$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft File: 295131167768CC78482F796BB58CF5A01A014393.mft (raw, json) Hash identifier: c3bjMppodpPBdtLVWbQVRyGP6Ia4lDrwAV3wbYfjAJc= Subject key identifier: 8D:FA:A9:93:B2:7F:24:C0:76:80:C8:92:E6:9A:09:A0:43:F2:B5:BF Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 Certificate issuer: /CN=295131167768CC78482F796BB58CF5A01A014393 Certificate serial: 6ECE59F97C96AD3244760F58865E465C28D6452F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft Manifest number: 90 Signing time: Tue 03 Jun 2025 22:04:06 +0000 Manifest this update: Tue 03 Jun 2025 21:59:06 +0000 Manifest next update: Sat 07 Jun 2025 05:07:06 +0000 Files and hashes: 1: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: moFK92Lb7O04I+6FG9VzJZ/FTQ4AaEmINK+chDU1cX4=) 2: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: ef7YYSMzAtPt9zZDc7b2VbFvOqrUwp6coiKLTTrdJbk=) 3: 295131167768CC78482F796BB58CF5A01A014393.crl (hash: EFnV5570z9TUy/f6A0ZuUNGBo1LeZPJaFqSNf9Stpho=) 4: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: IiwJGvJXooBTapkry0rsHVHulyWnAvp0ngUMjLmkAdU=) 5: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: aTzve7Y6mBexH/WsjxWYP1/0CSlzvkwS9M1uSz5WL7A=) 6: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: O/ASHgZeblmxpbkzceq8+yIIFxdV6ZLl5CtvLrpORI4=) 7: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: ZUUrvcV4tzaV5FI9nd3G6vecM/kD2HHsEXb/JzJw5nk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ce:59:f9:7c:96:ad:32:44:76:0f:58:86:5e:46:5c:28:d6:45:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295131167768CC78482F796BB58CF5A01A014393 Validity Not Before: Jun 3 21:59:06 2025 GMT Not After : Jun 7 05:07:06 2025 GMT Subject: CN=8DFAA993B27F24C07680C892E69A09A043F2B5BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1b:c1:15:e2:50:c7:4c:7b:cd:3a:76:96:b4: 01:fd:eb:7b:39:d5:bd:49:37:35:fc:4e:27:81:34: 5e:03:b2:33:14:eb:07:d6:1b:b0:10:71:28:3b:a3: c3:f9:86:48:33:51:d9:96:24:12:ff:90:4c:1d:49: ae:1f:77:4f:5c:84:e7:ea:c1:2d:cf:9e:15:de:c2: 17:a4:3d:04:ec:cc:d0:8c:57:72:f8:6f:34:db:f3: 2c:b6:15:f8:08:83:1d:a4:e1:aa:8c:a3:3c:01:ec: 0d:cc:8c:cb:b9:7e:e8:71:b0:b1:41:78:2e:d9:11: 06:f1:8b:18:77:5b:b8:fd:55:9b:e9:89:13:be:45: 3a:a7:cd:ee:39:5d:ab:0a:26:bb:49:e7:d7:37:00: a1:25:4f:47:fe:65:d3:6d:b3:cf:92:33:66:6a:09: fc:22:62:d6:28:bd:42:f0:99:89:9f:a2:6b:52:08: 79:05:4e:65:37:d4:15:fb:90:f9:22:e5:7a:e4:21: 36:f2:d2:70:0c:6e:59:7d:be:6a:b7:be:c6:98:2a: c6:73:0c:08:e3:8e:32:68:b1:a7:ba:0d:99:b5:43: 05:06:62:c8:ab:23:e6:59:44:77:d7:f7:a7:14:20: bb:c9:2a:b7:eb:5b:34:28:78:69:03:89:36:bf:5f: 37:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FA:A9:93:B2:7F:24:C0:76:80:C8:92:E6:9A:09:A0:43:F2:B5:BF X509v3 Authority Key Identifier: keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:f4:c6:89:f0:53:9b:ad:3a:02:90:d6:d5:7b:d6:c9:8a:55: 65:72:a6:bf:68:6e:03:c8:61:9c:5f:dc:25:94:1f:86:03:a5: 52:0f:95:2b:e2:ac:53:fc:4a:3e:a9:b9:9b:c8:73:f6:9c:a8: d3:8d:38:4c:9c:0a:3a:47:5e:26:23:8f:dc:09:28:d0:e6:2c: 60:41:2e:21:04:44:d5:11:f2:54:6d:d9:75:13:93:36:1e:a1: 75:4c:b8:4c:96:a9:54:9f:54:df:07:fb:80:69:ea:8d:bc:21: 21:da:6a:58:d7:d2:e5:f4:c8:27:46:0e:bc:2a:a3:df:ff:4d: 1b:1b:90:a6:a2:37:6e:e5:9c:d1:ca:9a:67:08:ca:1b:f0:49: 2b:44:c8:cc:f5:ec:0f:8b:9f:7c:dd:b5:dd:b0:8f:2b:0d:c7: 6d:6f:a9:73:d8:c2:ab:00:42:af:67:ba:bc:ae:3b:9d:9c:cb: 7d:d6:15:a2:87:ab:27:50:6b:57:4c:2d:62:55:1d:7a:a5:ca: fa:0c:96:ef:57:12:02:ba:e0:ec:d7:9c:4e:99:36:85:8a:7d: 78:8d:0b:08:c8:14:13:0e:ec:98:63:da:15:82:51:c6:2f:6f: 64:4c:63:d8:d9:1c:0c:28:3c:c5:92:9e:e4:46:73:57:50:87: 1b:83:a7:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbs5Z+XyWrTJEdg9Yhl5GXCjWRS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAx QTAxNDM5MzAeFw0yNTA2MDMyMTU5MDZaFw0yNTA2MDcwNTA3MDZaMDMxMTAvBgNV BAMTKDhERkFBOTkzQjI3RjI0QzA3NjgwQzg5MkU2OUEwOUEwNDNGMkI1QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsG8EV4lDHTHvNOnaWtAH963s5 1b1JNzX8TieBNF4DsjMU6wfWG7AQcSg7o8P5hkgzUdmWJBL/kEwdSa4fd09chOfq wS3PnhXewhekPQTszNCMV3L4bzTb8yy2FfgIgx2k4aqMozwB7A3MjMu5fuhxsLFB eC7ZEQbxixh3W7j9VZvpiRO+RTqnze45XasKJrtJ59c3AKElT0f+ZdNts8+SM2Zq CfwiYtYovULwmYmfomtSCHkFTmU31BX7kPki5XrkITby0nAMbll9vmq3vsaYKsZz DAjjjjJosae6DZm1QwUGYsirI+ZZRHfX96cUILvJKrfrWzQoeGkDiTa/XzchAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjfqpk7J/JMB2gMiS5poJoEPytb8wHwYDVR0j BBgwFoAUKVExFndozHhIL3lrtYz1oBoBQ5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWVjYTUwYi01NzIyLTQ5MTgtODMxNC04NTlkM2MxZjU1YTIvMC8yOTUxMzExNjc3 NjhDQzc4NDgyRjc5NkJCNThDRjVBMDFBMDE0MzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAxQTAx NDM5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDllY2E1MGItNTcyMi00OTE4LTgz MTQtODU5ZDNjMWY1NWEyLzAvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1 QTAxQTAxNDM5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHH0xonwU5utOgKQ1tV71smKVWVypr9obgPI YZxf3CWUH4YDpVIPlSvirFP8Sj6puZvIc/acqNONOEycCjpHXiYjj9wJKNDmLGBB LiEERNUR8lRt2XUTkzYeoXVMuEyWqVSfVN8H+4Bp6o28ISHaaljX0uX0yCdGDrwq o9//TRsbkKaiN27lnNHKmmcIyhvwSStEyMz17A+Ln3zdtd2wjysNx21vqXPYwqsA Qq9nuryuO52cy33WFaKHqydQa1dMLWJVHXqlyvoMlu9XEgK64OzXnE6ZNoWKfXiN CwjIFBMO7Jhj2hWCUcYvb2RMY9jZHAwoPMWSnuRGc1dQhxuDp1U= -----END CERTIFICATE-----Generated at Fri Jun 6 06:32:13 2025 by rpki-client