$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft File: FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft (raw, json) Hash identifier: WIJQDiVM+obOSUTc4fwvWr0JBXqp0bCAPbyhHDgDclU= Subject key identifier: 2F:4C:8D:0F:53:C9:F9:AD:90:36:CB:F2:AD:BB:D7:72:B5:27:0A:3E Authority key identifier: FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD Certificate issuer: /CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Certificate serial: 78050A1795FABD65C6E866CAF6DC127EFC39B2F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft Manifest number: 0117 Signing time: Mon 02 Mar 2026 17:22:39 +0000 Manifest this update: Mon 02 Mar 2026 17:17:39 +0000 Manifest next update: Fri 06 Mar 2026 02:03:39 +0000 Files and hashes: 1: FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl (hash: dc/0vnYmuVKkco0Rz1GEFJuYL0OmRhHCwSRR0ZLY3CE=) 2: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (hash: WQbsLa/WI6fTYVHN1f/acG1CHu2vwbKzJ6P9lpc4ums=) 3: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (hash: 5RtTk3d772ssj1lManzV/eOyzfika2Q0NRT1wkf3Jmc=) 4: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (hash: 8MA2foEnZoWONyFnZ8JDy90VgYdcSiLJ0qYGxKq2+wY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:05:0a:17:95:fa:bd:65:c6:e8:66:ca:f6:dc:12:7e:fc:39:b2:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Validity Not Before: Mar 2 17:17:39 2026 GMT Not After : Mar 6 02:03:39 2026 GMT Subject: CN=2F4C8D0F53C9F9AD9036CBF2ADBBD772B5270A3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:16:1b:3d:88:8c:64:d7:1b:8a:90:3a:cc:88: d2:f1:06:1c:f8:c4:94:04:7c:b2:bc:8a:39:5b:ff: d9:b9:b2:10:14:c5:13:ad:28:bc:19:8f:df:7b:12: 19:78:13:9e:ac:c0:54:77:b5:cc:dd:df:36:39:28: a7:b0:c3:27:2b:ad:1c:db:90:ab:c3:8e:85:68:1b: bb:9d:e4:a1:bc:76:b5:4c:a2:49:10:aa:47:3e:09: ec:a5:00:92:0b:ff:da:f4:11:31:4b:17:47:b5:b5: ef:b0:e2:24:0f:2a:f6:e1:e8:30:a7:be:c4:c2:1d: b8:3a:b8:7b:80:c9:ae:f5:5c:cc:9f:93:aa:cd:1c: c4:27:58:e7:45:93:28:12:28:01:4b:1e:2e:04:5a: c3:69:76:13:27:22:1d:c8:1e:cc:a2:11:eb:18:d9: 1f:4e:44:17:7a:28:08:01:2d:32:0c:59:47:a0:d9: be:b1:8a:f6:dc:26:2e:94:24:2b:fe:b3:4f:57:cd: c4:29:c0:89:f6:89:ec:2b:4c:bf:14:29:3f:a5:a6: 6e:69:34:c4:20:bc:03:45:b0:9a:e3:27:b7:cd:cf: 12:55:64:71:87:6e:76:1e:76:78:c1:a7:10:bd:15: c8:59:a5:ae:a2:b4:63:10:70:a5:10:d6:3b:6e:60: 52:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4C:8D:0F:53:C9:F9:AD:90:36:CB:F2:AD:BB:D7:72:B5:27:0A:3E X509v3 Authority Key Identifier: keyid:FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:07:89:02:db:d0:6b:57:c9:1c:05:84:0f:ce:65:0d:1a:2e: e7:d0:27:28:69:42:e6:c0:f1:41:1a:de:a2:31:85:b2:33:84: db:6c:a2:bb:2d:aa:07:7d:5a:03:76:6b:b0:ff:14:19:3c:ad: 7e:80:ec:18:d7:05:72:15:58:86:f9:69:54:52:fb:69:2b:d0: a5:d8:80:67:ea:61:e1:54:bf:5b:de:3b:49:52:0c:b7:52:3e: de:98:9c:19:9f:ce:ee:79:43:68:22:16:b9:7f:3c:88:ce:28: 7c:55:19:f7:93:3c:da:13:37:89:31:1e:6b:6a:fd:87:43:17: cd:35:ae:f2:6f:65:09:35:fa:2c:6b:b7:45:18:57:5b:c7:ff: a0:4a:dd:b7:f6:25:05:13:b7:37:9b:2d:ea:d6:1f:fe:6d:a0: 37:09:8f:97:35:6a:64:2b:6a:0c:3d:e2:f0:85:57:a4:28:31: c8:35:8b:98:b6:a8:25:aa:8d:f8:df:02:56:0c:4d:31:65:02: 94:03:a2:4a:cd:26:37:46:ea:cd:bf:9e:93:70:c2:5f:4e:95: 32:17:f1:c3:ca:a5:da:12:fc:b0:6f:e3:64:60:d1:dc:73:84: 0d:62:40:5e:f2:44:7c:0b:38:44:d7:6e:09:27:aa:4a:c7:55: 56:69:92:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeAUKF5X6vWXG6GbK9twSfvw5svQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZC MENGNjJBRDAeFw0yNjAzMDIxNzE3MzlaFw0yNjAzMDYwMjAzMzlaMDMxMTAvBgNV BAMTKDJGNEM4RDBGNTNDOUY5QUQ5MDM2Q0JGMkFEQkJENzcyQjUyNzBBM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkFhs9iIxk1xuKkDrMiNLxBhz4 xJQEfLK8ijlb/9m5shAUxROtKLwZj997Ehl4E56swFR3tczd3zY5KKewwycrrRzb kKvDjoVoG7ud5KG8drVMokkQqkc+CeylAJIL/9r0ETFLF0e1te+w4iQPKvbh6DCn vsTCHbg6uHuAya71XMyfk6rNHMQnWOdFkygSKAFLHi4EWsNpdhMnIh3IHsyiEesY 2R9ORBd6KAgBLTIMWUeg2b6xivbcJi6UJCv+s09XzcQpwIn2iewrTL8UKT+lpm5p NMQgvANFsJrjJ7fNzxJVZHGHbnYednjBpxC9FchZpa6itGMQcKUQ1jtuYFL9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL0yND1PJ+a2QNsvyrbvXcrUnCj4wHwYDVR0j BBgwFoAU+jD/hWZ1MlP7vYeGeX/pP7DPYq0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMC9GQTMwRkY4NTY2 NzUzMjUzRkJCRDg3ODY3OTdGRTkzRkIwQ0Y2MkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZCMENG NjJBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzAvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5 M0ZCMENGNjJBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAHiQLb0GtXyRwFhA/OZQ0aLufQJyhpQubA 8UEa3qIxhbIzhNtsorstqgd9WgN2a7D/FBk8rX6A7BjXBXIVWIb5aVRS+2kr0KXY gGfqYeFUv1veO0lSDLdSPt6YnBmfzu55Q2giFrl/PIjOKHxVGfeTPNoTN4kxHmtq /YdDF801rvJvZQk1+ixrt0UYV1vH/6BK3bf2JQUTtzebLerWH/5toDcJj5c1amQr agw94vCFV6QoMcg1i5i2qCWqjfjfAlYMTTFlApQDokrNJjdG6s2/npNwwl9OlTIX 8cPKpdoS/LBv42Rg0dxzhA1iQF7yRHwLOETXbgknqkrHVVZpkuU= -----END CERTIFICATE-----Generated at Mon Mar 2 22:20:36 2026 by rpki-client