$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft File: 430E302040DE11D8C84431B3397113EC969694A0.mft (raw, json) Hash identifier: YwJrZgfCbxl2vKlNx2IOY+N+lHfHDh9vlWWoBsWI6Ag= Subject key identifier: 9B:AB:CB:E0:7B:B2:C6:42:3F:95:99:13:27:7D:8D:D0:40:BD:FB:2E Authority key identifier: 43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 Certificate issuer: /CN=430E302040DE11D8C84431B3397113EC969694A0 Certificate serial: 2718B99D029BAA42B837E6E840087239AD240F37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft Manifest number: 048C Signing time: Sat 19 Jul 2025 22:31:51 +0000 Manifest this update: Sat 19 Jul 2025 22:26:51 +0000 Manifest next update: Tue 22 Jul 2025 23:09:51 +0000 Files and hashes: 1: 430E302040DE11D8C84431B3397113EC969694A0.crl (hash: 98tok+irOE2Xq1efXy6eUCQdrzev7R9jHFSqle5WAx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 23:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:18:b9:9d:02:9b:aa:42:b8:37:e6:e8:40:08:72:39:ad:24:0f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430E302040DE11D8C84431B3397113EC969694A0 Validity Not Before: Jul 19 22:26:51 2025 GMT Not After : Jul 22 23:09:51 2025 GMT Subject: CN=9BABCBE07BB2C6423F959913277D8DD040BDFB2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a1:27:b9:a0:1d:fd:34:ae:05:fb:48:44:76: 44:b0:52:81:44:53:68:ba:fe:3f:6a:76:81:ec:1d: f1:12:82:de:ec:5a:89:7b:13:d4:eb:28:94:3b:ed: a9:08:14:0e:f3:55:0f:a3:c9:b4:d2:f9:7e:8f:36: 0e:bc:75:83:33:a6:a2:57:2b:9e:07:fc:fd:e8:e0: 2e:19:f3:c1:42:03:48:6e:41:ba:92:20:7f:1b:ff: 98:2d:12:21:5a:25:85:05:40:a2:06:05:f1:21:51: 86:02:a1:c1:7f:8c:89:f2:52:44:80:6f:67:27:ea: 10:53:df:53:15:9c:4e:bb:8b:8c:2a:18:d1:33:f9: 88:e0:c4:c7:b4:77:0c:9c:5e:06:17:ce:5b:90:21: db:60:2e:3d:3c:bc:51:06:f9:a8:f2:5d:26:30:d6: c1:9c:b2:3f:86:0d:e7:ea:ef:6c:52:1e:3f:66:50: 70:69:9c:59:4e:c5:98:cc:5b:4d:d5:e2:ae:03:42: 47:33:58:54:6f:ea:ae:38:17:fa:99:08:18:da:83: 4f:b1:f3:93:18:02:bf:fa:4e:fa:9d:88:b3:b1:69: 74:f2:cf:7a:c4:f9:58:8a:0e:85:90:2b:52:be:a0: 5a:1c:5f:9a:74:0b:7c:77:09:e9:90:e6:73:8a:16: dc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AB:CB:E0:7B:B2:C6:42:3F:95:99:13:27:7D:8D:D0:40:BD:FB:2E X509v3 Authority Key Identifier: keyid:43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:21:97:a0:63:02:72:93:a6:56:62:6b:dc:85:e3:95:f1:f2: ed:35:31:07:5a:8b:7c:94:94:57:35:75:ad:85:9f:f5:00:9d: bb:13:2c:5a:58:e2:62:16:65:45:2a:5f:28:b5:18:46:d3:bf: 3d:bb:e3:45:40:d0:e7:99:7a:8a:fb:83:6e:b5:54:a0:45:f5: b6:f4:61:72:a6:38:09:1b:36:e0:98:f2:a3:66:47:ef:9c:a8: b6:56:58:2f:56:14:dc:1a:e5:4e:a7:a1:56:77:ca:2a:2a:8a: 8f:a9:3e:80:d1:92:ff:80:70:ce:41:4d:36:89:44:7e:a8:a9: 9a:78:dc:65:fe:50:26:53:6d:99:37:d0:f9:e1:07:dd:c5:fe: b4:81:e2:bd:9c:80:12:60:91:1d:1f:40:62:f6:1e:ef:f6:88: 0d:95:22:5d:ae:26:d5:b6:83:cb:6b:29:8a:17:c5:13:29:76: 39:9d:70:06:fc:7a:00:2e:df:8a:32:c2:fb:e7:dc:25:a0:05: a3:62:10:c8:71:c2:7e:a0:2e:e5:09:57:a3:84:0f:a2:7f:92: a5:75:db:8d:d5:6a:41:64:df:6e:f2:b0:8c:28:e0:45:88:20: f7:75:7c:0e:94:57:8c:bf:a1:48:9f:ca:6b:65:f8:d3:1a:e5: ba:43:fe:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJxi5nQKbqkK4N+boQAhyOa0kDzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5 Njk2OTRBMDAeFw0yNTA3MTkyMjI2NTFaFw0yNTA3MjIyMzA5NTFaMDMxMTAvBgNV BAMTKDlCQUJDQkUwN0JCMkM2NDIzRjk1OTkxMzI3N0Q4REQwNDBCREZCMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLoSe5oB39NK4F+0hEdkSwUoFE U2i6/j9qdoHsHfESgt7sWol7E9TrKJQ77akIFA7zVQ+jybTS+X6PNg68dYMzpqJX K54H/P3o4C4Z88FCA0huQbqSIH8b/5gtEiFaJYUFQKIGBfEhUYYCocF/jInyUkSA b2cn6hBT31MVnE67i4wqGNEz+YjgxMe0dwycXgYXzluQIdtgLj08vFEG+ajyXSYw 1sGcsj+GDefq72xSHj9mUHBpnFlOxZjMW03V4q4DQkczWFRv6q44F/qZCBjag0+x 85MYAr/6TvqdiLOxaXTyz3rE+ViKDoWQK1K+oFocX5p0C3x3CemQ5nOKFtwPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm6vL4HuyxkI/lZkTJ32N0EC9+y4wHwYDVR0j BBgwFoAUQw4wIEDeEdjIRDGzOXET7JaWlKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTllMDFiYS01OWM5LTQwNDctYWMwYi1lOWIyZmU2NTg1M2MvMC80MzBFMzAyMDQw REUxMUQ4Qzg0NDMxQjMzOTcxMTNFQzk2OTY5NEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5Njk2 OTRBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEz RUM5Njk2OTRBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIhl6BjAnKTplZia9yF45Xx8u01MQdai3yU lFc1da2Fn/UAnbsTLFpY4mIWZUUqXyi1GEbTvz2740VA0OeZeor7g261VKBF9bb0 YXKmOAkbNuCY8qNmR++cqLZWWC9WFNwa5U6noVZ3yioqio+pPoDRkv+AcM5BTTaJ RH6oqZp43GX+UCZTbZk30PnhB93F/rSB4r2cgBJgkR0fQGL2Hu/2iA2VIl2uJtW2 g8trKYoXxRMpdjmdcAb8egAu34oywvvn3CWgBaNiEMhxwn6gLuUJV6OED6J/kqV1 243VakFk327ysIwo4EWIIPd1fA6UV4y/oUifymtl+NMa5bpD/mM= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:05 2025 by rpki-client