$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft File: 295CEF87CDB74B1A43287E630C3FE568272D2F33.mft (raw, json) Hash identifier: +buanC0Qwp/jFLKJsXeK9fUi90hUtUGPbcilbj9wujc= Subject key identifier: 82:FA:20:90:05:B6:FB:B0:7B:D0:8C:56:85:E6:A9:54:4F:69:E1:01 Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 Certificate issuer: /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Certificate serial: 1571128BE0510E71A51776129A85873C5B93EE81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft Manifest number: 0568 Signing time: Tue 17 Mar 2026 13:21:54 +0000 Manifest this update: Tue 17 Mar 2026 13:16:54 +0000 Manifest next update: Sat 21 Mar 2026 00:57:54 +0000 Files and hashes: 1: 3232332e3133302e32322e302f32342d3234203d3e20313338313238.roa (hash: XnGn/2+w4AJO6NSWZOl6oPCbIBn8oHiJVNfmgtkBLgs=) 2: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: nhGmrbnsJZJKbXEVM2224rOUYqSyOnxXP3J6DVLRP58=) 3: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: 73W8GLSa6I8P01k3aFdjjpvb756Sn1uc1jeTJZ00bq4=) 4: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: pPyEloQMF0TdeYTY5eM6CCjgFQy8xkkymm+/u9Rl4Cw=) 5: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: ECzNZR+t4Bdt6LAAlKcBfTJvufVHsod6z7EXxaTCQXQ=) 6: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: S3vWYnYF+l4dhX20RDpIzaZuA3umTZ3b74Itz4An65E=) 7: 295CEF87CDB74B1A43287E630C3FE568272D2F33.crl (hash: kzrQEdxROwQXAU/DXHbBgonV1V6x/bmqsGn34e3FeJI=) 8: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: zOGqafxPKIahoYeNeVQJwZYMYXlq5HVpdCLIvX5OtD0=) 9: 3232332e3133302e32322e302f32332d3233203d3e20313338313238.roa (hash: hEy0rDvTYQnHKZCVMINLjOdzcBCjo3uIeSctB/ZGBr8=) 10: 3232332e3133302e32332e302f32342d3234203d3e20313338313238.roa (hash: Z00cWWLpoEgJbs9IwwNUQ+8l5Sk95TAHVLqYoXdZIhA=) 11: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: 8ko5KnU2O3UImPaaQPj6kwQ2SIJ+vnIwwyyfVJf7KZc=) 12: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: 6l4eA4hgKKdV7HePb7GT4qkO7B2rOBXkYrSr+9u6X7c=) 13: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: PMWu4w2Q+6FhMFUf3/IiRjbR53qP/H9SS7SsSz4BOlo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 00:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:71:12:8b:e0:51:0e:71:a5:17:76:12:9a:85:87:3c:5b:93:ee:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Validity Not Before: Mar 17 13:16:54 2026 GMT Not After : Mar 21 00:57:54 2026 GMT Subject: CN=82FA209005B6FBB07BD08C5685E6A9544F69E101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8b:f0:61:62:af:4e:bb:16:a8:39:e8:46:89: d4:a0:75:fb:34:24:36:6c:e2:f8:e9:1a:45:81:df: 89:ca:9a:20:28:06:90:8c:43:23:90:19:d4:3a:2b: 67:0f:de:12:86:a8:82:f8:72:49:c1:4d:90:c4:07: 62:83:29:11:ca:87:ef:d4:e6:44:7a:49:ae:3c:ab: 48:6a:67:f1:ea:34:db:af:53:71:28:1e:9a:26:24: 9f:78:e8:1f:75:35:77:b7:a7:f1:a9:60:8a:78:55: d1:ae:64:63:1f:3b:f0:a0:9b:8b:c1:ea:dd:a6:69: 0b:eb:f1:df:8b:22:4b:09:f7:43:a4:5a:66:0d:86: 7c:4c:49:0f:5a:6c:16:ec:aa:d3:da:af:3e:af:2a: 94:a1:3f:7a:de:cd:85:26:4f:29:62:e5:d8:5b:b0: c8:f2:19:d8:53:33:78:94:1e:e0:7c:d3:04:2b:5d: ac:bf:cb:84:d7:67:d0:42:27:e0:fd:ad:4b:b6:ca: 58:6b:65:38:06:e8:0d:47:c8:1e:43:26:d1:3c:b9: 95:e8:52:7b:5f:38:b2:88:13:1a:2a:6d:7f:96:24: 5a:56:c7:66:64:93:a6:27:68:66:e4:ef:4b:5a:13: 22:43:a7:30:a5:6e:dd:81:38:c9:cb:d1:04:d8:67: c2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FA:20:90:05:B6:FB:B0:7B:D0:8C:56:85:E6:A9:54:4F:69:E1:01 X509v3 Authority Key Identifier: keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:9b:6b:58:e0:c2:6e:8b:14:61:a5:63:e5:b2:16:92:d4:f6: 32:93:5a:21:f7:bc:6d:28:96:06:2d:b9:63:d4:8b:41:c5:0c: c2:ab:de:df:c4:16:a2:8c:73:e2:9e:39:45:f8:e5:53:03:7d: 03:f2:17:63:3a:0b:0b:b5:cb:2f:b7:29:22:24:02:e3:e2:8f: d8:1e:2c:09:d3:49:8a:3d:be:40:c8:8f:ad:c2:9b:d5:51:7a: 81:fa:6b:85:ab:0f:77:ae:71:b8:af:cc:52:e3:4d:a2:bb:c3: 47:f5:a2:d6:4e:62:96:57:5e:2f:8f:f4:2a:bb:9b:d3:85:9e: 86:85:82:c6:dc:e8:41:31:16:41:15:b1:f9:65:77:c1:28:25: 2f:c4:13:f1:57:a9:a9:3e:70:ae:aa:83:ec:fd:d0:1e:aa:12: ce:d1:b3:6a:a3:d7:77:da:3b:7c:22:86:47:28:69:ad:f7:c1: 9c:07:6e:9a:19:b5:10:2d:22:0a:4d:be:0f:c9:f4:91:d8:53: aa:47:34:7e:66:f3:fb:45:5f:49:3a:99:17:ee:3f:89:8b:d9: 2c:c1:84:38:0c:b3:df:1e:c4:46:4d:2f:fe:a9:12:ab:11:19: 94:9e:da:7e:af:48:43:08:aa:d3:9c:b0:cc:5a:5c:3d:c3:e6: 3d:4d:bf:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFXESi+BRDnGlF3YSmoWHPFuT7oEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1Njgy NzJEMkYzMzAeFw0yNjAzMTcxMzE2NTRaFw0yNjAzMjEwMDU3NTRaMDMxMTAvBgNV BAMTKDgyRkEyMDkwMDVCNkZCQjA3QkQwOEM1Njg1RTZBOTU0NEY2OUUxMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDi/BhYq9OuxaoOehGidSgdfs0 JDZs4vjpGkWB34nKmiAoBpCMQyOQGdQ6K2cP3hKGqIL4cknBTZDEB2KDKRHKh+/U 5kR6Sa48q0hqZ/HqNNuvU3EoHpomJJ946B91NXe3p/GpYIp4VdGuZGMfO/Cgm4vB 6t2maQvr8d+LIksJ90OkWmYNhnxMSQ9abBbsqtParz6vKpShP3rezYUmTyli5dhb sMjyGdhTM3iUHuB80wQrXay/y4TXZ9BCJ+D9rUu2ylhrZTgG6A1HyB5DJtE8uZXo UntfOLKIExoqbX+WJFpWx2Zkk6YnaGbk70taEyJDpzClbt2BOMnL0QTYZ8IbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgvogkAW2+7B70IxWheapVE9p4QEwHwYDVR0j BBgwFoAUKVzvh823SxpDKH5jDD/laCctLzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NE Qjc0QjFBNDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1NjgyNzJE MkYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg3ZDc5YmEtZmI1NS00OWE1LTk2 N2ItMWVkYzc0OWQwMTI4LzAvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1 NjgyNzJEMkYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOba1jgwm6LFGGlY+WyFpLU9jKTWiH3vG0o lgYtuWPUi0HFDMKr3t/EFqKMc+KeOUX45VMDfQPyF2M6Cwu1yy+3KSIkAuPij9ge LAnTSYo9vkDIj63Cm9VReoH6a4WrD3eucbivzFLjTaK7w0f1otZOYpZXXi+P9Cq7 m9OFnoaFgsbc6EExFkEVsflld8EoJS/EE/FXqak+cK6qg+z90B6qEs7Rs2qj13fa O3wihkcoaa33wZwHbpoZtRAtIgpNvg/J9JHYU6pHNH5m8/tFX0k6mRfuP4mL2SzB hDgMs98exEZNL/6pEqsRGZSe2n6vSEMIqtOcsMxaXD3D5j1Nv6E= -----END CERTIFICATE-----Generated at Thu Mar 19 12:11:54 2026 by rpki-client