$ rpki-client -vvf repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft File: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft (raw, json) Hash identifier: 7RvA19zXtFig3++KcGH0q+sSFW/Q2WBTWyqFeiBQ08g= Subject key identifier: A8:83:CA:A7:DA:88:4E:B7:5B:B6:67:62:85:7F:A5:EB:D9:EE:86:6C Authority key identifier: B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 Certificate issuer: /CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Certificate serial: 3406B5108A9D5573549C7C9CC11034128B45E8A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft Manifest number: 0168 Signing time: Fri 05 Sep 2025 18:51:06 +0000 Manifest this update: Fri 05 Sep 2025 18:46:06 +0000 Manifest next update: Tue 09 Sep 2025 01:50:06 +0000 Files and hashes: 1: 3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (hash: HxY+qbSnnto1Z4HzXSATggf6s2/jsThuJ9IKEWbevzQ=) 2: B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl (hash: 1FB+HL0f0/yzVkNYniiLhn4CK3dylJE+QU5k9N7IKLA=) 3: 3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (hash: 5p8DeVWE4ixdVzTUD+2z3ALmeQQXrFM+ymQAz8yvg9Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 01:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:06:b5:10:8a:9d:55:73:54:9c:7c:9c:c1:10:34:12:8b:45:e8:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8 Validity Not Before: Sep 5 18:46:06 2025 GMT Not After : Sep 9 01:50:06 2025 GMT Subject: CN=A883CAA7DA884EB75BB66762857FA5EBD9EE866C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b7:d9:38:17:96:bb:d2:a2:6e:b6:4a:c5:28: 03:be:dc:8e:2b:9a:8d:c4:2a:f9:c1:69:41:50:26: df:1b:35:e4:b9:fa:fc:48:4d:e7:03:ce:5c:9c:39: 20:50:92:64:3f:55:1b:0e:4b:31:05:ec:e7:91:02: 44:e9:c4:45:16:09:36:f2:b5:42:26:db:7e:ff:73: d9:4c:4b:99:4a:36:1e:38:b9:9c:13:a2:ce:a7:2e: e9:94:9d:5b:53:53:df:c1:76:be:f9:19:c2:6c:56: b2:b4:56:30:0f:a8:6c:e0:df:e0:5f:20:61:69:47: bb:c2:ea:27:25:1e:47:75:0f:d9:67:1b:cb:19:6c: 61:6d:0c:ef:12:7a:e5:dc:31:d3:d2:84:6d:e2:53: c0:10:cb:38:ba:7f:0f:60:c4:30:ef:15:49:e7:96: d3:39:4f:7e:4f:df:d2:f2:ba:9c:da:75:81:f5:54: cd:48:91:a2:22:e2:42:48:b9:5a:30:3c:3e:06:c9: 4e:8f:ca:4d:8a:0e:e0:97:75:dc:4c:0f:73:25:5a: 33:0d:54:3f:00:63:a5:dc:16:8a:6e:37:8b:a0:22: 4d:30:9f:6a:59:3c:56:14:22:9e:a9:d5:f5:27:c9: 67:e5:c9:ec:35:94:d3:d2:1b:92:a9:5e:0f:ae:ce: 14:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:83:CA:A7:DA:88:4E:B7:5B:B6:67:62:85:7F:A5:EB:D9:EE:86:6C X509v3 Authority Key Identifier: keyid:B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:a4:7d:d7:73:8d:7b:58:09:25:d6:65:67:da:f6:1f:2b:18: 7b:6c:e0:6c:7b:34:ec:6e:db:62:a7:ea:f6:7e:6f:a2:e5:54: 8b:57:2f:dd:1f:ad:08:6c:f1:ae:35:f2:0d:69:0d:c5:21:b4: a1:c3:da:0c:79:f2:60:28:7a:30:51:b7:3d:1c:c4:7b:43:2a: 05:f7:8e:ab:9d:ab:73:48:70:54:08:77:84:45:9c:36:2e:77: e4:28:0d:58:f7:3b:69:e2:a9:5b:a7:18:fb:18:22:31:d5:e7: b9:1e:d1:3b:69:a3:0b:1d:8f:d5:2f:44:fa:85:41:f1:1c:16: 79:65:bc:1d:c0:98:31:d4:38:54:60:3f:57:b6:5c:84:e7:8a: a9:a6:07:b6:0f:06:cf:b4:e7:a0:e8:b2:d4:21:b1:42:4f:80: 6c:14:9b:5b:28:bc:42:db:83:a3:ae:fb:4f:ce:b0:7e:ec:fa: 14:63:47:c3:3e:79:d1:cf:8f:ce:97:66:b7:f0:49:63:df:0a: c8:57:02:61:68:f5:49:ad:dd:bc:ab:84:55:3d:18:27:05:a7: 53:2c:fb:ee:b6:51:81:77:eb:ee:ae:f3:9f:f1:9c:9b:fc:95: d8:e9:ab:db:db:ce:c3:61:6f:4c:2f:53:34:39:60:de:42:a2: 07:5a:2d:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNAa1EIqdVXNUnHycwRA0EotF6KYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlC MTE5NEREODAeFw0yNTA5MDUxODQ2MDZaFw0yNTA5MDkwMTUwMDZaMDMxMTAvBgNV BAMTKEE4ODNDQUE3REE4ODRFQjc1QkI2Njc2Mjg1N0ZBNUVCRDlFRTg2NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAt9k4F5a70qJutkrFKAO+3I4r mo3EKvnBaUFQJt8bNeS5+vxITecDzlycOSBQkmQ/VRsOSzEF7OeRAkTpxEUWCTby tUIm237/c9lMS5lKNh44uZwTos6nLumUnVtTU9/Bdr75GcJsVrK0VjAPqGzg3+Bf IGFpR7vC6iclHkd1D9lnG8sZbGFtDO8SeuXcMdPShG3iU8AQyzi6fw9gxDDvFUnn ltM5T35P39LyupzadYH1VM1IkaIi4kJIuVowPD4GyU6Pyk2KDuCXddxMD3MlWjMN VD8AY6XcFopuN4ugIk0wn2pZPFYUIp6p1fUnyWflyew1lNPSG5KpXg+uzhRNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqIPKp9qITrdbtmdihX+l69nuhmwwHwYDVR0j BBgwFoAUsw/b3nD75wzETzxxC0ZwabEZTdgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDc1MDg4ZS00OWFmLTQ3MmItOWI2Mi04MWU3M2RhYWYxZDYvMC9CMzBGREJERTcw RkJFNzBDQzQ0RjNDNzEwQjQ2NzA2OUIxMTk0REQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0NjcwNjlCMTE5 NEREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ3NTA4OGUtNDlhZi00NzJiLTli NjItODFlNzNkYWFmMWQ2LzAvQjMwRkRCREU3MEZCRTcwQ0M0NEYzQzcxMEI0Njcw NjlCMTE5NEREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCkfddzjXtYCSXWZWfa9h8rGHts4Gx7NOxu 22Kn6vZ+b6LlVItXL90frQhs8a418g1pDcUhtKHD2gx58mAoejBRtz0cxHtDKgX3 jqudq3NIcFQId4RFnDYud+QoDVj3O2niqVunGPsYIjHV57ke0Ttpowsdj9UvRPqF QfEcFnllvB3AmDHUOFRgP1e2XITniqmmB7YPBs+056DostQhsUJPgGwUm1sovELb g6Ou+0/OsH7s+hRjR8M+edHPj86XZrfwSWPfCshXAmFo9Umt3byrhFU9GCcFp1Ms ++62UYF36+6u85/xnJv8ldjpq9vbzsNhb0wvUzQ5YN5CogdaLWs= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:43 2025 by rpki-client