$ rpki-client -vvf repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft File: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft (raw, json) Hash identifier: BtiaX0Dx8hcobmihud1c/bGf+//QzoY+PjO4FTbc5+s= Subject key identifier: EA:4E:6B:81:DC:63:9F:A3:75:17:1D:02:97:44:EA:B5:2D:30:7E:4B Authority key identifier: C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 Certificate issuer: /CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Certificate serial: 0ECCDA75421376B85E2A459719D27AD68AF32C8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft Manifest number: 0329 Signing time: Thu 05 Jun 2025 23:42:12 +0000 Manifest this update: Thu 05 Jun 2025 23:37:12 +0000 Manifest next update: Mon 09 Jun 2025 09:05:12 +0000 Files and hashes: 1: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl (hash: cKiBPAKtFzvP5NmtdCiyPaRUkvCV6bKPYRg9Fn+eCic=) 2: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (hash: tUeL2L2NZGxhk7lppCZ0ZmMoSziMiBP1aFhhhYxJa6g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 09:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:cc:da:75:42:13:76:b8:5e:2a:45:97:19:d2:7a:d6:8a:f3:2c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Validity Not Before: Jun 5 23:37:12 2025 GMT Not After : Jun 9 09:05:12 2025 GMT Subject: CN=EA4E6B81DC639FA375171D029744EAB52D307E4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0e:13:d7:ed:c1:8f:17:2c:b2:58:d5:6f:88: a2:e6:ad:96:a9:ed:19:4c:4e:02:d3:1b:99:f6:31: 3e:cf:3e:aa:f4:d0:2c:fc:9e:b8:9f:fc:29:b4:88: 60:f8:f1:8b:e9:93:0f:35:49:8c:d9:9f:1f:7c:b0: 89:3d:4f:29:3e:90:f4:9f:25:6b:87:e0:54:f7:96: 26:51:97:47:dd:4d:67:1c:8d:52:0c:9e:85:6e:00: a9:ab:fb:e9:ee:c3:ab:35:0f:28:66:d7:74:f0:f6: e0:f3:5f:ab:44:7b:61:64:62:3b:11:86:35:0c:76: c1:3d:0b:a4:27:8c:78:fb:cf:a5:74:ae:03:73:04: bc:78:3f:7b:76:09:3b:d0:99:6e:34:2a:cf:c2:cd: d1:ab:cb:97:1b:69:03:10:30:85:2d:63:2e:fc:e7: 4d:ca:ce:06:e6:85:dd:3c:1f:38:fa:1c:68:19:b7: 0c:d8:bb:20:d1:6c:da:45:d0:1b:4f:e5:4f:ad:6f: 0f:e8:ec:eb:2c:a8:b2:0b:cb:b5:a6:d3:c7:c7:be: f5:19:08:19:86:d2:b3:ef:70:fd:96:f8:bc:93:fd: d3:9d:62:53:55:ed:bb:d9:c2:1a:cf:fd:56:9f:56: d8:f1:68:c5:ef:c7:94:b8:aa:a4:20:3f:7a:67:c0: 8d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4E:6B:81:DC:63:9F:A3:75:17:1D:02:97:44:EA:B5:2D:30:7E:4B X509v3 Authority Key Identifier: keyid:C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:b2:f9:af:99:c7:f5:60:90:68:db:2c:92:a5:a2:15:37:85: 46:8a:d1:c8:0e:1e:d6:20:c2:10:d1:02:19:97:6c:c2:d0:44: bd:db:8b:99:54:07:85:5a:9b:33:1b:da:5d:f4:73:24:fb:3d: 9d:12:f1:0c:ee:34:f4:1c:94:45:da:d1:7a:a7:37:b9:76:52: 7f:eb:cc:63:c9:a2:02:da:89:03:0a:44:ee:2b:bd:f1:d0:1b: 8e:89:9e:7e:17:6f:bf:f8:4f:22:00:10:ed:e4:e6:3e:9c:c6: ba:56:d8:27:f4:d0:46:f8:d8:4f:58:22:f2:9a:ac:66:7e:30: 65:be:90:c5:59:f7:5e:46:dd:7c:1c:93:cc:ac:85:1c:8c:49: 7b:61:cc:cd:f1:a2:03:02:50:2b:a1:4d:47:b1:ee:0a:e3:85: 30:4c:4f:02:fa:99:0e:ff:9f:61:5b:91:0d:1a:ae:66:77:1b: 40:b6:15:d8:d9:d1:12:a4:46:01:b3:f0:b7:8b:f0:5b:c9:cd: 48:d9:2c:08:ae:44:66:86:28:b9:2a:8d:b3:c1:d9:29:ef:0d: 06:6f:37:3e:ee:c1:98:c8:02:9d:fd:e6:1b:e1:22:ab:cb:25: ab:81:b7:d3:da:85:cf:6e:91:4c:e8:86:f5:07:62:11:ed:7d: a7:6a:98:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDszadUITdrheKkWXGdJ61orzLIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzky Mjg2MzFGNzAeFw0yNTA2MDUyMzM3MTJaFw0yNTA2MDkwOTA1MTJaMDMxMTAvBgNV BAMTKEVBNEU2QjgxREM2MzlGQTM3NTE3MUQwMjk3NDRFQUI1MkQzMDdFNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpDhPX7cGPFyyyWNVviKLmrZap 7RlMTgLTG5n2MT7PPqr00Cz8nrif/Cm0iGD48Yvpkw81SYzZnx98sIk9Tyk+kPSf JWuH4FT3liZRl0fdTWccjVIMnoVuAKmr++nuw6s1Dyhm13Tw9uDzX6tEe2FkYjsR hjUMdsE9C6QnjHj7z6V0rgNzBLx4P3t2CTvQmW40Ks/CzdGry5cbaQMQMIUtYy78 503Kzgbmhd08Hzj6HGgZtwzYuyDRbNpF0BtP5U+tbw/o7OssqLILy7Wm08fHvvUZ CBmG0rPvcP2W+LyT/dOdYlNV7bvZwhrP/VafVtjxaMXvx5S4qqQgP3pnwI0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6k5rgdxjn6N1Fx0Cl0TqtS0wfkswHwYDVR0j BBgwFoAUwwo3cezl92LW+m2HKPTAySKGMfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTFmNjI5OS1iMTU1LTQyMTItYjVlMS05ZjU3MDNjZDA5ODkvMC9DMzBBMzc3MUVD RTVGNzYyRDZGQTZEODcyOEY0QzBDOTIyODYzMUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzkyMjg2 MzFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ExZjYyOTktYjE1NS00MjEyLWI1 ZTEtOWY1NzAzY2QwOTg5LzAvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMw QzkyMjg2MzFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmy+a+Zx/VgkGjbLJKlohU3hUaK0cgOHtYg whDRAhmXbMLQRL3bi5lUB4VamzMb2l30cyT7PZ0S8QzuNPQclEXa0XqnN7l2Un/r zGPJogLaiQMKRO4rvfHQG46Jnn4Xb7/4TyIAEO3k5j6cxrpW2Cf00Eb42E9YIvKa rGZ+MGW+kMVZ915G3Xwck8yshRyMSXthzM3xogMCUCuhTUex7grjhTBMTwL6mQ7/ n2FbkQ0armZ3G0C2FdjZ0RKkRgGz8LeL8FvJzUjZLAiuRGaGKLkqjbPB2SnvDQZv Nz7uwZjIAp395hvhIqvLJauBt9Pahc9ukUzohvUHYhHtfadqmFA= -----END CERTIFICATE-----Generated at Sun Jun 8 00:22:42 2025 by rpki-client