$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft File: 295CEF87CDB74B1A43287E630C3FE568272D2F33.mft (raw, json) Hash identifier: Ckx0x19Yl7utUyicxhALI70bpgFvVuyyHE8J+wDCPzw= Subject key identifier: AB:30:5B:91:9E:DB:D2:B6:06:77:2E:6F:4A:62:40:30:42:4F:96:8E Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 Certificate issuer: /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Certificate serial: 3C08D3639415ACE359D67E688D637DF18F7ED7AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft Manifest number: 04D8 Signing time: Sat 10 May 2025 05:31:37 +0000 Manifest this update: Sat 10 May 2025 05:26:37 +0000 Manifest next update: Tue 13 May 2025 10:43:37 +0000 Files and hashes: 1: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: nBKHI+10Ut06FOJtH41J5R/AAE9svDrS9ER1fZDd350=) 2: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: Ccc9Rz2j35EkvfbNz2T6X50a6oTWv2x4bbeSyVrqI+E=) 3: 295CEF87CDB74B1A43287E630C3FE568272D2F33.crl (hash: LhQs8cWcwQKbf/jej+ZwrdMag++6XvBdHIi9Irq/V3k=) 4: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: P7Z6XRJZfWLIwLc37QAohPD8GShqj3t7azYOQZsaPgs=) 5: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: 4XaAtrPhzGDBzDHWlHXMB0whCb6rytr+C1+HuznU5f0=) 6: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: 0qgtJcGFp2PSnsHTLVJD3e7NXsCz70cPkWqnqoXUWi0=) 7: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: gU2bGz0QcfX7jz+4pmy6dDNu6epMK9rp4iwrG6+Vboc=) 8: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: d4njcKCxXvuiPQpiLgPI2iTaalRvfXwt51s7xl9S/7E=) 9: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: UDms7HIaDGeGiYCJtIOU53UdSKHvDK+0OFralrpfjuY=) 10: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: M8Jg7RXp9q2IokSrSE72Qz1D7tYQ3VERLgs0YJ8PYrM=) 11: 3232332e3133302e32322e302f32332d3234203d3e2039343232.roa (hash: T0qy24Jw4nMkx0vavFP/FymLrM7UIs0+axCAYFq5t24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 10:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:08:d3:63:94:15:ac:e3:59:d6:7e:68:8d:63:7d:f1:8f:7e:d7:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Validity Not Before: May 10 05:26:37 2025 GMT Not After : May 13 10:43:37 2025 GMT Subject: CN=AB305B919EDBD2B606772E6F4A624030424F968E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fd:21:a7:41:1f:c0:df:f8:b9:9e:78:64:82: b2:25:fa:18:39:1f:d9:f6:04:d8:09:b7:71:4a:e9: cd:cf:22:52:a6:75:8e:c3:32:17:c6:1a:fe:d8:0c: 19:40:6e:3a:69:ee:77:17:8c:2d:8b:d3:f8:24:4b: 9e:8f:60:3e:9b:72:62:eb:49:4d:64:f2:c6:bb:ed: 94:6e:00:e1:b0:54:46:1f:7d:b9:aa:8f:3c:3a:31: 0b:6c:18:2d:bb:d5:8e:09:e4:10:11:93:c9:0a:b5: ef:81:d7:a2:29:c1:46:ac:a2:55:fa:23:8f:93:27: 59:57:25:84:e8:73:3a:01:d7:76:2e:4d:ac:23:22: bf:38:85:20:50:73:ae:4b:27:25:b2:34:5c:1a:03: 30:78:10:b6:c2:f7:6f:fc:4c:1b:0e:28:d6:13:6e: 5f:c6:04:6b:db:83:59:17:83:f2:31:b3:55:65:fb: 36:73:31:74:a9:1d:a2:b8:50:f8:7f:1e:e5:e7:e5: 7f:11:23:32:66:a2:c7:04:78:7f:6a:c3:2a:f8:71: bd:86:db:b3:37:ad:19:7f:06:3b:28:4c:39:f0:b5: 74:53:0f:03:8e:83:d4:80:a2:5a:bf:b8:6e:2a:b9: 29:35:ea:e6:80:38:84:a4:a1:27:1a:fa:2d:cf:25: 8d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:30:5B:91:9E:DB:D2:B6:06:77:2E:6F:4A:62:40:30:42:4F:96:8E X509v3 Authority Key Identifier: keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:93:ba:03:64:50:84:62:25:c0:92:5f:8a:11:b1:01:f7:20: 56:47:28:23:42:8b:67:61:54:32:6e:1b:cc:05:15:bf:c2:8a: a4:e3:de:de:93:c1:d6:9a:d3:f8:22:f3:7d:db:43:3f:15:fa: d3:51:a2:2a:5c:d5:67:71:86:d6:ea:df:14:e8:b5:a0:ce:01: 23:eb:5a:06:58:bf:9e:f6:fc:2c:b0:86:b3:ba:08:fa:f2:73: c3:37:f5:d9:92:8a:31:65:20:57:14:aa:34:4d:32:48:75:82: a7:0f:e6:1f:f7:ab:91:4f:03:73:d2:c7:9b:82:ed:a2:84:02: da:30:e0:93:b8:e8:9d:7b:b5:b2:4a:fb:11:17:60:6f:de:33: d0:dd:31:ad:c0:88:9a:1e:71:f7:2e:d8:dd:f6:0d:a1:f9:8c: 95:cb:f6:12:64:b5:e3:3e:ab:8d:b8:1f:ee:e6:c8:c6:65:2a: de:34:51:f4:6b:ff:cc:20:af:3d:2b:e1:aa:b6:85:73:82:66: b2:35:d9:2b:d4:07:fc:fd:49:ba:06:d2:5d:ba:0c:51:9d:9e: a8:63:c2:20:a8:5e:6e:2b:ac:96:97:f4:e8:12:eb:af:79:f6: b2:dc:62:e6:3c:72:36:55:96:4c:6e:01:84:67:49:76:d6:df: 0f:56:75:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPAjTY5QVrONZ1n5ojWN98Y9+16swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1Njgy NzJEMkYzMzAeFw0yNTA1MTAwNTI2MzdaFw0yNTA1MTMxMDQzMzdaMDMxMTAvBgNV BAMTKEFCMzA1QjkxOUVEQkQyQjYwNjc3MkU2RjRBNjI0MDMwNDI0Rjk2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/SGnQR/A3/i5nnhkgrIl+hg5 H9n2BNgJt3FK6c3PIlKmdY7DMhfGGv7YDBlAbjpp7ncXjC2L0/gkS56PYD6bcmLr SU1k8sa77ZRuAOGwVEYffbmqjzw6MQtsGC271Y4J5BARk8kKte+B16IpwUasolX6 I4+TJ1lXJYToczoB13YuTawjIr84hSBQc65LJyWyNFwaAzB4ELbC92/8TBsOKNYT bl/GBGvbg1kXg/Ixs1Vl+zZzMXSpHaK4UPh/HuXn5X8RIzJmoscEeH9qwyr4cb2G 27M3rRl/BjsoTDnwtXRTDwOOg9SAolq/uG4quSk16uaAOISkoSca+i3PJY0pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqzBbkZ7b0rYGdy5vSmJAMEJPlo4wHwYDVR0j BBgwFoAUKVzvh823SxpDKH5jDD/laCctLzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NE Qjc0QjFBNDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1NjgyNzJE MkYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg3ZDc5YmEtZmI1NS00OWE1LTk2 N2ItMWVkYzc0OWQwMTI4LzAvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1 NjgyNzJEMkYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIeTugNkUIRiJcCSX4oRsQH3IFZHKCNCi2dh VDJuG8wFFb/CiqTj3t6Twdaa0/gi833bQz8V+tNRoipc1Wdxhtbq3xTotaDOASPr WgZYv572/CywhrO6CPryc8M39dmSijFlIFcUqjRNMkh1gqcP5h/3q5FPA3PSx5uC 7aKEAtow4JO46J17tbJK+xEXYG/eM9DdMa3AiJoecfcu2N32DaH5jJXL9hJkteM+ q424H+7myMZlKt40UfRr/8wgrz0r4aq2hXOCZrI12SvUB/z9SboG0l26DFGdnqhj wiCoXm4rrJaX9OgS66959rLcYuY8cjZVlkxuAYRnSXbW3w9WdSI= -----END CERTIFICATE-----Generated at Sun May 11 12:27:12 2025 by rpki-client