$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft File: 430E302040DE11D8C84431B3397113EC969694A0.mft (raw, json) Hash identifier: qA6Mq5ee6LQQv40aNAhj0wjOJUWEHY1ft6ddrpNNzno= Subject key identifier: 0D:9B:C9:C6:7D:56:76:2B:0C:85:E7:18:97:9A:F8:8C:8A:F7:AB:4B Authority key identifier: 43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 Certificate issuer: /CN=430E302040DE11D8C84431B3397113EC969694A0 Certificate serial: 24B963A03E962A6426246D876D9062ECF92293C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft Manifest number: 0478 Signing time: Tue 03 Jun 2025 18:03:48 +0000 Manifest this update: Tue 03 Jun 2025 17:58:48 +0000 Manifest next update: Sat 07 Jun 2025 01:48:48 +0000 Files and hashes: 1: 430E302040DE11D8C84431B3397113EC969694A0.crl (hash: iXC0SpxDSOc1cNzJciiWWc0X80MQEow3A5dCwRfcQUs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b9:63:a0:3e:96:2a:64:26:24:6d:87:6d:90:62:ec:f9:22:93:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430E302040DE11D8C84431B3397113EC969694A0 Validity Not Before: Jun 3 17:58:48 2025 GMT Not After : Jun 7 01:48:48 2025 GMT Subject: CN=0D9BC9C67D56762B0C85E718979AF88C8AF7AB4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:83:55:f1:b1:10:34:e3:c9:41:fe:cf:75:65: 36:53:46:08:76:e6:a8:ca:e0:a2:d0:a5:44:9d:81: 3c:59:3f:60:90:80:03:95:c4:c4:c6:01:df:1b:a5: 0d:75:72:33:a9:95:48:84:3e:9b:c6:66:ab:f7:4a: 1d:e4:4e:0a:44:60:b0:1f:e1:06:24:ab:c6:3f:7e: 86:82:c4:4c:52:11:d1:80:a3:b7:79:7a:dc:5b:39: 07:6e:f9:7e:1a:0b:d1:7e:74:81:f0:22:14:60:50: 4e:3a:ad:50:12:fa:70:08:eb:2b:39:c4:f0:3c:1b: d6:be:f6:08:fd:73:3f:db:36:e5:28:0b:0f:f0:03: 08:45:16:a2:74:cd:b2:86:eb:b2:c2:18:1f:7a:91: 48:f9:69:c9:68:76:42:c9:29:9e:ad:8c:bd:87:93: 4f:25:32:09:cb:d0:3e:62:cd:4d:3c:0c:e4:9d:ed: 65:80:9c:e0:08:11:12:a3:fa:f6:d2:94:2a:71:c9: 39:61:a5:77:5c:e5:ef:30:0f:9c:c4:ec:cc:d2:b2: 95:80:0c:ac:78:fa:7e:ce:c0:62:26:cb:f8:4e:80: f5:45:ef:44:cf:92:3a:4a:d3:7c:07:d4:9d:b9:f0: 10:8b:8d:24:92:2d:f7:b9:16:2f:cd:8b:bc:a6:ce: 37:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9B:C9:C6:7D:56:76:2B:0C:85:E7:18:97:9A:F8:8C:8A:F7:AB:4B X509v3 Authority Key Identifier: keyid:43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:bb:1d:e7:77:2b:0f:d4:60:de:64:9e:d3:9f:1e:b7:71:54: de:c8:6e:bc:b5:08:81:17:ed:a9:6b:94:42:b4:7b:16:fd:1a: 71:0e:0f:b7:77:35:80:b6:de:7a:d0:57:58:0a:d7:27:17:b9: 7d:fb:78:02:0f:be:a8:39:12:e1:ba:aa:00:03:31:8f:4f:ac: 5f:32:87:11:10:e5:93:a0:0f:0e:85:82:e2:38:df:4d:cb:4d: 3b:d9:71:93:d5:57:8b:8e:57:e3:f4:61:1b:24:e0:08:6c:35: 2c:b5:bb:ca:4a:1f:70:e3:74:70:29:34:f2:aa:7e:0e:67:13: e7:c6:2a:60:1e:c8:57:3a:be:98:5f:ff:b0:f5:40:3b:31:41: 73:9e:19:df:99:f7:11:e3:06:99:c3:71:a2:e2:48:72:c3:3c: 22:d9:43:f0:29:7a:7d:e4:65:b4:fb:df:1f:67:94:29:be:c2: 06:f6:46:10:dc:86:d6:60:48:60:52:3b:a2:54:fa:2f:20:a6: f8:3f:8f:43:db:2e:c0:80:86:29:7f:08:76:0d:90:52:bb:87: eb:a3:79:80:41:b9:fe:92:fa:ec:68:f3:32:ca:11:19:45:fd: b9:a1:e7:7d:d6:05:c8:73:01:f4:b0:b4:7e:06:44:b1:ed:41: d6:3f:23:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJLljoD6WKmQmJG2HbZBi7Pkik8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5 Njk2OTRBMDAeFw0yNTA2MDMxNzU4NDhaFw0yNTA2MDcwMTQ4NDhaMDMxMTAvBgNV BAMTKDBEOUJDOUM2N0Q1Njc2MkIwQzg1RTcxODk3OUFGODhDOEFGN0FCNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwg1XxsRA048lB/s91ZTZTRgh2 5qjK4KLQpUSdgTxZP2CQgAOVxMTGAd8bpQ11cjOplUiEPpvGZqv3Sh3kTgpEYLAf 4QYkq8Y/foaCxExSEdGAo7d5etxbOQdu+X4aC9F+dIHwIhRgUE46rVAS+nAI6ys5 xPA8G9a+9gj9cz/bNuUoCw/wAwhFFqJ0zbKG67LCGB96kUj5aclodkLJKZ6tjL2H k08lMgnL0D5izU08DOSd7WWAnOAIERKj+vbSlCpxyTlhpXdc5e8wD5zE7MzSspWA DKx4+n7OwGImy/hOgPVF70TPkjpK03wH1J258BCLjSSSLfe5Fi/Ni7ymzjfnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDZvJxn1WdisMhecYl5r4jIr3q0swHwYDVR0j BBgwFoAUQw4wIEDeEdjIRDGzOXET7JaWlKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTllMDFiYS01OWM5LTQwNDctYWMwYi1lOWIyZmU2NTg1M2MvMC80MzBFMzAyMDQw REUxMUQ4Qzg0NDMxQjMzOTcxMTNFQzk2OTY5NEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5Njk2 OTRBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEz RUM5Njk2OTRBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEC7Hed3Kw/UYN5kntOfHrdxVN7Ibry1CIEX 7alrlEK0exb9GnEOD7d3NYC23nrQV1gK1ycXuX37eAIPvqg5EuG6qgADMY9PrF8y hxEQ5ZOgDw6FguI4303LTTvZcZPVV4uOV+P0YRsk4AhsNSy1u8pKH3DjdHApNPKq fg5nE+fGKmAeyFc6vphf/7D1QDsxQXOeGd+Z9xHjBpnDcaLiSHLDPCLZQ/Apen3k ZbT73x9nlCm+wgb2RhDchtZgSGBSO6JU+i8gpvg/j0PbLsCAhil/CHYNkFK7h+uj eYBBuf6S+uxo8zLKERlF/bmh533WBchzAfSwtH4GRLHtQdY/IxE= -----END CERTIFICATE-----Generated at Tue Jun 3 23:26:33 2025 by rpki-client