$ rpki-client -vvf repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft File: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft (raw, json) Hash identifier: kVW7n8IIS/uvS53Zn+HS+S6b6gtEah3PV41is3t3rlE= Subject key identifier: 7D:8C:31:53:05:E6:D9:63:26:C9:13:63:5E:6D:75:B1:13:1D:FF:BD Authority key identifier: 30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C Certificate issuer: /CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Certificate serial: 5BF1152292F21792A7DE3F014B103F9A2B1BB982 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft Manifest number: 8C Signing time: Fri 06 Jun 2025 03:10:49 +0000 Manifest this update: Fri 06 Jun 2025 03:05:49 +0000 Manifest next update: Mon 09 Jun 2025 08:33:49 +0000 Files and hashes: 1: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl (hash: m9pYRicYnWeSQppOfcVzTWEc+WVTkGuWcpQGEkBLs/A=) 2: 323030313a6466333a346234303a3a2f34382d3438203d3e20313531393932.roa (hash: HGxSfnzBd2iVo1LQ60/VqdqxnwTeZjj60iyXe+FSbdc=) 3: 3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa (hash: vDiMZmUswEHUL+WVg3L0yTAEa3uzYmOkpzVmYwWd3dE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 08:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f1:15:22:92:f2:17:92:a7:de:3f:01:4b:10:3f:9a:2b:1b:b9:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Validity Not Before: Jun 6 03:05:49 2025 GMT Not After : Jun 9 08:33:49 2025 GMT Subject: CN=7D8C315305E6D96326C913635E6D75B1131DFFBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fb:4d:6d:3c:8a:8a:d0:30:52:75:c7:0e:87: 9b:8d:e6:9f:48:73:1a:f3:75:02:7d:40:f3:35:c3: e4:4a:5d:a2:eb:43:b7:2f:16:cd:c8:fb:88:e8:c6: 56:09:e1:24:d5:ac:34:94:d9:ed:8f:a9:d9:21:aa: e8:78:48:6c:db:c7:77:cb:5e:73:22:9c:6c:9c:33: 1c:1f:d7:c5:f9:5f:a2:eb:c5:3b:23:57:54:ec:5e: 8c:92:c7:30:37:f1:b8:11:b3:ed:a6:67:ca:ad:61: d6:b1:42:ca:cf:9f:38:4d:77:c5:e0:51:8a:64:6e: 42:6b:39:e4:33:d0:89:94:62:2e:0c:d7:db:ea:eb: e9:74:ad:49:24:e9:41:ca:1d:4e:4d:e3:cc:7a:76: af:15:93:65:12:f1:a2:43:1c:bd:13:91:17:e8:1e: f5:24:78:ed:09:6c:64:67:43:55:91:a9:68:8e:e2: 5a:98:8b:16:da:60:41:cd:65:ef:cd:6b:23:c8:be: a9:5d:19:5d:25:57:74:70:ca:91:47:11:07:bc:c6: 30:77:3b:bc:d7:d2:fe:ac:03:c1:8e:46:a0:e2:c6: e0:5d:37:b2:e8:b7:a8:2f:f6:44:7a:a4:63:d4:6d: 43:bc:cd:02:7c:24:5f:6d:ab:c7:2c:f9:a9:81:81: c6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8C:31:53:05:E6:D9:63:26:C9:13:63:5E:6D:75:B1:13:1D:FF:BD X509v3 Authority Key Identifier: keyid:30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:63:d4:32:c5:f0:fb:eb:ce:40:d8:14:95:79:69:f6:11:55: 62:e8:c0:ee:a1:7f:98:b2:4f:bd:14:18:f8:63:39:cc:a9:28: a9:82:0d:db:e6:fd:39:70:fa:0c:1a:f3:83:61:5f:c4:49:37: 63:15:64:7b:63:1a:d8:15:ec:52:2a:b3:f6:d4:26:4a:4c:ca: 2e:54:9e:21:2f:9e:df:86:62:53:ec:bc:b9:ad:f0:3a:9f:fa: 6a:6b:7f:4f:89:40:32:15:f9:58:fa:14:a8:98:dc:44:bb:93: ba:b4:aa:f9:c6:9b:f7:31:8e:48:95:42:e6:c0:ae:59:b7:fa: 7c:51:f2:64:2d:74:a7:61:6d:9e:65:e0:53:4a:56:3d:44:6c: 3e:65:71:d8:86:a2:bd:9c:70:82:93:07:0d:cd:4d:89:f2:22: dc:49:f6:a3:64:19:0d:4a:d1:3b:50:07:e4:fb:49:a8:43:7d: c1:59:6f:f5:be:91:f7:f3:47:83:b8:d2:e7:2a:1b:94:3e:3b: 9c:8e:01:2e:9a:5e:07:5a:1f:dc:97:a0:7d:5a:86:9c:32:a6: d9:8f:ec:47:96:f7:9d:44:af:7a:2d:3d:67:05:1a:5a:84:3b: 27:3d:9f:40:4e:00:89:83:5c:f3:60:17:a0:2e:f0:4d:fe:22: 1b:7f:54:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/EVIpLyF5Kn3j8BSxA/misbuYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0Qzgw NjFBN0IxQzAeFw0yNTA2MDYwMzA1NDlaFw0yNTA2MDkwODMzNDlaMDMxMTAvBgNV BAMTKDdEOEMzMTUzMDVFNkQ5NjMyNkM5MTM2MzVFNkQ3NUIxMTMxREZGQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5+01tPIqK0DBSdccOh5uN5p9I cxrzdQJ9QPM1w+RKXaLrQ7cvFs3I+4joxlYJ4STVrDSU2e2Pqdkhquh4SGzbx3fL XnMinGycMxwf18X5X6LrxTsjV1TsXoySxzA38bgRs+2mZ8qtYdaxQsrPnzhNd8Xg UYpkbkJrOeQz0ImUYi4M19vq6+l0rUkk6UHKHU5N48x6dq8Vk2US8aJDHL0TkRfo HvUkeO0JbGRnQ1WRqWiO4lqYixbaYEHNZe/NayPIvqldGV0lV3RwypFHEQe8xjB3 O7zX0v6sA8GORqDixuBdN7Lot6gv9kR6pGPUbUO8zQJ8JF9tq8cs+amBgcbnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfYwxUwXm2WMmyRNjXm11sRMd/70wHwYDVR0j BBgwFoAUMHpAjiqoImja025vFF1kyAYaexwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTdmMWY0My1jZTdlLTQ5NzAtYWFkMC03ODJiMDE5YmQwM2UvMC8zMDdBNDA4RTJB QTgyMjY4REFEMzZFNkYxNDVENjRDODA2MUE3QjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0QzgwNjFB N0IxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU3ZjFmNDMtY2U3ZS00OTcwLWFh ZDAtNzgyYjAxOWJkMDNlLzAvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0 QzgwNjFBN0IxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADhj1DLF8PvrzkDYFJV5afYRVWLowO6hf5iy T70UGPhjOcypKKmCDdvm/Tlw+gwa84NhX8RJN2MVZHtjGtgV7FIqs/bUJkpMyi5U niEvnt+GYlPsvLmt8Dqf+mprf0+JQDIV+Vj6FKiY3ES7k7q0qvnGm/cxjkiVQubA rlm3+nxR8mQtdKdhbZ5l4FNKVj1EbD5lcdiGor2ccIKTBw3NTYnyItxJ9qNkGQ1K 0TtQB+T7SahDfcFZb/W+kffzR4O40ucqG5Q+O5yOAS6aXgdaH9yXoH1ahpwyptmP 7EeW951Er3otPWcFGlqEOyc9n0BOAImDXPNgF6Au8E3+Iht/VOU= -----END CERTIFICATE-----Generated at Fri Jun 6 16:52:43 2025 by rpki-client