$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft File: FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft (raw, json) Hash identifier: eCfuP8xpxtBp40pJBxwcBkxrsPgFcZuqII/odl/2ukc= Subject key identifier: 30:67:4D:A2:CF:F8:DC:99:AD:8A:42:23:61:CE:87:9C:D5:56:D5:69 Authority key identifier: FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD Certificate issuer: /CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Certificate serial: 5966817DD636E44D9305AD822E870ADC0C917692 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft Manifest number: 8C Signing time: Sat 26 Apr 2025 00:32:16 +0000 Manifest this update: Sat 26 Apr 2025 00:27:16 +0000 Manifest next update: Tue 29 Apr 2025 10:32:16 +0000 Files and hashes: 1: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (hash: BzB0xYRkmkpVdyi6fQJ5OxPEeMcyu/lKUmFuR1MRtFA=) 2: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (hash: n+/1ZzwG4EgdsUBMybZxOh7Up3KgHvNTAiUa7eDfLu8=) 3: FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl (hash: 74c69FD8OnMulfp78hkYZL2KmO2eHZJHRZQ38Z3wo/Y=) 4: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (hash: ACNBkKr7zhAeXvXwZZLW9qIPFLxCT0Ploz7dXJTXEoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:66:81:7d:d6:36:e4:4d:93:05:ad:82:2e:87:0a:dc:0c:91:76:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Validity Not Before: Apr 26 00:27:16 2025 GMT Not After : Apr 29 10:32:16 2025 GMT Subject: CN=30674DA2CFF8DC99AD8A422361CE879CD556D569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:46:4a:70:34:c2:d5:bd:61:93:a7:d2:b5:aa: 9e:d3:84:2d:1a:d0:3c:fa:b7:1c:5b:6f:9a:ba:2c: 8a:85:f7:29:a1:40:60:b9:c1:4e:63:44:c5:cc:9a: 8c:b2:3e:ac:59:8b:af:00:00:79:23:d6:d0:03:da: e6:ce:0d:e8:6b:0f:9e:7f:cf:6b:97:b3:1d:5a:36: a8:a0:c2:27:0a:65:54:b4:d4:f3:b8:c6:fe:d4:7b: 18:ae:03:7a:7d:fd:82:a6:8a:25:5e:95:25:51:fe: ba:93:2e:98:51:a7:29:cc:0b:e0:11:60:e1:4a:fd: c0:4c:fa:0b:fc:96:62:ce:9d:6c:9a:00:93:dc:0a: c3:66:46:f4:d3:9c:ff:53:b7:be:73:31:cb:0d:00: 6b:17:bd:42:de:ed:1b:eb:58:46:73:7c:7c:aa:f1: b8:0b:3b:4a:ed:7d:f0:b1:e2:a1:46:34:97:04:05: c9:b8:b4:12:67:93:94:3a:33:3e:ab:fe:6f:d7:06: 6c:17:92:ab:e0:29:48:1c:c6:bd:d3:07:69:55:88: c3:3c:ff:6d:ac:d7:8d:8c:65:7e:9b:03:15:2d:b8: 90:2e:1f:83:13:1d:9f:b0:60:4e:21:82:2d:02:94: 38:f7:3d:22:48:58:57:ad:39:4e:57:93:29:2c:43: bf:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:67:4D:A2:CF:F8:DC:99:AD:8A:42:23:61:CE:87:9C:D5:56:D5:69 X509v3 Authority Key Identifier: keyid:FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:5d:e6:25:6c:ef:c0:7b:9d:2e:8a:37:15:2a:81:47:58:d7: d4:c9:7c:f6:63:d6:2f:de:78:62:50:a3:5d:10:e7:39:8b:72: 66:2c:49:90:66:53:a8:c3:11:20:57:dd:98:1e:31:f8:04:5c: d5:4a:8f:21:4c:69:2b:70:74:e0:b9:8c:11:19:6e:ce:dd:50: 31:ca:fc:32:23:1a:95:57:a4:58:01:e2:3e:14:c7:a7:33:db: c8:68:be:8a:e6:c5:b6:47:6c:96:fe:23:37:df:70:16:e2:a6: 3f:99:ce:47:ba:21:da:d0:18:b8:2e:6d:d7:7f:bd:fc:06:0a: ca:08:c5:5e:92:1a:ff:a7:88:94:73:61:96:5f:14:07:22:5b: d1:c5:a4:99:04:2c:95:a3:a5:2d:f5:a6:d4:77:bf:1b:61:2d: 48:d7:b1:3e:e4:40:a9:85:3e:15:4c:bc:41:ab:f5:e3:40:3f: 84:d7:5b:74:70:30:bf:76:dc:a7:77:fd:85:e5:e5:c6:a4:df: 74:2e:ac:c5:58:70:39:74:2d:8a:5a:ae:ae:b8:7b:dc:27:d0: ef:69:4e:e5:8b:ca:b5:e6:82:ed:04:fa:15:8e:70:0f:4f:60: df:14:90:5d:d2:2d:a0:d7:18:e6:f7:a7:52:21:29:c1:b9:da: 9f:e6:17:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWWaBfdY25E2TBa2CLocK3AyRdpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZC MENGNjJBRDAeFw0yNTA0MjYwMDI3MTZaFw0yNTA0MjkxMDMyMTZaMDMxMTAvBgNV BAMTKDMwNjc0REEyQ0ZGOERDOTlBRDhBNDIyMzYxQ0U4NzlDRDU1NkQ1NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RkpwNMLVvWGTp9K1qp7ThC0a 0Dz6txxbb5q6LIqF9ymhQGC5wU5jRMXMmoyyPqxZi68AAHkj1tAD2ubODehrD55/ z2uXsx1aNqigwicKZVS01PO4xv7UexiuA3p9/YKmiiVelSVR/rqTLphRpynMC+AR YOFK/cBM+gv8lmLOnWyaAJPcCsNmRvTTnP9Tt75zMcsNAGsXvULe7RvrWEZzfHyq 8bgLO0rtffCx4qFGNJcEBcm4tBJnk5Q6Mz6r/m/XBmwXkqvgKUgcxr3TB2lViMM8 /22s142MZX6bAxUtuJAuH4MTHZ+wYE4hgi0ClDj3PSJIWFetOU5XkyksQ7+VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMGdNos/43JmtikIjYc6HnNVW1WkwHwYDVR0j BBgwFoAU+jD/hWZ1MlP7vYeGeX/pP7DPYq0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMC9GQTMwRkY4NTY2 NzUzMjUzRkJCRDg3ODY3OTdGRTkzRkIwQ0Y2MkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZCMENG NjJBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzAvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5 M0ZCMENGNjJBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9d5iVs78B7nS6KNxUqgUdY19TJfPZj1i/e eGJQo10Q5zmLcmYsSZBmU6jDESBX3ZgeMfgEXNVKjyFMaStwdOC5jBEZbs7dUDHK /DIjGpVXpFgB4j4Ux6cz28hovormxbZHbJb+IzffcBbipj+Zzke6IdrQGLgubdd/ vfwGCsoIxV6SGv+niJRzYZZfFAciW9HFpJkELJWjpS31ptR3vxthLUjXsT7kQKmF PhVMvEGr9eNAP4TXW3RwML923Kd3/YXl5cak33QurMVYcDl0LYparq64e9wn0O9p TuWLyrXmgu0E+hWOcA9PYN8UkF3SLaDXGOb3p1IhKcG52p/mF1I= -----END CERTIFICATE-----Generated at Sun Apr 27 08:25:03 2025 by rpki-client