$ rpki-client -vvf repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft File: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft (raw, json) Hash identifier: kbjXxWCFHNo5Ep+TqfuFDEjKr/DZAsy90maUYD2l8kc= Subject key identifier: 54:6B:E3:22:40:F7:4E:BF:CF:05:BC:D3:89:5C:DF:F6:52:40:61:AE Authority key identifier: 30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 Certificate issuer: /CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Certificate serial: 3D938A8B14DA8D329A26062213EF2FC5CA70811D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft Manifest number: C0 Signing time: Mon 03 Nov 2025 16:50:45 +0000 Manifest this update: Mon 03 Nov 2025 16:45:45 +0000 Manifest next update: Thu 06 Nov 2025 21:46:45 +0000 Files and hashes: 1: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl (hash: YNj/59k6g1FDiRSkKr7ax5whpf2IkDVyS10UH3iBK/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:93:8a:8b:14:da:8d:32:9a:26:06:22:13:ef:2f:c5:ca:70:81:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Validity Not Before: Nov 3 16:45:45 2025 GMT Not After : Nov 6 21:46:45 2025 GMT Subject: CN=546BE32240F74EBFCF05BCD3895CDFF6524061AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e3:62:46:5e:df:f7:c3:6d:1e:63:f7:70:b7: 36:25:eb:79:8a:02:0a:31:d9:af:16:8a:e0:40:96: 1f:86:85:95:5c:77:82:c3:6e:c6:c1:ae:37:9c:3d: 63:85:9f:74:42:38:eb:0b:48:09:cd:31:d2:fb:cf: fd:fb:68:aa:39:23:96:45:b1:86:c7:34:b7:60:9b: c2:f7:a6:f0:f3:15:56:e8:fa:69:44:59:e6:87:21: ca:09:17:cb:62:2d:31:49:c7:17:a7:88:55:f4:84: 5e:ef:9f:b7:bd:7c:5d:be:c7:6c:a4:0d:6c:38:87: c5:e6:47:da:b1:ec:31:22:5b:3c:e0:34:4d:82:b9: a1:98:ab:44:93:c1:60:a2:13:e3:b8:52:c7:c3:65: 23:9d:31:eb:4c:10:44:0d:55:81:6e:2e:a3:78:c0: d5:78:61:c4:c4:46:1a:c7:a2:9a:66:a6:2b:f5:ca: cd:58:6b:8d:cb:54:38:4f:7d:a7:bb:f0:dd:b3:16: a4:c0:89:fc:66:12:74:f8:46:cb:76:8d:9b:06:63: aa:db:d5:be:cb:28:a8:0c:93:44:cc:57:1b:66:d7: bb:1d:4d:06:17:3c:fb:d8:e6:19:b4:53:37:84:8d: a2:f7:84:09:38:ad:67:1d:62:61:00:7c:72:d1:1c: f4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6B:E3:22:40:F7:4E:BF:CF:05:BC:D3:89:5C:DF:F6:52:40:61:AE X509v3 Authority Key Identifier: keyid:30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:96:b7:c6:78:01:ee:3c:bb:e7:c4:9c:61:6c:7a:0c:c7:a3: b3:6b:df:74:42:d3:16:89:60:fd:ef:e4:80:33:5a:4a:05:0f: 86:86:89:95:bd:3d:ec:fe:d3:1e:e0:05:27:70:31:75:f8:df: e7:e7:73:21:48:0b:da:30:fd:90:02:66:4b:a7:bd:01:20:cf: af:eb:f2:46:82:b8:58:bf:5b:6d:e0:5b:51:04:24:91:b0:32: 08:39:c8:fa:2d:8d:3d:7c:c5:54:50:01:cb:d6:d9:07:c7:ff: fa:7c:a2:fd:af:16:c3:dd:42:6e:52:9b:55:f2:e5:af:35:06: 56:11:7c:41:d0:e5:10:af:e4:97:c5:42:c2:8d:da:3f:93:be: 0c:f9:ca:43:d9:30:4c:a9:65:d2:f0:b8:17:81:46:60:7a:d2: f8:9c:8e:8d:96:fa:5b:15:06:f4:4f:4c:16:0d:1d:69:0a:27: d0:34:8a:d7:3e:af:c5:c7:6c:23:3f:23:51:b1:e1:83:8a:41: b0:78:76:9c:89:b7:07:79:aa:46:c9:7b:a7:93:5f:f9:b7:81: 45:34:17:b3:d3:c2:6e:61:7a:af:53:6a:7b:96:e8:73:ba:1f: d4:e5:8d:cf:22:84:44:6a:d5:63:23:15:e4:22:3b:c8:da:65: c0:2a:56:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPZOKixTajTKaJgYiE+8vxcpwgR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5 QjlENjc3MDAeFw0yNTExMDMxNjQ1NDVaFw0yNTExMDYyMTQ2NDVaMDMxMTAvBgNV BAMTKDU0NkJFMzIyNDBGNzRFQkZDRjA1QkNEMzg5NUNERkY2NTI0MDYxQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN42JGXt/3w20eY/dwtzYl63mK Agox2a8WiuBAlh+GhZVcd4LDbsbBrjecPWOFn3RCOOsLSAnNMdL7z/37aKo5I5ZF sYbHNLdgm8L3pvDzFVbo+mlEWeaHIcoJF8tiLTFJxxeniFX0hF7vn7e9fF2+x2yk DWw4h8XmR9qx7DEiWzzgNE2CuaGYq0STwWCiE+O4UsfDZSOdMetMEEQNVYFuLqN4 wNV4YcTERhrHoppmpiv1ys1Ya43LVDhPfae78N2zFqTAifxmEnT4Rst2jZsGY6rb 1b7LKKgMk0TMVxtm17sdTQYXPPvY5hm0UzeEjaL3hAk4rWcdYmEAfHLRHPRfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVGvjIkD3Tr/PBbzTiVzf9lJAYa4wHwYDVR0j BBgwFoAUMJ/+MGledrpJUuKWW0/iT5udZ3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2NiNTBiMC00M2NjLTQ4ZDAtOTFmNC0wNWJiZGU3YWMxZDAvMC8zMDlGRkUzMDY5 NUU3NkJBNDk1MkUyOTY1QjRGRTI0RjlCOUQ2NzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5QjlE Njc3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNjYjUwYjAtNDNjYy00OGQwLTkx ZjQtMDViYmRlN2FjMWQwLzAvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUy NEY5QjlENjc3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmWt8Z4Ae48u+fEnGFsegzHo7Nr33RC0xaJ YP3v5IAzWkoFD4aGiZW9Pez+0x7gBSdwMXX43+fncyFIC9ow/ZACZkunvQEgz6/r 8kaCuFi/W23gW1EEJJGwMgg5yPotjT18xVRQAcvW2QfH//p8ov2vFsPdQm5Sm1Xy 5a81BlYRfEHQ5RCv5JfFQsKN2j+Tvgz5ykPZMEypZdLwuBeBRmB60vicjo2W+lsV BvRPTBYNHWkKJ9A0itc+r8XHbCM/I1Gx4YOKQbB4dpyJtwd5qkbJe6eTX/m3gUU0 F7PTwm5heq9TanuW6HO6H9Tljc8ihERq1WMjFeQiO8jaZcAqVvA= -----END CERTIFICATE-----Generated at Wed Nov 5 02:46:06 2025 by rpki-client