$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft File: 295131167768CC78482F796BB58CF5A01A014393.mft (raw, json) Hash identifier: diwwl3fnIk2EB3+GQuu268Pyp2EYMl8KeWvQ0NvS/Ag= Subject key identifier: FA:66:55:30:85:3F:FB:89:38:AC:37:9B:80:20:D7:C6:CC:6F:65:0B Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 Certificate issuer: /CN=295131167768CC78482F796BB58CF5A01A014393 Certificate serial: 5898B91BD556FB0622E0847B3922D7DFFEDACEC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft Manifest number: A5 Signing time: Sun 20 Jul 2025 23:41:28 +0000 Manifest this update: Sun 20 Jul 2025 23:36:28 +0000 Manifest next update: Thu 24 Jul 2025 09:38:28 +0000 Files and hashes: 1: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: AX0lDEH6VgInN8VNyEQZ1Bf7VJ5RuPZOiclQbBxraVk=) 2: 295131167768CC78482F796BB58CF5A01A014393.crl (hash: 1H8yG3vWIiOUpssoKEllQGUcgLjGUrniK0kF8+371Cs=) 3: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: aTzve7Y6mBexH/WsjxWYP1/0CSlzvkwS9M1uSz5WL7A=) 4: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: Jp+xzrLLFcNcdbgFIyqYkAF5UwOiimjyD2ApcObjIzI=) 5: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: ZUUrvcV4tzaV5FI9nd3G6vecM/kD2HHsEXb/JzJw5nk=) 6: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: moFK92Lb7O04I+6FG9VzJZ/FTQ4AaEmINK+chDU1cX4=) 7: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: uRuK1ozamqcEn31L5IIaIYVkb8/xiqqqwMGA40t+cIA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 09:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:98:b9:1b:d5:56:fb:06:22:e0:84:7b:39:22:d7:df:fe:da:ce:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295131167768CC78482F796BB58CF5A01A014393 Validity Not Before: Jul 20 23:36:28 2025 GMT Not After : Jul 24 09:38:28 2025 GMT Subject: CN=FA665530853FFB8938AC379B8020D7C6CC6F650B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f2:16:92:bf:62:99:d1:be:63:cb:62:1a:ee: ce:26:10:29:41:12:45:a6:e7:18:36:36:04:fc:40: d3:0e:dd:4e:65:51:94:7e:63:58:6a:c1:6d:6a:e0: de:f2:c7:fd:cc:14:9d:d5:45:52:26:b6:c7:b9:ff: 3e:d5:4b:83:d2:14:cc:d8:b7:73:c3:3c:4f:3a:c2: c3:0b:02:49:68:75:8f:ed:9c:33:b5:13:96:25:31: 85:bc:2a:21:22:e4:27:88:7f:7b:a2:2b:e4:50:10: e7:d8:23:cf:9d:58:60:08:71:96:5c:f8:1f:53:e6: 2a:6b:50:d0:48:13:34:ff:54:61:ca:fe:46:31:60: 86:d7:ce:57:15:20:de:eb:52:3d:d4:e2:87:3a:bc: f5:ed:4c:36:da:67:4f:6d:f7:97:66:9f:8e:a5:be: f3:ee:8a:8a:64:4a:1f:2c:18:94:b3:29:99:c1:80: 74:0e:bf:59:3c:27:f5:0b:91:4f:d6:63:f3:91:47: dc:11:f9:20:04:dd:85:d6:b7:4e:53:01:2d:a4:19: 57:cb:25:c1:0d:a6:1d:8d:36:05:0e:7d:54:99:a8: 4c:ea:c1:51:f4:18:b1:1f:2e:59:3d:b8:ad:5e:1b: e9:9f:86:28:dc:f6:a9:a5:23:fc:9c:ec:24:aa:77: e4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:66:55:30:85:3F:FB:89:38:AC:37:9B:80:20:D7:C6:CC:6F:65:0B X509v3 Authority Key Identifier: keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:27:96:34:3e:77:27:19:a5:85:9a:3d:ae:36:cc:bc:c6:62: a4:e7:43:4d:e4:df:e2:64:63:ef:61:2e:fa:92:a0:ac:38:a8: 59:29:1e:1d:5f:bf:84:fb:58:23:8c:5e:68:0e:df:26:e1:c8: 57:ae:04:cc:3f:a7:e3:a3:ec:42:8f:37:43:13:eb:22:c3:22: 3b:ab:30:84:61:63:10:74:c3:3d:46:6c:08:1e:0b:c8:cf:9a: 90:62:35:cf:78:5c:0e:a3:09:e3:1a:50:eb:29:0b:2b:41:59: 36:3b:b7:33:2a:a6:3b:a0:d5:75:cd:71:ca:a9:69:ad:0b:07: 18:be:78:4c:7b:04:ad:3f:82:8e:fa:2a:d8:c9:80:dd:4d:83: 98:7d:d0:ed:4a:8e:1b:4e:e3:7b:30:52:56:dd:4d:32:12:82: 3e:60:8d:61:55:f0:52:63:85:e3:0c:37:09:c2:57:91:5d:fd: 16:6e:31:ce:41:6e:39:d4:78:97:d1:00:3a:4c:fe:36:06:b1: 0c:47:14:d9:69:44:8e:c8:77:3e:4c:ff:10:60:70:5f:4d:90: 12:46:7e:c0:0b:f5:4f:27:9d:1f:78:44:04:5f:b5:49:44:0a: 87:b4:e0:72:53:32:1b:b4:f3:f0:b1:c2:67:94:a8:74:84:bb: a0:e6:69:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWJi5G9VW+wYi4IR7OSLX3/7azsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAx QTAxNDM5MzAeFw0yNTA3MjAyMzM2MjhaFw0yNTA3MjQwOTM4MjhaMDMxMTAvBgNV BAMTKEZBNjY1NTMwODUzRkZCODkzOEFDMzc5QjgwMjBEN0M2Q0M2RjY1MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD8haSv2KZ0b5jy2Ia7s4mEClB EkWm5xg2NgT8QNMO3U5lUZR+Y1hqwW1q4N7yx/3MFJ3VRVImtse5/z7VS4PSFMzY t3PDPE86wsMLAklodY/tnDO1E5YlMYW8KiEi5CeIf3uiK+RQEOfYI8+dWGAIcZZc +B9T5iprUNBIEzT/VGHK/kYxYIbXzlcVIN7rUj3U4oc6vPXtTDbaZ09t95dmn46l vvPuiopkSh8sGJSzKZnBgHQOv1k8J/ULkU/WY/ORR9wR+SAE3YXWt05TAS2kGVfL JcENph2NNgUOfVSZqEzqwVH0GLEfLlk9uK1eG+mfhijc9qmlI/yc7CSqd+TJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+mZVMIU/+4k4rDebgCDXxsxvZQswHwYDVR0j BBgwFoAUKVExFndozHhIL3lrtYz1oBoBQ5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWVjYTUwYi01NzIyLTQ5MTgtODMxNC04NTlkM2MxZjU1YTIvMC8yOTUxMzExNjc3 NjhDQzc4NDgyRjc5NkJCNThDRjVBMDFBMDE0MzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAxQTAx NDM5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDllY2E1MGItNTcyMi00OTE4LTgz MTQtODU5ZDNjMWY1NWEyLzAvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1 QTAxQTAxNDM5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAonljQ+dycZpYWaPa42zLzGYqTnQ03k3+Jk Y+9hLvqSoKw4qFkpHh1fv4T7WCOMXmgO3ybhyFeuBMw/p+Oj7EKPN0MT6yLDIjur MIRhYxB0wz1GbAgeC8jPmpBiNc94XA6jCeMaUOspCytBWTY7tzMqpjug1XXNccqp aa0LBxi+eEx7BK0/go76KtjJgN1Ng5h90O1KjhtO43swUlbdTTISgj5gjWFV8FJj heMMNwnCV5Fd/RZuMc5BbjnUeJfRADpM/jYGsQxHFNlpRI7Idz5M/xBgcF9NkBJG fsAL9U8nnR94RARftUlECoe04HJTMhu08/CxwmeUqHSEu6DmaaQ= -----END CERTIFICATE-----Generated at Mon Jul 21 10:38:24 2025 by rpki-client