$ rpki-client -vvf repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft File: 30D21A97E1EED902F151C3022374D979F0A4A7EF.mft (raw, json) Hash identifier: FtWgvrmKjmWu/fHFGI7p8BJA1j0BfBr/uLv8s+PBMDU= Subject key identifier: C5:EA:FC:7F:E8:E5:C1:6C:74:B2:58:E4:0B:13:1E:22:2D:72:99:38 Authority key identifier: 30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF Certificate issuer: /CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Certificate serial: 508836A619D64A3C7392974BD6F315B6EC9A0182 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft Manifest number: FB Signing time: Tue 17 Jun 2025 19:02:24 +0000 Manifest this update: Tue 17 Jun 2025 18:57:24 +0000 Manifest next update: Fri 20 Jun 2025 20:12:24 +0000 Files and hashes: 1: 30D21A97E1EED902F151C3022374D979F0A4A7EF.crl (hash: UcAxF/hPhadj5PG7F6WpqcYkpWgydz0s3wAOV2AS9UQ=) 2: 34352e3234392e3232352e302f32342d3234203d3e20313532303237.roa (hash: lGxv0hhUzCj7M28hqKeyqRqBKDDJKTxW9siQxZRW/8Q=) 3: 34352e3234392e3232342e302f32342d3234203d3e20313532303237.roa (hash: nmoiRM53K6xpzn1bErPhguSmoFMNRryI2xbTQlBLJ8Q=) 4: 34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa (hash: ROzSHjIj4d0A5I5xwPcr8qcP04vsXN3kHThsDDQGeag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 20:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:88:36:a6:19:d6:4a:3c:73:92:97:4b:d6:f3:15:b6:ec:9a:01:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Validity Not Before: Jun 17 18:57:24 2025 GMT Not After : Jun 20 20:12:24 2025 GMT Subject: CN=C5EAFC7FE8E5C16C74B258E40B131E222D729938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d8:1c:8c:1e:7e:1e:af:03:28:93:d4:ee:d9: 43:8d:b8:05:d3:19:ba:a4:1e:43:4a:cf:81:31:c6: 6a:04:4e:a3:fc:97:0e:36:b1:e8:aa:fa:23:c8:30: bb:38:35:a7:7c:a6:b1:7a:dc:84:54:0d:e0:b6:20: e6:24:f6:61:7d:72:de:2c:fa:73:86:08:57:c5:78: 27:ff:77:ab:a0:97:69:c0:5a:23:5d:10:c0:75:82: 30:b3:f4:5a:57:48:52:5b:ce:46:5f:23:5b:81:e7: a8:07:43:01:1d:4b:1a:3a:4a:5a:04:a8:50:03:08: 05:35:27:06:84:e7:51:77:e9:bd:37:dc:89:92:80: f0:db:85:1f:6a:12:99:9d:28:49:82:11:7e:52:7e: 34:41:97:33:97:86:6b:49:5c:f6:c1:5f:e1:2e:36: cc:16:0a:50:02:36:3a:27:3d:c1:f3:ee:d1:d0:03: 28:ff:d1:01:14:ed:62:c8:bd:93:7e:a3:51:3a:5c: de:a5:53:a3:fb:8a:11:24:78:fc:57:db:89:f6:66: fd:ca:f6:a0:54:f1:14:97:a8:06:fb:9b:38:84:f6: 71:2b:00:6f:15:a6:73:70:9f:74:e4:5b:88:0b:e0: 76:2b:88:24:1d:52:af:f2:58:79:73:3e:4d:1f:b7: 73:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EA:FC:7F:E8:E5:C1:6C:74:B2:58:E4:0B:13:1E:22:2D:72:99:38 X509v3 Authority Key Identifier: keyid:30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:88:72:ef:2a:ab:e7:9c:fd:78:a7:c3:60:6d:9b:43:67:d8: 71:8c:a4:84:41:3c:ad:b4:39:f9:2a:3c:16:99:a3:1a:c7:25: 57:cb:21:f2:c6:96:4e:bc:23:f3:50:3f:40:bf:37:16:ff:35: 7b:22:00:ba:79:c8:e6:7f:99:06:0d:6f:da:54:bc:bd:e9:2a: a4:c5:4c:52:3f:4d:b8:7c:2b:5a:4b:a5:7d:f8:7a:08:a5:a7: 09:c2:cf:0b:50:58:8b:c5:3a:18:d1:89:ca:ec:2f:85:d0:87: 20:0c:24:67:ed:77:5c:f9:bd:63:fb:64:08:4d:41:ea:ad:9a: a9:45:07:fa:40:d6:96:14:33:d5:f3:c5:4a:ee:c6:95:3d:58: 09:9b:2e:61:d2:bb:da:2d:7d:04:7b:93:a4:97:f4:db:20:7f: 44:61:c6:ac:22:f4:30:98:76:ef:cd:e5:1c:80:51:f7:22:5a: 71:49:1c:dc:81:a2:f5:eb:ce:ec:c7:83:b3:b9:75:68:9f:37: 57:18:7d:45:41:0b:7d:5b:2a:10:ee:cb:7b:4e:28:e9:b7:04: a5:c3:71:92:6b:15:8d:94:b7:ad:8b:e2:0d:52:51:ee:7e:0e: 80:dd:bc:ef:4a:89:0c:7c:ea:39:e1:06:da:9f:8f:83:66:c4: 77:da:e8:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUIg2phnWSjxzkpdL1vMVtuyaAYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlG MEE0QTdFRjAeFw0yNTA2MTcxODU3MjRaFw0yNTA2MjAyMDEyMjRaMDMxMTAvBgNV BAMTKEM1RUFGQzdGRThFNUMxNkM3NEIyNThFNDBCMTMxRTIyMkQ3Mjk5MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe2ByMHn4erwMok9Tu2UONuAXT GbqkHkNKz4ExxmoETqP8lw42seiq+iPIMLs4Nad8prF63IRUDeC2IOYk9mF9ct4s +nOGCFfFeCf/d6ugl2nAWiNdEMB1gjCz9FpXSFJbzkZfI1uB56gHQwEdSxo6SloE qFADCAU1JwaE51F36b033ImSgPDbhR9qEpmdKEmCEX5SfjRBlzOXhmtJXPbBX+Eu NswWClACNjonPcHz7tHQAyj/0QEU7WLIvZN+o1E6XN6lU6P7ihEkePxX24n2Zv3K 9qBU8RSXqAb7mziE9nErAG8VpnNwn3TkW4gL4HYriCQdUq/yWHlzPk0ft3NTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxer8f+jlwWx0sljkCxMeIi1ymTgwHwYDVR0j BBgwFoAUMNIal+Hu2QLxUcMCI3TZefCkp+8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWI4OTlhYy00ODcwLTRlMjgtOGU0ZS0yYzIzNzUyYTRhNjAvMC8zMEQyMUE5N0Ux RUVEOTAyRjE1MUMzMDIyMzc0RDk3OUYwQTRBN0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlGMEE0 QTdFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDliODk5YWMtNDg3MC00ZTI4LThl NGUtMmMyMzc1MmE0YTYwLzAvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5 NzlGMEE0QTdFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANiIcu8qq+ec/Xinw2Btm0Nn2HGMpIRBPK20 OfkqPBaZoxrHJVfLIfLGlk68I/NQP0C/Nxb/NXsiALp5yOZ/mQYNb9pUvL3pKqTF TFI/Tbh8K1pLpX34egilpwnCzwtQWIvFOhjRicrsL4XQhyAMJGftd1z5vWP7ZAhN QeqtmqlFB/pA1pYUM9XzxUruxpU9WAmbLmHSu9otfQR7k6SX9Nsgf0Rhxqwi9DCY du/N5RyAUfciWnFJHNyBovXrzuzHg7O5dWifN1cYfUVBC31bKhDuy3tOKOm3BKXD cZJrFY2Ut62L4g1SUe5+DoDdvO9KiQx86jnhBtqfj4NmxHfa6PY= -----END CERTIFICATE-----Generated at Wed Jun 18 07:20:19 2025 by rpki-client