$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft File: FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft (raw, json) Hash identifier: kGqeQXIo3EDBo/sn/lvzBZXFBdq4uZ+DOwFJ+szuqjM= Subject key identifier: D5:9D:1A:2B:52:F3:61:26:9C:69:8F:82:8E:3B:07:7F:8F:DB:50:9B Authority key identifier: FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD Certificate issuer: /CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Certificate serial: 76A5C5A3DBBA0FA0F1444321F415D3BEC06A208D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft Manifest number: B4 Signing time: Fri 25 Jul 2025 07:52:17 +0000 Manifest this update: Fri 25 Jul 2025 07:47:17 +0000 Manifest next update: Mon 28 Jul 2025 08:24:17 +0000 Files and hashes: 1: FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl (hash: qcayQS3ni7TiFKvBVJTOuwXbypl7ScSOJzmNBA2oIto=) 2: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (hash: WQbsLa/WI6fTYVHN1f/acG1CHu2vwbKzJ6P9lpc4ums=) 3: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (hash: 5RtTk3d772ssj1lManzV/eOyzfika2Q0NRT1wkf3Jmc=) 4: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (hash: 8MA2foEnZoWONyFnZ8JDy90VgYdcSiLJ0qYGxKq2+wY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 08:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:a5:c5:a3:db:ba:0f:a0:f1:44:43:21:f4:15:d3:be:c0:6a:20:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Validity Not Before: Jul 25 07:47:17 2025 GMT Not After : Jul 28 08:24:17 2025 GMT Subject: CN=D59D1A2B52F361269C698F828E3B077F8FDB509B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:05:f9:03:cb:a8:47:84:97:02:04:fc:fb:2d: c6:56:42:69:ea:ca:45:d5:8a:2a:6d:3f:ac:28:f1: df:4d:4d:80:e1:0f:1b:b0:37:34:7a:72:36:46:9a: e2:b6:0e:f0:86:b9:c9:09:e3:3e:b7:6a:eb:7f:d7: 38:a9:cd:78:50:0e:90:ae:b3:69:20:ff:1a:b9:53: d1:3f:e8:eb:7e:76:aa:3d:74:26:34:62:95:b8:53: d3:22:91:50:b5:7a:12:30:18:cb:b0:1f:8e:dd:0a: 76:01:04:5d:84:75:81:56:c6:06:dd:62:56:36:26: d3:fd:7d:b3:84:9d:a0:a5:af:9b:4b:39:ec:58:83: c8:c6:11:51:a7:3f:d0:fe:29:ef:ed:32:ad:c6:af: 5b:e1:b3:4d:e7:40:8c:d3:1b:5b:0d:1f:1c:43:74: 0c:24:89:e0:2f:0a:31:5d:e0:8f:05:57:ff:e0:23: 2a:72:48:a9:7e:43:a4:8f:38:a9:27:1a:c0:36:fc: 87:97:0c:82:33:b4:49:c4:36:a4:b6:7c:47:71:f7: d8:04:37:3d:f7:fa:1e:ff:27:f1:fb:61:5b:12:65: 27:3e:d9:3e:fd:22:52:81:31:ca:fd:97:fe:99:82: 4b:1d:1a:09:a4:a4:80:c7:b4:21:8c:b5:70:33:10: a9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9D:1A:2B:52:F3:61:26:9C:69:8F:82:8E:3B:07:7F:8F:DB:50:9B X509v3 Authority Key Identifier: keyid:FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:d3:42:bf:31:05:51:cf:d0:64:9d:6e:55:56:ef:04:fc:28: ac:3a:86:5f:8d:66:b6:57:68:dd:97:16:0c:ef:d6:6c:ca:a7: 2f:67:72:96:72:e6:1b:46:5b:46:60:da:9e:90:a1:77:d6:84: a8:f5:df:0a:9f:c4:b7:e6:aa:23:2d:3d:a7:10:76:e9:66:b3: a5:9a:1a:8c:e0:09:bd:a5:15:c8:9b:64:c0:23:82:cc:56:9d: 0f:2c:5a:56:57:3b:d2:ac:68:c8:b5:32:57:80:fc:d2:0f:77: 74:6e:42:b1:ed:05:12:c1:b7:36:8c:74:12:1b:88:c6:f5:8d: 6a:ce:2b:dc:4d:f8:18:86:9d:2b:ce:aa:c6:a4:80:80:96:2b: fa:98:38:66:f9:19:a2:41:97:28:a7:96:88:02:20:51:db:e4: 95:26:f7:88:33:49:d7:8a:39:ed:30:52:a7:37:75:23:46:67: 9a:63:33:c4:0f:3f:4c:c5:df:fb:f3:dd:e3:b0:58:71:5c:e2: b7:50:78:33:05:c3:84:a8:0c:94:98:30:66:8d:04:3f:47:29: a2:14:ec:b8:82:56:48:c3:8b:00:c1:70:41:fd:6d:6f:6a:88: 88:ce:81:9c:b6:4a:af:69:de:d7:63:04:74:0e:b0:23:ae:4d: 4a:32:21:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdqXFo9u6D6DxREMh9BXTvsBqII0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZC MENGNjJBRDAeFw0yNTA3MjUwNzQ3MTdaFw0yNTA3MjgwODI0MTdaMDMxMTAvBgNV BAMTKEQ1OUQxQTJCNTJGMzYxMjY5QzY5OEY4MjhFM0IwNzdGOEZEQjUwOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/BfkDy6hHhJcCBPz7LcZWQmnq ykXViiptP6wo8d9NTYDhDxuwNzR6cjZGmuK2DvCGuckJ4z63aut/1zipzXhQDpCu s2kg/xq5U9E/6Ot+dqo9dCY0YpW4U9MikVC1ehIwGMuwH47dCnYBBF2EdYFWxgbd YlY2JtP9fbOEnaClr5tLOexYg8jGEVGnP9D+Ke/tMq3Gr1vhs03nQIzTG1sNHxxD dAwkieAvCjFd4I8FV//gIypySKl+Q6SPOKknGsA2/IeXDIIztEnENqS2fEdx99gE Nz33+h7/J/H7YVsSZSc+2T79IlKBMcr9l/6ZgksdGgmkpIDHtCGMtXAzEKl7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Z0aK1LzYSacaY+CjjsHf4/bUJswHwYDVR0j BBgwFoAU+jD/hWZ1MlP7vYeGeX/pP7DPYq0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMC9GQTMwRkY4NTY2 NzUzMjUzRkJCRDg3ODY3OTdGRTkzRkIwQ0Y2MkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZCMENG NjJBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzAvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5 M0ZCMENGNjJBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHTQr8xBVHP0GSdblVW7wT8KKw6hl+NZrZX aN2XFgzv1mzKpy9ncpZy5htGW0Zg2p6QoXfWhKj13wqfxLfmqiMtPacQdulms6Wa GozgCb2lFcibZMAjgsxWnQ8sWlZXO9KsaMi1MleA/NIPd3RuQrHtBRLBtzaMdBIb iMb1jWrOK9xN+BiGnSvOqsakgICWK/qYOGb5GaJBlyinlogCIFHb5JUm94gzSdeK Oe0wUqc3dSNGZ5pjM8QPP0zF3/vz3eOwWHFc4rdQeDMFw4SoDJSYMGaNBD9HKaIU 7LiCVkjDiwDBcEH9bW9qiIjOgZy2Sq9p3tdjBHQOsCOuTUoyIRY= -----END CERTIFICATE-----Generated at Fri Jul 25 12:43:04 2025 by rpki-client