$ rpki-client -vvf repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft File: 30D21A97E1EED902F151C3022374D979F0A4A7EF.mft (raw, json) Hash identifier: JFDfTNFm//TKPTpjljjfXlDeo/ERzXCwovaoejDG0R4= Subject key identifier: 64:09:C4:80:0A:16:E4:7C:16:46:BA:6F:D5:59:DC:03:F4:99:98:D3 Authority key identifier: 30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF Certificate issuer: /CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Certificate serial: 7DE4107129DC9949399D4A09EAD98CA88A5D2E27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft Manifest number: DA Signing time: Fri 04 Apr 2025 20:01:41 +0000 Manifest this update: Fri 04 Apr 2025 19:56:41 +0000 Manifest next update: Mon 07 Apr 2025 20:43:41 +0000 Files and hashes: 1: 34352e3234392e3232352e302f32342d3234203d3e20313532303237.roa (hash: lGxv0hhUzCj7M28hqKeyqRqBKDDJKTxW9siQxZRW/8Q=) 2: 30D21A97E1EED902F151C3022374D979F0A4A7EF.crl (hash: MEOhtesIzHIEr9wWa0Had53MKdzyNyMzbhBBTl1tcUc=) 3: 34352e3234392e3232342e302f32342d3234203d3e20313532303237.roa (hash: nmoiRM53K6xpzn1bErPhguSmoFMNRryI2xbTQlBLJ8Q=) 4: 34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa (hash: ROzSHjIj4d0A5I5xwPcr8qcP04vsXN3kHThsDDQGeag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e4:10:71:29:dc:99:49:39:9d:4a:09:ea:d9:8c:a8:8a:5d:2e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Validity Not Before: Apr 4 19:56:41 2025 GMT Not After : Apr 7 20:43:41 2025 GMT Subject: CN=6409C4800A16E47C1646BA6FD559DC03F49998D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e1:cf:b1:87:59:67:a4:bc:54:1d:01:c2:8b: 1c:f2:1f:72:5d:ef:17:59:8d:fc:e3:49:66:e5:4c: 35:85:bc:52:b1:5f:4b:43:29:9d:01:0c:ac:37:b6: 61:a1:01:93:1f:74:71:7b:6f:10:04:b5:79:aa:ec: cc:00:73:bd:e4:6e:57:88:69:d9:65:20:29:d1:99: 2a:c3:7d:12:33:4b:1e:4d:60:ff:bc:ad:af:b1:fc: 13:ba:63:85:ea:06:00:83:2b:28:c7:35:7d:0c:d9: 37:cd:48:05:88:62:b1:58:64:01:19:2c:41:99:27: f9:3f:50:0b:71:4f:3e:09:f5:e2:67:bd:fd:de:f5: 56:cf:56:30:a7:70:03:d9:4e:3d:64:9d:1c:21:ad: 4b:1d:c8:fe:44:a4:b7:f0:53:ef:50:2a:31:6d:89: f3:e1:4a:23:57:67:09:6e:bb:ca:c4:68:61:07:c5: 2e:c5:af:42:f3:dd:d5:37:4b:b4:ba:2f:d4:c5:84: ac:f4:c5:6f:46:81:36:3b:df:89:22:5e:67:ef:3b: ad:15:27:b0:7a:08:fc:f5:f5:86:12:8b:eb:4a:a4: 3a:e9:0a:c2:97:4a:76:f8:70:28:24:05:c8:f8:03: eb:f4:60:3c:7b:ba:d8:8d:3c:98:d0:91:44:b1:d3: 16:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:09:C4:80:0A:16:E4:7C:16:46:BA:6F:D5:59:DC:03:F4:99:98:D3 X509v3 Authority Key Identifier: keyid:30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c6:e6:95:f3:f3:49:82:9b:fb:24:bc:8a:21:d5:4c:b4:bc: 76:2d:b1:c1:73:b8:5c:81:fc:4c:e9:f8:da:f9:89:a4:42:53: 4e:7c:c3:21:a2:23:a0:02:d3:5d:4c:30:22:ba:0b:65:64:8b: f0:89:88:cc:be:d7:18:a9:9f:38:89:0c:a2:57:82:52:93:88: ca:60:60:47:3b:64:19:ee:ad:09:d6:77:b8:b9:a8:d5:47:be: 46:f0:2d:6b:72:1c:9c:8f:2d:bd:9c:c9:41:65:68:bc:cd:f0: d0:48:56:15:ef:c8:a0:e0:1c:fc:12:27:b1:c4:0d:80:97:03: dc:b1:40:cb:81:f4:1a:bf:8e:df:7e:51:e4:bb:de:20:f9:97: 62:66:b9:87:54:7c:d9:3c:f0:99:ff:d2:79:db:a2:04:ec:74: 56:f7:cf:bf:3d:f3:b3:85:97:77:f5:ba:c7:d7:6f:dc:c9:d2: 49:b4:fd:25:68:2a:c4:58:43:1c:90:03:3b:f2:b2:a5:54:23: 2f:c3:19:0e:1a:d2:c8:13:6f:38:ac:e5:10:a5:f0:83:0e:04: ef:dc:2e:9f:2b:72:16:4b:01:be:7a:b3:81:e7:4e:99:2f:c7: 54:06:09:7c:92:f2:91:89:28:e6:e0:96:dc:8c:17:02:80:8c: fa:76:63:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfeQQcSncmUk5nUoJ6tmMqIpdLicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlG MEE0QTdFRjAeFw0yNTA0MDQxOTU2NDFaFw0yNTA0MDcyMDQzNDFaMDMxMTAvBgNV BAMTKDY0MDlDNDgwMEExNkU0N0MxNjQ2QkE2RkQ1NTlEQzAzRjQ5OTk4RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54c+xh1lnpLxUHQHCixzyH3Jd 7xdZjfzjSWblTDWFvFKxX0tDKZ0BDKw3tmGhAZMfdHF7bxAEtXmq7MwAc73kbleI adllICnRmSrDfRIzSx5NYP+8ra+x/BO6Y4XqBgCDKyjHNX0M2TfNSAWIYrFYZAEZ LEGZJ/k/UAtxTz4J9eJnvf3e9VbPVjCncAPZTj1knRwhrUsdyP5EpLfwU+9QKjFt ifPhSiNXZwluu8rEaGEHxS7Fr0Lz3dU3S7S6L9TFhKz0xW9GgTY734kiXmfvO60V J7B6CPz19YYSi+tKpDrpCsKXSnb4cCgkBcj4A+v0YDx7utiNPJjQkUSx0xaTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZAnEgAoW5HwWRrpv1VncA/SZmNMwHwYDVR0j BBgwFoAUMNIal+Hu2QLxUcMCI3TZefCkp+8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWI4OTlhYy00ODcwLTRlMjgtOGU0ZS0yYzIzNzUyYTRhNjAvMC8zMEQyMUE5N0Ux RUVEOTAyRjE1MUMzMDIyMzc0RDk3OUYwQTRBN0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlGMEE0 QTdFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDliODk5YWMtNDg3MC00ZTI4LThl NGUtMmMyMzc1MmE0YTYwLzAvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5 NzlGMEE0QTdFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3G5pXz80mCm/skvIoh1Uy0vHYtscFzuFyB /Ezp+Nr5iaRCU058wyGiI6AC011MMCK6C2Vki/CJiMy+1xipnziJDKJXglKTiMpg YEc7ZBnurQnWd7i5qNVHvkbwLWtyHJyPLb2cyUFlaLzN8NBIVhXvyKDgHPwSJ7HE DYCXA9yxQMuB9Bq/jt9+UeS73iD5l2JmuYdUfNk88Jn/0nnbogTsdFb3z78987OF l3f1usfXb9zJ0km0/SVoKsRYQxyQAzvysqVUIy/DGQ4a0sgTbzis5RCl8IMOBO/c Lp8rchZLAb56s4HnTpkvx1QGCXyS8pGJKObgltyMFwKAjPp2Y/Q= -----END CERTIFICATE-----Generated at Sat Apr 5 16:41:59 2025 by rpki-client