$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft File: 295CEF87CDB74B1A43287E630C3FE568272D2F33.mft (raw, json) Hash identifier: ffTQwQ2zvVeFQJDyKo26QBb5Wr9wTpGnYLNSOVca03w= Subject key identifier: A4:E4:E4:3B:D4:68:25:B9:AA:1D:CD:63:A8:C2:49:CF:11:58:AC:B2 Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 Certificate issuer: /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Certificate serial: 6F1A9B63C5DEEEC354AA0F78C7470727E8585F0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft Manifest number: 04FA Signing time: Wed 23 Jul 2025 07:31:41 +0000 Manifest this update: Wed 23 Jul 2025 07:26:41 +0000 Manifest next update: Sat 26 Jul 2025 13:44:41 +0000 Files and hashes: 1: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: 73W8GLSa6I8P01k3aFdjjpvb756Sn1uc1jeTJZ00bq4=) 2: 3232332e3133302e32322e302f32332d3234203d3e2039343232.roa (hash: 7z/4k9uh8qc3CYPaIfLqUwfu/s9Fgtg25t7b4ka8UOQ=) 3: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: S3vWYnYF+l4dhX20RDpIzaZuA3umTZ3b74Itz4An65E=) 4: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: pPyEloQMF0TdeYTY5eM6CCjgFQy8xkkymm+/u9Rl4Cw=) 5: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: 0qgtJcGFp2PSnsHTLVJD3e7NXsCz70cPkWqnqoXUWi0=) 6: 295CEF87CDB74B1A43287E630C3FE568272D2F33.crl (hash: UisK0HPA7Fn3TkQR2ffkDfud49SXZ/mfUiixPKJWeEI=) 7: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: nhGmrbnsJZJKbXEVM2224rOUYqSyOnxXP3J6DVLRP58=) 8: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: ECzNZR+t4Bdt6LAAlKcBfTJvufVHsod6z7EXxaTCQXQ=) 9: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: PMWu4w2Q+6FhMFUf3/IiRjbR53qP/H9SS7SsSz4BOlo=) 10: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: 6l4eA4hgKKdV7HePb7GT4qkO7B2rOBXkYrSr+9u6X7c=) 11: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: 4XaAtrPhzGDBzDHWlHXMB0whCb6rytr+C1+HuznU5f0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 10:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:1a:9b:63:c5:de:ee:c3:54:aa:0f:78:c7:47:07:27:e8:58:5f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Validity Not Before: Jul 23 07:26:41 2025 GMT Not After : Jul 26 13:44:41 2025 GMT Subject: CN=A4E4E43BD46825B9AA1DCD63A8C249CF1158ACB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:81:6c:29:c0:32:a2:a3:8e:c2:01:fd:bc:27: dd:e1:77:a8:ea:2f:5c:9a:ce:4b:b3:0f:02:42:06: a9:52:fb:54:8c:56:8f:ac:ff:39:9f:54:43:e0:83: a9:50:64:95:87:c7:3d:25:f7:5c:0c:41:ce:b7:60: 35:22:98:77:02:c1:75:f2:fa:46:80:d9:82:87:6c: 77:c0:08:a4:9f:5a:2d:04:50:7c:c3:f3:94:eb:dd: bc:30:61:d9:0c:e4:29:b0:10:91:a9:35:62:70:e9: 70:f4:6c:4f:d0:eb:be:f0:0b:62:19:51:90:ad:8c: 29:4c:6a:1c:e7:5f:1b:33:89:6f:52:db:93:69:5e: c6:8a:cc:17:e1:a9:14:d0:00:30:58:6f:fb:cd:9d: 11:6b:a7:81:0f:cd:73:8a:44:c2:ee:87:20:4c:c6: 37:85:71:b9:68:f4:4c:8c:2c:6b:de:45:f5:e4:b1: c9:5b:73:a9:11:36:09:8b:66:b7:e3:a9:6b:ac:40: 7c:ba:8c:4e:cd:a7:72:70:ec:cc:92:65:ef:62:0f: db:56:8c:63:63:8b:98:b1:ad:95:c2:2a:19:63:fd: 92:18:3f:a1:c4:9c:66:41:2c:b4:fa:05:f6:34:c9: 40:e8:9a:a4:41:85:f8:47:b2:ea:c1:1f:e9:a9:02: dc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E4:E4:3B:D4:68:25:B9:AA:1D:CD:63:A8:C2:49:CF:11:58:AC:B2 X509v3 Authority Key Identifier: keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:24:0d:14:5e:26:d7:7a:40:0c:46:21:b4:ef:85:96:5f:23: 2e:c1:af:24:3d:a4:88:11:a0:76:d2:37:f4:4c:41:d5:78:80: 97:1a:89:54:b5:d3:15:cf:12:ba:99:fb:dc:9a:72:d9:dd:89: 76:6b:71:d8:79:e9:fa:c9:71:64:66:60:33:78:1c:d7:12:44: 8a:f5:49:ac:2e:74:5c:ab:d7:0a:69:d0:f8:6f:4c:67:77:69: 58:58:b1:44:f4:01:78:03:12:f6:bc:dd:05:1b:79:cf:29:ba: 22:32:7a:4c:f7:53:32:cc:93:50:3b:87:9d:85:4c:64:d7:3d: 21:86:ae:98:2d:eb:75:1c:6e:57:e3:4e:e7:b9:44:b6:e6:1a: 57:43:60:28:09:03:08:4f:38:1d:e0:c3:68:6d:e0:49:6d:28: c2:a9:28:f7:c1:ab:c6:a5:d2:d5:83:04:6e:eb:33:ca:c0:d1: ee:64:cf:e1:1d:f7:39:75:d8:32:4b:6b:d7:ea:44:8a:bb:92: db:00:9e:8a:50:b0:26:b3:5d:bb:72:12:3b:c5:8e:a0:64:e2: 18:3e:2d:34:e9:ca:54:08:a3:5b:71:28:8a:58:d5:92:8c:aa: f1:bc:1a:af:41:73:ec:ac:46:01:57:b9:54:75:92:26:ee:b7: 60:27:10:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbxqbY8Xe7sNUqg94x0cHJ+hYXw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1Njgy NzJEMkYzMzAeFw0yNTA3MjMwNzI2NDFaFw0yNTA3MjYxMzQ0NDFaMDMxMTAvBgNV BAMTKEE0RTRFNDNCRDQ2ODI1QjlBQTFEQ0Q2M0E4QzI0OUNGMTE1OEFDQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9gWwpwDKio47CAf28J93hd6jq L1yazkuzDwJCBqlS+1SMVo+s/zmfVEPgg6lQZJWHxz0l91wMQc63YDUimHcCwXXy +kaA2YKHbHfACKSfWi0EUHzD85Tr3bwwYdkM5CmwEJGpNWJw6XD0bE/Q677wC2IZ UZCtjClMahznXxsziW9S25NpXsaKzBfhqRTQADBYb/vNnRFrp4EPzXOKRMLuhyBM xjeFcblo9EyMLGveRfXksclbc6kRNgmLZrfjqWusQHy6jE7Np3Jw7MySZe9iD9tW jGNji5ixrZXCKhlj/ZIYP6HEnGZBLLT6BfY0yUDomqRBhfhHsurBH+mpAtzPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpOTkO9RoJbmqHc1jqMJJzxFYrLIwHwYDVR0j BBgwFoAUKVzvh823SxpDKH5jDD/laCctLzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NE Qjc0QjFBNDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1NjgyNzJE MkYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg3ZDc5YmEtZmI1NS00OWE1LTk2 N2ItMWVkYzc0OWQwMTI4LzAvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1 NjgyNzJEMkYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkkDRReJtd6QAxGIbTvhZZfIy7BryQ9pIgR oHbSN/RMQdV4gJcaiVS10xXPErqZ+9yactndiXZrcdh56frJcWRmYDN4HNcSRIr1 SawudFyr1wpp0PhvTGd3aVhYsUT0AXgDEva83QUbec8puiIyekz3UzLMk1A7h52F TGTXPSGGrpgt63UcblfjTue5RLbmGldDYCgJAwhPOB3gw2ht4EltKMKpKPfBq8al 0tWDBG7rM8rA0e5kz+Ed9zl12DJLa9fqRIq7ktsAnopQsCazXbtyEjvFjqBk4hg+ LTTpylQIo1txKIpY1ZKMqvG8Gq9Bc+ysRgFXuVR1kibut2AnEPI= -----END CERTIFICATE-----Generated at Wed Jul 23 12:16:40 2025 by rpki-client