$ rpki-client -vvf repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft File: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft (raw, json) Hash identifier: l5x8qCPREms6cYDwn3QYtWExJH4oLMTA+R6LYvpuaAo= Subject key identifier: FC:FC:E9:E5:9B:48:53:EA:EE:5B:DA:7E:10:8A:ED:E2:23:9D:96:57 Authority key identifier: 30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 Certificate issuer: /CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Certificate serial: 08DFBAB660DC78E3C19EB0D266E217F0CC87127C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft Manifest number: A3 Signing time: Sun 31 Aug 2025 00:30:45 +0000 Manifest this update: Sun 31 Aug 2025 00:25:45 +0000 Manifest next update: Wed 03 Sep 2025 04:46:45 +0000 Files and hashes: 1: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl (hash: AcTILh/sxD6dRvJdY961mPHYXtD6ebm0cLpf2xcMdl4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:df:ba:b6:60:dc:78:e3:c1:9e:b0:d2:66:e2:17:f0:cc:87:12:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Validity Not Before: Aug 31 00:25:45 2025 GMT Not After : Sep 3 04:46:45 2025 GMT Subject: CN=FCFCE9E59B4853EAEE5BDA7E108AEDE2239D9657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:18:d2:d3:16:a0:dd:76:d9:30:d1:7c:17:97: c0:47:91:be:a2:72:e6:e0:99:14:b2:0a:e6:82:ca: ba:d0:ba:05:db:0a:51:b3:5f:3c:52:6d:fc:33:52: 5d:bc:db:3c:e6:c9:f3:e5:6a:1c:24:8b:f8:3e:d0: 99:60:f4:db:16:23:82:9e:e2:9c:95:08:45:34:55: 74:c9:c7:c1:a2:ea:0c:3a:69:74:11:8c:84:42:0a: 8c:dd:2e:ae:1e:9b:8d:48:36:d1:a3:2a:16:8a:11: 49:1c:ef:aa:dc:6f:10:45:53:9b:a0:59:f3:8c:89: d2:72:26:e2:ad:c4:4a:e0:fe:5f:1c:aa:c4:cf:28: a0:2e:a3:27:83:eb:fd:d3:1d:6b:78:56:0f:c6:38: 47:8b:28:0b:1c:12:ab:0e:c9:74:52:60:ed:85:a9: d5:0b:c5:70:8a:b2:a2:78:ad:2d:97:5d:94:a6:bd: d9:23:7e:41:c0:bb:c4:30:5a:d5:05:68:90:08:c4: 88:2c:0b:16:6a:90:98:d9:5f:1b:1b:c6:b5:41:2e: bd:b9:cb:65:5c:7a:5d:c4:7e:9c:c5:4e:d1:69:e1: 27:03:51:0c:b1:a1:19:7b:1e:fe:a3:a1:f8:99:f0: e0:7f:25:44:e3:cb:d2:7a:52:49:f6:9b:3b:9c:7a: 78:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FC:E9:E5:9B:48:53:EA:EE:5B:DA:7E:10:8A:ED:E2:23:9D:96:57 X509v3 Authority Key Identifier: keyid:30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:2f:63:f1:e5:97:7c:dc:8b:97:5e:62:97:c2:f0:36:a4:33: 9a:e2:09:2e:fe:2b:ca:47:ee:b7:77:88:93:13:0a:e1:2b:b3: 65:66:57:3c:e5:64:a2:b5:8b:f4:01:16:9e:2d:24:5c:97:f9: 96:14:7c:70:8f:d1:2a:27:cb:18:6f:bf:1e:f1:7b:33:af:ec: cb:3f:7c:06:70:10:57:32:c2:90:da:5f:e8:00:77:d6:a7:37: 2f:1f:0b:e6:eb:59:10:63:b3:39:56:5f:59:df:c4:73:7d:0f: 92:ad:9e:49:b4:f2:71:95:38:04:5b:bf:37:e1:48:8e:83:0d: be:69:4c:ef:75:f5:fb:d9:6a:b5:56:3b:49:21:a4:f2:88:4e: 7d:97:0b:0b:d9:6f:5d:f9:f6:52:22:a5:f8:a7:c5:bb:1b:fc: cb:c4:dc:9b:76:4e:10:a2:cf:e8:54:fb:02:9a:9c:ae:9a:38: 0a:f7:42:bb:e4:db:c4:5e:b7:af:b7:32:5b:75:35:4e:87:ca: a4:97:39:9d:1f:0b:aa:b4:47:50:c1:a2:55:71:63:e4:65:31: e7:aa:6f:80:f2:c8:4d:13:d9:b7:27:10:ff:8c:e3:12:68:63: 3b:bd:16:4b:44:0e:f0:32:6d:c7:1c:ab:08:e7:af:ea:aa:db: b3:a9:63:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCN+6tmDceOPBnrDSZuIX8MyHEnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5 QjlENjc3MDAeFw0yNTA4MzEwMDI1NDVaFw0yNTA5MDMwNDQ2NDVaMDMxMTAvBgNV BAMTKEZDRkNFOUU1OUI0ODUzRUFFRTVCREE3RTEwOEFFREUyMjM5RDk2NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfGNLTFqDddtkw0XwXl8BHkb6i cubgmRSyCuaCyrrQugXbClGzXzxSbfwzUl282zzmyfPlahwki/g+0Jlg9NsWI4Ke 4pyVCEU0VXTJx8Gi6gw6aXQRjIRCCozdLq4em41INtGjKhaKEUkc76rcbxBFU5ug WfOMidJyJuKtxErg/l8cqsTPKKAuoyeD6/3THWt4Vg/GOEeLKAscEqsOyXRSYO2F qdULxXCKsqJ4rS2XXZSmvdkjfkHAu8QwWtUFaJAIxIgsCxZqkJjZXxsbxrVBLr25 y2Vcel3EfpzFTtFp4ScDUQyxoRl7Hv6jofiZ8OB/JUTjy9J6Ukn2mzucenjlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Pzp5ZtIU+ruW9p+EIrt4iOdllcwHwYDVR0j BBgwFoAUMJ/+MGledrpJUuKWW0/iT5udZ3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2NiNTBiMC00M2NjLTQ4ZDAtOTFmNC0wNWJiZGU3YWMxZDAvMC8zMDlGRkUzMDY5 NUU3NkJBNDk1MkUyOTY1QjRGRTI0RjlCOUQ2NzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5QjlE Njc3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNjYjUwYjAtNDNjYy00OGQwLTkx ZjQtMDViYmRlN2FjMWQwLzAvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUy NEY5QjlENjc3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYvY/Hll3zci5deYpfC8DakM5riCS7+K8pH 7rd3iJMTCuErs2VmVzzlZKK1i/QBFp4tJFyX+ZYUfHCP0Sonyxhvvx7xezOv7Ms/ fAZwEFcywpDaX+gAd9anNy8fC+brWRBjszlWX1nfxHN9D5Ktnkm08nGVOARbvzfh SI6DDb5pTO919fvZarVWO0khpPKITn2XCwvZb1359lIipfinxbsb/MvE3Jt2ThCi z+hU+wKanK6aOAr3Qrvk28Ret6+3Mlt1NU6HyqSXOZ0fC6q0R1DBolVxY+RlMeeq b4DyyE0T2bcnEP+M4xJoYzu9FktEDvAybcccqwjnr+qq27OpY8s= -----END CERTIFICATE-----Generated at Sun Aug 31 07:08:01 2025 by rpki-client