY/2nVyUTpdjnmoRwyvh RgYwTfHGapMMzg8x4a02GPVn+13msOdCdchhOhiA6i0oYO0xg+5f087XWNcH419L rI40kRzbOtJ3gaOPZX45SaRXfzTXcbR2dTF/tXWYt4RtXAKLsZbFsABLuUXK33eH L+pCTWpxu0WVCPLQ0/defmrBqhjnqHL0+fgpNLzwdzigZsDTn4bihuzDujmdSXC4 XwQEbr2Q/eOuC36uF6t2ldVB7PUYLAis6gT/tIgxYrY+3zes7Hg= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:26 2025 by rpki-client