$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft File: FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft (raw, json) Hash identifier: KSWb3eYRpWlvr7rZujzJGDjydTky22BKyscSJopLJrQ= Subject key identifier: 3A:D3:97:7E:80:EB:87:2B:0B:38:85:7E:C5:E5:05:1A:D7:D9:11:B8 Authority key identifier: FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD Certificate issuer: /CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Certificate serial: 40584E082179C480999371F5DFA865EDEC5F7CDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft Manifest number: A2 Signing time: Sat 14 Jun 2025 14:52:16 +0000 Manifest this update: Sat 14 Jun 2025 14:47:16 +0000 Manifest next update: Wed 18 Jun 2025 02:09:16 +0000 Files and hashes: 1: FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl (hash: TEv4gZlzgqLcbAcIyEweacEe2wkhRpJDFicEpnYgZNY=) 2: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (hash: WQbsLa/WI6fTYVHN1f/acG1CHu2vwbKzJ6P9lpc4ums=) 3: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (hash: 5RtTk3d772ssj1lManzV/eOyzfika2Q0NRT1wkf3Jmc=) 4: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (hash: 8MA2foEnZoWONyFnZ8JDy90VgYdcSiLJ0qYGxKq2+wY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 02:09:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:58:4e:08:21:79:c4:80:99:93:71:f5:df:a8:65:ed:ec:5f:7c:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Validity Not Before: Jun 14 14:47:16 2025 GMT Not After : Jun 18 02:09:16 2025 GMT Subject: CN=3AD3977E80EB872B0B38857EC5E5051AD7D911B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d9:3e:cc:6e:7a:15:3e:0b:ce:0f:24:ba:24: 4b:74:b8:31:f1:20:0d:24:f2:89:27:40:25:20:40: 14:77:4d:e5:81:6b:4e:f0:93:e9:f6:af:b9:f4:51: ff:1f:20:d6:10:fc:84:25:84:80:f0:11:e9:68:f6: d7:e2:ac:62:cd:67:9b:0d:a8:9b:4a:9a:7a:c4:5d: bd:2c:6c:17:59:29:8b:d5:83:91:93:b8:13:6f:05: c5:70:63:c7:3a:15:5a:5d:9c:56:7f:d1:0a:d2:e3: 8c:12:38:8d:a2:62:b7:77:c0:34:c5:2b:69:e1:31: 43:07:a0:f2:ac:49:9f:2d:ab:97:f9:6b:9d:ec:f5: 96:19:5c:1e:28:a1:3d:75:5f:0f:61:1a:f6:4d:9e: b8:f8:5f:a4:80:ae:d2:2c:3a:e9:73:35:e0:ad:ab: 03:9f:e1:14:1d:2a:3e:21:e2:46:52:71:41:41:39: a4:ed:d4:b9:77:7f:d1:96:dc:51:6c:75:4d:41:6a: b0:ee:c7:b0:a0:ab:fb:8d:16:58:c8:bc:46:fc:8d: 48:2b:a2:79:7b:4d:78:e9:a2:2b:19:cd:a1:c9:21: 8f:b8:26:0c:0d:a6:46:5c:ed:2a:d4:84:13:21:17: ce:79:19:1e:69:a7:2c:0c:14:30:d0:b2:06:78:e8: 69:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D3:97:7E:80:EB:87:2B:0B:38:85:7E:C5:E5:05:1A:D7:D9:11:B8 X509v3 Authority Key Identifier: keyid:FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:53:0e:5d:ac:30:8e:b5:cd:9f:22:9d:3a:c2:f5:e3:f3:7c: 9e:5a:cb:bd:27:59:f7:39:6b:38:95:24:94:80:a8:6a:c9:25: c0:ec:aa:1c:41:59:d2:94:f0:21:49:f3:fc:70:72:d1:fe:e7: 61:f4:15:43:ba:9f:f0:cb:45:40:7f:a4:ef:85:40:23:e3:80: fc:aa:22:fc:ba:10:ab:f4:6a:f4:4b:09:f0:74:5a:72:88:70: e1:20:fc:9d:99:d3:06:33:1b:25:02:34:16:ec:fe:11:e2:ff: 68:29:dc:c6:a7:47:3b:06:50:bd:89:ff:e8:97:4e:63:d7:e9: 9d:ec:44:b1:61:45:92:71:0a:d1:a4:ac:f6:b0:5c:46:32:bd: 3c:a6:6c:7b:4d:a9:20:52:e8:8f:ae:f3:85:20:6a:1f:ca:0f: 2b:b9:ec:4e:f4:26:d9:2d:3c:28:c2:28:7f:27:61:4a:d5:43: 64:ff:e8:da:44:af:74:43:a9:c5:fc:14:08:f3:bb:bc:be:f2: 57:88:f9:bd:bd:a1:33:b2:0c:8b:43:0f:77:cf:1e:64:a8:df: a5:42:f9:58:a3:62:81:d8:a2:57:81:34:05:d8:06:23:ab:0d: 65:a3:82:31:03:5f:bf:05:bc:ce:b6:68:02:83:0a:40:f4:37: 0e:58:46:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQFhOCCF5xICZk3H136hl7exffNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZC MENGNjJBRDAeFw0yNTA2MTQxNDQ3MTZaFw0yNTA2MTgwMjA5MTZaMDMxMTAvBgNV BAMTKDNBRDM5NzdFODBFQjg3MkIwQjM4ODU3RUM1RTUwNTFBRDdEOTExQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq2T7MbnoVPgvODyS6JEt0uDHx IA0k8oknQCUgQBR3TeWBa07wk+n2r7n0Uf8fINYQ/IQlhIDwEelo9tfirGLNZ5sN qJtKmnrEXb0sbBdZKYvVg5GTuBNvBcVwY8c6FVpdnFZ/0QrS44wSOI2iYrd3wDTF K2nhMUMHoPKsSZ8tq5f5a53s9ZYZXB4ooT11Xw9hGvZNnrj4X6SArtIsOulzNeCt qwOf4RQdKj4h4kZScUFBOaTt1Ll3f9GW3FFsdU1BarDux7Cgq/uNFljIvEb8jUgr onl7TXjpoisZzaHJIY+4JgwNpkZc7SrUhBMhF855GR5ppywMFDDQsgZ46Gk/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOtOXfoDrhysLOIV+xeUFGtfZEbgwHwYDVR0j BBgwFoAU+jD/hWZ1MlP7vYeGeX/pP7DPYq0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMC9GQTMwRkY4NTY2 NzUzMjUzRkJCRDg3ODY3OTdGRTkzRkIwQ0Y2MkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZCMENG NjJBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzAvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5 M0ZCMENGNjJBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERTDl2sMI61zZ8inTrC9ePzfJ5ay70nWfc5 aziVJJSAqGrJJcDsqhxBWdKU8CFJ8/xwctH+52H0FUO6n/DLRUB/pO+FQCPjgPyq Ivy6EKv0avRLCfB0WnKIcOEg/J2Z0wYzGyUCNBbs/hHi/2gp3ManRzsGUL2J/+iX TmPX6Z3sRLFhRZJxCtGkrPawXEYyvTymbHtNqSBS6I+u84Ugah/KDyu57E70Jtkt PCjCKH8nYUrVQ2T/6NpEr3RDqcX8FAjzu7y+8leI+b29oTOyDItDD3fPHmSo36VC +VijYoHYoleBNAXYBiOrDWWjgjEDX78FvM62aAKDCkD0Nw5YRmw= -----END CERTIFICATE-----Generated at Mon Jun 16 15:52:41 2025 by rpki-client