$ rpki-client -vvf repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft File: 30CE8572EA9DEDA805151BBD165E699D1191FED0.mft (raw, json) Hash identifier: YJV36GjU//nLf0jqU0goZc+QE3vpX6lcmVMwb0djrlQ= Subject key identifier: 51:C0:A1:71:02:47:55:6E:CA:5B:6A:D5:A4:2A:DD:BE:AD:68:8E:DF Authority key identifier: 30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0 Certificate issuer: /CN=30CE8572EA9DEDA805151BBD165E699D1191FED0 Certificate serial: 1DA67C7D580015B5579C7F9936DF8105008C6976 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft Manifest number: 017F Signing time: Thu 04 Sep 2025 08:31:43 +0000 Manifest this update: Thu 04 Sep 2025 08:26:43 +0000 Manifest next update: Sun 07 Sep 2025 15:47:43 +0000 Files and hashes: 1: 3130332e3231312e3139362e302f32342d3234203d3e20313530393532.roa (hash: Q2j6s7F7V0sOCSPl3aHs6rPupunQzCX/dgkjx2YSfjU=) 2: 30CE8572EA9DEDA805151BBD165E699D1191FED0.crl (hash: rf9X4MlCsmG8pXCBUCIf/hDbR6MLG+Ww5WRLDp5Z9GY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 15:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a6:7c:7d:58:00:15:b5:57:9c:7f:99:36:df:81:05:00:8c:69:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30CE8572EA9DEDA805151BBD165E699D1191FED0 Validity Not Before: Sep 4 08:26:43 2025 GMT Not After : Sep 7 15:47:43 2025 GMT Subject: CN=51C0A1710247556ECA5B6AD5A42ADDBEAD688EDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:2c:b5:ac:9d:bd:7d:b2:e3:12:75:23:c1: 34:2d:5c:7d:4f:ed:68:82:1b:37:38:33:f3:2a:54: 15:51:00:78:b3:38:43:4a:93:1a:5e:52:46:34:21: 44:76:68:79:95:48:bd:e2:e5:50:24:7e:0e:cd:c0: 6d:86:98:43:4a:82:2c:a3:42:f7:dd:cb:0e:9d:06: e3:05:e7:34:71:0d:b1:78:4f:81:a6:ed:2e:cd:8d: 35:86:71:da:e4:cb:6f:36:03:84:c2:b1:54:1e:b0: cc:30:03:9a:02:ee:15:f5:a8:9a:d8:8c:e4:8d:50: fb:44:a1:90:9e:40:ee:c2:96:22:91:5a:56:b5:68: 80:cf:89:cf:02:6b:3f:f8:42:ba:56:53:72:47:00: 85:b2:db:d0:2e:59:43:46:d5:c5:a6:e9:bf:5f:8f: b5:b8:2a:97:b2:a6:68:b3:f3:60:70:c5:6a:2b:e9: 94:6f:c8:9e:ca:cf:ce:ad:55:12:56:1e:a9:de:05: d4:ae:8f:3a:6d:b9:48:e8:b1:ff:e9:62:f9:b4:b5: 87:b3:17:ad:1d:a3:de:8b:87:ec:ef:66:8a:16:3b: 30:4a:ce:b2:05:ec:26:9e:db:14:9d:b9:89:a7:0e: c4:ef:eb:19:d3:e7:0d:84:a3:84:e4:7b:16:46:85: 4e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C0:A1:71:02:47:55:6E:CA:5B:6A:D5:A4:2A:DD:BE:AD:68:8E:DF X509v3 Authority Key Identifier: keyid:30:CE:85:72:EA:9D:ED:A8:05:15:1B:BD:16:5E:69:9D:11:91:FE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30CE8572EA9DEDA805151BBD165E699D1191FED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c03802e2-03af-4dd0-8dce-54c28a72563d/0/30CE8572EA9DEDA805151BBD165E699D1191FED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:7f:73:09:50:2a:7c:db:d5:b0:02:b0:da:b1:5b:3e:6e:cc: 42:83:49:ec:d2:8e:53:ef:85:28:70:64:f3:db:e3:df:3d:2e: fe:45:5b:f1:76:f7:b6:80:6a:a3:f4:25:17:23:13:e0:24:76: bb:c1:6b:cf:34:fd:c4:44:3d:b6:8b:b9:11:36:8c:2e:c4:46: a7:3c:35:02:d2:68:a0:89:b6:76:17:9e:11:9f:b7:56:88:82: 0c:b7:bd:b5:6b:72:3c:40:d8:20:7d:a6:74:55:91:b7:55:ae: f5:0a:55:90:7b:3d:f6:41:c2:7d:59:0a:e5:7f:df:e9:8f:8d: 1f:ca:cb:f1:ec:c6:a1:db:d5:76:bc:03:88:fb:f3:11:d5:9b: 5a:88:e8:43:36:5c:2a:f9:3e:86:96:e7:09:aa:bd:9d:92:57: fc:9e:c5:83:23:42:40:e1:3c:75:3b:15:da:61:2d:8c:c8:73: 88:58:ee:51:25:f2:90:62:e5:8c:c0:f6:24:3c:3a:48:63:78: bd:f9:13:c8:cd:7e:6c:65:5d:e3:5e:9a:0a:f6:03:69:30:f7: 2c:b2:51:d8:76:cd:6d:c3:10:98:a9:bc:f6:9f:98:e7:f1:85: 82:8d:7b:ab:95:f0:2a:ea:d8:bb:50:50:99:74:38:8d:24:26: 80:7a:33:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHaZ8fVgAFbVXnH+ZNt+BBQCMaXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5OUQx MTkxRkVEMDAeFw0yNTA5MDQwODI2NDNaFw0yNTA5MDcxNTQ3NDNaMDMxMTAvBgNV BAMTKDUxQzBBMTcxMDI0NzU1NkVDQTVCNkFENUE0MkFEREJFQUQ2ODhFREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD9Sy1rJ29fbLjEnUjwTQtXH1P 7WiCGzc4M/MqVBVRAHizOENKkxpeUkY0IUR2aHmVSL3i5VAkfg7NwG2GmENKgiyj Qvfdyw6dBuMF5zRxDbF4T4Gm7S7NjTWGcdrky282A4TCsVQesMwwA5oC7hX1qJrY jOSNUPtEoZCeQO7CliKRWla1aIDPic8Caz/4QrpWU3JHAIWy29AuWUNG1cWm6b9f j7W4Kpeypmiz82BwxWor6ZRvyJ7Kz86tVRJWHqneBdSujzptuUjosf/pYvm0tYez F60do96Lh+zvZooWOzBKzrIF7Cae2xSduYmnDsTv6xnT5w2Eo4TkexZGhU4TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUcChcQJHVW7KW2rVpCrdvq1ojt8wHwYDVR0j BBgwFoAUMM6Fcuqd7agFFRu9Fl5pnRGR/tAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDM4MDJlMi0wM2FmLTRkZDAtOGRjZS01NGMyOGE3MjU2M2QvMC8zMENFODU3MkVB OURFREE4MDUxNTFCQkQxNjVFNjk5RDExOTFGRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5OUQxMTkx RkVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAzODAyZTItMDNhZi00ZGQwLThk Y2UtNTRjMjhhNzI1NjNkLzAvMzBDRTg1NzJFQTlERURBODA1MTUxQkJEMTY1RTY5 OUQxMTkxRkVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1/cwlQKnzb1bACsNqxWz5uzEKDSezSjlPv hShwZPPb4989Lv5FW/F297aAaqP0JRcjE+AkdrvBa880/cREPbaLuRE2jC7ERqc8 NQLSaKCJtnYXnhGft1aIggy3vbVrcjxA2CB9pnRVkbdVrvUKVZB7PfZBwn1ZCuV/ 3+mPjR/Ky/HsxqHb1Xa8A4j78xHVm1qI6EM2XCr5PoaW5wmqvZ2SV/yexYMjQkDh PHU7FdphLYzIc4hY7lEl8pBi5YzA9iQ8OkhjeL35E8jNfmxlXeNemgr2A2kw9yyy Udh2zW3DEJipvPafmOfxhYKNe6uV8Crq2LtQUJl0OI0kJoB6M5s= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:43 2025 by rpki-client