$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft File: 295131167768CC78482F796BB58CF5A01A014393.mft (raw, json) Hash identifier: hgRH2V184JlzKJ3ZWHjzpNNz+1R1qVdLWAK7ZTp2s3g= Subject key identifier: F0:5F:07:63:0A:98:32:BC:81:3E:47:81:70:9F:24:22:6A:E0:B5:BB Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 Certificate issuer: /CN=295131167768CC78482F796BB58CF5A01A014393 Certificate serial: 7AABDEE9B19CFB91933F1799F1D57E13B321E709 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft Manifest number: CD Signing time: Sat 18 Oct 2025 06:21:27 +0000 Manifest this update: Sat 18 Oct 2025 06:16:27 +0000 Manifest next update: Tue 21 Oct 2025 17:08:27 +0000 Files and hashes: 1: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: uRuK1ozamqcEn31L5IIaIYVkb8/xiqqqwMGA40t+cIA=) 2: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: ItdPic80wypsThSkca8xGdGFm8YCN4V6loLuyuZH6qY=) 3: 295131167768CC78482F796BB58CF5A01A014393.crl (hash: ISbcZUKS4vI1A/Gfk5xJ0BiD/h76y5NT5SGeFZmC6qw=) 4: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: 0V0z+LtHyEetsdKzNz3fDG9TWng43zw65Ia1bT84+ig=) 5: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: aIfX6W1wJsuWGyj92Zq4X0k5Z/7Dz5tO4tJOY1Wnlo8=) 6: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: AX0lDEH6VgInN8VNyEQZ1Bf7VJ5RuPZOiclQbBxraVk=) 7: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: Jp+xzrLLFcNcdbgFIyqYkAF5UwOiimjyD2ApcObjIzI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 17:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ab:de:e9:b1:9c:fb:91:93:3f:17:99:f1:d5:7e:13:b3:21:e7:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295131167768CC78482F796BB58CF5A01A014393 Validity Not Before: Oct 18 06:16:27 2025 GMT Not After : Oct 21 17:08:27 2025 GMT Subject: CN=F05F07630A9832BC813E4781709F24226AE0B5BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:95:11:3d:ae:13:83:a5:ab:e9:ff:e4:d5:16: 27:ca:fe:0c:05:34:5c:c2:72:4d:1e:ea:30:c3:ac: 7e:00:49:6b:dc:34:94:5e:90:70:66:f6:6d:8a:22: b4:84:d6:24:80:8d:a9:40:1c:d0:a9:b5:5c:72:f9: 7d:17:ea:bd:4d:e9:a4:4a:f2:5e:4c:b2:7d:ba:c6: 7a:a6:43:66:41:36:3b:a6:83:fe:00:2e:77:44:f7: 50:c6:7d:82:99:45:3f:2d:4e:f4:1a:8c:fc:d5:d1: 55:fa:2d:7b:13:9c:05:23:4c:3f:36:95:19:2a:ae: 1a:15:d8:ea:85:e5:14:62:76:68:14:f5:8d:f7:24: 8c:fa:62:1b:d4:fa:25:3f:1e:c2:00:98:8d:64:54: 56:20:14:16:e7:ce:5c:50:24:6a:f3:74:1e:35:02: d9:c5:cf:4d:58:a3:3a:38:d3:fc:e2:3f:1e:e5:db: 62:e7:10:74:c2:91:67:d2:d3:12:26:3d:5f:72:9f: 8b:0c:23:26:36:d7:9c:d1:a7:69:1f:80:d5:01:29: fb:ca:15:34:4c:bf:55:c5:c4:50:82:16:99:5a:e8: 81:7a:81:fe:df:37:9e:28:a0:fb:7a:b4:fc:64:49: 13:e6:a9:5e:0b:04:9a:f1:f2:33:9b:e9:8d:52:47: b9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5F:07:63:0A:98:32:BC:81:3E:47:81:70:9F:24:22:6A:E0:B5:BB X509v3 Authority Key Identifier: keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:21:83:7a:97:54:44:f3:86:99:e0:27:7d:04:2f:d4:6e:ba: 0f:d3:ad:66:fe:24:8d:2d:9f:c3:43:03:6b:11:21:5d:07:f9: 15:44:e1:f2:30:40:85:94:d8:2e:5c:2b:ed:fa:8c:0e:78:9a: 63:c6:57:fa:ab:2d:d7:83:29:28:7b:68:6d:9c:db:ca:ad:cf: 9e:50:47:b5:e5:b8:71:bf:46:79:c2:53:84:c8:5a:03:ab:aa: 49:38:92:e1:86:14:ad:8a:a9:50:64:51:e8:f9:c1:5b:b5:e7: 71:54:05:9b:f4:4d:08:45:cc:88:5a:b6:7d:fa:49:8b:0b:86: b0:9a:84:72:89:c7:aa:41:ae:7f:ab:44:b0:60:9c:35:7f:f5: 3d:e1:26:54:c0:f2:c7:69:aa:f0:55:69:a6:d5:df:ed:f5:72: 88:83:48:b8:58:41:72:6a:f2:0e:1d:39:2b:0c:df:9b:90:c4: 62:28:6e:a1:91:a2:c6:0b:38:1d:94:0b:38:93:0f:4b:c5:0a: c0:6d:38:ef:2b:35:dc:be:09:1b:6b:42:2a:85:75:2c:9b:92: c4:b5:24:1d:8c:7d:9a:ca:f7:f4:01:fd:15:d7:a4:a5:04:47: 86:c1:c5:42:56:8a:99:b7:4a:fc:b8:5e:02:3a:e8:c5:da:17: e4:44:79:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeqve6bGc+5GTPxeZ8dV+E7Mh5wkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAx QTAxNDM5MzAeFw0yNTEwMTgwNjE2MjdaFw0yNTEwMjExNzA4MjdaMDMxMTAvBgNV BAMTKEYwNUYwNzYzMEE5ODMyQkM4MTNFNDc4MTcwOUYyNDIyNkFFMEI1QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7lRE9rhODpavp/+TVFifK/gwF NFzCck0e6jDDrH4ASWvcNJRekHBm9m2KIrSE1iSAjalAHNCptVxy+X0X6r1N6aRK 8l5Msn26xnqmQ2ZBNjumg/4ALndE91DGfYKZRT8tTvQajPzV0VX6LXsTnAUjTD82 lRkqrhoV2OqF5RRidmgU9Y33JIz6YhvU+iU/HsIAmI1kVFYgFBbnzlxQJGrzdB41 AtnFz01Yozo40/ziPx7l22LnEHTCkWfS0xImPV9yn4sMIyY215zRp2kfgNUBKfvK FTRMv1XFxFCCFpla6IF6gf7fN54ooPt6tPxkSRPmqV4LBJrx8jOb6Y1SR7kNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8F8HYwqYMryBPkeBcJ8kImrgtbswHwYDVR0j BBgwFoAUKVExFndozHhIL3lrtYz1oBoBQ5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWVjYTUwYi01NzIyLTQ5MTgtODMxNC04NTlkM2MxZjU1YTIvMC8yOTUxMzExNjc3 NjhDQzc4NDgyRjc5NkJCNThDRjVBMDFBMDE0MzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAxQTAx NDM5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDllY2E1MGItNTcyMi00OTE4LTgz MTQtODU5ZDNjMWY1NWEyLzAvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1 QTAxQTAxNDM5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIhg3qXVETzhpngJ30EL9Ruug/TrWb+JI0t n8NDA2sRIV0H+RVE4fIwQIWU2C5cK+36jA54mmPGV/qrLdeDKSh7aG2c28qtz55Q R7XluHG/RnnCU4TIWgOrqkk4kuGGFK2KqVBkUej5wVu153FUBZv0TQhFzIhatn36 SYsLhrCahHKJx6pBrn+rRLBgnDV/9T3hJlTA8sdpqvBVaabV3+31coiDSLhYQXJq 8g4dOSsM35uQxGIobqGRosYLOB2UCziTD0vFCsBtOO8rNdy+CRtrQiqFdSybksS1 JB2MfZrK9/QB/RXXpKUER4bBxUJWipm3Svy4XgI66MXaF+REed0= -----END CERTIFICATE-----Generated at Mon Oct 20 17:01:38 2025 by rpki-client