$ rpki-client -vvf repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft File: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft (raw, json) Hash identifier: MluAa+XGNHUv+Qz63AV9J6gOpyENz0+v9FwVkg8rgac= Subject key identifier: 48:01:B1:5D:C9:94:B2:4D:C9:A9:04:79:B0:31:06:1F:FF:B7:C8:28 Authority key identifier: 30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51 Certificate issuer: /CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51 Certificate serial: 0D943D3832CE5E7EA3DC6B7F6F4A36B5B9CD2E6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft Manifest number: 03B3 Signing time: Thu 05 Jun 2025 12:11:41 +0000 Manifest this update: Thu 05 Jun 2025 12:06:41 +0000 Manifest next update: Sun 08 Jun 2025 22:18:41 +0000 Files and hashes: 1: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl (hash: 3BkfE77Z0sPv6KLzkZ8e6LnJbC3ZweUNevEv6P7uvHo=) 2: 3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa (hash: FCHx6FaRMarTOvIyDDJKyaewpvcQNtFaDUPbc3o5Lx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 19:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:94:3d:38:32:ce:5e:7e:a3:dc:6b:7f:6f:4a:36:b5:b9:cd:2e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51 Validity Not Before: Jun 5 12:06:41 2025 GMT Not After : Jun 8 22:18:41 2025 GMT Subject: CN=4801B15DC994B24DC9A90479B031061FFFB7C828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:67:f3:7f:52:fa:8c:b7:09:18:c4:57:3b:57: 6e:cc:29:89:25:0c:8f:47:44:e1:42:ca:f1:50:3e: 07:9e:31:e5:43:69:24:f5:b9:60:4c:27:b7:e9:74: 9e:bf:f4:43:d9:b9:77:e5:e2:17:1c:97:48:2c:05: f1:b3:e2:45:f3:1a:15:96:58:71:52:80:76:1e:97: 33:20:5f:d8:83:69:0e:90:2a:7d:9c:50:d8:50:10: 50:4b:90:27:11:d0:32:93:ff:d3:61:8f:40:99:5b: 99:40:f3:b1:ce:38:d2:86:7a:b8:ec:1f:2f:dc:ef: 3f:a1:ca:ed:b3:6f:28:7d:ab:a6:76:39:d7:9b:1b: 70:45:8e:4b:5a:cd:83:90:16:2c:2d:db:70:42:c4: 85:a3:77:dd:97:2b:db:4e:b8:0a:02:73:a2:ca:7e: 3c:25:73:33:a0:61:3d:14:66:78:21:43:6d:48:e1: 5a:13:31:51:19:59:f9:83:8c:b0:d7:36:06:39:85: 9f:8e:83:58:70:fa:b5:fa:26:a2:05:89:ea:00:1e: 50:fe:62:28:0e:fe:24:2a:b1:85:65:9f:3a:22:75: d9:ae:ca:fb:05:51:1e:0a:ef:10:63:cc:75:27:01: 51:97:3c:29:84:78:06:bb:65:25:25:aa:60:fc:e6: 26:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:01:B1:5D:C9:94:B2:4D:C9:A9:04:79:B0:31:06:1F:FF:B7:C8:28 X509v3 Authority Key Identifier: keyid:30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b0:f8:91:2e:e5:26:72:54:56:20:38:cb:cb:6f:e5:95:eb: a8:ce:91:b2:19:c1:1f:43:6d:8a:39:d1:4c:0f:7d:89:5c:49: 1d:3b:73:3d:64:72:e2:ff:42:d6:2b:fd:79:67:7b:fe:67:a5: 98:81:d0:78:7b:63:da:50:1e:ff:93:1c:cb:9c:06:37:0b:c8: 4b:7d:50:37:b4:42:fb:bf:71:72:73:c8:ee:d3:8a:27:77:e3: 65:bb:23:4a:2e:a3:ee:2a:e8:7a:0c:ae:44:a3:f7:bb:0c:0f: a4:7a:e5:7c:9e:76:03:82:b2:72:ca:cf:02:c7:45:9a:9a:74: ec:b7:bd:1a:40:a8:10:bf:0f:00:9a:8d:0e:40:ba:a7:16:20: 35:89:4d:a9:5f:12:1b:a6:11:24:ed:83:ec:07:5f:fb:14:09: 89:98:ba:3c:0c:89:50:e1:fa:42:cc:92:21:38:19:c4:cc:1c: ce:e4:fe:cd:da:e6:46:25:7d:04:2e:80:c1:30:14:35:1c:15: 35:ae:c5:7c:a5:3a:ee:d1:28:35:76:9b:0f:59:3a:e3:85:c4: 57:2a:3e:56:ca:42:9a:a5:35:8a:48:94:85:e2:a2:4a:c7:b7: 29:4a:a5:b3:3c:d5:a8:c1:85:6d:e8:5e:2c:d7:ac:c2:35:52: 3c:d3:0a:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDZQ9ODLOXn6j3Gt/b0o2tbnNLmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJDODAy NkEwQ0U1MTAeFw0yNTA2MDUxMjA2NDFaFw0yNTA2MDgyMjE4NDFaMDMxMTAvBgNV BAMTKDQ4MDFCMTVEQzk5NEIyNERDOUE5MDQ3OUIwMzEwNjFGRkZCN0M4MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtZ/N/UvqMtwkYxFc7V27MKYkl DI9HROFCyvFQPgeeMeVDaST1uWBMJ7fpdJ6/9EPZuXfl4hccl0gsBfGz4kXzGhWW WHFSgHYelzMgX9iDaQ6QKn2cUNhQEFBLkCcR0DKT/9Nhj0CZW5lA87HOONKGerjs Hy/c7z+hyu2zbyh9q6Z2OdebG3BFjktazYOQFiwt23BCxIWjd92XK9tOuAoCc6LK fjwlczOgYT0UZnghQ21I4VoTMVEZWfmDjLDXNgY5hZ+Og1hw+rX6JqIFieoAHlD+ YigO/iQqsYVlnzoiddmuyvsFUR4K7xBjzHUnAVGXPCmEeAa7ZSUlqmD85iZbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSAGxXcmUsk3JqQR5sDEGH/+3yCgwHwYDVR0j BBgwFoAUMPwS6QOuDuh70aHligYsgCagzlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzExYzExMC03YWIxLTRhMzktYjljYS0zYTliMGU4MWJjZjUvMC8zMEZDMTJFOTAz QUUwRUU4N0JEMUExRTU4QTA2MkM4MDI2QTBDRTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJDODAyNkEw Q0U1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDcxMWMxMTAtN2FiMS00YTM5LWI5 Y2EtM2E5YjBlODFiY2Y1LzAvMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJD ODAyNkEwQ0U1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiw+JEu5SZyVFYgOMvLb+WV66jOkbIZwR9D bYo50UwPfYlcSR07cz1kcuL/QtYr/Xlne/5npZiB0Hh7Y9pQHv+THMucBjcLyEt9 UDe0Qvu/cXJzyO7Tiid342W7I0ouo+4q6HoMrkSj97sMD6R65XyedgOCsnLKzwLH RZqadOy3vRpAqBC/DwCajQ5AuqcWIDWJTalfEhumESTtg+wHX/sUCYmYujwMiVDh +kLMkiE4GcTMHM7k/s3a5kYlfQQugMEwFDUcFTWuxXylOu7RKDV2mw9ZOuOFxFcq PlbKQpqlNYpIlIXiokrHtylKpbM81ajBhW3oXizXrMI1UjzTCls= -----END CERTIFICATE-----Generated at Thu Jun 5 18:15:16 2025 by rpki-client