$ rpki-client -vvf repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft File: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft (raw, json) Hash identifier: Ug5apC0x0KkOrcbxp6qA2AA/MqZGE9B12xrVrwwWscQ= Subject key identifier: 37:B1:D6:56:B9:6C:B9:0B:83:45:BA:98:DD:1E:5B:F1:76:BA:C4:1F Authority key identifier: 30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 Certificate issuer: /CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Certificate serial: 3B37E327E8510AFBD8DE711041A4B76570F51CB9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft Manifest number: 9A Signing time: Sun 10 Aug 2025 00:50:45 +0000 Manifest this update: Sun 10 Aug 2025 00:45:45 +0000 Manifest next update: Wed 13 Aug 2025 07:24:45 +0000 Files and hashes: 1: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl (hash: isxQR/m0j9SACC65l3Vd+6OuL7e8hDVpjsSD3Lh5M7A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 07:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:37:e3:27:e8:51:0a:fb:d8:de:71:10:41:a4:b7:65:70:f5:1c:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Validity Not Before: Aug 10 00:45:45 2025 GMT Not After : Aug 13 07:24:45 2025 GMT Subject: CN=37B1D656B96CB90B8345BA98DD1E5BF176BAC41F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:85:13:38:f5:b2:a8:f8:23:af:19:2f:db:41: 18:82:e1:08:98:ee:81:be:d6:5e:84:d7:7a:20:e6: 9c:16:df:cd:59:86:5e:75:84:75:9c:7d:ee:92:13: 85:b7:87:df:68:4d:7f:53:8e:e4:1a:31:1f:8e:30: bb:94:0b:d0:bb:bc:0f:7d:fc:49:b4:01:85:01:7d: 1f:10:ed:02:33:dc:33:36:a2:11:e6:ea:2c:2c:68: 98:09:39:f5:a8:fa:8c:e2:43:8a:9e:65:5c:0a:78: 9e:75:36:13:90:90:8c:2e:bf:ea:a7:3f:d4:67:8f: d9:f4:08:8e:99:56:16:b7:9c:28:08:de:84:90:a9: 44:10:2c:b7:67:ee:fb:2d:56:b6:63:14:7b:da:4c: 87:97:a5:75:6f:35:a3:57:4b:93:84:55:ab:19:4f: b3:b2:76:27:da:5a:bf:b8:50:2c:3a:71:2b:6b:67: c7:1f:5b:77:ba:03:6c:61:5c:10:95:7e:24:78:29: ff:ef:cf:eb:ec:58:8e:cc:61:b9:4b:29:0d:69:85: e8:81:d0:e1:cc:04:c9:d3:59:54:eb:6e:7a:7c:13: 0f:1f:a1:42:8e:56:cd:e6:de:74:cb:1d:de:cf:11: 55:8d:3e:0c:67:00:c5:b9:ab:93:8d:e9:6a:f4:ab: 5d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B1:D6:56:B9:6C:B9:0B:83:45:BA:98:DD:1E:5B:F1:76:BA:C4:1F X509v3 Authority Key Identifier: keyid:30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:79:d0:6d:a6:30:c4:d1:07:6a:a2:df:dd:a7:b4:3e:67:07: 7d:a0:09:7c:d1:14:57:e9:59:f7:be:df:1e:21:ec:d0:ed:87: 01:12:ad:80:04:0a:eb:a6:90:33:31:3b:88:cc:8f:48:52:e9: 9c:ae:07:58:5e:f1:a0:96:0d:90:c8:70:ba:e2:73:05:7c:ca: 6a:a3:bc:a5:d0:c0:15:56:8f:59:d1:19:60:4f:ea:44:9d:b5: 74:41:06:bc:9c:c6:2e:10:0c:e0:7b:8e:12:6e:7b:2b:2e:cf: 80:e0:ff:72:b9:4e:b1:d1:fc:5e:4f:58:46:67:53:82:77:87: bf:14:5b:52:57:c7:4a:3c:b5:99:96:0e:e9:86:0d:45:c9:1c: 6b:9e:42:96:9a:06:9d:99:85:0a:c1:2d:0f:c9:a3:64:2f:c5: 5d:29:9e:8a:68:8a:59:f6:c9:30:cb:56:b6:1f:e1:1e:d2:44: 56:77:34:bf:17:7a:fd:b5:a0:94:ff:74:77:2c:f7:34:58:06: d4:cb:c7:a7:3e:8f:1a:56:93:30:8c:72:a2:7d:0b:88:70:47: 14:dd:52:34:6d:f8:c9:36:23:94:49:d6:0e:1a:15:f7:3b:63: e8:3b:b6:87:a2:0d:8b:ff:a5:64:0a:e5:95:d6:08:2a:f9:59: 12:59:df:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzfjJ+hRCvvY3nEQQaS3ZXD1HLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5 QjlENjc3MDAeFw0yNTA4MTAwMDQ1NDVaFw0yNTA4MTMwNzI0NDVaMDMxMTAvBgNV BAMTKDM3QjFENjU2Qjk2Q0I5MEI4MzQ1QkE5OEREMUU1QkYxNzZCQUM0MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfhRM49bKo+COvGS/bQRiC4QiY 7oG+1l6E13og5pwW381Zhl51hHWcfe6SE4W3h99oTX9TjuQaMR+OMLuUC9C7vA99 /Em0AYUBfR8Q7QIz3DM2ohHm6iwsaJgJOfWo+oziQ4qeZVwKeJ51NhOQkIwuv+qn P9Rnj9n0CI6ZVha3nCgI3oSQqUQQLLdn7vstVrZjFHvaTIeXpXVvNaNXS5OEVasZ T7OydifaWr+4UCw6cStrZ8cfW3e6A2xhXBCVfiR4Kf/vz+vsWI7MYblLKQ1pheiB 0OHMBMnTWVTrbnp8Ew8foUKOVs3m3nTLHd7PEVWNPgxnAMW5q5ON6Wr0q13dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN7HWVrlsuQuDRbqY3R5b8Xa6xB8wHwYDVR0j BBgwFoAUMJ/+MGledrpJUuKWW0/iT5udZ3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2NiNTBiMC00M2NjLTQ4ZDAtOTFmNC0wNWJiZGU3YWMxZDAvMC8zMDlGRkUzMDY5 NUU3NkJBNDk1MkUyOTY1QjRGRTI0RjlCOUQ2NzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5QjlE Njc3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNjYjUwYjAtNDNjYy00OGQwLTkx ZjQtMDViYmRlN2FjMWQwLzAvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUy NEY5QjlENjc3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJ50G2mMMTRB2qi392ntD5nB32gCXzRFFfp Wfe+3x4h7NDthwESrYAECuumkDMxO4jMj0hS6ZyuB1he8aCWDZDIcLricwV8ymqj vKXQwBVWj1nRGWBP6kSdtXRBBrycxi4QDOB7jhJueysuz4Dg/3K5TrHR/F5PWEZn U4J3h78UW1JXx0o8tZmWDumGDUXJHGueQpaaBp2ZhQrBLQ/Jo2QvxV0pnopoiln2 yTDLVrYf4R7SRFZ3NL8Xev21oJT/dHcs9zRYBtTLx6c+jxpWkzCMcqJ9C4hwRxTd UjRt+Mk2I5RJ1g4aFfc7Y+g7toeiDYv/pWQK5ZXWCCr5WRJZ3xQ= -----END CERTIFICATE-----Generated at Sun Aug 10 15:56:39 2025 by rpki-client