$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft File: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft (raw, json) Hash identifier: SQq/QjSg1TJWheV6ZNc5dd7B96HYQWQHitDjNiFZaNs= Subject key identifier: 98:16:24:10:7A:2E:2F:90:0F:FF:1C:56:CF:E3:63:6A:B1:1D:2D:CF Authority key identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 Certificate issuer: /CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Certificate serial: 40BB38B52325B12EA334B391C5DEA1B91E91FAB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft Manifest number: BE Signing time: Sat 19 Jul 2025 20:11:49 +0000 Manifest this update: Sat 19 Jul 2025 20:06:49 +0000 Manifest next update: Wed 23 Jul 2025 00:14:49 +0000 Files and hashes: 1: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (hash: fMCHbxG1b40Dh8toSsRbGtu8leYZ/YXgsXlH0lO7T1o=) 2: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl (hash: 5f+rPwzXD9ADmgELvJvyGarhutMD4rbUnjk4mfbgd4M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:bb:38:b5:23:25:b1:2e:a3:34:b3:91:c5:de:a1:b9:1e:91:fa:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Validity Not Before: Jul 19 20:06:49 2025 GMT Not After : Jul 23 00:14:49 2025 GMT Subject: CN=981624107A2E2F900FFF1C56CFE3636AB11D2DCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:90:cb:02:95:9a:43:08:36:01:4c:10:9e:14: fe:bc:d7:10:53:46:de:fc:85:ac:88:9e:eb:41:0d: 9b:7c:fb:60:2b:df:ac:ea:20:54:30:41:c8:0e:15: 25:cd:7c:45:eb:a9:bd:9b:c9:d3:93:e8:0c:2c:2c: 87:84:88:99:f8:71:4e:f0:7e:35:76:7a:b1:86:78: 2b:95:32:d8:c0:82:54:cf:eb:05:6b:7e:bf:33:30: 55:3f:88:0d:02:a7:cf:9c:59:37:0e:ca:0e:51:99: 1f:d9:91:ff:b7:59:df:74:8b:9d:7a:52:3d:71:75: 01:c2:c0:d3:33:28:5b:66:46:12:d2:17:6e:92:cd: 8d:aa:1c:42:ab:da:01:43:54:99:bc:d3:c9:58:b4: c4:d7:76:56:6c:58:b5:0e:6c:69:38:42:f8:49:d3: b3:03:c2:83:63:5a:0a:9d:70:bc:8c:46:ac:26:8f: 87:f1:40:f8:36:a1:14:be:a9:47:6d:e4:61:d3:4b: 59:27:1a:31:c1:cd:91:2c:56:c3:3c:e8:8a:e9:9b: ed:8b:b8:7d:40:0f:ef:b9:bf:b8:be:fe:83:e8:a7: c0:6b:f0:03:44:1a:54:2b:a9:40:93:09:5c:79:be: 8f:9a:64:db:57:30:44:12:74:19:9d:3d:cf:fe:0c: 10:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:16:24:10:7A:2E:2F:90:0F:FF:1C:56:CF:E3:63:6A:B1:1D:2D:CF X509v3 Authority Key Identifier: keyid:30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:d0:a3:e4:47:99:c3:05:37:53:3a:b2:6a:d7:c9:d7:a6:8a: bc:6f:7e:98:6d:b0:2f:61:dd:65:71:cd:ed:f2:01:d4:2f:73: e6:9e:e8:72:b4:21:ac:c2:54:61:ba:d9:86:6f:3e:18:47:88: ea:1d:b7:ee:d0:e3:ce:48:a9:80:00:4e:6c:c8:d8:de:f3:8b: d2:16:6d:b4:74:6a:9f:c8:36:a2:42:80:e4:23:99:f0:f2:fb: 2f:27:f8:d4:0e:15:5b:29:a5:fe:50:a7:70:ab:ab:b4:6c:f8: ed:fc:42:6a:40:96:c8:ae:ad:d4:61:52:42:79:14:73:2c:1a: 6a:52:ce:ca:05:7d:85:3d:a8:ef:56:84:4b:1a:59:61:9e:13: c9:2a:07:fd:4e:e2:43:0a:57:d9:1e:d5:eb:3f:fd:fe:8f:37: 6d:6b:f3:5f:9d:bb:85:22:ba:76:15:5b:d8:e7:5a:3d:9a:d7: 15:bc:6e:0b:45:b0:ec:4b:e9:31:01:4d:ee:9a:09:a1:10:0f: ed:21:ae:b2:96:63:11:3d:bf:f6:71:b0:75:1c:08:f3:2d:05: 8f:d2:55:7d:da:c2:99:0c:28:f9:69:6f:32:ea:8f:a1:70:ff: ca:4d:44:59:a7:c4:b7:7e:b0:25:41:99:c4:00:98:e4:b2:c1: 7f:84:46:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQLs4tSMlsS6jNLORxd6huR6R+rcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUy MTA2RjFCNDAeFw0yNTA3MTkyMDA2NDlaFw0yNTA3MjMwMDE0NDlaMDMxMTAvBgNV BAMTKDk4MTYyNDEwN0EyRTJGOTAwRkZGMUM1NkNGRTM2MzZBQjExRDJEQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdkMsClZpDCDYBTBCeFP681xBT Rt78hayInutBDZt8+2Ar36zqIFQwQcgOFSXNfEXrqb2bydOT6AwsLIeEiJn4cU7w fjV2erGGeCuVMtjAglTP6wVrfr8zMFU/iA0Cp8+cWTcOyg5RmR/Zkf+3Wd90i516 Uj1xdQHCwNMzKFtmRhLSF26SzY2qHEKr2gFDVJm808lYtMTXdlZsWLUObGk4QvhJ 07MDwoNjWgqdcLyMRqwmj4fxQPg2oRS+qUdt5GHTS1knGjHBzZEsVsM86Irpm+2L uH1AD++5v7i+/oPop8Br8ANEGlQrqUCTCVx5vo+aZNtXMEQSdBmdPc/+DBBVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmBYkEHouL5AP/xxWz+NjarEdLc8wHwYDVR0j BBgwFoAUMIpRAED9+bwot7Y9MgPkDiEG8bQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVkOGQ2Yy1mMGZhLTQ3Y2MtYWVhYS1iNGUzZWUxMTY4ODIvMC8zMDhBNTEwMDQw RkRGOUJDMjhCN0I2M0QzMjAzRTQwRTIxMDZGMUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUyMTA2 RjFCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZDhkNmMtZjBmYS00N2NjLWFl YWEtYjRlM2VlMTE2ODgyLzAvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0 MEUyMTA2RjFCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAPQo+RHmcMFN1M6smrXydemirxvfphtsC9h 3WVxze3yAdQvc+ae6HK0IazCVGG62YZvPhhHiOodt+7Q485IqYAATmzI2N7zi9IW bbR0ap/INqJCgOQjmfDy+y8n+NQOFVsppf5Qp3Crq7Rs+O38QmpAlsiurdRhUkJ5 FHMsGmpSzsoFfYU9qO9WhEsaWWGeE8kqB/1O4kMKV9ke1es//f6PN21r81+du4Ui unYVW9jnWj2a1xW8bgtFsOxL6TEBTe6aCaEQD+0hrrKWYxE9v/ZxsHUcCPMtBY/S VX3awpkMKPlpbzLqj6Fw/8pNRFmnxLd+sCVBmcQAmOSywX+ERoY= -----END CERTIFICATE-----Generated at Mon Jul 21 18:05:05 2025 by rpki-client