$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft File: 295CEF87CDB74B1A43287E630C3FE568272D2F33.mft (raw, json) Hash identifier: FwtgKhbbR74QwruaIzNFiLccV7AGXsNcM3g7b8DPGwc= Subject key identifier: 70:A1:B9:38:37:A9:1A:34:36:6D:02:08:7B:9F:66:22:43:2F:20:79 Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 Certificate issuer: /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Certificate serial: 527A58CB3EDBCA8168B5F2A919725D4CC14A9946 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft Manifest number: 0526 Signing time: Wed 22 Oct 2025 10:21:40 +0000 Manifest this update: Wed 22 Oct 2025 10:16:40 +0000 Manifest next update: Sat 25 Oct 2025 15:21:40 +0000 Files and hashes: 1: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: 4XaAtrPhzGDBzDHWlHXMB0whCb6rytr+C1+HuznU5f0=) 2: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: ECzNZR+t4Bdt6LAAlKcBfTJvufVHsod6z7EXxaTCQXQ=) 3: 295CEF87CDB74B1A43287E630C3FE568272D2F33.crl (hash: TVmKDvux3WHNbTibZqrmZavr5pG3PfwGwxM7DKit3oE=) 4: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: S3vWYnYF+l4dhX20RDpIzaZuA3umTZ3b74Itz4An65E=) 5: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: 73W8GLSa6I8P01k3aFdjjpvb756Sn1uc1jeTJZ00bq4=) 6: 3232332e3133302e32322e302f32342d3234203d3e20313338313238.roa (hash: XnGn/2+w4AJO6NSWZOl6oPCbIBn8oHiJVNfmgtkBLgs=) 7: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: 0qgtJcGFp2PSnsHTLVJD3e7NXsCz70cPkWqnqoXUWi0=) 8: 3232332e3133302e32332e302f32342d3234203d3e20313338313238.roa (hash: Z00cWWLpoEgJbs9IwwNUQ+8l5Sk95TAHVLqYoXdZIhA=) 9: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: nhGmrbnsJZJKbXEVM2224rOUYqSyOnxXP3J6DVLRP58=) 10: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: pPyEloQMF0TdeYTY5eM6CCjgFQy8xkkymm+/u9Rl4Cw=) 11: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: PMWu4w2Q+6FhMFUf3/IiRjbR53qP/H9SS7SsSz4BOlo=) 12: 3232332e3133302e32322e302f32332d3233203d3e20313338313238.roa (hash: hEy0rDvTYQnHKZCVMINLjOdzcBCjo3uIeSctB/ZGBr8=) 13: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: 6l4eA4hgKKdV7HePb7GT4qkO7B2rOBXkYrSr+9u6X7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:7a:58:cb:3e:db:ca:81:68:b5:f2:a9:19:72:5d:4c:c1:4a:99:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Validity Not Before: Oct 22 10:16:40 2025 GMT Not After : Oct 25 15:21:40 2025 GMT Subject: CN=70A1B93837A91A34366D02087B9F6622432F2079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:06:32:38:3e:ac:87:74:b2:f9:ac:6c:1f: b6:10:f3:b1:59:f4:56:87:e7:cf:c8:26:b3:b1:8c: 88:9a:9e:9e:f9:d8:c2:a6:4c:56:7c:ef:53:13:b7: e0:39:1c:0a:1b:e2:da:86:ae:ce:6a:62:7a:6e:8b: cd:63:80:f9:35:dc:22:36:00:42:90:fa:a6:92:dc: b3:19:c2:65:9f:df:2d:6e:19:96:28:92:70:53:dc: e5:d8:d5:22:34:6c:99:35:b8:ec:71:d5:98:2b:c2: e7:bc:ba:38:29:19:ad:f4:08:6f:f8:3b:22:b1:15: 4c:5f:2c:dd:65:a2:64:1f:ae:2b:b2:af:2b:92:72: 26:6b:47:fb:f3:0e:61:a9:15:25:fc:8f:a7:54:b8: 81:f4:89:e4:bc:6a:91:c2:bf:ce:f9:1e:24:c5:10: 59:54:af:7f:eb:d5:e1:a2:5d:49:07:c4:2b:4f:00: a9:ab:12:da:dd:b4:bb:fe:93:89:82:a5:d1:73:b6: 10:61:12:67:40:e4:a7:83:52:70:59:08:eb:91:e1: 95:7e:ae:ca:08:f9:80:be:00:69:27:4e:32:ed:fd: de:83:b5:9c:19:9e:73:05:72:92:88:0e:3d:f5:1d: 48:ce:bd:41:aa:ef:cd:dc:1a:cc:c6:a3:ce:80:35: a9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A1:B9:38:37:A9:1A:34:36:6D:02:08:7B:9F:66:22:43:2F:20:79 X509v3 Authority Key Identifier: keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:f9:f6:64:d6:f5:14:ea:6a:c4:94:b7:ae:ae:a0:6b:06:46: 66:c9:64:6c:1a:ed:76:e1:f6:87:a6:63:d2:9c:77:d1:de:f1: 79:b8:8a:42:8e:ef:70:5f:6a:ff:af:f9:76:47:34:be:19:b3: 2c:1f:d2:80:6a:98:ac:12:63:79:27:07:0c:d0:9c:37:6e:93: 29:68:71:d3:ed:54:fb:9a:99:97:a8:8f:22:28:8e:5b:7d:3d: 5b:02:10:b9:de:22:0c:e8:d7:b9:36:cc:e3:3d:78:98:9b:24: f3:4b:d3:df:e6:60:34:ff:e9:94:1a:40:c4:b5:09:de:e8:95: c8:37:e6:21:c2:de:05:75:6a:77:f8:57:f6:5b:02:51:56:13: 36:3d:30:05:6e:8f:8e:cf:fd:52:be:b7:9c:be:04:5e:e4:2c: f0:a0:4f:97:a1:03:66:a2:34:d1:35:6f:a5:43:ab:6d:f4:64: 61:66:45:7c:6f:fe:f7:73:51:f0:30:cb:e4:6d:d0:d7:fb:08: 7b:bc:0c:e2:78:40:d4:12:e9:2f:e3:72:a7:90:8d:ce:1d:2d: a8:ba:10:48:0a:66:73:59:b6:0a:01:7c:94:0f:de:3e:7b:92: 5e:b3:98:cd:e4:87:3d:54:5d:da:89:80:20:d3:a0:ae:29:3a: e5:e3:6e:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUnpYyz7byoFotfKpGXJdTMFKmUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1Njgy NzJEMkYzMzAeFw0yNTEwMjIxMDE2NDBaFw0yNTEwMjUxNTIxNDBaMDMxMTAvBgNV BAMTKDcwQTFCOTM4MzdBOTFBMzQzNjZEMDIwODdCOUY2NjIyNDMyRjIwNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51wYyOD6sh3Sy+axsH7YQ87FZ 9FaH58/IJrOxjIianp752MKmTFZ871MTt+A5HAob4tqGrs5qYnpui81jgPk13CI2 AEKQ+qaS3LMZwmWf3y1uGZYoknBT3OXY1SI0bJk1uOxx1Zgrwue8ujgpGa30CG/4 OyKxFUxfLN1lomQfriuyryuSciZrR/vzDmGpFSX8j6dUuIH0ieS8apHCv875HiTF EFlUr3/r1eGiXUkHxCtPAKmrEtrdtLv+k4mCpdFzthBhEmdA5KeDUnBZCOuR4ZV+ rsoI+YC+AGknTjLt/d6DtZwZnnMFcpKIDj31HUjOvUGq783cGszGo86ANal1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcKG5ODepGjQ2bQIIe59mIkMvIHkwHwYDVR0j BBgwFoAUKVzvh823SxpDKH5jDD/laCctLzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NE Qjc0QjFBNDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1NjgyNzJE MkYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg3ZDc5YmEtZmI1NS00OWE1LTk2 N2ItMWVkYzc0OWQwMTI4LzAvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1 NjgyNzJEMkYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIP59mTW9RTqasSUt66uoGsGRmbJZGwa7Xbh 9oemY9Kcd9He8Xm4ikKO73Bfav+v+XZHNL4Zsywf0oBqmKwSY3knBwzQnDdukylo cdPtVPuamZeojyIojlt9PVsCELneIgzo17k2zOM9eJibJPNL09/mYDT/6ZQaQMS1 Cd7olcg35iHC3gV1anf4V/ZbAlFWEzY9MAVuj47P/VK+t5y+BF7kLPCgT5ehA2ai NNE1b6VDq230ZGFmRXxv/vdzUfAwy+Rt0Nf7CHu8DOJ4QNQS6S/jcqeQjc4dLai6 EEgKZnNZtgoBfJQP3j57kl6zmM3khz1UXdqJgCDToK4pOuXjbi8= -----END CERTIFICATE-----Generated at Fri Oct 24 03:37:43 2025 by rpki-client