$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft File: 295CEF87CDB74B1A43287E630C3FE568272D2F33.mft (raw, json) Hash identifier: Hq4SvMYnniIvabHXCjAP0esWd0x3tSoTrdHEa4JSKYc= Subject key identifier: 83:90:23:01:14:E3:2E:22:FE:40:FF:36:6D:15:FE:8C:7A:E8:9D:FB Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 Certificate issuer: /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Certificate serial: 4E39F5BBCDC69E2B11A723098EB4DF3D8247636F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft Manifest number: 0524 Signing time: Sat 18 Oct 2025 06:11:39 +0000 Manifest this update: Sat 18 Oct 2025 06:06:39 +0000 Manifest next update: Tue 21 Oct 2025 06:15:39 +0000 Files and hashes: 1: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: S3vWYnYF+l4dhX20RDpIzaZuA3umTZ3b74Itz4An65E=) 2: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: nhGmrbnsJZJKbXEVM2224rOUYqSyOnxXP3J6DVLRP58=) 3: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: 6l4eA4hgKKdV7HePb7GT4qkO7B2rOBXkYrSr+9u6X7c=) 4: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: 73W8GLSa6I8P01k3aFdjjpvb756Sn1uc1jeTJZ00bq4=) 5: 295CEF87CDB74B1A43287E630C3FE568272D2F33.crl (hash: V7rt88zVsL4CQmNib5TT91rX2Le3USYZvWXHHbebNdI=) 6: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: ECzNZR+t4Bdt6LAAlKcBfTJvufVHsod6z7EXxaTCQXQ=) 7: 3232332e3133302e32332e302f32342d3234203d3e20313338313238.roa (hash: Z00cWWLpoEgJbs9IwwNUQ+8l5Sk95TAHVLqYoXdZIhA=) 8: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: 4XaAtrPhzGDBzDHWlHXMB0whCb6rytr+C1+HuznU5f0=) 9: 3232332e3133302e32322e302f32342d3234203d3e20313338313238.roa (hash: XnGn/2+w4AJO6NSWZOl6oPCbIBn8oHiJVNfmgtkBLgs=) 10: 3232332e3133302e32322e302f32332d3233203d3e20313338313238.roa (hash: hEy0rDvTYQnHKZCVMINLjOdzcBCjo3uIeSctB/ZGBr8=) 11: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: 0qgtJcGFp2PSnsHTLVJD3e7NXsCz70cPkWqnqoXUWi0=) 12: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: pPyEloQMF0TdeYTY5eM6CCjgFQy8xkkymm+/u9Rl4Cw=) 13: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: PMWu4w2Q+6FhMFUf3/IiRjbR53qP/H9SS7SsSz4BOlo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 06:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:39:f5:bb:cd:c6:9e:2b:11:a7:23:09:8e:b4:df:3d:82:47:63:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Validity Not Before: Oct 18 06:06:39 2025 GMT Not After : Oct 21 06:15:39 2025 GMT Subject: CN=8390230114E32E22FE40FF366D15FE8C7AE89DFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8b:1b:d0:c5:d1:d1:31:8d:ae:97:31:a2:f8: 3b:bb:e7:98:2e:86:26:0b:26:95:56:49:8e:68:ce: cb:2e:a4:a3:87:5b:6c:e6:b8:1a:d4:86:99:35:56: 50:e3:ba:3f:73:0b:0e:38:f0:f3:41:37:ba:78:2b: 2a:3b:95:f7:7a:43:6f:b1:42:c4:a1:04:86:72:4f: 2e:5d:30:07:a3:13:1e:37:5b:ab:b2:44:19:5a:d8: fa:bf:28:3a:7c:d2:52:47:80:15:6a:cf:1c:1e:85: f8:59:38:e8:e4:55:0b:4f:49:f9:8e:df:f7:f4:2e: dd:d8:5b:b3:6f:d1:d9:46:74:29:a7:3c:93:98:e4: de:98:3b:a9:df:fa:3f:73:3c:b8:f6:40:b8:4b:e2: 1c:ff:cc:71:0a:c2:09:fc:4a:c6:17:35:39:80:f2: 29:58:65:fb:84:0a:85:46:d0:4c:f3:d8:6a:1f:06: eb:99:57:b2:c8:c8:98:ac:60:b0:4c:2a:63:2e:c9: 55:8f:bf:57:7f:87:07:79:4f:2b:e9:07:da:b5:a7: 83:f0:c5:cf:0d:11:30:83:95:1b:21:bd:1e:88:19: 4a:b6:c6:50:06:a1:44:32:aa:2a:00:11:99:4e:6c: f4:ff:16:93:6b:01:1b:d7:d7:94:d3:e5:c5:c8:bb: b4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:90:23:01:14:E3:2E:22:FE:40:FF:36:6D:15:FE:8C:7A:E8:9D:FB X509v3 Authority Key Identifier: keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:67:95:af:38:59:c8:53:4c:e4:3c:39:e3:b1:85:a5:f2:ae: 58:56:35:72:e3:48:b0:d7:58:c1:db:ed:58:39:c6:5b:b3:ab: c6:2e:c6:60:8e:cd:89:12:fb:74:a4:dd:43:17:6a:01:35:b6: 53:e3:a3:7b:b7:8a:1a:ea:57:8d:b1:75:1e:9c:15:03:8d:25: b3:d1:de:e5:a4:67:e2:db:2d:97:4c:c3:ba:6b:35:ac:91:b9: 94:1e:35:9a:cf:8f:35:cb:b0:6c:20:d6:a9:f0:29:3f:5e:39: 18:83:c4:d1:d6:cf:82:5b:f2:40:c3:30:a8:f5:2e:fd:83:9f: 05:b7:03:b9:f1:8d:29:25:16:a8:57:d7:e1:8e:d3:1c:6f:e1: 56:94:df:6c:36:bc:04:8a:14:af:62:48:d2:25:be:68:c9:36: c8:a4:0d:70:bd:d8:de:a6:27:8e:75:65:7b:b9:4c:9e:c9:ce: 2e:82:81:7e:e3:2a:da:d2:f7:dc:ff:55:6f:72:63:67:4c:fa: 4d:95:dd:15:cf:8c:db:ae:83:49:17:a6:48:bc:24:dd:67:d8: 1b:3c:69:58:a2:86:8d:be:78:e7:bd:9c:0c:38:48:9c:f7:b9: 17:87:8a:e4:8b:a5:d4:10:ca:b6:f3:48:c6:c5:05:0c:49:81: e7:33:00:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTjn1u83GnisRpyMJjrTfPYJHY28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1Njgy NzJEMkYzMzAeFw0yNTEwMTgwNjA2MzlaFw0yNTEwMjEwNjE1MzlaMDMxMTAvBgNV BAMTKDgzOTAyMzAxMTRFMzJFMjJGRTQwRkYzNjZEMTVGRThDN0FFODlERkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ixvQxdHRMY2ulzGi+Du755gu hiYLJpVWSY5ozssupKOHW2zmuBrUhpk1VlDjuj9zCw448PNBN7p4Kyo7lfd6Q2+x QsShBIZyTy5dMAejEx43W6uyRBla2Pq/KDp80lJHgBVqzxwehfhZOOjkVQtPSfmO 3/f0Lt3YW7Nv0dlGdCmnPJOY5N6YO6nf+j9zPLj2QLhL4hz/zHEKwgn8SsYXNTmA 8ilYZfuECoVG0Ezz2GofBuuZV7LIyJisYLBMKmMuyVWPv1d/hwd5TyvpB9q1p4Pw xc8NETCDlRshvR6IGUq2xlAGoUQyqioAEZlObPT/FpNrARvX15TT5cXIu7TZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg5AjARTjLiL+QP82bRX+jHronfswHwYDVR0j BBgwFoAUKVzvh823SxpDKH5jDD/laCctLzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NE Qjc0QjFBNDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1NjgyNzJE MkYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg3ZDc5YmEtZmI1NS00OWE1LTk2 N2ItMWVkYzc0OWQwMTI4LzAvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1 NjgyNzJEMkYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZnla84WchTTOQ8OeOxhaXyrlhWNXLjSLDX WMHb7Vg5xluzq8YuxmCOzYkS+3Sk3UMXagE1tlPjo3u3ihrqV42xdR6cFQONJbPR 3uWkZ+LbLZdMw7prNayRuZQeNZrPjzXLsGwg1qnwKT9eORiDxNHWz4Jb8kDDMKj1 Lv2DnwW3A7nxjSklFqhX1+GO0xxv4VaU32w2vASKFK9iSNIlvmjJNsikDXC92N6m J451ZXu5TJ7Jzi6CgX7jKtrS99z/VW9yY2dM+k2V3RXPjNuug0kXpki8JN1n2Bs8 aViiho2+eOe9nAw4SJz3uReHiuSLpdQQyrbzSMbFBQxJgeczALY= -----END CERTIFICATE-----Generated at Mon Oct 20 08:02:50 2025 by rpki-client