$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft File: 295CEF87CDB74B1A43287E630C3FE568272D2F33.mft (raw, json) Hash identifier: zz2Kw8emRaekEtXPtU3cbYWLjpdDLZs65IH/VCB6YVw= Subject key identifier: DB:9A:C0:4B:FF:67:64:D2:D5:8D:AC:E0:07:4C:18:F0:9E:73:29:34 Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 Certificate issuer: /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Certificate serial: 730C366EF16F975BFD6400BC396665E769A8C3EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft Manifest number: 0507 Signing time: Fri 22 Aug 2025 04:31:37 +0000 Manifest this update: Fri 22 Aug 2025 04:26:37 +0000 Manifest next update: Mon 25 Aug 2025 10:23:37 +0000 Files and hashes: 1: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: 4XaAtrPhzGDBzDHWlHXMB0whCb6rytr+C1+HuznU5f0=) 2: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: 6l4eA4hgKKdV7HePb7GT4qkO7B2rOBXkYrSr+9u6X7c=) 3: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: 73W8GLSa6I8P01k3aFdjjpvb756Sn1uc1jeTJZ00bq4=) 4: 295CEF87CDB74B1A43287E630C3FE568272D2F33.crl (hash: RGuIm/WrUOzBVuCsNv3DaYPL+LMZrzUcmncAu0t+YTU=) 5: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: S3vWYnYF+l4dhX20RDpIzaZuA3umTZ3b74Itz4An65E=) 6: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: PMWu4w2Q+6FhMFUf3/IiRjbR53qP/H9SS7SsSz4BOlo=) 7: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: pPyEloQMF0TdeYTY5eM6CCjgFQy8xkkymm+/u9Rl4Cw=) 8: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: 0qgtJcGFp2PSnsHTLVJD3e7NXsCz70cPkWqnqoXUWi0=) 9: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: nhGmrbnsJZJKbXEVM2224rOUYqSyOnxXP3J6DVLRP58=) 10: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: ECzNZR+t4Bdt6LAAlKcBfTJvufVHsod6z7EXxaTCQXQ=) 11: 3232332e3133302e32322e302f32332d3234203d3e2039343232.roa (hash: 7z/4k9uh8qc3CYPaIfLqUwfu/s9Fgtg25t7b4ka8UOQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 10:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:0c:36:6e:f1:6f:97:5b:fd:64:00:bc:39:66:65:e7:69:a8:c3:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Validity Not Before: Aug 22 04:26:37 2025 GMT Not After : Aug 25 10:23:37 2025 GMT Subject: CN=DB9AC04BFF6764D2D58DACE0074C18F09E732934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6e:03:36:f6:ad:9e:4c:de:02:e6:7e:54:24: 70:9b:d3:ec:86:93:cf:bd:60:67:33:f5:c5:4c:3d: ae:34:99:b2:ee:f4:30:fe:4d:b8:28:ea:17:d8:73: 49:14:ef:b8:ff:c4:3e:4a:52:a7:12:6d:e3:4b:d6: f7:df:18:8a:72:0e:66:82:d2:9d:db:28:7c:cd:a3: d1:6f:18:03:7e:4f:99:ca:46:14:85:6b:99:8c:a8: 88:54:0e:e6:42:b0:71:41:9a:9e:4d:ba:3d:8f:24: 6b:0d:40:47:89:36:b6:f4:1c:91:e9:ce:6e:71:46: b9:c5:95:fc:20:8c:ce:31:d3:d7:42:73:09:ef:a5: fd:f8:8f:bb:e2:78:df:5f:ac:c6:09:eb:f1:8e:8e: d1:f8:1e:96:ed:9b:d4:89:ec:03:a4:7e:34:a8:06: ad:94:99:7a:18:46:5a:55:72:fb:05:dc:4c:65:91: 24:45:9d:c9:9f:a4:79:6c:9c:fa:cc:f3:1e:3f:47: fc:ab:5f:fc:00:f2:74:0d:ad:06:6e:21:ea:9a:25: 38:75:47:a4:3a:36:76:c0:b0:ce:86:72:ee:56:20: dd:5c:93:c1:20:61:e7:29:54:ac:08:91:8e:ab:16: ad:50:e1:b2:68:7a:28:59:9c:1c:48:36:81:d9:8f: ba:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9A:C0:4B:FF:67:64:D2:D5:8D:AC:E0:07:4C:18:F0:9E:73:29:34 X509v3 Authority Key Identifier: keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:93:15:eb:2a:e8:47:5d:f3:3e:fc:1c:78:aa:69:d7:65:c5: e1:92:f0:9a:ee:2a:8a:c4:c7:12:ba:bb:1c:35:8d:6c:21:ad: f9:0b:38:74:90:b5:14:75:d5:a3:16:91:b6:61:7f:ae:23:0f: 1f:5a:8c:93:11:7e:11:67:ad:47:78:ae:80:8e:df:1f:45:2e: 4f:a0:fa:ea:04:c1:ea:9c:69:a3:53:4b:3c:eb:f8:30:dc:f0: 64:40:f4:94:c0:c1:e2:1a:4c:a0:18:10:6b:8a:3d:6a:1d:f6: f8:f2:db:86:dc:99:8c:d3:e5:5b:01:3d:d2:6c:bd:2e:68:85: ba:87:35:65:8c:df:20:a7:14:a1:56:50:7b:75:bf:41:0c:08: 49:a2:75:1c:d9:fa:02:27:93:da:ad:81:96:70:05:d0:ab:7a: 0c:2e:73:80:36:fa:a9:2b:7d:e3:d6:d3:64:34:00:2a:22:83: 42:aa:a5:8b:f0:aa:c4:bc:cf:18:9d:f7:d9:4f:d2:e2:48:26: a6:57:ea:32:00:85:76:60:d4:d9:15:a9:e9:52:35:e3:22:f9: 62:aa:48:29:d2:50:51:05:51:0c:c2:8d:e6:d1:d4:68:dd:b1: 02:5e:78:00:3c:20:94:11:db:da:96:50:13:50:d0:8b:5b:0a: 39:33:ff:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcww2bvFvl1v9ZAC8OWZl52mow+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1Njgy NzJEMkYzMzAeFw0yNTA4MjIwNDI2MzdaFw0yNTA4MjUxMDIzMzdaMDMxMTAvBgNV BAMTKERCOUFDMDRCRkY2NzY0RDJENThEQUNFMDA3NEMxOEYwOUU3MzI5MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0bgM29q2eTN4C5n5UJHCb0+yG k8+9YGcz9cVMPa40mbLu9DD+Tbgo6hfYc0kU77j/xD5KUqcSbeNL1vffGIpyDmaC 0p3bKHzNo9FvGAN+T5nKRhSFa5mMqIhUDuZCsHFBmp5Nuj2PJGsNQEeJNrb0HJHp zm5xRrnFlfwgjM4x09dCcwnvpf34j7vieN9frMYJ6/GOjtH4Hpbtm9SJ7AOkfjSo Bq2UmXoYRlpVcvsF3ExlkSRFncmfpHlsnPrM8x4/R/yrX/wA8nQNrQZuIeqaJTh1 R6Q6NnbAsM6Gcu5WIN1ck8EgYecpVKwIkY6rFq1Q4bJoeihZnBxINoHZj7oPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU25rAS/9nZNLVjazgB0wY8J5zKTQwHwYDVR0j BBgwFoAUKVzvh823SxpDKH5jDD/laCctLzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NE Qjc0QjFBNDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1NjgyNzJE MkYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg3ZDc5YmEtZmI1NS00OWE1LTk2 N2ItMWVkYzc0OWQwMTI4LzAvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1 NjgyNzJEMkYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2TFesq6Edd8z78HHiqaddlxeGS8JruKorE xxK6uxw1jWwhrfkLOHSQtRR11aMWkbZhf64jDx9ajJMRfhFnrUd4roCO3x9FLk+g +uoEweqcaaNTSzzr+DDc8GRA9JTAweIaTKAYEGuKPWod9vjy24bcmYzT5VsBPdJs vS5ohbqHNWWM3yCnFKFWUHt1v0EMCEmidRzZ+gInk9qtgZZwBdCregwuc4A2+qkr fePW02Q0ACoig0KqpYvwqsS8zxid99lP0uJIJqZX6jIAhXZg1NkVqelSNeMi+WKq SCnSUFEFUQzCjebR1GjdsQJeeAA8IJQR29qWUBNQ0ItbCjkz/7Y= -----END CERTIFICATE-----Generated at Sat Aug 23 17:02:10 2025 by rpki-client