$ rpki-client -vvf repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft File: 30CE8572EA9DEDA805151BBD165E699D1191FED0.mft (raw, json) Hash identifier: 703GpGSJSVdYCYdhomiOmxHYfuH0sXYWnjKxTZK870c= Subject key identifier: 9A:59:86:41:2B:16:94:38:56:92:3A:4B:9A:7D:18:78:89:3D:4A:8F Authority key identifier: 30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0 Certificate issuer: /CN=30CE8572EA9DEDA805151BBD165E699D1191FED0 Certificate serial: 20AEAC9EFCB93DC5E6718084DCD2337BE7320015 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft Manifest number: 016A Signing time: Sat 19 Jul 2025 03:11:42 +0000 Manifest this update: Sat 19 Jul 2025 03:06:42 +0000 Manifest next update: Tue 22 Jul 2025 08:54:42 +0000 Files and hashes: 1: 3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa (hash: Q2j6s7F7V0sOCSPl3aHs6rPupunQzCX/dgkjx2YSfjU=) 2: 30CE8572EA9DEDA805151BBD165E699D1191FED0.crl (hash: 4zJwBZ00ZbZhTuiD7xkjZjbYiwMTAHWtTJQr+NaFzG4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 08:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ae:ac:9e:fc:b9:3d:c5:e6:71:80:84:dc:d2:33:7b:e7:32:00:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30CE8572EA9DEDA805151BBD165E699D1191FED0 Validity Not Before: Jul 19 03:06:42 2025 GMT Not After : Jul 22 08:54:42 2025 GMT Subject: CN=9A5986412B16943856923A4B9A7D1878893D4A8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b3:26:74:0d:21:9b:d5:50:1d:95:53:df:8a: cd:b4:82:4d:f1:60:fd:9f:8b:1b:59:5e:3e:37:dc: c4:31:36:70:05:c6:57:97:83:b4:a3:c1:81:90:c9: 5e:13:63:d2:f0:97:d0:32:56:67:69:bb:11:a8:a8: b2:31:97:10:69:d8:45:b0:ee:05:95:04:df:ec:c1: a4:41:91:4d:6b:4a:99:8d:be:df:7e:93:c6:18:d6: 0c:72:67:31:11:63:84:c6:c3:27:47:f0:ea:18:92: 00:0d:7f:fb:fc:72:2b:86:f4:c7:79:f3:a3:12:9d: 67:c3:3c:8b:4b:18:ad:b7:d6:28:8b:0c:f1:fa:ae: fc:d5:22:93:bb:5c:66:e8:d8:f1:7b:64:be:3b:a9: ac:98:ac:6f:15:eb:8a:20:7b:79:26:19:2d:fc:9f: 20:3f:f4:ab:e4:31:db:51:25:9f:a8:1b:15:1c:c5: 47:00:03:a2:1d:30:ae:b7:fc:b5:ff:b3:42:db:86: e6:96:5e:a1:c1:23:14:49:ef:e9:f1:e9:5f:00:10: fd:64:8c:a9:e6:cc:3e:ef:51:86:31:e0:23:03:31: 67:12:20:ab:14:a9:d6:37:5e:b5:48:50:02:cc:cd: 66:96:d3:2d:11:cf:df:cd:e8:7c:39:19:6c:69:1a: 7a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:59:86:41:2B:16:94:38:56:92:3A:4B:9A:7D:18:78:89:3D:4A:8F X509v3 Authority Key Identifier: keyid:30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:2d:41:92:de:00:b9:25:7d:79:0a:f1:78:e2:1c:6a:db:9b: a3:56:28:7b:e0:96:68:ff:d2:36:d9:68:6c:c1:c2:df:29:ec: e2:f8:18:71:72:4f:2b:09:87:96:ea:70:d9:82:a8:ee:e9:32: b2:46:08:b0:f5:d9:db:29:52:51:35:d3:3b:08:22:fa:1a:3b: 50:86:52:2e:f1:cb:45:87:07:fc:76:9a:e8:fa:eb:23:d5:34: df:ea:71:ba:3a:cb:09:9a:2c:8f:da:35:99:ed:3e:c1:77:92: a8:7a:21:50:2c:e5:dd:75:83:80:c1:70:49:69:be:92:cb:c7: cb:d5:6a:1c:48:27:63:8d:d9:0b:9d:26:b1:99:2d:8a:25:01: 8a:68:9e:cf:d9:0b:36:ff:c3:c6:44:f3:9a:cf:11:9a:f2:26: 4a:01:83:c8:c6:15:66:20:48:2c:29:c9:3f:fb:9e:aa:29:f4: c9:ba:76:d0:14:ee:31:e2:92:43:63:ff:39:9c:77:a5:d6:16: b0:b7:48:4f:8d:91:6a:f9:be:35:ec:38:20:13:92:e8:5c:66: ae:8d:5b:c4:e6:fd:f3:aa:c9:97:48:73:f7:3f:33:a8:ad:69: 45:18:52:fa:c4:ba:d7:b2:d2:b2:53:45:6d:c2:03:40:13:cd: 5b:7b:53:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIK6snvy5PcXmcYCE3NIze+cyABUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5OUQx MTkxRkVEMDAeFw0yNTA3MTkwMzA2NDJaFw0yNTA3MjIwODU0NDJaMDMxMTAvBgNV BAMTKDlBNTk4NjQxMkIxNjk0Mzg1NjkyM0E0QjlBN0QxODc4ODkzRDRBOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfsyZ0DSGb1VAdlVPfis20gk3x YP2fixtZXj433MQxNnAFxleXg7SjwYGQyV4TY9Lwl9AyVmdpuxGoqLIxlxBp2EWw 7gWVBN/swaRBkU1rSpmNvt9+k8YY1gxyZzERY4TGwydH8OoYkgANf/v8ciuG9Md5 86MSnWfDPItLGK231iiLDPH6rvzVIpO7XGbo2PF7ZL47qayYrG8V64oge3kmGS38 nyA/9KvkMdtRJZ+oGxUcxUcAA6IdMK63/LX/s0LbhuaWXqHBIxRJ7+nx6V8AEP1k jKnmzD7vUYYx4CMDMWcSIKsUqdY3XrVIUALMzWaW0y0Rz9/N6Hw5GWxpGnpXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmlmGQSsWlDhWkjpLmn0YeIk9So8wHwYDVR0j BBgwFoAUMM6Fcuqd7agFFRu9Fl5pnRGR/tAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDM4MDJlMi0wM2FmLTRkZDAtOGRjZS01NGMyOGE3MjU2M2QvMC8zMENFODU3MkVB OURFREE4MDUxNTFCQkQxNjVFNjk5RDExOTFGRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5OUQxMTkx RkVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAzODAyZTItMDNhZi00ZGQwLThk Y2UtNTRjMjhhNzI1NjNkLzAvMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5 OUQxMTkxRkVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgtQZLeALklfXkK8XjiHGrbm6NWKHvglmj/ 0jbZaGzBwt8p7OL4GHFyTysJh5bqcNmCqO7pMrJGCLD12dspUlE10zsIIvoaO1CG Ui7xy0WHB/x2muj66yPVNN/qcbo6ywmaLI/aNZntPsF3kqh6IVAs5d11g4DBcElp vpLLx8vVahxIJ2ON2QudJrGZLYolAYpons/ZCzb/w8ZE85rPEZryJkoBg8jGFWYg SCwpyT/7nqop9Mm6dtAU7jHikkNj/zmcd6XWFrC3SE+NkWr5vjXsOCATkuhcZq6N W8Tm/fOqyZdIc/c/M6itaUUYUvrEutey0rJTRW3CA0ATzVt7U5U= -----END CERTIFICATE-----Generated at Mon Jul 21 08:55:07 2025 by rpki-client