$ rpki-client -vvf repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft File: 30C896473FC5DE403F4651059F6BE1586BFAC473.mft (raw, json) Hash identifier: VBNIsIVIuSnARu+UcGRCq1FxgsedBEgJF+DS5HuJfxM= Subject key identifier: AD:2F:1A:CB:A6:07:D8:CE:8C:A4:E6:02:F9:C0:E7:09:FE:5C:B3:39 Authority key identifier: 30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 Certificate issuer: /CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Certificate serial: 5A0F5BE753034FB5A6894B141A39844C66B304AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft Manifest number: 83 Signing time: Tue 10 Jun 2025 06:31:42 +0000 Manifest this update: Tue 10 Jun 2025 06:26:42 +0000 Manifest next update: Fri 13 Jun 2025 15:49:42 +0000 Files and hashes: 1: 3135372e36362e36362e302f32342d3234203d3e20313532373831.roa (hash: x/vtNdgftiP2gNHQRXmqF+bNIt+0K74KbEvvSueFvXY=) 2: 3135372e36362e36372e302f32342d3234203d3e20313532373831.roa (hash: jM3o+qLgLitpWG9aIDTu7g7FqrNoiH7dHWh51KuZSvY=) 3: 30C896473FC5DE403F4651059F6BE1586BFAC473.crl (hash: lugJXEvu7v+F9blmPYaRMuV/YeVHTHciI5sqMkoGvRE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 09:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:0f:5b:e7:53:03:4f:b5:a6:89:4b:14:1a:39:84:4c:66:b3:04:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Validity Not Before: Jun 10 06:26:42 2025 GMT Not After : Jun 13 15:49:42 2025 GMT Subject: CN=AD2F1ACBA607D8CE8CA4E602F9C0E709FE5CB339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9f:28:2b:f8:c2:b3:ab:55:4d:19:23:2f:65: 15:1b:88:30:d5:7c:42:92:70:37:ef:5d:4f:4d:31: b0:89:ee:83:e5:9a:11:5c:16:1c:21:ae:f9:dd:97: 2f:ba:59:11:e7:e8:cc:13:26:1f:e4:22:61:35:e7: c5:df:13:c6:f6:f0:0d:8a:68:03:e4:96:16:bb:c3: a0:cb:8f:a1:81:0d:da:e3:a8:24:45:b5:73:4c:91: c8:33:3a:ae:91:9f:b1:79:58:4a:73:c5:94:c0:2c: bc:56:93:d6:66:42:42:fa:bd:f6:d8:4c:4f:0d:a9: 68:06:29:01:6c:0f:58:b2:1f:b7:d3:53:5e:a0:c7: ce:ab:fd:9e:39:3b:79:60:b5:10:f5:f1:aa:14:18: 4e:00:07:c7:c8:e5:ba:1d:ab:09:18:0c:44:93:b0: 5e:95:8c:8e:46:9c:e3:6b:32:99:aa:3f:e4:cc:38: 20:b0:83:40:42:2f:a1:73:d7:13:af:d8:13:30:2a: 9f:34:89:4f:3c:5c:7d:27:18:fd:72:17:eb:fe:88: 55:ba:2f:a3:16:c0:82:4e:34:ee:ab:19:76:b4:f8: 5b:20:72:a5:3d:ac:de:63:5d:af:00:36:72:e2:69: e0:cc:1c:34:e7:f5:7f:26:2a:0b:f2:47:b0:be:7e: 70:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2F:1A:CB:A6:07:D8:CE:8C:A4:E6:02:F9:C0:E7:09:FE:5C:B3:39 X509v3 Authority Key Identifier: keyid:30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b1:24:0f:f3:24:81:17:f9:b4:4f:f2:7e:3d:74:be:59:6e: 33:63:37:c9:4d:ea:4d:99:7b:de:36:a6:d7:ce:d4:b5:74:f7: 27:52:95:54:38:97:b4:4d:a2:f2:62:2f:8d:55:ac:bb:a1:b7: 5a:a2:6b:e0:c2:90:a2:7f:1c:6c:30:11:22:2e:2b:16:d3:db: a0:28:b2:40:99:32:39:72:eb:54:2e:37:5c:5f:86:f6:e0:73: a2:bf:42:ac:66:fa:0d:e4:a0:6d:e6:16:df:0c:d1:b0:48:ac: 77:91:dc:f3:63:59:11:5c:c2:65:45:78:9e:da:4e:9e:09:1f: 96:24:d5:2a:35:f4:bb:8d:98:61:27:fc:19:3c:2f:db:5c:73: 97:96:d1:b5:7b:bd:30:63:2f:8e:c8:40:af:0e:cf:4e:10:41: fe:ed:40:dd:27:4a:5a:62:c0:71:38:25:22:8d:55:19:de:d5: 84:39:97:f4:ad:a7:aa:ae:04:76:52:70:5e:4e:aa:59:24:db: 4b:d5:5f:a1:54:05:92:1f:37:7e:bb:65:7f:d5:0a:14:4b:f6: 1c:6f:84:e4:36:40:54:4a:1f:05:33:f8:07:75:80:d0:21:af: 64:1a:7a:32:e2:48:6c:9e:8e:4b:90:a4:5e:f6:de:71:e5:4d: d9:07:23:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWg9b51MDT7WmiUsUGjmETGazBK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2 QkZBQzQ3MzAeFw0yNTA2MTAwNjI2NDJaFw0yNTA2MTMxNTQ5NDJaMDMxMTAvBgNV BAMTKEFEMkYxQUNCQTYwN0Q4Q0U4Q0E0RTYwMkY5QzBFNzA5RkU1Q0IzMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxnygr+MKzq1VNGSMvZRUbiDDV fEKScDfvXU9NMbCJ7oPlmhFcFhwhrvndly+6WRHn6MwTJh/kImE158XfE8b28A2K aAPklha7w6DLj6GBDdrjqCRFtXNMkcgzOq6Rn7F5WEpzxZTALLxWk9ZmQkL6vfbY TE8NqWgGKQFsD1iyH7fTU16gx86r/Z45O3lgtRD18aoUGE4AB8fI5bodqwkYDEST sF6VjI5GnONrMpmqP+TMOCCwg0BCL6Fz1xOv2BMwKp80iU88XH0nGP1yF+v+iFW6 L6MWwIJONO6rGXa0+FsgcqU9rN5jXa8ANnLiaeDMHDTn9X8mKgvyR7C+fnA5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrS8ay6YH2M6MpOYC+cDnCf5cszkwHwYDVR0j BBgwFoAUMMiWRz/F3kA/RlEFn2vhWGv6xHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjcwYWU3Ni05NTk0LTQ5ODAtYjQxMC00OTFhNjMxOWZmM2EvMC8zMEM4OTY0NzNG QzVERTQwM0Y0NjUxMDU5RjZCRTE1ODZCRkFDNDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2QkZB QzQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY3MGFlNzYtOTU5NC00OTgwLWI0 MTAtNDkxYTYzMTlmZjNhLzAvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUx NTg2QkZBQzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWxJA/zJIEX+bRP8n49dL5ZbjNjN8lN6k2Z e942ptfO1LV09ydSlVQ4l7RNovJiL41VrLuht1qia+DCkKJ/HGwwESIuKxbT26Ao skCZMjly61QuN1xfhvbgc6K/Qqxm+g3koG3mFt8M0bBIrHeR3PNjWRFcwmVFeJ7a Tp4JH5Yk1So19LuNmGEn/Bk8L9tcc5eW0bV7vTBjL47IQK8Oz04QQf7tQN0nSlpi wHE4JSKNVRne1YQ5l/Stp6quBHZScF5Oqlkk20vVX6FUBZIfN367ZX/VChRL9hxv hOQ2QFRKHwUz+Ad1gNAhr2QaejLiSGyejkuQpF723nHlTdkHI8Y= -----END CERTIFICATE-----Generated at Tue Jun 10 23:55:37 2025 by rpki-client