$ rpki-client -vvf repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft File: 8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft (raw, json) Hash identifier: mAKzsbvpIyUmGIL5bU101tovSmmtd+51yoYeSMW2hG0= Subject key identifier: 49:14:CB:49:A7:E2:0A:6C:71:5B:10:19:E1:DC:94:80:AD:3D:3F:DA Authority key identifier: 80:30:ED:8A:48:ED:98:5A:5D:D8:8E:9B:C1:C0:D0:15:F4:36:FF:DF Certificate issuer: /CN=8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF Certificate serial: 7926589E0118686DC8E6C6D98C672C4243C6754F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft Manifest number: 01D7 Signing time: Sat 19 Jul 2025 19:01:42 +0000 Manifest this update: Sat 19 Jul 2025 18:56:42 +0000 Manifest next update: Tue 22 Jul 2025 21:09:42 +0000 Files and hashes: 1: 8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl (hash: sr7XcLvkkHxLHSBk2hnu9PbmdvqnQkDuO4cDMYj41tM=) 2: 3130332e3138392e3235342e302f32342d3234203d3e20313439393135.roa (hash: Fo/wu0BFSpF55NefZU/m5we3g29g18juirYZ6ANAiIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 21:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:26:58:9e:01:18:68:6d:c8:e6:c6:d9:8c:67:2c:42:43:c6:75:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF Validity Not Before: Jul 19 18:56:42 2025 GMT Not After : Jul 22 21:09:42 2025 GMT Subject: CN=4914CB49A7E20A6C715B1019E1DC9480AD3D3FDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b6:aa:80:1d:12:46:82:3d:89:37:4d:0a:ae: af:21:d0:f3:07:0a:19:94:19:59:9a:86:07:71:fb: 00:d6:9c:92:34:e1:dd:98:b4:7b:2e:0a:fd:18:d9: 37:7b:36:5f:4c:8b:f6:fd:b0:a3:08:01:f6:38:c2: 2c:cc:03:45:b8:7d:04:86:ad:f1:b9:c4:5e:4d:26: 89:23:22:78:91:d6:24:d3:0e:ba:0a:45:c7:c2:6b: 5c:26:f0:c4:aa:8c:cf:04:c4:08:e0:e1:bc:41:66: e4:6e:56:f9:e7:4c:b0:c2:0f:04:fd:47:47:6b:a3: 4f:f8:2a:09:25:c1:ce:59:ff:e4:51:20:c4:b7:24: 96:57:15:cc:0b:ba:4f:20:04:52:86:a9:a0:dc:e4: 37:7d:38:28:3c:13:c8:cc:f6:95:1b:b4:04:ff:8a: 50:e6:92:5d:55:9d:a5:ae:e0:6e:01:06:0f:60:2d: 3c:f6:06:5f:4d:77:d4:86:3f:91:34:7d:88:b5:b8: e4:da:12:38:66:d0:4e:99:fb:ec:b4:65:8a:17:c3: f9:11:14:4e:ed:0d:32:9b:f5:69:48:13:85:c5:2f: 3c:85:7c:59:61:d8:a8:ed:71:b5:7c:ca:68:ff:69: 9e:35:bc:d7:57:85:80:54:a6:ef:cf:07:8f:b2:ef: dd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:14:CB:49:A7:E2:0A:6C:71:5B:10:19:E1:DC:94:80:AD:3D:3F:DA X509v3 Authority Key Identifier: keyid:80:30:ED:8A:48:ED:98:5A:5D:D8:8E:9B:C1:C0:D0:15:F4:36:FF:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:ea:b3:0a:a1:02:e4:b3:89:ae:a7:0f:34:14:06:8a:6c:db: 85:4a:45:7e:9e:2d:ca:a7:02:72:c7:b6:6d:6e:47:6c:73:06: ec:42:2c:77:30:9e:e9:c2:eb:de:69:c9:2f:fb:77:be:24:f9: 99:b0:ed:e9:8e:34:3f:2a:c9:52:b0:7c:43:29:4d:4c:ab:3a: a1:85:69:9d:a0:26:03:21:3c:ee:93:f6:d3:5c:21:5b:17:27: 05:78:f1:fe:0c:ea:5a:a7:39:7c:85:5a:bb:6d:36:2c:d2:ed: 3e:47:2b:d5:23:0c:d8:37:fc:bf:a0:46:72:35:02:97:f3:83: 76:a3:f7:13:13:77:78:89:e0:0f:39:8e:ab:b9:6b:9c:e9:74: 46:5a:d8:20:b1:de:18:c3:06:9b:92:7c:2b:9e:a6:26:3d:89: f8:b5:ef:af:26:82:d1:fd:ab:a3:92:a6:e4:a3:b2:eb:06:93: d9:be:b1:80:bd:7f:80:a4:76:3b:d7:cf:df:9c:7c:78:7b:ff: 25:35:93:7b:75:84:a8:39:5e:3e:23:be:4d:76:21:b8:52:e9: 82:bd:a5:b4:86:7f:ed:ef:89:85:83:57:f3:20:66:bc:4a:72: 31:d3:49:95:be:47:be:5f:38:b2:13:6d:28:11:47:ce:ba:58: 4f:d7:84:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeSZYngEYaG3I5sbZjGcsQkPGdU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQwMTVG NDM2RkZERjAeFw0yNTA3MTkxODU2NDJaFw0yNTA3MjIyMTA5NDJaMDMxMTAvBgNV BAMTKDQ5MTRDQjQ5QTdFMjBBNkM3MTVCMTAxOUUxREM5NDgwQUQzRDNGREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCktqqAHRJGgj2JN00Krq8h0PMH ChmUGVmahgdx+wDWnJI04d2YtHsuCv0Y2Td7Nl9Mi/b9sKMIAfY4wizMA0W4fQSG rfG5xF5NJokjIniR1iTTDroKRcfCa1wm8MSqjM8ExAjg4bxBZuRuVvnnTLDCDwT9 R0dro0/4Kgklwc5Z/+RRIMS3JJZXFcwLuk8gBFKGqaDc5Dd9OCg8E8jM9pUbtAT/ ilDmkl1VnaWu4G4BBg9gLTz2Bl9Nd9SGP5E0fYi1uOTaEjhm0E6Z++y0ZYoXw/kR FE7tDTKb9WlIE4XFLzyFfFlh2KjtcbV8ymj/aZ41vNdXhYBUpu/PB4+y791fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSRTLSafiCmxxWxAZ4dyUgK09P9owHwYDVR0j BBgwFoAUgDDtikjtmFpd2I6bwcDQFfQ2/98wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzAwNTZiNC1mMDI3LTQ0ZmEtOTc0ZC00YTFlZDE5MWFlNTYvMC84MDMwRUQ4QTQ4 RUQ5ODVBNUREODhFOUJDMUMwRDAxNUY0MzZGRkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQwMTVGNDM2 RkZERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMwMDU2YjQtZjAyNy00NGZhLTk3 NGQtNGExZWQxOTFhZTU2LzAvODAzMEVEOEE0OEVEOTg1QTVERDg4RTlCQzFDMEQw MTVGNDM2RkZERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHqswqhAuSzia6nDzQUBops24VKRX6eLcqn AnLHtm1uR2xzBuxCLHcwnunC695pyS/7d74k+Zmw7emOND8qyVKwfEMpTUyrOqGF aZ2gJgMhPO6T9tNcIVsXJwV48f4M6lqnOXyFWrttNizS7T5HK9UjDNg3/L+gRnI1 Apfzg3aj9xMTd3iJ4A85jqu5a5zpdEZa2CCx3hjDBpuSfCuepiY9ifi1768mgtH9 q6OSpuSjsusGk9m+sYC9f4CkdjvXz9+cfHh7/yU1k3t1hKg5Xj4jvk12IbhS6YK9 pbSGf+3viYWDV/MgZrxKcjHTSZW+R75fOLITbSgRR866WE/XhIQ= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:33 2025 by rpki-client