$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft File: FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft (raw, json) Hash identifier: RhxGc0Qe6c56/YPA0dRrKmt+SFWgNYxYic+JJGiGvGk= Subject key identifier: 12:F6:C2:0A:FF:3D:F9:03:66:3D:92:BB:22:A2:8E:6F:58:7A:ED:84 Authority key identifier: FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD Certificate issuer: /CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Certificate serial: 0A9C22F37FFE2FBA1739B1E567312F7B55259F81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft Manifest number: 83 Signing time: Sun 06 Apr 2025 06:22:16 +0000 Manifest this update: Sun 06 Apr 2025 06:17:16 +0000 Manifest next update: Wed 09 Apr 2025 09:40:16 +0000 Files and hashes: 1: FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl (hash: Hs/jIlxJLyBbKk8TDnSHLHITqOmwPnkAeTQEfejL1IY=) 2: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (hash: n+/1ZzwG4EgdsUBMybZxOh7Up3KgHvNTAiUa7eDfLu8=) 3: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (hash: BzB0xYRkmkpVdyi6fQJ5OxPEeMcyu/lKUmFuR1MRtFA=) 4: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (hash: ACNBkKr7zhAeXvXwZZLW9qIPFLxCT0Ploz7dXJTXEoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 09:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:9c:22:f3:7f:fe:2f:ba:17:39:b1:e5:67:31:2f:7b:55:25:9f:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Validity Not Before: Apr 6 06:17:16 2025 GMT Not After : Apr 9 09:40:16 2025 GMT Subject: CN=12F6C20AFF3DF903663D92BB22A28E6F587AED84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:69:2d:b4:02:50:74:28:3b:9e:b4:c7:60:4e: 08:45:61:ad:2b:a4:0e:b3:61:a1:00:c3:48:3f:9b: 2c:74:cc:4b:b3:5f:47:95:5b:4f:50:c8:18:f5:60: 6d:ef:3d:93:83:8f:c5:dc:0b:d5:4c:29:b2:c5:1f: 5e:dd:82:aa:8f:6b:db:7f:57:8e:fe:d1:78:54:5f: c7:08:76:2e:c5:67:d1:f5:c0:a6:e6:e6:32:9a:92: 60:69:5e:0c:28:ba:56:8b:37:60:f4:f4:b1:d1:df: 40:5e:58:8f:19:17:18:1d:ea:5f:94:69:45:e6:79: 2f:c8:3c:d1:49:5c:ce:87:3b:c7:20:52:30:44:67: 9e:26:92:60:fc:7f:de:a1:6b:c8:5d:e6:79:09:08: 5a:60:ad:f9:2a:fe:4c:e8:de:f7:f3:44:d1:71:bf: f6:23:cb:7c:5e:a5:a9:03:72:7e:b8:f6:9b:89:50: fd:45:b9:ed:65:e4:24:bd:87:3c:46:22:65:03:7f: ba:48:8e:53:99:0a:23:58:07:8f:a9:05:cb:d2:a9: ce:74:a7:f2:68:34:d3:b2:ce:0b:e3:eb:d5:56:b3: e0:2c:cc:d1:4f:c4:e6:e5:50:21:0b:0b:58:06:2d: 19:31:5c:2b:46:f0:9f:3a:bc:3a:77:21:f5:f2:7d: 24:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F6:C2:0A:FF:3D:F9:03:66:3D:92:BB:22:A2:8E:6F:58:7A:ED:84 X509v3 Authority Key Identifier: keyid:FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f5:64:9e:9b:e5:bb:72:63:3e:d0:e1:9f:5c:fd:a8:78:59: 81:01:3d:f8:d3:54:ac:f9:8a:c5:d4:ed:3b:db:0f:ea:ec:8b: 89:11:b4:b8:e1:b3:46:1a:0f:c9:ad:b4:6f:c0:7d:c4:ea:4c: 47:84:28:7d:82:0a:20:43:1f:b6:5a:47:29:1d:de:95:3b:40: 5b:ea:15:75:65:53:db:65:4a:7e:de:7b:2b:40:fd:a7:25:59: 96:1e:2e:69:42:60:18:fa:f4:25:be:c7:c9:80:18:d1:f6:89: ba:ce:d4:77:3d:f3:4e:f7:35:8e:ad:30:92:e4:10:8d:d6:44: 0d:d9:7d:8d:7b:17:b4:b8:e3:dc:eb:fe:5c:4c:26:c5:73:97: 4f:17:0a:20:bc:83:39:60:7f:45:9a:11:8c:70:32:a5:df:14: b9:ba:68:04:2e:21:84:33:f6:62:69:f1:3b:46:86:e7:37:28: b7:47:8d:7d:cc:01:f0:78:23:1a:3e:c7:53:b9:95:a6:e0:7d: 29:6d:60:16:20:42:a0:81:04:e4:a8:0f:01:99:0d:94:dd:cc: e3:c0:5f:6d:cb:24:37:91:35:9c:fb:cf:a1:39:e6:15:28:08: 1b:ff:97:7a:82:f4:92:7a:14:75:fa:35:b4:76:bc:91:f0:2b: d5:93:93:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCpwi83/+L7oXObHlZzEve1Uln4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZC MENGNjJBRDAeFw0yNTA0MDYwNjE3MTZaFw0yNTA0MDkwOTQwMTZaMDMxMTAvBgNV BAMTKDEyRjZDMjBBRkYzREY5MDM2NjNEOTJCQjIyQTI4RTZGNTg3QUVEODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdaS20AlB0KDuetMdgTghFYa0r pA6zYaEAw0g/myx0zEuzX0eVW09QyBj1YG3vPZODj8XcC9VMKbLFH17dgqqPa9t/ V47+0XhUX8cIdi7FZ9H1wKbm5jKakmBpXgwoulaLN2D09LHR30BeWI8ZFxgd6l+U aUXmeS/IPNFJXM6HO8cgUjBEZ54mkmD8f96ha8hd5nkJCFpgrfkq/kzo3vfzRNFx v/Yjy3xepakDcn649puJUP1Fue1l5CS9hzxGImUDf7pIjlOZCiNYB4+pBcvSqc50 p/JoNNOyzgvj69VWs+AszNFPxOblUCELC1gGLRkxXCtG8J86vDp3IfXyfSQBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEvbCCv89+QNmPZK7IqKOb1h67YQwHwYDVR0j BBgwFoAU+jD/hWZ1MlP7vYeGeX/pP7DPYq0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMC9GQTMwRkY4NTY2 NzUzMjUzRkJCRDg3ODY3OTdGRTkzRkIwQ0Y2MkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZCMENG NjJBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzAvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5 M0ZCMENGNjJBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI71ZJ6b5btyYz7Q4Z9c/ah4WYEBPfjTVKz5 isXU7TvbD+rsi4kRtLjhs0YaD8mttG/AfcTqTEeEKH2CCiBDH7ZaRykd3pU7QFvq FXVlU9tlSn7eeytA/aclWZYeLmlCYBj69CW+x8mAGNH2ibrO1Hc98073NY6tMJLk EI3WRA3ZfY17F7S449zr/lxMJsVzl08XCiC8gzlgf0WaEYxwMqXfFLm6aAQuIYQz 9mJp8TtGhuc3KLdHjX3MAfB4Ixo+x1O5labgfSltYBYgQqCBBOSoDwGZDZTdzOPA X23LJDeRNZz7z6E55hUoCBv/l3qC9JJ6FHX6NbR2vJHwK9WTkyY= -----END CERTIFICATE-----Generated at Tue Apr 8 05:00:21 2025 by rpki-client