$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft File: FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft (raw, json) Hash identifier: GuziU4D5rPwyNO41sXSKQzZBJEy1jCnVinT+VQq+miQ= Subject key identifier: D0:4B:57:13:A3:8A:E5:A5:CB:50:5C:DB:1D:A5:17:F1:6B:6A:16:21 Authority key identifier: FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD Certificate issuer: /CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Certificate serial: 3570C38456DBDBBCF9870D070548701B1529C920 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft Manifest number: 8B Signing time: Wed 23 Apr 2025 13:32:13 +0000 Manifest this update: Wed 23 Apr 2025 13:27:13 +0000 Manifest next update: Sun 27 Apr 2025 00:25:13 +0000 Files and hashes: 1: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (hash: n+/1ZzwG4EgdsUBMybZxOh7Up3KgHvNTAiUa7eDfLu8=) 2: FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl (hash: 1AS+x3TIoRFDMgYfj7+cckheBalZF9oM+ZV0DHHtXBE=) 3: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (hash: BzB0xYRkmkpVdyi6fQJ5OxPEeMcyu/lKUmFuR1MRtFA=) 4: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (hash: ACNBkKr7zhAeXvXwZZLW9qIPFLxCT0Ploz7dXJTXEoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 18:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:70:c3:84:56:db:db:bc:f9:87:0d:07:05:48:70:1b:15:29:c9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Validity Not Before: Apr 23 13:27:13 2025 GMT Not After : Apr 27 00:25:13 2025 GMT Subject: CN=D04B5713A38AE5A5CB505CDB1DA517F16B6A1621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d3:6e:db:16:ac:1c:b4:71:b8:7e:94:4b:6e: 70:8f:fb:75:56:c0:6f:f3:49:3b:cd:03:64:81:d3: 57:7b:8a:e0:1e:e1:7c:ac:52:49:3a:e4:fc:00:f6: d9:54:67:f1:ff:17:8e:53:09:54:39:83:11:41:1d: b0:b0:89:94:d2:ca:9c:b6:30:70:64:16:df:fb:3f: 6c:1b:6b:70:ea:01:32:39:de:87:cc:4c:8a:70:13: 19:e2:76:68:20:ba:34:b9:d3:ad:1d:2b:96:66:e9: 05:d5:e8:45:3d:a1:f9:38:3c:4c:c0:40:80:74:6b: 55:02:f2:d3:10:32:fc:e4:6b:9b:00:83:87:df:e4: 4d:8c:eb:ab:f9:fb:06:2f:b4:a1:c4:62:e7:8d:77: 1b:41:1c:37:83:d9:91:18:aa:95:ce:24:62:36:70: 4a:af:71:4a:48:d7:9a:a9:f9:2e:fa:3e:16:ad:1f: 0b:82:59:e8:08:0b:e2:58:d4:44:82:3e:61:25:a9: a7:ea:a2:86:96:22:68:7f:dd:4b:c3:e2:58:7e:a7: be:03:2c:e8:0a:4f:e0:e3:d2:eb:64:e6:1d:cc:42: 26:be:51:9f:ed:f1:b8:11:65:48:93:aa:12:9d:68: df:85:29:fa:2b:cd:83:c7:2e:3b:61:27:76:4b:ab: e5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4B:57:13:A3:8A:E5:A5:CB:50:5C:DB:1D:A5:17:F1:6B:6A:16:21 X509v3 Authority Key Identifier: keyid:FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d3:d7:97:44:45:1e:fa:c8:54:9b:d0:48:9c:d2:9a:52:a4: 4b:55:cf:5d:d8:0a:e8:02:35:d6:f3:c7:a0:40:83:8f:85:21: 8a:4f:71:ac:49:f8:3c:d2:fb:14:79:66:21:89:f1:db:65:54: 91:0d:42:ac:21:bc:5c:25:f3:35:0a:19:2f:c4:33:e6:8c:25: dd:36:cb:59:58:20:03:af:ea:b1:65:66:a9:29:01:24:e8:d6: cc:60:00:4a:26:bf:40:b3:92:86:65:56:e9:d2:7b:86:5b:0e: 24:1a:10:b0:82:e8:34:c0:4a:9c:c0:89:f8:42:03:46:4d:ac: 35:1f:1b:8f:62:0b:17:73:36:9d:9e:5f:bf:ff:ec:3c:30:27: da:fa:11:3f:a1:59:75:c0:5f:00:ca:9b:4a:40:93:48:4c:57: ac:b3:81:8b:3c:53:27:bf:9c:42:27:8b:4d:f6:dc:23:48:a3: 2d:7f:97:b0:ce:56:bd:2f:f1:19:cb:6c:72:44:ff:ca:d0:67: 8b:f9:13:6e:7c:ce:d6:81:68:e8:e2:69:de:d4:51:03:5e:bb: 2a:cf:12:a6:bc:a2:4d:73:70:c3:70:b5:d1:4f:ae:39:b7:5f: c8:d4:1a:4d:12:75:bf:e4:64:a9:28:38:93:bb:4b:55:84:cd: e7:32:46:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNXDDhFbb27z5hw0HBUhwGxUpySAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZC MENGNjJBRDAeFw0yNTA0MjMxMzI3MTNaFw0yNTA0MjcwMDI1MTNaMDMxMTAvBgNV BAMTKEQwNEI1NzEzQTM4QUU1QTVDQjUwNUNEQjFEQTUxN0YxNkI2QTE2MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5027bFqwctHG4fpRLbnCP+3VW wG/zSTvNA2SB01d7iuAe4XysUkk65PwA9tlUZ/H/F45TCVQ5gxFBHbCwiZTSypy2 MHBkFt/7P2wba3DqATI53ofMTIpwExnidmggujS5060dK5Zm6QXV6EU9ofk4PEzA QIB0a1UC8tMQMvzka5sAg4ff5E2M66v5+wYvtKHEYueNdxtBHDeD2ZEYqpXOJGI2 cEqvcUpI15qp+S76PhatHwuCWegIC+JY1ESCPmElqafqooaWImh/3UvD4lh+p74D LOgKT+Dj0utk5h3MQia+UZ/t8bgRZUiTqhKdaN+FKforzYPHLjthJ3ZLq+XJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0EtXE6OK5aXLUFzbHaUX8WtqFiEwHwYDVR0j BBgwFoAU+jD/hWZ1MlP7vYeGeX/pP7DPYq0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMC9GQTMwRkY4NTY2 NzUzMjUzRkJCRDg3ODY3OTdGRTkzRkIwQ0Y2MkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZCMENG NjJBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzAvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5 M0ZCMENGNjJBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrT15dERR76yFSb0Eic0ppSpEtVz13YCugC Ndbzx6BAg4+FIYpPcaxJ+DzS+xR5ZiGJ8dtlVJENQqwhvFwl8zUKGS/EM+aMJd02 y1lYIAOv6rFlZqkpASTo1sxgAEomv0CzkoZlVunSe4ZbDiQaELCC6DTASpzAifhC A0ZNrDUfG49iCxdzNp2eX7//7DwwJ9r6ET+hWXXAXwDKm0pAk0hMV6yzgYs8Uye/ nEIni0323CNIoy1/l7DOVr0v8RnLbHJE/8rQZ4v5E258ztaBaOjiad7UUQNeuyrP Eqa8ok1zcMNwtdFPrjm3X8jUGk0Sdb/kZKkoOJO7S1WEzecyRsw= -----END CERTIFICATE-----Generated at Wed Apr 23 15:33:57 2025 by rpki-client on console.sobornost.net