$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft File: FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft (raw, json) Hash identifier: 87YIOzu9fuUdbkXXW5zjLHceDFwjPs9/EI+/Y83KQYU= Subject key identifier: EA:57:FA:3B:97:DA:97:D2:0F:B6:9E:BD:22:2E:F2:3A:C0:64:B6:A3 Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39 Certificate issuer: /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39 Certificate serial: 1A7846327F337EC4A997F44326998D6BBFE61BE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft Manifest number: 02C1 Signing time: Thu 21 Aug 2025 22:10:56 +0000 Manifest this update: Thu 21 Aug 2025 22:05:56 +0000 Manifest next update: Mon 25 Aug 2025 07:13:56 +0000 Files and hashes: 1: 323430323a653130303a38313a3a2f34382d3438203d3e203538343835.roa (hash: LZiLGSJdIHDnXMLX3SUdSUGcn99p7H2DzXggJdnkwkE=) 2: 323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa (hash: 50O5uNlbOkY1l/rUhqCb/dq0Q5p/vt2WkECQ0oSMMmU=) 3: 3130332e3234372e32322e302f32342d3234203d3e203538343835.roa (hash: saNY2uHlV/XnejqjSZTyfzI/prOYKq0PQeW13/pFt9k=) 4: 323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa (hash: LNeaS083UOlp4LUdDeQ2gGXYYeK9bcYJQvzUhUQt9Vs=) 5: FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl (hash: jE1we+NUdxrFl/qxWqtHKbrSAir/xxF0+iPeUFvIf54=) 6: 323430323a653130303a61633a3a2f34382d3438203d3e203538343835.roa (hash: bs0ZMOoWFJzZsSzRHXIPfE50E27zzOl01UAYg6gx044=) 7: 323430323a653130303a61653a3a2f34382d3438203d3e203538343835.roa (hash: f/PfUh13qwQbqBOuR7Y1xgR/xJQ98pR+42yK2Mrg59s=) 8: 323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa (hash: AwyhgoC9SnkiONSyyarxojN2GzihXUBvalkihTTc9zE=) 9: 3130332e3234372e32302e302f32342d3234203d3e203538343835.roa (hash: Z1gDiN/X+uv2C5f6v1h8WInw2+lPzjHj0oFTtpIP6pA=) 10: 3130332e3234372e32302e302f32322d3234203d3e203538343835.roa (hash: 0yw7rRpcNLCQkltZhjGJL1siB8HST2OMsTJXjD26O8w=) 11: 323430323a653130303a3330353a3a2f34382d3438203d3e203538343835.roa (hash: ZZpQllrHWfXo8o8D2sCJ3pB5jUWAf/wTgvoQBwbAr+E=) 12: 323430323a653130303a37353a3a2f34382d3438203d3e203538343835.roa (hash: bjLKcE6uyYPhJZ29YifTXHBYInxuCRJ71wvo0zdxJPg=) 13: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (hash: 34GAz6FSvQ986oiy73pgO3Nl806HiynZyDh81QhYAtI=) 14: 323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa (hash: /nt77PAEWl7VykddnVbcJDci8AanpKq8RsOk21Gx/Ns=) 15: 3130332e3234372e32332e302f32342d3234203d3e203538343835.roa (hash: lzNm0/0IA9d3peGzozwFKwjutuLSs05RevbSqRZ75Wc=) 16: 323430323a653130303a3a2f33322d3438203d3e203538343835.roa (hash: vUtKxLKXTfruRLMlOvpg8rz9eUIDHFfVkTATVb94ii4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:78:46:32:7f:33:7e:c4:a9:97:f4:43:26:99:8d:6b:bf:e6:1b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39 Validity Not Before: Aug 21 22:05:56 2025 GMT Not After : Aug 25 07:13:56 2025 GMT Subject: CN=EA57FA3B97DA97D20FB69EBD222EF23AC064B6A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:93:67:30:3a:2e:6f:9c:b5:c1:ce:e8:47:e4: 3c:05:3c:4b:1e:62:09:b9:77:cd:f1:c2:e9:b6:01: 73:0e:47:e3:3f:e2:85:36:ff:03:6c:fb:7d:ec:68: 9b:7d:dd:35:60:c7:7a:c9:47:76:ef:9d:1a:b3:2e: f0:2f:ea:fa:fb:88:38:32:9a:10:99:87:e4:0f:d7: 8b:dc:b6:94:a9:37:86:cf:2b:77:f2:1f:0c:62:e8: 12:14:5b:d2:8b:87:28:d7:b1:22:09:dd:99:6a:26: ab:9b:53:58:8d:4c:bf:a9:0b:a1:c4:bf:bf:3c:b4: 25:41:f0:bc:7b:64:8d:6c:7a:3c:bc:e3:a8:61:81: 4a:4b:9a:ed:d7:37:4a:ff:c7:15:f9:57:67:8a:fe: 4c:db:e2:c0:2f:42:f5:46:92:8f:f6:0b:02:36:35: e2:1c:f4:87:a4:15:0e:28:c3:e2:08:b1:ae:b6:6b: 98:dc:90:9d:8a:da:dc:66:1d:3a:02:39:03:d2:e6: 44:59:5e:63:79:12:9f:df:09:35:09:1e:52:ae:8b: fc:bb:3b:08:cc:6c:77:47:d6:bb:6f:f0:bf:07:a5: e2:27:e5:a3:dc:06:1d:fa:21:6b:44:a0:22:6a:a2: 9f:98:9f:c6:42:86:0a:b3:70:e6:a8:a1:2f:7b:98: b6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:57:FA:3B:97:DA:97:D2:0F:B6:9E:BD:22:2E:F2:3A:C0:64:B6:A3 X509v3 Authority Key Identifier: keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:49:c7:d4:36:bd:c2:4c:ef:29:dc:12:64:c6:84:56:76:e5: 6b:11:a3:c9:73:0d:2e:0e:6a:47:ce:f8:fe:c0:64:df:3c:0b: ed:7e:18:21:40:32:b3:49:fc:d9:00:18:cd:7a:2c:a8:d4:9b: f0:33:64:8e:03:f7:f8:3e:67:58:25:ef:37:b0:4d:96:09:a3: 79:52:16:aa:92:85:79:75:6f:8e:27:4e:0a:c1:11:dd:b4:71: 13:3a:c8:59:96:64:33:36:f2:59:59:1d:ce:09:e7:4a:36:ad: d5:23:1e:b7:15:8e:25:6f:2f:e1:4d:57:68:a0:eb:bc:98:b3: f3:bf:15:ea:72:08:15:ff:46:f5:de:fd:f5:12:0c:49:cf:06: 16:66:54:77:2e:75:5f:b3:3e:c0:d1:10:63:3e:77:a7:60:96: e9:46:d1:27:fd:56:48:ab:2e:d9:d9:0f:60:e2:3c:a5:0b:ca: 03:5e:fc:35:98:9b:cc:b9:99:43:9c:15:ca:82:ff:78:ab:0f: d4:bb:61:a4:13:c1:a4:7c:cd:c6:c0:20:01:b1:1f:a3:fd:df: a5:06:9e:bc:3f:f1:f5:35:c9:f6:cb:a3:8c:48:e7:b6:dd:69: e4:97:38:10:21:cb:96:34:31:35:88:2e:f6:27:55:08:17:50: 2b:f3:53:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGnhGMn8zfsSpl/RDJpmNa7/mG+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2REJF QjNCRkYzOTAeFw0yNTA4MjEyMjA1NTZaFw0yNTA4MjUwNzEzNTZaMDMxMTAvBgNV BAMTKEVBNTdGQTNCOTdEQTk3RDIwRkI2OUVCRDIyMkVGMjNBQzA2NEI2QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCek2cwOi5vnLXBzuhH5DwFPEse Ygm5d83xwum2AXMOR+M/4oU2/wNs+33saJt93TVgx3rJR3bvnRqzLvAv6vr7iDgy mhCZh+QP14vctpSpN4bPK3fyHwxi6BIUW9KLhyjXsSIJ3ZlqJqubU1iNTL+pC6HE v788tCVB8Lx7ZI1sejy846hhgUpLmu3XN0r/xxX5V2eK/kzb4sAvQvVGko/2CwI2 NeIc9IekFQ4ow+IIsa62a5jckJ2K2txmHToCOQPS5kRZXmN5Ep/fCTUJHlKui/y7 OwjMbHdH1rtv8L8HpeIn5aPcBh36IWtEoCJqop+Yn8ZChgqzcOaooS97mLYPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6lf6O5fal9IPtp69Ii7yOsBktqMwHwYDVR0j BBgwFoAU+lvKmE7rr/3O2EGQxwdW2+s7/zkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZWU0N2JiZi1iYTg0LTQ0OGYtOTYyYi0yYWFmNWM3ZGQ2OGQvMC9GQTVCQ0E5ODRF RUJBRkZEQ0VEODQxOTBDNzA3NTZEQkVCM0JGRjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2REJFQjNC RkYzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmVlNDdiYmYtYmE4NC00NDhmLTk2 MmItMmFhZjVjN2RkNjhkLzAvRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2 REJFQjNCRkYzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVJx9Q2vcJM7yncEmTGhFZ25WsRo8lzDS4O akfO+P7AZN88C+1+GCFAMrNJ/NkAGM16LKjUm/AzZI4D9/g+Z1gl7zewTZYJo3lS FqqShXl1b44nTgrBEd20cRM6yFmWZDM28llZHc4J50o2rdUjHrcVjiVvL+FNV2ig 67yYs/O/FepyCBX/RvXe/fUSDEnPBhZmVHcudV+zPsDREGM+d6dglulG0Sf9Vkir LtnZD2DiPKULygNe/DWYm8y5mUOcFcqC/3irD9S7YaQTwaR8zcbAIAGxH6P936UG nrw/8fU1yfbLo4xI57bdaeSXOBAhy5Y0MTWILvYnVQgXUCvzU/4= -----END CERTIFICATE-----Generated at Sat Aug 23 16:05:04 2025 by rpki-client