$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft File: FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft (raw, json) Hash identifier: lDPAbHTpVBUKsuTqaVVjJ2xBBo7XF0YyMjgsZV9AGD8= Subject key identifier: D0:87:1E:7E:64:94:7E:F4:6D:3A:AB:26:04:13:1D:21:10:30:5B:A2 Authority key identifier: FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD Certificate issuer: /CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Certificate serial: 4B96A74758411E38DDD1972315C137AE54D55965 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft Manifest number: C1 Signing time: Sat 23 Aug 2025 04:02:21 +0000 Manifest this update: Sat 23 Aug 2025 03:57:21 +0000 Manifest next update: Tue 26 Aug 2025 08:10:21 +0000 Files and hashes: 1: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (hash: WQbsLa/WI6fTYVHN1f/acG1CHu2vwbKzJ6P9lpc4ums=) 2: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (hash: 8MA2foEnZoWONyFnZ8JDy90VgYdcSiLJ0qYGxKq2+wY=) 3: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (hash: 5RtTk3d772ssj1lManzV/eOyzfika2Q0NRT1wkf3Jmc=) 4: FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl (hash: ZfI09ikwCsEp1/khBnwkMLpGXaqUcIX4zHN2PyHuLSQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:96:a7:47:58:41:1e:38:dd:d1:97:23:15:c1:37:ae:54:d5:59:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Validity Not Before: Aug 23 03:57:21 2025 GMT Not After : Aug 26 08:10:21 2025 GMT Subject: CN=D0871E7E64947EF46D3AAB2604131D2110305BA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3d:54:8b:07:5c:56:89:c3:d1:07:eb:5a:08: 26:dc:e5:3a:3d:53:ee:4a:f3:6d:e5:98:ac:01:9c: c3:4c:7d:4f:f5:b4:4a:80:f7:50:aa:8c:d8:d4:97: 4f:68:63:11:4f:74:01:d2:44:bc:39:2e:04:a6:77: b9:c2:e3:66:aa:28:2b:98:2a:5f:31:75:56:de:2f: c4:77:b8:77:99:00:b6:84:e3:8d:a0:14:2f:7f:13: bf:a6:6b:df:85:65:23:dc:ff:c3:75:35:f9:26:98: 64:84:12:3b:c3:31:49:39:cb:fa:92:5c:2e:f3:04: 46:47:d0:3f:4a:18:2e:82:74:eb:e0:d5:e1:21:55: b3:8f:71:64:0b:0f:99:78:f2:36:62:ab:c8:57:36: ab:23:61:68:8a:cd:1e:cc:99:cc:2a:83:30:4a:53: ae:29:1d:bc:50:7c:47:32:59:5a:fe:4e:30:8f:02: 36:71:13:57:bf:95:96:ee:8c:f3:a0:8a:20:84:43: 52:0e:b3:ae:51:73:a2:ae:3f:26:fe:0e:3a:b1:04: 15:c8:c9:ca:9d:a1:c1:ae:e3:c2:68:8f:9a:17:77: 5d:ea:89:8c:44:46:1b:a6:a2:39:27:9a:4b:f6:4e: 44:4f:7d:cc:74:e3:7c:bb:2a:2f:ea:b7:c4:49:12: 6b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:87:1E:7E:64:94:7E:F4:6D:3A:AB:26:04:13:1D:21:10:30:5B:A2 X509v3 Authority Key Identifier: keyid:FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:02:54:4d:04:d1:6b:4d:55:eb:2b:2f:76:46:d7:eb:55:37: dc:45:4d:f9:8b:6f:5a:13:2b:d9:9b:44:9f:72:05:29:c6:d7: 9b:89:aa:81:eb:7d:c3:5c:2f:13:e2:ca:aa:d9:ec:0c:45:2e: fc:2c:d9:8d:da:6b:48:dc:13:6c:5d:96:48:53:fa:18:5b:5b: 31:f6:a5:99:5d:39:28:b2:7b:fa:d3:9b:f7:e9:cb:72:5d:d7: c9:b4:7b:18:f9:37:19:07:1c:45:e6:87:e6:6a:3c:1e:b6:83: 9e:44:cd:cb:2c:a5:e4:26:f3:92:2c:99:d5:21:57:80:52:dc: 53:44:5e:e7:e9:5c:30:0f:a9:cc:74:fc:96:e6:dd:92:38:83: 70:fa:67:b7:62:d1:d2:10:3b:75:b4:f1:2a:7e:b1:03:44:39: 72:5b:71:34:5c:23:72:9f:a1:55:2d:2f:c1:7f:48:77:2e:42: ad:f9:c5:da:41:d0:f9:72:34:1d:a1:a1:50:09:8e:3c:0c:6a: 47:45:7a:ca:18:68:14:ce:fb:24:40:69:bb:72:89:26:8d:87: c3:a7:0c:02:5b:08:c7:f2:5f:0b:8e:a2:90:45:ed:47:bd:c4: b7:ef:fb:4b:1a:dd:bd:5a:94:c5:95:a1:a6:df:f7:8f:50:9b: be:14:09:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS5anR1hBHjjd0ZcjFcE3rlTVWWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZC MENGNjJBRDAeFw0yNTA4MjMwMzU3MjFaFw0yNTA4MjYwODEwMjFaMDMxMTAvBgNV BAMTKEQwODcxRTdFNjQ5NDdFRjQ2RDNBQUIyNjA0MTMxRDIxMTAzMDVCQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPVSLB1xWicPRB+taCCbc5To9 U+5K823lmKwBnMNMfU/1tEqA91CqjNjUl09oYxFPdAHSRLw5LgSmd7nC42aqKCuY Kl8xdVbeL8R3uHeZALaE442gFC9/E7+ma9+FZSPc/8N1NfkmmGSEEjvDMUk5y/qS XC7zBEZH0D9KGC6CdOvg1eEhVbOPcWQLD5l48jZiq8hXNqsjYWiKzR7MmcwqgzBK U64pHbxQfEcyWVr+TjCPAjZxE1e/lZbujPOgiiCEQ1IOs65Rc6KuPyb+DjqxBBXI ycqdocGu48Joj5oXd13qiYxERhumojknmkv2TkRPfcx043y7Ki/qt8RJEmtRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0IcefmSUfvRtOqsmBBMdIRAwW6IwHwYDVR0j BBgwFoAU+jD/hWZ1MlP7vYeGeX/pP7DPYq0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMC9GQTMwRkY4NTY2 NzUzMjUzRkJCRDg3ODY3OTdGRTkzRkIwQ0Y2MkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZCMENG NjJBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzAvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5 M0ZCMENGNjJBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMCVE0E0WtNVesrL3ZG1+tVN9xFTfmLb1oT K9mbRJ9yBSnG15uJqoHrfcNcLxPiyqrZ7AxFLvws2Y3aa0jcE2xdlkhT+hhbWzH2 pZldOSiye/rTm/fpy3Jd18m0exj5NxkHHEXmh+ZqPB62g55EzcsspeQm85IsmdUh V4BS3FNEXufpXDAPqcx0/Jbm3ZI4g3D6Z7di0dIQO3W08Sp+sQNEOXJbcTRcI3Kf oVUtL8F/SHcuQq35xdpB0PlyNB2hoVAJjjwMakdFesoYaBTO+yRAabtyiSaNh8On DAJbCMfyXwuOopBF7Ue9xLfv+0sa3b1alMWVoabf949Qm74UCTM= -----END CERTIFICATE-----Generated at Sat Aug 23 21:52:14 2025 by rpki-client