$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft File: 295CEF87CDB74B1A43287E630C3FE568272D2F33.mft (raw, json) Hash identifier: 0LhQJOrXBHo4B0CObxIMDstqz7+w/Vpq6yXAuG/cyMM= Subject key identifier: 62:D1:DC:35:8A:3D:8A:67:0B:80:AC:34:13:00:45:60:00:90:07:DB Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 Certificate issuer: /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Certificate serial: 2498A08B59D38D41D6A22D4CD2D93AAEC05E7F8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft Manifest number: 04F0 Signing time: Mon 30 Jun 2025 15:21:35 +0000 Manifest this update: Mon 30 Jun 2025 15:16:35 +0000 Manifest next update: Fri 04 Jul 2025 02:17:35 +0000 Files and hashes: 1: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: S3vWYnYF+l4dhX20RDpIzaZuA3umTZ3b74Itz4An65E=) 2: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: 73W8GLSa6I8P01k3aFdjjpvb756Sn1uc1jeTJZ00bq4=) 3: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: pPyEloQMF0TdeYTY5eM6CCjgFQy8xkkymm+/u9Rl4Cw=) 4: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: PMWu4w2Q+6FhMFUf3/IiRjbR53qP/H9SS7SsSz4BOlo=) 5: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: nhGmrbnsJZJKbXEVM2224rOUYqSyOnxXP3J6DVLRP58=) 6: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: 0qgtJcGFp2PSnsHTLVJD3e7NXsCz70cPkWqnqoXUWi0=) 7: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: 6l4eA4hgKKdV7HePb7GT4qkO7B2rOBXkYrSr+9u6X7c=) 8: 3232332e3133302e32322e302f32332d3234203d3e2039343232.roa (hash: 7z/4k9uh8qc3CYPaIfLqUwfu/s9Fgtg25t7b4ka8UOQ=) 9: 295CEF87CDB74B1A43287E630C3FE568272D2F33.crl (hash: zwuZ0HEZ8nZ+uJqOqvCeldATR2L6qC13wYHGgepyj/w=) 10: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: 4XaAtrPhzGDBzDHWlHXMB0whCb6rytr+C1+HuznU5f0=) 11: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: ECzNZR+t4Bdt6LAAlKcBfTJvufVHsod6z7EXxaTCQXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 02:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:98:a0:8b:59:d3:8d:41:d6:a2:2d:4c:d2:d9:3a:ae:c0:5e:7f:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Validity Not Before: Jun 30 15:16:35 2025 GMT Not After : Jul 4 02:17:35 2025 GMT Subject: CN=62D1DC358A3D8A670B80AC3413004560009007DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fc:ef:00:00:94:0f:49:5b:04:86:4f:7b:1c: 96:87:28:7b:d5:98:f1:f0:60:2f:df:21:35:d9:53: 38:ed:9f:a7:3f:22:21:f3:82:0e:ab:15:e0:0d:92: 5d:9b:85:ad:81:ac:21:6f:95:0c:a2:fc:16:be:c0: c2:f7:b9:56:ff:e6:6f:3b:46:3d:5f:f2:25:91:4e: 56:50:5d:99:47:57:85:12:1b:96:28:58:2a:d5:75: 7c:1d:64:85:7b:51:5e:05:d8:41:af:c9:b4:73:d2: 2e:16:de:a9:6f:20:50:5f:aa:fb:22:08:65:c2:df: 99:b4:5b:0d:13:32:ce:a1:8a:59:68:9b:b0:48:8b: 6e:62:dc:88:88:51:4c:6d:62:9f:cc:83:83:4b:52: 79:6d:d8:95:27:37:bd:fc:62:ec:d1:d0:5b:d9:cb: fa:ce:fe:39:26:e4:83:33:3e:2b:5d:00:e9:4c:f6: 05:31:fd:f5:df:de:24:28:9d:9c:04:0b:7b:b7:fb: 66:7a:53:44:84:db:0b:de:a1:f2:a4:c1:78:70:7d: 2e:6b:c3:19:15:2c:25:2e:7f:15:f4:1f:b5:ef:d1: e4:d9:b2:50:2a:dc:31:25:0f:3e:46:a2:1d:2c:c3: 90:80:b0:f1:c8:b1:06:c0:93:ae:2a:b9:b5:a5:8f: da:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D1:DC:35:8A:3D:8A:67:0B:80:AC:34:13:00:45:60:00:90:07:DB X509v3 Authority Key Identifier: keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:42:53:07:c8:ea:19:f1:13:46:52:ba:83:09:c2:34:c7:43: da:de:1e:4d:eb:ba:80:17:d3:3a:40:ed:97:e0:ef:5f:e9:71: 25:12:a5:3e:d8:bc:59:d7:d3:f0:09:a9:02:fc:6f:7f:99:ad: 2f:5b:66:52:1b:a9:f0:d0:29:a6:8c:c0:5d:11:8f:31:26:0a: 3b:8c:a0:48:14:d8:d5:10:a8:5f:2f:73:55:9b:92:48:eb:5f: 70:8b:b1:a9:8b:ea:57:95:6e:cd:3a:ad:2d:1d:b7:c9:d1:ea: 9c:7a:d9:93:d2:74:83:af:ef:66:7f:ca:e0:b7:7a:89:f5:5f: be:e7:df:eb:2b:9a:6a:68:13:e8:d1:b3:0f:d0:da:08:ef:6b: d6:81:d9:f8:80:a0:2f:cf:53:b2:1b:f5:66:04:77:31:6c:2d: e3:47:91:f9:e0:62:22:36:ae:3b:45:25:e1:6c:28:41:1b:90: b9:80:c7:e8:81:c2:97:00:21:01:25:7c:e1:72:cc:88:8e:8b: 91:2e:d6:32:19:c7:33:e5:17:02:0a:8d:2a:1a:78:94:9e:65: 06:95:34:12:e8:a3:2c:4b:3b:27:40:2c:75:81:0c:40:c4:3c: c1:13:5a:61:b6:3b:90:0c:4b:d6:3d:14:4d:ed:59:a0:0a:03: 9a:87:0f:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJJigi1nTjUHWoi1M0tk6rsBef4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1Njgy NzJEMkYzMzAeFw0yNTA2MzAxNTE2MzVaFw0yNTA3MDQwMjE3MzVaMDMxMTAvBgNV BAMTKDYyRDFEQzM1OEEzRDhBNjcwQjgwQUMzNDEzMDA0NTYwMDA5MDA3REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp/O8AAJQPSVsEhk97HJaHKHvV mPHwYC/fITXZUzjtn6c/IiHzgg6rFeANkl2bha2BrCFvlQyi/Ba+wML3uVb/5m87 Rj1f8iWRTlZQXZlHV4USG5YoWCrVdXwdZIV7UV4F2EGvybRz0i4W3qlvIFBfqvsi CGXC35m0Ww0TMs6hillom7BIi25i3IiIUUxtYp/Mg4NLUnlt2JUnN738YuzR0FvZ y/rO/jkm5IMzPitdAOlM9gUx/fXf3iQonZwEC3u3+2Z6U0SE2wveofKkwXhwfS5r wxkVLCUufxX0H7Xv0eTZslAq3DElDz5Goh0sw5CAsPHIsQbAk64qubWlj9oHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYtHcNYo9imcLgKw0EwBFYACQB9swHwYDVR0j BBgwFoAUKVzvh823SxpDKH5jDD/laCctLzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NE Qjc0QjFBNDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1NjgyNzJE MkYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg3ZDc5YmEtZmI1NS00OWE1LTk2 N2ItMWVkYzc0OWQwMTI4LzAvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1 NjgyNzJEMkYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5CUwfI6hnxE0ZSuoMJwjTHQ9reHk3ruoAX 0zpA7Zfg71/pcSUSpT7YvFnX0/AJqQL8b3+ZrS9bZlIbqfDQKaaMwF0RjzEmCjuM oEgU2NUQqF8vc1WbkkjrX3CLsamL6leVbs06rS0dt8nR6px62ZPSdIOv72Z/yuC3 eon1X77n3+srmmpoE+jRsw/Q2gjva9aB2fiAoC/PU7Ib9WYEdzFsLeNHkfngYiI2 rjtFJeFsKEEbkLmAx+iBwpcAIQElfOFyzIiOi5Eu1jIZxzPlFwIKjSoaeJSeZQaV NBLooyxLOydALHWBDEDEPMETWmG2O5AMS9Y9FE3tWaAKA5qHD1s= -----END CERTIFICATE-----Generated at Tue Jul 1 14:17:34 2025 by rpki-client