$ rpki-client -vvf repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft File: 30D21A97E1EED902F151C3022374D979F0A4A7EF.mft (raw, json) Hash identifier: vU1hrb35ciFlHW0tSyPbcPR/GbFnMNLBlczP/tH78jA= Subject key identifier: 49:00:A4:82:B6:36:29:5B:31:8B:96:16:72:DE:1B:D0:C3:7E:C0:6D Authority key identifier: 30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF Certificate issuer: /CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Certificate serial: 6D740AEF8E6302DDF889FBC17AB97A023A394D15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft Manifest number: 0112 Signing time: Sat 09 Aug 2025 02:11:44 +0000 Manifest this update: Sat 09 Aug 2025 02:06:44 +0000 Manifest next update: Tue 12 Aug 2025 11:56:44 +0000 Files and hashes: 1: 30D21A97E1EED902F151C3022374D979F0A4A7EF.crl (hash: CpS0gLEPGY89gIJ2XWDoEoXAAKNpOkNNYkfc3Lq6lF0=) 2: 34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa (hash: ROzSHjIj4d0A5I5xwPcr8qcP04vsXN3kHThsDDQGeag=) 3: 34352e3234392e3232352e302f32342d3234203d3e20313532303237.roa (hash: lGxv0hhUzCj7M28hqKeyqRqBKDDJKTxW9siQxZRW/8Q=) 4: 34352e3234392e3232342e302f32342d3234203d3e20313532303237.roa (hash: nmoiRM53K6xpzn1bErPhguSmoFMNRryI2xbTQlBLJ8Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 11:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:74:0a:ef:8e:63:02:dd:f8:89:fb:c1:7a:b9:7a:02:3a:39:4d:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Validity Not Before: Aug 9 02:06:44 2025 GMT Not After : Aug 12 11:56:44 2025 GMT Subject: CN=4900A482B636295B318B961672DE1BD0C37EC06D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d0:00:26:2b:09:df:62:f7:25:82:ef:5d:94: d3:24:04:b5:ff:92:56:40:3a:18:6e:1e:dc:c4:23: 13:f5:b8:18:8f:af:e3:8d:bc:71:3d:19:6a:a0:08: dc:15:bd:50:af:6e:07:6a:18:04:d8:d7:a3:ce:25: f0:87:0f:0a:8a:e8:eb:9a:f6:e8:56:9a:c3:fb:4c: 2c:e8:f1:19:d0:0d:06:30:23:5c:9a:3f:bd:2a:c4: 14:56:46:e4:6b:f9:05:89:5d:7d:fb:05:91:29:87: af:45:92:6c:c8:3f:11:2a:b4:34:9f:d7:bb:20:c4: 6a:4a:16:c2:cb:51:86:4d:db:f0:08:57:bd:fa:9b: f7:73:3c:4c:6f:59:a1:39:ba:1a:1d:0e:72:b4:5f: 7f:bc:90:e9:ab:c9:ee:76:0f:d8:07:27:94:78:50: 9c:fd:99:75:95:df:86:f5:a0:7c:38:7e:b4:80:1d: 0b:7e:ad:bd:4a:9c:00:86:cf:2d:ed:35:1f:4e:7f: d3:50:4c:0d:c0:50:6c:b8:af:e6:83:46:fc:6d:49: 41:2c:89:ad:7e:fe:18:6c:6d:d3:fe:17:55:05:5d: 30:a5:13:d8:dd:45:bc:bf:2f:a5:15:5b:ed:3b:de: 36:8e:8f:ea:30:98:cc:b7:36:78:a3:9b:b5:68:81: 4b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:00:A4:82:B6:36:29:5B:31:8B:96:16:72:DE:1B:D0:C3:7E:C0:6D X509v3 Authority Key Identifier: keyid:30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:be:eb:2d:48:b2:1c:96:0e:07:d3:ad:32:19:37:8e:ca:d2: 88:3e:23:a3:48:47:40:3b:01:b4:3e:bf:4f:73:3a:ea:fa:85: d0:85:94:12:c3:64:a3:d6:b8:56:6e:c1:97:71:8f:6d:e0:a7: a5:18:9e:18:23:a1:39:54:c4:02:63:99:a5:02:ea:6d:ff:d7: 8e:fc:b8:bf:17:3d:1f:6b:d6:7a:86:99:36:35:ba:a9:27:0d: 38:fe:31:26:48:eb:4b:b0:34:29:8b:da:02:d8:2a:17:ab:a0: 1d:f8:cb:74:b2:9d:8e:c4:a7:45:18:a5:13:d6:d6:1b:99:b0: 0b:77:a3:08:88:b6:37:df:f6:6d:64:40:3f:5f:29:b9:c9:18: 54:67:cd:41:f6:c6:ae:d4:32:02:12:e7:30:10:b6:22:28:f7: f6:32:7a:11:f1:c8:b1:c6:7a:ee:97:8a:60:d6:84:0e:f6:86: f1:92:c7:03:95:d8:bd:2d:a0:2f:3e:98:4c:dd:a7:05:19:de: 97:7c:9d:28:4d:02:f5:9a:c9:84:26:a3:33:8a:0f:63:d5:7d: 70:76:1f:ab:56:69:a4:9d:bf:d0:af:0f:3a:86:bf:d3:16:17: 09:13:cc:b5:52:33:8b:ea:15:f7:25:df:58:93:05:6d:b0:33: 13:b9:5d:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbXQK745jAt34ifvBerl6Ajo5TRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlG MEE0QTdFRjAeFw0yNTA4MDkwMjA2NDRaFw0yNTA4MTIxMTU2NDRaMDMxMTAvBgNV BAMTKDQ5MDBBNDgyQjYzNjI5NUIzMThCOTYxNjcyREUxQkQwQzM3RUMwNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl0AAmKwnfYvclgu9dlNMkBLX/ klZAOhhuHtzEIxP1uBiPr+ONvHE9GWqgCNwVvVCvbgdqGATY16POJfCHDwqK6Oua 9uhWmsP7TCzo8RnQDQYwI1yaP70qxBRWRuRr+QWJXX37BZEph69FkmzIPxEqtDSf 17sgxGpKFsLLUYZN2/AIV736m/dzPExvWaE5uhodDnK0X3+8kOmrye52D9gHJ5R4 UJz9mXWV34b1oHw4frSAHQt+rb1KnACGzy3tNR9Of9NQTA3AUGy4r+aDRvxtSUEs ia1+/hhsbdP+F1UFXTClE9jdRby/L6UVW+073jaOj+owmMy3Nnijm7VogUu7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSQCkgrY2KVsxi5YWct4b0MN+wG0wHwYDVR0j BBgwFoAUMNIal+Hu2QLxUcMCI3TZefCkp+8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWI4OTlhYy00ODcwLTRlMjgtOGU0ZS0yYzIzNzUyYTRhNjAvMC8zMEQyMUE5N0Ux RUVEOTAyRjE1MUMzMDIyMzc0RDk3OUYwQTRBN0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlGMEE0 QTdFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDliODk5YWMtNDg3MC00ZTI4LThl NGUtMmMyMzc1MmE0YTYwLzAvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5 NzlGMEE0QTdFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6+6y1IshyWDgfTrTIZN47K0og+I6NIR0A7 AbQ+v09zOur6hdCFlBLDZKPWuFZuwZdxj23gp6UYnhgjoTlUxAJjmaUC6m3/1478 uL8XPR9r1nqGmTY1uqknDTj+MSZI60uwNCmL2gLYKheroB34y3SynY7Ep0UYpRPW 1huZsAt3owiItjff9m1kQD9fKbnJGFRnzUH2xq7UMgIS5zAQtiIo9/YyehHxyLHG eu6XimDWhA72hvGSxwOV2L0toC8+mEzdpwUZ3pd8nShNAvWayYQmozOKD2PVfXB2 H6tWaaSdv9CvDzqGv9MWFwkTzLVSM4vqFfcl31iTBW2wMxO5XXc= -----END CERTIFICATE-----Generated at Sat Aug 9 22:37:10 2025 by rpki-client