$ rpki-client -vvf repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft File: 30D21A97E1EED902F151C3022374D979F0A4A7EF.mft (raw, json) Hash identifier: ftRHurObnEHdGW/JlCFxDiL/7VnpY8ebmJOG66YP9LA= Subject key identifier: 28:4E:A6:F3:2B:98:3C:5F:DE:D9:8C:68:1E:F2:7A:92:B7:44:DD:C3 Authority key identifier: 30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF Certificate issuer: /CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Certificate serial: 33469FF5615805B777808E257744714DDFA82C6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft Manifest number: F4 Signing time: Sun 01 Jun 2025 18:11:41 +0000 Manifest this update: Sun 01 Jun 2025 18:06:41 +0000 Manifest next update: Thu 05 Jun 2025 02:59:41 +0000 Files and hashes: 1: 34352e3234392e3232352e302f32342d3234203d3e20313532303237.roa (hash: lGxv0hhUzCj7M28hqKeyqRqBKDDJKTxW9siQxZRW/8Q=) 2: 30D21A97E1EED902F151C3022374D979F0A4A7EF.crl (hash: 6LHwjOicfuddAvrR/8USUlDiyWbFTRpWl7wOMQk839E=) 3: 34352e3234392e3232342e302f32332d3233203d3e20313532303237.roa (hash: ROzSHjIj4d0A5I5xwPcr8qcP04vsXN3kHThsDDQGeag=) 4: 34352e3234392e3232342e302f32342d3234203d3e20313532303237.roa (hash: nmoiRM53K6xpzn1bErPhguSmoFMNRryI2xbTQlBLJ8Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 02:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:46:9f:f5:61:58:05:b7:77:80:8e:25:77:44:71:4d:df:a8:2c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30D21A97E1EED902F151C3022374D979F0A4A7EF Validity Not Before: Jun 1 18:06:41 2025 GMT Not After : Jun 5 02:59:41 2025 GMT Subject: CN=284EA6F32B983C5FDED98C681EF27A92B744DDC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:05:80:d9:e9:ba:1c:08:08:4a:29:66:3d:c9: 91:0e:1d:4c:f2:c1:c1:47:41:77:c3:d7:0a:8c:4e: 53:da:51:d9:74:52:5b:84:35:e5:22:72:92:06:66: e5:90:df:f2:ad:ec:61:3b:65:5b:6b:12:7d:9d:5d: d5:ce:0d:7e:76:80:69:72:1d:ec:cd:41:00:32:14: 20:ca:50:b0:5e:0d:2d:92:ba:e2:25:9d:cd:2b:d4: 90:73:89:38:93:b7:1a:6f:96:90:19:cf:31:2f:35: 39:08:80:ce:b5:d1:a5:e2:dd:7b:fa:51:41:01:06: fa:31:92:93:87:31:ad:0b:c6:6b:0e:ae:58:15:84: e1:a7:62:ea:c0:48:b5:07:6e:a2:41:ff:df:46:f2: 07:74:47:5b:1e:b6:e2:45:a9:02:8c:27:75:8a:67: 72:f9:21:db:93:5d:13:7c:ce:37:ec:87:af:4a:8d: 41:6e:dc:f7:21:ea:39:91:a9:e5:bb:bd:52:bb:4e: 3f:f9:df:ef:2e:3d:c0:08:c5:17:c6:70:fb:7c:3a: 2e:ae:68:42:d4:bd:72:ab:a4:a2:a6:c8:2b:a7:04: cf:e1:a2:89:d1:96:82:74:24:bc:6a:d8:0f:f8:0b: 5f:46:69:87:ca:95:45:73:8f:9f:c4:0d:fa:93:db: c0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4E:A6:F3:2B:98:3C:5F:DE:D9:8C:68:1E:F2:7A:92:B7:44:DD:C3 X509v3 Authority Key Identifier: keyid:30:D2:1A:97:E1:EE:D9:02:F1:51:C3:02:23:74:D9:79:F0:A4:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30D21A97E1EED902F151C3022374D979F0A4A7EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9b899ac-4870-4e28-8e4e-2c23752a4a60/0/30D21A97E1EED902F151C3022374D979F0A4A7EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:27:87:17:c2:15:6b:d6:a3:86:59:a0:15:20:78:7b:ce:3c: cf:7c:60:d5:0e:4e:c4:d1:63:09:67:4c:ec:3d:ee:a4:21:23: 75:6e:58:ec:54:02:52:e0:61:9a:27:b2:61:b5:b7:56:aa:ae: 9d:52:82:e1:8f:28:e3:3e:71:c5:f2:de:b7:3c:e3:20:c3:51: e4:5f:12:6c:ea:6a:fb:16:40:ea:0b:72:74:4f:d6:84:00:44: 34:ae:d5:3e:75:13:8a:6c:34:af:8e:bb:30:c3:73:28:14:9c: ea:0a:0a:26:e1:c3:14:ee:ac:3a:f4:db:4a:23:7f:d8:e5:0f: 2a:a3:b3:18:01:4f:51:03:a4:bc:9b:ee:eb:ba:6d:17:3b:df: 64:08:eb:f0:34:ee:40:34:99:df:fd:b6:2d:f9:cc:32:6a:0a: 64:23:98:a7:e3:20:e9:48:ab:1f:87:04:cd:ca:13:a8:06:b3: ca:2a:7a:c0:6c:5e:10:f6:94:a9:71:f2:b2:4d:d9:78:46:1d: 78:55:51:f9:d0:ee:bb:9b:60:54:9c:d8:f0:2a:11:01:24:37: 7d:bf:29:41:34:45:96:bd:d1:00:df:96:21:df:50:d1:c3:38: 81:87:8a:d6:62:09:43:9c:e6:c0:0a:c0:df:f7:13:2d:d2:9c: b3:48:57:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM0af9WFYBbd3gI4ld0RxTd+oLGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlG MEE0QTdFRjAeFw0yNTA2MDExODA2NDFaFw0yNTA2MDUwMjU5NDFaMDMxMTAvBgNV BAMTKDI4NEVBNkYzMkI5ODNDNUZERUQ5OEM2ODFFRjI3QTkyQjc0NEREQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2BYDZ6bocCAhKKWY9yZEOHUzy wcFHQXfD1wqMTlPaUdl0UluENeUicpIGZuWQ3/Kt7GE7ZVtrEn2dXdXODX52gGly HezNQQAyFCDKULBeDS2SuuIlnc0r1JBziTiTtxpvlpAZzzEvNTkIgM610aXi3Xv6 UUEBBvoxkpOHMa0LxmsOrlgVhOGnYurASLUHbqJB/99G8gd0R1setuJFqQKMJ3WK Z3L5IduTXRN8zjfsh69KjUFu3Pch6jmRqeW7vVK7Tj/53+8uPcAIxRfGcPt8Oi6u aELUvXKrpKKmyCunBM/hoonRloJ0JLxq2A/4C19GaYfKlUVzj5/EDfqT28CPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKE6m8yuYPF/e2YxoHvJ6krdE3cMwHwYDVR0j BBgwFoAUMNIal+Hu2QLxUcMCI3TZefCkp+8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWI4OTlhYy00ODcwLTRlMjgtOGU0ZS0yYzIzNzUyYTRhNjAvMC8zMEQyMUE5N0Ux RUVEOTAyRjE1MUMzMDIyMzc0RDk3OUYwQTRBN0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5NzlGMEE0 QTdFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDliODk5YWMtNDg3MC00ZTI4LThl NGUtMmMyMzc1MmE0YTYwLzAvMzBEMjFBOTdFMUVFRDkwMkYxNTFDMzAyMjM3NEQ5 NzlGMEE0QTdFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALgnhxfCFWvWo4ZZoBUgeHvOPM98YNUOTsTR YwlnTOw97qQhI3VuWOxUAlLgYZonsmG1t1aqrp1SguGPKOM+ccXy3rc84yDDUeRf EmzqavsWQOoLcnRP1oQARDSu1T51E4psNK+OuzDDcygUnOoKCibhwxTurDr020oj f9jlDyqjsxgBT1EDpLyb7uu6bRc732QI6/A07kA0md/9ti35zDJqCmQjmKfjIOlI qx+HBM3KE6gGs8oqesBsXhD2lKlx8rJN2XhGHXhVUfnQ7rubYFSc2PAqEQEkN32/ KUE0RZa90QDfliHfUNHDOIGHitZiCUOc5sAKwN/3Ey3SnLNIV4Q= -----END CERTIFICATE-----Generated at Tue Jun 3 23:40:04 2025 by rpki-client