$ rpki-client -vvf repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft File: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft (raw, json) Hash identifier: sYmIIi50/hh2EdQwBPnicZw0Nu+5soeU69USbDrU3BM= Subject key identifier: C2:A5:1A:FC:6B:C1:AE:61:C8:77:9C:81:95:B8:5D:A8:9E:4B:65:8F Authority key identifier: 30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C Certificate issuer: /CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Certificate serial: 137B01E33102AE8C561D2DC88BAC328926304D53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft Manifest number: B4 Signing time: Wed 03 Sep 2025 05:30:50 +0000 Manifest this update: Wed 03 Sep 2025 05:25:50 +0000 Manifest next update: Sat 06 Sep 2025 11:59:50 +0000 Files and hashes: 1: 323030313a6466333a346234303a3a2f34382d3438203d3e20313531393932.roa (hash: H0tMLPWT/xMzJjo+X3cfcs6u4yhbTyToHbzV+AgsIh8=) 2: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl (hash: tE32/+/FSW0TFQIAf+d4DqVU/BaNxa1c6HVeo5gPInI=) 3: 3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa (hash: 067j8zIqWRfiKYsv/8PNz7miyq3F672QljWEkk7m/9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 11:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:7b:01:e3:31:02:ae:8c:56:1d:2d:c8:8b:ac:32:89:26:30:4d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Validity Not Before: Sep 3 05:25:50 2025 GMT Not After : Sep 6 11:59:50 2025 GMT Subject: CN=C2A51AFC6BC1AE61C8779C8195B85DA89E4B658F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:aa:57:39:7c:d2:43:e2:92:57:b2:ae:f1:f6: 21:ca:cc:03:e6:32:df:41:85:cb:99:af:2c:29:13: 4e:e2:93:89:b1:4e:ba:7b:62:b0:52:40:76:1a:02: b1:d4:9c:6a:53:5f:e3:49:ce:9a:b7:bb:7b:b4:78: 10:27:8d:28:2e:eb:f6:cb:c9:71:ae:95:e8:4f:e5: de:b1:f3:e5:02:04:50:31:45:5e:08:50:85:64:72: a1:48:25:7d:88:61:81:8c:31:f9:3e:f1:bc:52:b8: ba:92:2b:88:ad:f7:f8:d9:1f:87:2b:a7:de:ee:f4: b9:32:ad:6b:52:48:59:c3:40:40:c2:05:18:30:2d: 7b:a5:f0:d0:d4:30:b8:a2:45:73:c7:78:ea:66:a5: e1:b1:64:f3:6f:f6:a6:47:02:19:c0:e9:90:7b:3f: ea:31:72:b9:91:b8:10:f2:dd:f9:b9:5e:2f:58:7e: 39:2a:db:ac:32:5d:cf:44:9f:52:1b:eb:38:79:35: be:ae:a3:00:8b:30:80:fc:f3:b8:eb:f2:b7:11:51: 1b:92:29:d9:02:41:f1:2a:11:cc:44:55:b3:a8:1b: 13:c4:f1:9e:dd:24:4d:9c:b4:f6:28:12:8a:a8:10: 36:26:f0:bc:0d:61:bf:bb:8b:45:3a:92:89:34:8c: e2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A5:1A:FC:6B:C1:AE:61:C8:77:9C:81:95:B8:5D:A8:9E:4B:65:8F X509v3 Authority Key Identifier: keyid:30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:07:39:dd:29:c3:be:e5:8e:b7:0e:75:d5:3c:6a:e7:2e:a6: 22:c1:72:38:c2:e7:bf:59:1e:b6:24:4b:90:37:ea:29:53:49: e8:f3:5f:14:77:40:72:66:f7:68:b6:64:fa:22:22:9a:7c:44: 97:e5:0c:14:6a:d5:90:b6:cd:4d:78:9b:ab:b6:23:af:bc:d9: 73:ee:d0:86:9b:65:74:38:5e:bf:31:49:9c:db:6c:13:50:95: 5b:be:85:62:67:2a:6e:e8:8c:81:a4:b0:2e:90:0b:e5:88:b1: 29:d3:43:42:c8:84:8d:4d:c9:72:d4:23:f1:6e:4e:74:c7:7e: 00:d9:35:dd:b4:86:83:5d:88:6e:db:df:e2:7f:0f:3e:df:6a: 6e:af:ab:e8:45:6c:ba:c6:92:d0:2a:f2:7b:2e:f0:28:09:a5: e1:07:b7:45:51:ae:20:c8:53:73:48:f8:ad:e7:6b:9d:18:44: 32:31:0f:93:a8:82:73:80:06:b8:af:fa:5c:50:9f:1a:2f:12: 89:d6:bb:11:b9:15:69:d8:28:b8:8f:cf:ea:13:75:d9:e9:75: 9b:29:8f:22:bc:38:df:e7:42:54:b2:20:e4:a9:8d:55:6d:6a: ad:e6:5e:a8:74:8f:8f:bb:90:38:be:a5:ba:82:bb:9a:ae:86: b9:6e:3f:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE3sB4zECroxWHS3Ii6wyiSYwTVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0Qzgw NjFBN0IxQzAeFw0yNTA5MDMwNTI1NTBaFw0yNTA5MDYxMTU5NTBaMDMxMTAvBgNV BAMTKEMyQTUxQUZDNkJDMUFFNjFDODc3OUM4MTk1Qjg1REE4OUU0QjY1OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdqlc5fNJD4pJXsq7x9iHKzAPm Mt9BhcuZrywpE07ik4mxTrp7YrBSQHYaArHUnGpTX+NJzpq3u3u0eBAnjSgu6/bL yXGulehP5d6x8+UCBFAxRV4IUIVkcqFIJX2IYYGMMfk+8bxSuLqSK4it9/jZH4cr p97u9LkyrWtSSFnDQEDCBRgwLXul8NDUMLiiRXPHeOpmpeGxZPNv9qZHAhnA6ZB7 P+oxcrmRuBDy3fm5Xi9Yfjkq26wyXc9En1Ib6zh5Nb6uowCLMID887jr8rcRURuS KdkCQfEqEcxEVbOoGxPE8Z7dJE2ctPYoEoqoEDYm8LwNYb+7i0U6kok0jOLvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwqUa/GvBrmHId5yBlbhdqJ5LZY8wHwYDVR0j BBgwFoAUMHpAjiqoImja025vFF1kyAYaexwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTdmMWY0My1jZTdlLTQ5NzAtYWFkMC03ODJiMDE5YmQwM2UvMC8zMDdBNDA4RTJB QTgyMjY4REFEMzZFNkYxNDVENjRDODA2MUE3QjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0QzgwNjFB N0IxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU3ZjFmNDMtY2U3ZS00OTcwLWFh ZDAtNzgyYjAxOWJkMDNlLzAvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0 QzgwNjFBN0IxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIoHOd0pw77ljrcOddU8aucupiLBcjjC579Z HrYkS5A36ilTSejzXxR3QHJm92i2ZPoiIpp8RJflDBRq1ZC2zU14m6u2I6+82XPu 0IabZXQ4Xr8xSZzbbBNQlVu+hWJnKm7ojIGksC6QC+WIsSnTQ0LIhI1NyXLUI/Fu TnTHfgDZNd20hoNdiG7b3+J/Dz7fam6vq+hFbLrGktAq8nsu8CgJpeEHt0VRriDI U3NI+K3na50YRDIxD5OognOABriv+lxQnxovEonWuxG5FWnYKLiPz+oTddnpdZsp jyK8ON/nQlSyIOSpjVVtaq3mXqh0j4+7kDi+pbqCu5quhrluP6U= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:32 2025 by rpki-client