$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft File: FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft (raw, json) Hash identifier: GK6funPFM9uzrUK7e+XtJ1WXdyO5RSt0P2c3y9pIUmU= Subject key identifier: 4F:A4:6C:BC:EB:6D:15:78:6F:78:8A:3E:03:5E:19:63:F6:F9:41:2B Authority key identifier: FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD Certificate issuer: /CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Certificate serial: 6C7E4CDD61DCCB0D7A1CFA928C0955F9B103CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft Manifest number: BA Signing time: Thu 07 Aug 2025 18:52:22 +0000 Manifest this update: Thu 07 Aug 2025 18:47:22 +0000 Manifest next update: Mon 11 Aug 2025 05:13:22 +0000 Files and hashes: 1: FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl (hash: 04LA1EPVlFggltIIIodhyUZw17xHMfYEXd9sl0iuVJA=) 2: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (hash: 8MA2foEnZoWONyFnZ8JDy90VgYdcSiLJ0qYGxKq2+wY=) 3: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (hash: WQbsLa/WI6fTYVHN1f/acG1CHu2vwbKzJ6P9lpc4ums=) 4: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (hash: 5RtTk3d772ssj1lManzV/eOyzfika2Q0NRT1wkf3Jmc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 05:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:7e:4c:dd:61:dc:cb:0d:7a:1c:fa:92:8c:09:55:f9:b1:03:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Validity Not Before: Aug 7 18:47:22 2025 GMT Not After : Aug 11 05:13:22 2025 GMT Subject: CN=4FA46CBCEB6D15786F788A3E035E1963F6F9412B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2e:15:13:80:44:14:b8:50:77:b5:bf:ea:1e: 25:db:90:64:fb:93:79:10:32:33:b6:7d:fd:1e:88: 45:f2:16:d2:ce:a2:71:6c:d2:76:ea:ba:e9:7d:a9: 02:39:d7:f2:e6:d9:7a:82:04:51:97:a3:f4:ec:96: 50:b4:c3:63:f5:4c:9d:31:26:8a:08:a5:06:b9:34: 3b:7c:7e:39:14:19:5b:a7:97:84:da:64:41:da:59: f5:6b:c8:4e:4e:0a:2a:c9:a3:9f:51:cb:81:13:05: bc:f9:a9:cc:63:b3:5f:c2:5e:2c:c4:31:15:6a:f6: d8:6c:0f:3c:f4:70:1e:a9:f0:0d:90:9c:7e:2f:af: d3:d8:27:e2:4b:e7:4f:af:cf:8b:3a:3d:99:66:73: 99:cc:a6:81:73:5b:4c:03:a6:42:8e:24:c7:8e:37: f4:7a:7d:56:b6:a6:43:af:7a:33:f2:01:47:b0:18: d4:56:8f:0a:cc:6f:57:94:6b:e1:59:17:7a:8d:2a: db:94:11:0e:10:e5:92:f7:31:c8:72:1e:b0:f0:51: b5:3f:27:eb:be:7d:c2:8a:f7:06:3d:8c:a5:35:2c: 85:14:1d:0b:7c:87:e6:67:00:14:7e:26:e5:b0:3a: ee:c1:a1:76:e6:85:36:1c:87:ce:03:51:c8:ae:27: ca:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A4:6C:BC:EB:6D:15:78:6F:78:8A:3E:03:5E:19:63:F6:F9:41:2B X509v3 Authority Key Identifier: keyid:FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:5d:99:07:31:4d:2c:92:01:63:56:94:f6:18:1b:ca:01:3b: e1:9f:94:69:cf:5b:ef:fd:9f:50:8f:38:46:1b:d7:71:c8:87: 86:90:b4:f5:e7:bd:66:78:ee:5e:f8:66:96:ab:b2:af:14:e0: 78:08:20:4f:33:7e:97:bd:07:bb:35:6a:db:f3:09:da:02:1e: ca:1c:7a:75:10:71:ed:55:7f:7a:62:81:3b:44:1f:16:9c:86: 61:65:e1:0e:d8:53:a4:49:f1:07:81:6a:9c:ae:0f:0c:5a:cf: e5:77:04:9d:17:ad:34:dd:3c:61:03:8c:5d:cd:9b:dc:b8:ce: db:ee:aa:fd:72:2d:64:8c:30:8f:f8:b2:91:2c:ed:2e:9e:1d: fb:a3:66:4c:9a:18:1f:d4:06:3c:9f:a3:56:ca:81:c7:79:a2: 34:63:36:70:6d:3c:12:5b:b5:c0:e1:fd:3b:48:ea:b7:93:bc: 84:38:d5:cc:25:88:b9:7c:62:84:55:5e:10:48:8d:f0:01:5a: d0:29:b5:c5:e0:b6:0f:19:da:03:29:ce:29:fd:68:81:bc:0b: 5b:1c:bb:67:df:bc:be:b3:c3:e6:64:68:16:ed:0b:40:c0:dc: 3c:8a:c5:a0:0e:a6:25:93:ae:a5:5a:fd:34:01:17:dc:a9:fe: 10:0b:ad:88 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITbH5M3WHcyw16HPqSjAlV+bEDyjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhGQTMwRkY4NTY2NzUzMjUzRkJCRDg3ODY3OTdGRTkzRkIw Q0Y2MkFEMB4XDTI1MDgwNzE4NDcyMloXDTI1MDgxMTA1MTMyMlowMzExMC8GA1UE AxMoNEZBNDZDQkNFQjZEMTU3ODZGNzg4QTNFMDM1RTE5NjNGNkY5NDEyQjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOsuFROARBS4UHe1v+oeJduQZPuT eRAyM7Z9/R6IRfIW0s6icWzSduq66X2pAjnX8ubZeoIEUZej9OyWULTDY/VMnTEm igilBrk0O3x+ORQZW6eXhNpkQdpZ9WvITk4KKsmjn1HLgRMFvPmpzGOzX8JeLMQx FWr22GwPPPRwHqnwDZCcfi+v09gn4kvnT6/Pizo9mWZzmcymgXNbTAOmQo4kx443 9Hp9VramQ696M/IBR7AY1FaPCsxvV5Rr4VkXeo0q25QRDhDlkvcxyHIesPBRtT8n 6759wor3Bj2MpTUshRQdC3yH5mcAFH4m5bA67sGhduaFNhyHzgNRyK4nyvkCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBRPpGy8620VeG94ij4DXhlj9vlBKzAfBgNVHSME GDAWgBT6MP+FZnUyU/u9h4Z5f+k/sM9irTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2 ZGEwZTgyLTA3NjQtNDVkMy1hZWQ5LWZkMjU4ZTcyYjZlMi8wL0ZBMzBGRjg1NjY3 NTMyNTNGQkJEODc4Njc5N0ZFOTNGQjBDRjYyQUQuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMS9GQTMwRkY4NTY2NzUzMjUzRkJCRDg3ODY3OTdGRTkzRkIwQ0Y2 MkFELmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8xNmRhMGU4Mi0wNzY0LTQ1ZDMtYWVk OS1mZDI1OGU3MmI2ZTIvMC9GQTMwRkY4NTY2NzUzMjUzRkJCRDg3ODY3OTdGRTkz RkIwQ0Y2MkFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAKV2ZBzFNLJIBY1aU9hgbygE74Z+Uac9b7/2f UI84RhvXcciHhpC09ee9ZnjuXvhmlquyrxTgeAggTzN+l70HuzVq2/MJ2gIeyhx6 dRBx7VV/emKBO0QfFpyGYWXhDthTpEnxB4FqnK4PDFrP5XcEnRetNN08YQOMXc2b 3LjO2+6q/XItZIwwj/iykSztLp4d+6NmTJoYH9QGPJ+jVsqBx3miNGM2cG08Elu1 wOH9O0jqt5O8hDjVzCWIuXxihFVeEEiN8AFa0Cm1xeC2DxnaAynOKf1ogbwLWxy7 Z9+8vrPD5mRoFu0LQMDcPIrFoA6mJZOupVr9NAEX3Kn+EAutiA== -----END CERTIFICATE-----Generated at Fri Aug 8 12:48:18 2025 by rpki-client