$ rpki-client -vvf repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft File: 30D21A97E1EED902F151C3022374D979F0A4A7EF.mft (raw, json) Hash identifier: QrQaIsh/Hlce7bhx4fWB+q31kZ1HQXA4PbDcFwGZ1y0= Subject key identifier: C8:F8:A9:E5:EC:F3:9C:9C:94:3C:CD:6A:83:EA:51:B9:B5:B5:EF:11 Authority key identifier: 30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF Certificate issuer: /CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Certificate serial: 3838D36952314F5F255EF8F7E95D5EEDBD61E2BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft Manifest number: 011D Signing time: Wed 03 Sep 2025 08:01:42 +0000 Manifest this update: Wed 03 Sep 2025 07:56:42 +0000 Manifest next update: Sat 06 Sep 2025 09:54:42 +0000 Files and hashes: 1: 34352e3234392e3232352e302f32342d3234203d3e20313532303237.roa (hash: lGxv0hhUzCj7M28hqKeyqRqBKDDJKTxW9siQxZRW/8Q=) 2: 34352e3234392e3232342e302f32342d3234203d3e20313532303237.roa (hash: nmoiRM53K6xpzn1bErPhguSmoFMNRryI2xbTQlBLJ8Q=) 3: 30D21A97E1EED902F151C3022374D979F0A4A7EF.crl (hash: zoD7cVRdKiwOMBT3+KPrf+CGWuXaTV0uqZblafK+6lQ=) 4: 34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa (hash: ROzSHjIj4d0A5I5xwPcr8qcP04vsXN3kHThsDDQGeag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 09:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:38:d3:69:52:31:4f:5f:25:5e:f8:f7:e9:5d:5e:ed:bd:61:e2:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Validity Not Before: Sep 3 07:56:42 2025 GMT Not After : Sep 6 09:54:42 2025 GMT Subject: CN=C8F8A9E5ECF39C9C943CCD6A83EA51B9B5B5EF11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8e:cd:a3:31:3b:7c:aa:5a:43:4f:8f:25:26: b2:53:cd:9b:ce:24:bb:7f:f9:3c:f4:75:0d:ee:6f: bd:58:48:97:4c:f8:f2:6f:26:1a:03:58:1a:d1:05: 90:d9:24:0f:e0:43:33:97:af:11:53:1a:83:ad:62: 28:26:93:66:2c:86:bd:f5:0d:e7:06:2b:02:28:36: b8:f6:fc:22:31:c5:9a:a2:b6:8a:73:8c:c8:1e:bc: 2c:99:9b:73:3c:55:14:5f:ff:f3:4d:49:9f:07:d7: 3c:3a:69:fb:d4:3f:03:f7:e5:1e:2a:2e:2e:32:57: ab:d4:c4:1b:09:53:3e:9d:6d:38:e1:6a:c5:fd:fa: ce:1b:1c:be:83:68:7e:da:f7:78:de:dd:b8:4d:5b: de:99:ce:b1:cc:cb:3e:89:6b:e7:9a:11:6c:57:9c: 59:52:0f:20:ff:1a:86:75:be:25:ac:c8:25:2a:ce: e3:7d:dd:7d:f7:2f:b9:82:63:e5:7c:f5:da:a1:6a: ce:8b:0e:d7:c5:5b:40:c4:07:bb:9e:10:be:b6:46: ec:87:8a:ed:44:7d:0c:e4:75:b0:5b:a4:a3:2c:5f: 54:72:7b:71:e7:58:40:9d:b9:ef:2b:49:7d:64:44: ca:c6:9e:38:ee:58:94:a2:9c:9c:c9:62:33:b5:2c: 01:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F8:A9:E5:EC:F3:9C:9C:94:3C:CD:6A:83:EA:51:B9:B5:B5:EF:11 X509v3 Authority Key Identifier: keyid:30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:f4:3d:c6:80:0a:4e:e7:92:74:42:a4:7e:c5:32:be:66:5c: 3e:cf:16:a2:b4:5e:27:5e:67:cc:b6:b9:65:1c:28:a8:2e:5e: 5f:e2:57:5d:f9:7a:f6:26:3d:ca:f3:15:05:90:02:44:85:a3: 83:92:a9:28:7d:f5:44:19:cd:27:b8:18:95:11:2c:18:1d:6c: 77:79:15:52:8e:ee:35:6c:2b:7a:3c:d2:c8:44:6c:d1:1c:e6: 6c:a6:5b:0d:8b:3e:4c:6a:ff:7c:0d:4e:a1:cc:58:c4:ba:0d: 9d:54:22:4b:aa:6d:12:90:90:f1:e9:cb:95:43:a2:d4:1a:5b: 04:e0:40:f0:e9:ee:2f:6c:c6:48:8e:1b:92:a4:c5:a3:3e:3c: b2:52:94:ea:3c:fa:4e:dd:13:b0:92:51:0f:a6:e3:c8:ce:b5: 1a:2b:a1:64:30:0f:e9:dc:21:ff:c4:a1:50:f6:06:de:13:f2: 2e:b2:49:68:6b:e0:59:e8:5d:5a:4b:98:ec:e2:79:ee:90:e5: aa:c1:38:0b:45:ef:c0:64:bd:0e:3b:62:a8:3a:8c:b2:73:41: eb:7c:ea:32:b7:47:17:57:1e:86:c8:64:11:03:47:eb:a3:82: f1:bd:8b:21:4f:02:48:d2:f4:58:56:d5:6f:c3:2c:02:4a:97: 67:72:74:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUODjTaVIxT18lXvj36V1e7b1h4rswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlG MEE0QTdFRjAeFw0yNTA5MDMwNzU2NDJaFw0yNTA5MDYwOTU0NDJaMDMxMTAvBgNV BAMTKEM4RjhBOUU1RUNGMzlDOUM5NDNDQ0Q2QTgzRUE1MUI5QjVCNUVGMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAjs2jMTt8qlpDT48lJrJTzZvO JLt/+Tz0dQ3ub71YSJdM+PJvJhoDWBrRBZDZJA/gQzOXrxFTGoOtYigmk2Yshr31 DecGKwIoNrj2/CIxxZqitopzjMgevCyZm3M8VRRf//NNSZ8H1zw6afvUPwP35R4q Li4yV6vUxBsJUz6dbTjhasX9+s4bHL6DaH7a93je3bhNW96ZzrHMyz6Ja+eaEWxX nFlSDyD/GoZ1viWsyCUqzuN93X33L7mCY+V89dqhas6LDtfFW0DEB7ueEL62RuyH iu1EfQzkdbBbpKMsX1Rye3HnWECdue8rSX1kRMrGnjjuWJSinJzJYjO1LAEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyPip5ezznJyUPM1qg+pRubW17xEwHwYDVR0j BBgwFoAUMNIal+Hu2QLxUcMCI3TZefCkp+8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWI4OTlhYy00ODcwLTRlMjgtOGU0ZS0yYzIzNzUyYTRhNjAvMC8zMEQyMUE5N0Ux RUVEOTAyRjE1MUMzMDIyMzc0RDk3OUYwQTRBN0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlGMEE0 QTdFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDliODk5YWMtNDg3MC00ZTI4LThl NGUtMmMyMzc1MmE0YTYwLzAvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5 NzlGMEE0QTdFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAD0PcaACk7nknRCpH7FMr5mXD7PFqK0Xide Z8y2uWUcKKguXl/iV135evYmPcrzFQWQAkSFo4OSqSh99UQZzSe4GJURLBgdbHd5 FVKO7jVsK3o80shEbNEc5mymWw2LPkxq/3wNTqHMWMS6DZ1UIkuqbRKQkPHpy5VD otQaWwTgQPDp7i9sxkiOG5KkxaM+PLJSlOo8+k7dE7CSUQ+m48jOtRoroWQwD+nc If/EoVD2Bt4T8i6ySWhr4FnoXVpLmOziee6Q5arBOAtF78BkvQ47Yqg6jLJzQet8 6jK3RxdXHobIZBEDR+ujgvG9iyFPAkjS9FhW1W/DLAJKl2dydJA= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:40 2025 by rpki-client