$ rpki-client -vvf repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft File: 30CE8572EA9DEDA805151BBD165E699D1191FED0.mft (raw, json) Hash identifier: YA1E2BWb/7NtYTR43xwh+kTtHlO6vb60LMnnTexySgU= Subject key identifier: A3:8E:29:3F:ED:17:31:DD:68:EA:96:74:72:2D:2C:19:94:81:45:74 Authority key identifier: 30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0 Certificate issuer: /CN=30CE8572EA9DEDA805151BBD165E699D1191FED0 Certificate serial: 1FCDE6F068E5D31C1CBD0F1806EA653E68C84BB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft Manifest number: 0146 Signing time: Mon 28 Apr 2025 18:31:43 +0000 Manifest this update: Mon 28 Apr 2025 18:26:43 +0000 Manifest next update: Thu 01 May 2025 21:30:43 +0000 Files and hashes: 1: 3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa (hash: Q2j6s7F7V0sOCSPl3aHs6rPupunQzCX/dgkjx2YSfjU=) 2: 30CE8572EA9DEDA805151BBD165E699D1191FED0.crl (hash: BVR6meDvPHsNSPZ8wLxxz9raTfFrpC/H5crlVONWXCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:cd:e6:f0:68:e5:d3:1c:1c:bd:0f:18:06:ea:65:3e:68:c8:4b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30CE8572EA9DEDA805151BBD165E699D1191FED0 Validity Not Before: Apr 28 18:26:43 2025 GMT Not After : May 1 21:30:43 2025 GMT Subject: CN=A38E293FED1731DD68EA9674722D2C1994814574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:11:df:a6:b6:87:fd:0c:ad:f4:85:14:9c:7e: ee:84:1f:e8:09:e2:c1:80:30:f8:55:f6:bc:6d:ba: 93:bf:5f:1c:d4:61:0e:6e:8c:38:50:a4:a5:4b:14: 77:fa:b6:cc:db:73:e5:a1:f6:d2:4b:0c:23:de:ff: 50:58:e5:e6:77:a6:0a:97:f8:5e:75:74:b4:b2:44: f7:89:63:ba:3a:62:1b:8d:15:5b:67:95:ab:a4:02: 68:49:ce:c8:1f:18:67:ee:d2:73:da:86:e9:12:bc: fb:a1:4c:a9:47:7d:a7:6c:92:b4:12:73:a1:18:c2: 0d:fc:0f:38:b6:01:27:fb:2d:72:52:92:15:fe:6f: 3c:66:ea:29:33:a5:4d:54:38:0f:95:7e:74:d1:f3: 6b:19:11:84:94:54:51:47:71:67:13:83:59:75:c6: 60:49:11:c1:32:90:dc:a1:42:0e:29:b6:28:49:91: 99:64:9b:fc:23:e7:dd:c7:d2:29:8a:8a:28:0f:73: 55:66:62:22:05:41:01:e0:b5:5d:71:cd:27:dc:24: 67:f4:59:8c:85:93:7a:24:14:57:f7:5e:49:7f:4d: 73:14:d8:b8:64:70:09:42:7d:c4:7c:35:8d:5d:50: 28:84:11:f3:4f:7f:28:83:88:d7:fe:9d:78:01:4f: 62:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8E:29:3F:ED:17:31:DD:68:EA:96:74:72:2D:2C:19:94:81:45:74 X509v3 Authority Key Identifier: keyid:30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:03:bb:0c:77:d5:ec:37:7c:29:b5:25:e5:06:05:05:aa:93: 29:d2:c1:5f:c9:8e:2e:2e:c1:86:45:5d:30:3b:b3:11:f7:f1: 74:bf:f4:85:b4:9d:b6:ed:ef:3d:24:12:87:12:92:af:6f:d0: a8:db:aa:7a:5b:24:47:f3:b6:64:1c:15:87:e6:01:16:9d:8b: 9d:6a:8a:6b:8f:d1:ed:29:d7:3d:5b:a2:ba:63:a0:8f:6c:c6: 5c:4b:05:c3:9b:9d:8a:7a:d9:28:c8:b5:f9:2d:3a:aa:ad:18: 78:9a:e0:ec:4d:ca:a4:bc:dc:a1:06:e6:a7:b0:88:18:18:2b: 21:cb:ed:c7:bf:f2:e4:7a:46:5b:32:0d:20:26:41:97:d0:b0: 6f:85:0a:20:4c:26:d1:96:19:ec:41:90:e2:45:91:fc:fd:1f: 86:28:b3:d7:62:33:8e:86:ee:25:2c:41:02:6d:d1:3e:87:a3: 74:ff:13:b0:12:a3:65:2b:ed:23:6a:7c:24:24:82:52:db:d1: 08:59:f7:23:a2:a4:e0:1f:49:05:39:6d:b9:06:11:27:75:ec: 12:af:e4:97:d0:aa:ca:ee:0a:9a:54:5c:37:9f:13:4a:be:81: 6c:99:4c:81:4c:25:26:a8:37:55:0c:68:c7:08:1d:be:10:ed: 9e:77:38:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH83m8Gjl0xwcvQ8YBuplPmjIS7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5OUQx MTkxRkVEMDAeFw0yNTA0MjgxODI2NDNaFw0yNTA1MDEyMTMwNDNaMDMxMTAvBgNV BAMTKEEzOEUyOTNGRUQxNzMxREQ2OEVBOTY3NDcyMkQyQzE5OTQ4MTQ1NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzEd+mtof9DK30hRScfu6EH+gJ 4sGAMPhV9rxtupO/XxzUYQ5ujDhQpKVLFHf6tszbc+Wh9tJLDCPe/1BY5eZ3pgqX +F51dLSyRPeJY7o6YhuNFVtnlaukAmhJzsgfGGfu0nPahukSvPuhTKlHfadskrQS c6EYwg38Dzi2ASf7LXJSkhX+bzxm6ikzpU1UOA+VfnTR82sZEYSUVFFHcWcTg1l1 xmBJEcEykNyhQg4ptihJkZlkm/wj593H0imKiigPc1VmYiIFQQHgtV1xzSfcJGf0 WYyFk3okFFf3Xkl/TXMU2LhkcAlCfcR8NY1dUCiEEfNPfyiDiNf+nXgBT2LhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo44pP+0XMd1o6pZ0ci0sGZSBRXQwHwYDVR0j BBgwFoAUMM6Fcuqd7agFFRu9Fl5pnRGR/tAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDM4MDJlMi0wM2FmLTRkZDAtOGRjZS01NGMyOGE3MjU2M2QvMC8zMENFODU3MkVB OURFREE4MDUxNTFCQkQxNjVFNjk5RDExOTFGRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5OUQxMTkx RkVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAzODAyZTItMDNhZi00ZGQwLThk Y2UtNTRjMjhhNzI1NjNkLzAvMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5 OUQxMTkxRkVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcDuwx31ew3fCm1JeUGBQWqkynSwV/Jji4u wYZFXTA7sxH38XS/9IW0nbbt7z0kEocSkq9v0KjbqnpbJEfztmQcFYfmARadi51q imuP0e0p1z1borpjoI9sxlxLBcObnYp62SjItfktOqqtGHia4OxNyqS83KEG5qew iBgYKyHL7ce/8uR6RlsyDSAmQZfQsG+FCiBMJtGWGexBkOJFkfz9H4Yos9diM46G 7iUsQQJt0T6Ho3T/E7ASo2Ur7SNqfCQkglLb0QhZ9yOipOAfSQU5bbkGESd17BKv 5JfQqsruCppUXDefE0q+gWyZTIFMJSaoN1UMaMcIHb4Q7Z53OOQ= -----END CERTIFICATE-----Generated at Tue Apr 29 08:32:18 2025 by rpki-client