$ rpki-client -vvf repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft File: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft (raw, json) Hash identifier: Zgi2iSMVu0mBq9zlM2oDfPPF1T2HZ5Qo2zhXJ3CWK7Q= Subject key identifier: 70:61:74:25:AE:B3:D2:F3:53:6A:4A:17:E9:D9:3D:B9:5E:A1:D3:77 Authority key identifier: C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E Certificate issuer: /CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Certificate serial: 31DA83EBAF4CCAB5068AF7D005DEB2BEC6FC0975 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft Manifest number: 03F2 Signing time: Fri 05 Sep 2025 03:50:54 +0000 Manifest this update: Fri 05 Sep 2025 03:45:54 +0000 Manifest next update: Mon 08 Sep 2025 15:49:54 +0000 Files and hashes: 1: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl (hash: UYSmaFMK07y5KcTzsOlCbBMTcn5rp1KQ+98K9vcQinM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:da:83:eb:af:4c:ca:b5:06:8a:f7:d0:05:de:b2:be:c6:fc:09:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Validity Not Before: Sep 5 03:45:54 2025 GMT Not After : Sep 8 15:49:54 2025 GMT Subject: CN=70617425AEB3D2F3536A4A17E9D93DB95EA1D377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4c:f8:c3:9c:f0:2a:78:b5:94:19:d7:1b:d8: 4c:c8:58:a9:6a:bf:1f:c3:97:c6:db:25:7f:9f:2e: d7:e5:7b:48:1a:d9:74:62:db:67:3c:03:f6:fb:b6: 6e:54:d3:fb:3f:7b:98:f9:69:49:e7:45:42:81:f0: 8d:9c:88:b9:57:65:20:88:ef:3d:6d:49:dd:78:d0: f7:91:49:39:98:52:ab:cc:33:ed:0a:bf:ca:16:3b: 74:9b:6a:e2:0e:29:b4:65:a5:3c:3a:92:7a:bd:90: bf:2c:df:29:e6:22:93:ca:9a:d7:64:27:6e:a0:ae: a7:4d:cd:68:9d:c9:0c:8a:25:68:bd:a0:d4:1c:93: 96:49:0d:5c:8c:1d:5f:c5:a6:a3:61:3c:a5:22:76: a3:7a:0e:7b:25:8c:06:a5:fc:10:15:26:be:47:11: 26:b1:e8:ac:f0:a3:48:24:37:be:de:c5:ec:c7:87: 84:47:c1:fd:c8:6d:31:4a:70:a9:5b:c2:37:a3:a5: 7b:33:84:84:70:ae:0a:49:a5:50:83:4d:9b:1f:80: 7b:26:ba:3e:11:5f:7c:cc:49:c7:37:4b:2a:9b:87: 49:5b:55:f3:d8:4c:eb:ea:78:97:c0:66:c7:12:06: c7:54:21:b9:ba:df:62:fc:e4:b0:73:ec:99:d2:0f: db:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:61:74:25:AE:B3:D2:F3:53:6A:4A:17:E9:D9:3D:B9:5E:A1:D3:77 X509v3 Authority Key Identifier: keyid:C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:da:b4:5d:a4:1e:a0:e5:7c:7a:43:f4:65:4c:b3:15:39:e3: c3:02:00:d1:aa:e2:21:6f:d6:44:67:83:7c:b4:44:e5:73:5d: 2e:7c:ae:9e:e5:c4:d8:f8:77:e0:b8:93:b1:51:a6:ac:ae:e9: 6e:50:d1:ec:a3:c5:0f:68:16:03:a5:46:b0:09:54:28:0a:59: d1:7a:9d:12:56:9f:e0:32:f4:30:04:5b:85:29:a1:a9:e7:d3: 18:af:e4:40:b4:de:58:64:72:06:3c:e9:ab:f1:7b:46:1e:55: b0:bc:57:7e:30:e2:05:14:45:80:78:af:0b:0f:43:35:31:90: 75:e0:04:87:e4:d0:11:f7:76:2a:97:a2:74:67:ea:3d:b0:94: 2f:81:2d:62:55:cd:6b:8b:73:08:47:08:5e:8f:16:15:04:3f: 0d:64:be:c1:8c:bd:b2:47:8e:48:9d:be:8d:b6:d2:e1:32:54: 4f:e1:9e:c6:5d:6e:c5:18:9b:2c:77:ed:12:89:dd:81:7c:ee: 95:f8:2c:cf:9b:a6:3c:c7:e8:a1:45:d8:aa:bd:5d:10:0c:3b: 91:2e:af:9a:34:ff:42:1b:c4:68:5f:55:3d:52:8a:77:25:2a: 74:bc:a5:ab:fb:f2:8f:c5:95:fc:08:a1:ff:54:d4:22:b2:c8: 33:ec:cd:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMdqD669MyrUGivfQBd6yvsb8CXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcy RkI0RkU2RTAeFw0yNTA5MDUwMzQ1NTRaFw0yNTA5MDgxNTQ5NTRaMDMxMTAvBgNV BAMTKDcwNjE3NDI1QUVCM0QyRjM1MzZBNEExN0U5RDkzREI5NUVBMUQzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJTPjDnPAqeLWUGdcb2EzIWKlq vx/Dl8bbJX+fLtfle0ga2XRi22c8A/b7tm5U0/s/e5j5aUnnRUKB8I2ciLlXZSCI 7z1tSd140PeRSTmYUqvMM+0Kv8oWO3SbauIOKbRlpTw6knq9kL8s3ynmIpPKmtdk J26grqdNzWidyQyKJWi9oNQck5ZJDVyMHV/FpqNhPKUidqN6DnsljAal/BAVJr5H ESax6Kzwo0gkN77exezHh4RHwf3IbTFKcKlbwjejpXszhIRwrgpJpVCDTZsfgHsm uj4RX3zMScc3Syqbh0lbVfPYTOvqeJfAZscSBsdUIbm632L85LBz7JnSD9tJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcGF0Ja6z0vNTakoX6dk9uV6h03cwHwYDVR0j BBgwFoAUww3nH3yuFsotjattAcpD1y+0/m4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2I1OWNlNC02NmEyLTRmNGQtYjNkNi05Mjk5NDg0YmE1NmIvMC9DMzBERTcxRjdD QUUxNkNBMkQ4REFCNkQwMUNBNDNENzJGQjRGRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcyRkI0 RkU2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNiNTljZTQtNjZhMi00ZjRkLWIz ZDYtOTI5OTQ4NGJhNTZiLzAvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQz RDcyRkI0RkU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/atF2kHqDlfHpD9GVMsxU548MCANGq4iFv 1kRng3y0ROVzXS58rp7lxNj4d+C4k7FRpqyu6W5Q0eyjxQ9oFgOlRrAJVCgKWdF6 nRJWn+Ay9DAEW4Upoann0xiv5EC03lhkcgY86avxe0YeVbC8V34w4gUURYB4rwsP QzUxkHXgBIfk0BH3diqXonRn6j2wlC+BLWJVzWuLcwhHCF6PFhUEPw1kvsGMvbJH jkidvo220uEyVE/hnsZdbsUYmyx37RKJ3YF87pX4LM+bpjzH6KFF2Kq9XRAMO5Eu r5o0/0IbxGhfVT1SinclKnS8pav78o/FlfwIof9U1CKyyDPszZc= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:10 2025 by rpki-client