$ rpki-client -vvf repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft File: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft (raw, json) Hash identifier: 1zipYSeX4b4dQjRNLhP+JherfLNscE4ktfTkK06Q+VQ= Subject key identifier: 9E:BF:93:FA:2F:0D:AE:04:35:62:D9:D7:11:17:A9:13:47:7A:AC:85 Authority key identifier: C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 Certificate issuer: /CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Certificate serial: 79DB60436133B34B80190096DA4A09B18DDBE073 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft Manifest number: 0352 Signing time: Sun 07 Sep 2025 09:42:14 +0000 Manifest this update: Sun 07 Sep 2025 09:37:14 +0000 Manifest next update: Wed 10 Sep 2025 10:35:14 +0000 Files and hashes: 1: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (hash: tUeL2L2NZGxhk7lppCZ0ZmMoSziMiBP1aFhhhYxJa6g=) 2: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl (hash: er93Y6z0QeyLL4dcvNAlrlFmNYIC6vL5HerMf+1a0w0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:db:60:43:61:33:b3:4b:80:19:00:96:da:4a:09:b1:8d:db:e0:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Validity Not Before: Sep 7 09:37:14 2025 GMT Not After : Sep 10 10:35:14 2025 GMT Subject: CN=9EBF93FA2F0DAE043562D9D71117A913477AAC85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a9:26:e5:a3:51:25:e6:f0:23:0c:d5:4e:3d: db:26:97:97:54:19:3c:54:ac:8c:12:23:8c:ac:ef: 9a:d0:23:8a:2b:e5:9b:aa:13:53:30:e2:18:f8:78: 38:87:5e:73:ec:54:5a:bd:cb:7e:a7:cb:fe:03:78: 89:36:3b:b2:ee:6a:de:30:ea:69:6a:f5:3a:a0:79: 17:4a:47:08:75:e6:6b:41:d8:ae:b8:d4:5e:b1:75: e6:21:91:e8:4a:94:90:bc:ed:0d:67:13:a2:0e:cb: eb:e1:40:79:ed:bb:8e:fd:b9:21:9c:55:23:c3:82: 20:9d:5b:78:2e:ca:41:b3:70:a9:17:44:57:42:ff: b3:4c:cc:73:4a:58:87:a0:cd:42:37:7d:4a:1d:85: 5d:1b:d2:77:a5:bf:7d:55:a9:14:10:0c:f6:6d:06: cd:72:0a:e8:14:c2:4a:3e:5b:c9:d9:07:9c:ef:a8: 2e:79:7e:31:37:d9:4d:b4:8a:51:48:50:28:5d:64: 66:a0:97:3d:38:b7:73:cd:8e:dc:98:7e:6a:4c:a3: e3:06:33:35:89:94:a1:a2:26:4d:2e:fe:50:27:2a: 0c:09:bc:1e:5f:ce:33:b4:25:80:6a:7a:7e:72:9e: de:6b:4c:0b:c4:89:26:83:b2:9a:f3:3c:4a:e3:5b: b5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BF:93:FA:2F:0D:AE:04:35:62:D9:D7:11:17:A9:13:47:7A:AC:85 X509v3 Authority Key Identifier: keyid:C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b1:1e:11:b9:d1:50:c5:80:91:c7:c5:e3:90:eb:f1:47:55: 4f:15:ef:ef:19:bc:67:56:4d:58:a6:67:96:3c:fe:68:32:52: 87:45:a4:07:7e:85:ac:d6:b6:8a:ba:e2:62:bb:42:d8:ac:81: 3e:9c:3f:a9:71:1c:ce:51:78:37:59:47:d3:d3:55:ae:32:75: 66:ea:f8:f5:39:39:58:8b:4e:4d:14:d6:32:f2:ef:b5:e0:b5: 0d:07:60:a6:32:31:64:4d:f5:d4:7c:62:77:49:38:41:da:54: 34:9b:45:87:89:b4:e0:da:fa:25:4f:f1:14:0f:e7:db:30:a0: f4:4a:14:2c:5e:2b:58:db:57:23:af:93:09:a4:64:52:32:a1: 4e:91:a0:64:19:c1:5b:79:6e:a4:12:8b:13:ca:ac:53:02:ee: 33:22:2a:08:8a:d2:bf:66:b9:ba:23:35:74:63:18:59:1f:f8: c4:cd:fc:fc:96:01:e2:9c:3e:7b:1d:66:1d:48:b4:2d:8b:ea: 5d:82:40:2c:f8:d7:7f:bd:98:d3:e1:1d:87:20:a2:26:6b:33: d8:02:ff:a9:dd:43:f4:2f:f7:67:dd:d0:60:2a:8f:dd:cb:7f: 14:b0:39:78:54:33:bc:9f:3c:10:e1:d9:9c:ad:a0:d1:0c:c1: 11:91:90:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUedtgQ2Ezs0uAGQCW2koJsY3b4HMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzky Mjg2MzFGNzAeFw0yNTA5MDcwOTM3MTRaFw0yNTA5MTAxMDM1MTRaMDMxMTAvBgNV BAMTKDlFQkY5M0ZBMkYwREFFMDQzNTYyRDlENzExMTdBOTEzNDc3QUFDODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVqSblo1El5vAjDNVOPdsml5dU GTxUrIwSI4ys75rQI4or5ZuqE1Mw4hj4eDiHXnPsVFq9y36ny/4DeIk2O7Luat4w 6mlq9TqgeRdKRwh15mtB2K641F6xdeYhkehKlJC87Q1nE6IOy+vhQHntu479uSGc VSPDgiCdW3guykGzcKkXRFdC/7NMzHNKWIegzUI3fUodhV0b0nelv31VqRQQDPZt Bs1yCugUwko+W8nZB5zvqC55fjE32U20ilFIUChdZGaglz04t3PNjtyYfmpMo+MG MzWJlKGiJk0u/lAnKgwJvB5fzjO0JYBqen5ynt5rTAvEiSaDsprzPErjW7W3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnr+T+i8NrgQ1YtnXERepE0d6rIUwHwYDVR0j BBgwFoAUwwo3cezl92LW+m2HKPTAySKGMfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTFmNjI5OS1iMTU1LTQyMTItYjVlMS05ZjU3MDNjZDA5ODkvMC9DMzBBMzc3MUVD RTVGNzYyRDZGQTZEODcyOEY0QzBDOTIyODYzMUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzkyMjg2 MzFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ExZjYyOTktYjE1NS00MjEyLWI1 ZTEtOWY1NzAzY2QwOTg5LzAvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMw QzkyMjg2MzFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKxHhG50VDFgJHHxeOQ6/FHVU8V7+8ZvGdW TVimZ5Y8/mgyUodFpAd+hazWtoq64mK7QtisgT6cP6lxHM5ReDdZR9PTVa4ydWbq +PU5OViLTk0U1jLy77XgtQ0HYKYyMWRN9dR8YndJOEHaVDSbRYeJtODa+iVP8RQP 59swoPRKFCxeK1jbVyOvkwmkZFIyoU6RoGQZwVt5bqQSixPKrFMC7jMiKgiK0r9m ubojNXRjGFkf+MTN/PyWAeKcPnsdZh1ItC2L6l2CQCz413+9mNPhHYcgoiZrM9gC /6ndQ/Qv92fd0GAqj93LfxSwOXhUM7yfPBDh2ZytoNEMwRGRkDw= -----END CERTIFICATE-----Generated at Sun Sep 7 15:29:20 2025 by rpki-client