$ rpki-client -vvf repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft File: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft (raw, json) Hash identifier: DSj0IioYqZ4BPQjvjqtfjSYaGf+5O8GNHkwK33KcuAI= Subject key identifier: 23:0D:E5:16:EC:D1:B3:14:9F:CD:B6:E4:84:D2:A9:DF:04:F5:09:2B Authority key identifier: 30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 Certificate issuer: /CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Certificate serial: 4F7E22A60E311B635B45DF7FAE82C6E7B71699F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft Manifest number: 0192 Signing time: Thu 03 Apr 2025 21:21:08 +0000 Manifest this update: Thu 03 Apr 2025 21:16:08 +0000 Manifest next update: Sun 06 Apr 2025 22:27:08 +0000 Files and hashes: 1: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (hash: 26YINQme/iBjXm8kI77CvEcmVoMDQs4ckNihzd85Z90=) 2: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (hash: D8GjnN9iSeoHD+w8PHTjqQPYgM2654viBTgPlB7vaQ8=) 3: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl (hash: lY4D1Zp+JbuRsVx2lPIVcm5y38q9Ln0BTDbb4g0Y0Zc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 22:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:7e:22:a6:0e:31:1b:63:5b:45:df:7f:ae:82:c6:e7:b7:16:99:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Validity Not Before: Apr 3 21:16:08 2025 GMT Not After : Apr 6 22:27:08 2025 GMT Subject: CN=230DE516ECD1B3149FCDB6E484D2A9DF04F5092B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a3:b2:ea:5e:a2:71:7a:cf:17:fd:a1:a5:68: 31:e4:3a:ea:39:a6:e9:2f:45:15:18:a9:77:f8:53: 5c:50:55:22:e5:34:09:b7:bc:9d:ca:c5:f2:8d:29: ec:ea:74:92:4d:5c:e8:aa:78:fb:18:d9:aa:05:01: 98:11:0b:46:5c:78:bf:98:4a:9d:3d:d9:4d:ba:2e: b4:20:70:cc:7d:87:22:8f:c0:36:43:e1:42:ef:3e: cf:9a:bf:aa:47:1b:c4:3a:a9:eb:6d:1a:5f:fb:a5: 87:39:b8:34:d9:7a:ef:9a:96:5b:61:b2:35:61:79: 64:84:13:54:3d:4f:06:65:9c:e6:c1:2f:5c:7b:90: 8a:49:7b:c7:3f:e8:9a:e0:bd:f0:c9:21:88:5d:14: c4:d2:9e:eb:85:fb:17:1b:84:26:78:b3:fa:5b:53: 7b:c8:bb:ed:18:14:9a:c3:d5:d1:6d:17:64:7b:ec: 14:36:26:88:7a:0e:06:8f:40:02:ea:4b:4a:1e:81: 3d:41:cb:8d:c6:03:37:cb:5a:80:37:34:bc:19:55: 2a:93:ac:a8:45:91:40:a5:7c:02:30:9c:f9:e4:93: 85:a6:b5:4b:4d:d6:2e:3d:3a:92:7d:61:14:98:1c: 7a:62:3f:55:e5:8b:94:69:ec:c3:03:3a:3f:ea:e2: 66:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0D:E5:16:EC:D1:B3:14:9F:CD:B6:E4:84:D2:A9:DF:04:F5:09:2B X509v3 Authority Key Identifier: keyid:30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:68:c7:f8:fc:39:16:56:77:14:5b:d4:f3:96:a4:94:dc:ab: 49:4a:c5:e2:2d:be:d5:c7:ae:88:18:fa:51:a2:7a:a5:5c:1d: 00:13:57:66:98:95:8a:6f:6a:36:ca:b2:cb:cd:ab:1f:75:ad: fd:15:3f:9a:1a:59:73:80:98:32:a4:5e:a0:87:bd:79:83:67: 90:65:d7:be:2d:fe:dd:3f:03:64:14:5d:92:bc:e0:08:89:7e: 4f:4f:82:a0:da:8a:fb:6a:61:70:63:e1:35:66:2d:f1:db:eb: d2:25:e5:9e:19:8b:88:cf:73:fd:6d:3a:2f:73:a0:99:27:38: 71:ba:b2:51:1c:20:ca:5f:e9:56:ce:9a:ae:4b:86:d0:ea:f2: 7f:06:91:b3:20:77:6e:5b:00:91:65:9b:b4:1f:c9:29:a1:0a: c7:a3:15:28:3c:6b:31:23:02:0f:ed:14:de:30:6f:08:da:4f: 67:ec:76:46:d0:23:8c:e6:1f:22:76:75:99:5b:a5:c7:db:8f: 66:78:bd:4f:22:43:31:d6:18:88:13:44:a9:f9:c6:9c:e3:4e: 22:6e:a5:c1:cf:45:c4:eb:db:3b:39:3b:d1:37:32:7d:5a:ab: 6c:81:e6:18:42:f6:0e:40:e1:72:89:c4:20:a6:8f:6e:61:98: b5:35:2f:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT34ipg4xG2NbRd9/roLG57cWmfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3 RTkxMkQ0NTAeFw0yNTA0MDMyMTE2MDhaFw0yNTA0MDYyMjI3MDhaMDMxMTAvBgNV BAMTKDIzMERFNTE2RUNEMUIzMTQ5RkNEQjZFNDg0RDJBOURGMDRGNTA5MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMo7LqXqJxes8X/aGlaDHkOuo5 pukvRRUYqXf4U1xQVSLlNAm3vJ3KxfKNKezqdJJNXOiqePsY2aoFAZgRC0ZceL+Y Sp092U26LrQgcMx9hyKPwDZD4ULvPs+av6pHG8Q6qettGl/7pYc5uDTZeu+allth sjVheWSEE1Q9TwZlnObBL1x7kIpJe8c/6JrgvfDJIYhdFMTSnuuF+xcbhCZ4s/pb U3vIu+0YFJrD1dFtF2R77BQ2Joh6DgaPQALqS0oegT1By43GAzfLWoA3NLwZVSqT rKhFkUClfAIwnPnkk4WmtUtN1i49OpJ9YRSYHHpiP1Xli5Rp7MMDOj/q4maHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIw3lFuzRsxSfzbbkhNKp3wT1CSswHwYDVR0j BBgwFoAUMOK0YXuLnPxPxXscWk10/H6RLUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjlmODkwMi0xYTA2LTQ1YTgtYTk5OC03MmU0NmFhYWU4ZmMvMC8zMEUyQjQ2MTdC OEI5Q0ZDNEZDNTdCMUM1QTRENzRGQzdFOTEyRDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3RTkx MkQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI5Zjg5MDItMWEwNi00NWE4LWE5 OTgtNzJlNDZhYWFlOGZjLzAvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0 RkM3RTkxMkQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdox/j8ORZWdxRb1POWpJTcq0lKxeItvtXH rogY+lGieqVcHQATV2aYlYpvajbKssvNqx91rf0VP5oaWXOAmDKkXqCHvXmDZ5Bl 174t/t0/A2QUXZK84AiJfk9PgqDaivtqYXBj4TVmLfHb69Il5Z4Zi4jPc/1tOi9z oJknOHG6slEcIMpf6VbOmq5LhtDq8n8GkbMgd25bAJFlm7QfySmhCsejFSg8azEj Ag/tFN4wbwjaT2fsdkbQI4zmHyJ2dZlbpcfbj2Z4vU8iQzHWGIgTRKn5xpzjTiJu pcHPRcTr2zs5O9E3Mn1aq2yB5hhC9g5A4XKJxCCmj25hmLU1LyU= -----END CERTIFICATE-----Generated at Sat Apr 5 22:27:02 2025 by rpki-client