$ rpki-client -vvf repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft File: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft (raw, json) Hash identifier: jCgnl4rddhQ5yHyzeWQ5vWK2fUQpFEgIgBdiHc9GnKo= Subject key identifier: 44:01:B8:5F:63:08:A0:81:59:0B:72:52:27:50:AD:B8:C0:A2:FB:33 Authority key identifier: C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E Certificate issuer: /CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Certificate serial: 221EE8FECE75F644055D938EF2917F5B83D826CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft Manifest number: 03DD Signing time: Sat 19 Jul 2025 12:30:52 +0000 Manifest this update: Sat 19 Jul 2025 12:25:52 +0000 Manifest next update: Tue 22 Jul 2025 14:12:52 +0000 Files and hashes: 1: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl (hash: QRzCBb7Tud0bVJ9I6Ph3OVK8Dxrcca/3ynwW3eEkKMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 14:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:1e:e8:fe:ce:75:f6:44:05:5d:93:8e:f2:91:7f:5b:83:d8:26:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Validity Not Before: Jul 19 12:25:52 2025 GMT Not After : Jul 22 14:12:52 2025 GMT Subject: CN=4401B85F6308A081590B72522750ADB8C0A2FB33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7f:da:e5:c1:20:cc:50:a5:35:5f:af:f9:dd: 8a:25:88:69:c4:86:93:cf:35:e9:2d:df:ef:b9:be: bd:d5:c3:4e:50:e1:8e:dc:db:4c:f7:a0:f2:0b:1b: bd:09:ba:b9:b8:3e:33:c2:26:7f:96:19:b1:c8:bc: e6:97:80:3a:12:ed:83:94:d8:cb:ca:02:67:ab:70: b7:25:3b:04:bc:9a:2a:81:a5:7e:a6:53:67:13:d9: e3:f3:34:fc:45:20:b8:cb:e2:65:a8:7f:09:19:97: 19:5a:a3:dd:47:1b:a1:df:d1:b0:68:1d:05:b0:34: 36:34:58:bd:61:70:d8:3a:4d:0a:a7:84:2c:7f:de: 0c:29:20:09:78:3a:a1:5f:b0:a3:00:37:dd:cf:19: 4b:d7:3f:bf:ff:8a:4d:37:04:79:00:df:21:62:be: 3f:64:91:f5:b0:3e:5a:a9:aa:72:b7:55:4d:0b:cb: bb:e5:a1:f5:b0:2d:a1:bf:84:e5:05:a0:9a:22:a2: 27:e7:9c:6d:e6:26:ec:79:fc:22:3a:4d:0d:58:07: d9:0a:3b:a2:fb:6b:59:4b:fe:98:6a:bc:fc:1c:8d: 68:5a:86:5c:71:05:55:96:29:8d:1b:fe:86:70:b1: 65:fe:92:0b:a1:4b:3c:6b:9a:0f:da:ea:a3:8f:f4: 03:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:01:B8:5F:63:08:A0:81:59:0B:72:52:27:50:AD:B8:C0:A2:FB:33 X509v3 Authority Key Identifier: keyid:C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:67:1f:ce:06:d3:6a:d4:0a:e1:af:e3:b7:19:a3:a9:2b:58: 48:63:89:20:15:0e:cc:f0:a0:51:35:74:56:81:83:c2:c9:00: a2:f3:8e:3a:4a:c1:ef:4b:c8:b5:89:da:35:87:a1:ac:ed:fc: 4b:b9:67:dc:4d:aa:12:1e:2d:b5:c1:f3:bf:8b:bd:22:ea:a7: e1:f2:1c:97:13:52:e9:ff:f5:4a:2f:2f:d4:fc:c0:65:be:a3: f0:8b:c3:91:aa:33:73:8c:1f:0a:36:c9:b1:00:7c:92:c3:3d: b1:45:a9:c5:db:97:08:69:e6:d4:e5:8b:d5:4f:8e:53:b1:f9: 78:a3:f6:26:a0:57:ab:93:5e:b9:21:27:7b:4f:70:c3:8c:38: 7d:dd:e6:09:1a:24:9e:e3:f1:a8:33:54:90:96:c6:c1:a4:02: c9:30:14:50:76:be:4a:58:4d:fd:b6:b1:1e:b4:8a:bb:6e:14: fb:73:71:77:13:d3:64:7c:9c:57:22:63:33:bb:9a:1c:23:8c: ee:61:14:f8:3d:e0:8c:bf:83:9a:ac:b9:c9:77:c6:f9:fb:95: bd:95:05:d2:11:3f:5f:b5:26:09:b1:5b:5a:74:7d:f3:77:f7: 4c:13:3b:a7:64:74:82:f3:1b:54:cb:47:b6:fc:ab:ac:ad:fd: fe:c4:70:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIh7o/s519kQFXZOO8pF/W4PYJs0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcy RkI0RkU2RTAeFw0yNTA3MTkxMjI1NTJaFw0yNTA3MjIxNDEyNTJaMDMxMTAvBgNV BAMTKDQ0MDFCODVGNjMwOEEwODE1OTBCNzI1MjI3NTBBREI4QzBBMkZCMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDff9rlwSDMUKU1X6/53YoliGnE hpPPNekt3++5vr3Vw05Q4Y7c20z3oPILG70Jurm4PjPCJn+WGbHIvOaXgDoS7YOU 2MvKAmercLclOwS8miqBpX6mU2cT2ePzNPxFILjL4mWofwkZlxlao91HG6Hf0bBo HQWwNDY0WL1hcNg6TQqnhCx/3gwpIAl4OqFfsKMAN93PGUvXP7//ik03BHkA3yFi vj9kkfWwPlqpqnK3VU0Ly7vlofWwLaG/hOUFoJoioifnnG3mJux5/CI6TQ1YB9kK O6L7a1lL/phqvPwcjWhahlxxBVWWKY0b/oZwsWX+kguhSzxrmg/a6qOP9APJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURAG4X2MIoIFZC3JSJ1CtuMCi+zMwHwYDVR0j BBgwFoAUww3nH3yuFsotjattAcpD1y+0/m4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2I1OWNlNC02NmEyLTRmNGQtYjNkNi05Mjk5NDg0YmE1NmIvMC9DMzBERTcxRjdD QUUxNkNBMkQ4REFCNkQwMUNBNDNENzJGQjRGRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcyRkI0 RkU2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNiNTljZTQtNjZhMi00ZjRkLWIz ZDYtOTI5OTQ4NGJhNTZiLzAvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQz RDcyRkI0RkU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMJnH84G02rUCuGv47cZo6krWEhjiSAVDszw oFE1dFaBg8LJAKLzjjpKwe9LyLWJ2jWHoazt/Eu5Z9xNqhIeLbXB87+LvSLqp+Hy HJcTUun/9UovL9T8wGW+o/CLw5GqM3OMHwo2ybEAfJLDPbFFqcXblwhp5tTli9VP jlOx+Xij9iagV6uTXrkhJ3tPcMOMOH3d5gkaJJ7j8agzVJCWxsGkAskwFFB2vkpY Tf22sR60irtuFPtzcXcT02R8nFciYzO7mhwjjO5hFPg94Iy/g5qsucl3xvn7lb2V BdIRP1+1JgmxW1p0ffN390wTO6dkdILzG1TLR7b8q6yt/f7EcOg= -----END CERTIFICATE-----Generated at Sun Jul 20 21:25:20 2025 by rpki-client