$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft File: 430E302040DE11D8C84431B3397113EC969694A0.mft (raw, json) Hash identifier: sFMWVCUxeRXYTDqHLpBebdz4nQPplTQH0jcPjzaSmvc= Subject key identifier: 33:1F:FD:5A:BE:FD:39:39:3F:08:87:90:65:2A:CE:75:70:F8:FE:B6 Authority key identifier: 43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 Certificate issuer: /CN=430E302040DE11D8C84431B3397113EC969694A0 Certificate serial: 51A8B4C53C6F6C8401569F9F53D9DBC3AB6C7F6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft Manifest number: 04A2 Signing time: Sun 07 Sep 2025 03:21:52 +0000 Manifest this update: Sun 07 Sep 2025 03:16:52 +0000 Manifest next update: Wed 10 Sep 2025 10:22:52 +0000 Files and hashes: 1: 430E302040DE11D8C84431B3397113EC969694A0.crl (hash: ND82ZmnjDwM2n4KYIuSk6jMMBS8txEPL8XDHHurjDGs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:a8:b4:c5:3c:6f:6c:84:01:56:9f:9f:53:d9:db:c3:ab:6c:7f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430E302040DE11D8C84431B3397113EC969694A0 Validity Not Before: Sep 7 03:16:52 2025 GMT Not After : Sep 10 10:22:52 2025 GMT Subject: CN=331FFD5ABEFD39393F088790652ACE7570F8FEB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:24:4c:18:b5:43:0d:d4:63:3e:24:07:df:37: de:5c:b6:3a:20:a0:92:71:c9:32:a8:57:94:16:d6: c3:e6:5d:c4:20:3a:1b:83:df:b8:ce:d6:c8:f6:f5: b8:6c:86:4f:d1:b0:1f:60:44:5d:9c:57:db:8a:b3: 6c:2e:b1:38:45:52:6a:ce:b4:d4:c6:9f:dd:e4:25: 71:a1:6f:a3:9d:0a:3f:6f:3f:ef:c9:fc:e1:77:27: 51:d1:e1:d1:16:bd:70:26:8f:06:6f:c2:6b:8c:07: 12:61:b0:27:d3:3a:85:94:57:e1:76:f9:43:10:a0: 57:18:56:6a:ce:e0:08:b4:b9:7a:9a:e6:1a:21:d4: 56:ed:df:d7:06:50:d8:3a:1f:40:d8:6e:b1:9c:28: aa:db:e4:06:95:e7:32:b7:0d:58:4b:bf:d1:cf:5e: 4f:1a:af:ca:cd:85:2a:e1:4e:b4:63:40:36:f0:15: 24:bd:4e:8a:17:b1:cc:8c:c2:fc:4b:65:bf:ae:02: 99:00:06:06:2d:4b:f9:e5:4c:4f:cf:eb:5c:a8:0c: 85:c8:c0:0c:15:b5:14:63:1a:09:dc:9f:be:fc:d1: cc:42:fc:03:6f:1b:0d:e3:66:36:8c:5d:70:73:52: 44:dd:54:47:1a:c0:aa:c7:a1:d2:10:67:f0:27:c9: fa:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1F:FD:5A:BE:FD:39:39:3F:08:87:90:65:2A:CE:75:70:F8:FE:B6 X509v3 Authority Key Identifier: keyid:43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:89:96:e6:29:84:4b:8e:b8:58:59:fe:ac:4a:58:d2:33:37: 60:f3:b7:d0:d0:8f:ef:3f:14:6f:c6:0b:49:d0:92:56:09:b3: 3f:c1:15:d7:f9:1a:af:68:18:35:29:07:f5:09:0f:fe:a7:9c: 35:94:3f:3d:fc:a8:a0:d0:1f:c2:15:f6:9b:ab:ab:c2:56:9b: 21:f2:6c:a9:78:4b:a8:84:73:8e:70:a8:3c:8c:cd:04:b5:44: d7:db:d2:74:05:6d:56:96:10:ee:c1:cc:cb:64:c5:39:67:36: 6f:d5:64:5e:6e:88:15:ba:24:56:e4:d5:d3:03:74:db:e3:47: bf:98:81:c5:59:bc:c4:e9:db:de:13:e2:1c:45:a8:d3:f9:e7: 33:30:7f:d9:46:fe:d8:d9:53:d0:64:b6:cd:81:92:82:92:a2: 7a:68:91:61:c1:ac:83:1f:24:ae:e4:f6:ef:d9:8f:33:14:f8: 1e:0a:e6:3e:14:db:b5:8a:99:e6:51:37:f9:a3:7e:b0:95:8d: 07:da:9a:9d:b1:00:3e:b9:59:bf:d8:9f:c6:f4:37:b8:cd:66: 90:9a:df:30:cc:18:72:6c:68:10:c1:e4:55:98:e1:da:66:23: 82:7a:36:06:cc:83:d7:70:4f:e5:ae:e6:bf:57:d1:08:17:3e: 20:e9:7b:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUai0xTxvbIQBVp+fU9nbw6tsf2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5 Njk2OTRBMDAeFw0yNTA5MDcwMzE2NTJaFw0yNTA5MTAxMDIyNTJaMDMxMTAvBgNV BAMTKDMzMUZGRDVBQkVGRDM5MzkzRjA4ODc5MDY1MkFDRTc1NzBGOEZFQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTJEwYtUMN1GM+JAffN95ctjog oJJxyTKoV5QW1sPmXcQgOhuD37jO1sj29bhshk/RsB9gRF2cV9uKs2wusThFUmrO tNTGn93kJXGhb6OdCj9vP+/J/OF3J1HR4dEWvXAmjwZvwmuMBxJhsCfTOoWUV+F2 +UMQoFcYVmrO4Ai0uXqa5hoh1Fbt39cGUNg6H0DYbrGcKKrb5AaV5zK3DVhLv9HP Xk8ar8rNhSrhTrRjQDbwFSS9TooXscyMwvxLZb+uApkABgYtS/nlTE/P61yoDIXI wAwVtRRjGgncn7780cxC/ANvGw3jZjaMXXBzUkTdVEcawKrHodIQZ/AnyfpTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMx/9Wr79OTk/CIeQZSrOdXD4/rYwHwYDVR0j BBgwFoAUQw4wIEDeEdjIRDGzOXET7JaWlKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTllMDFiYS01OWM5LTQwNDctYWMwYi1lOWIyZmU2NTg1M2MvMC80MzBFMzAyMDQw REUxMUQ4Qzg0NDMxQjMzOTcxMTNFQzk2OTY5NEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5Njk2 OTRBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEz RUM5Njk2OTRBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmJluYphEuOuFhZ/qxKWNIzN2Dzt9DQj+8/ FG/GC0nQklYJsz/BFdf5Gq9oGDUpB/UJD/6nnDWUPz38qKDQH8IV9purq8JWmyHy bKl4S6iEc45wqDyMzQS1RNfb0nQFbVaWEO7BzMtkxTlnNm/VZF5uiBW6JFbk1dMD dNvjR7+YgcVZvMTp294T4hxFqNP55zMwf9lG/tjZU9Bkts2BkoKSonpokWHBrIMf JK7k9u/ZjzMU+B4K5j4U27WKmeZRN/mjfrCVjQfamp2xAD65Wb/Yn8b0N7jNZpCa 3zDMGHJsaBDB5FWY4dpmI4J6NgbMg9dwT+Wu5r9X0QgXPiDpe0g= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:50 2025 by rpki-client