$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft File: 295131167768CC78482F796BB58CF5A01A014393.mft (raw, json) Hash identifier: OuI62pVWhIEprkUbi0ZkV5tHRN8hso2blLGLz+XE3mk= Subject key identifier: 19:0F:B4:0C:93:80:A0:F9:AB:9D:F5:08:14:D8:0C:F5:C5:F6:FB:4C Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 Certificate issuer: /CN=295131167768CC78482F796BB58CF5A01A014393 Certificate serial: 7ABD810780ED759C5120C9021637221C53233A1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft Manifest number: CE Signing time: Mon 20 Oct 2025 17:11:27 +0000 Manifest this update: Mon 20 Oct 2025 17:06:27 +0000 Manifest next update: Thu 23 Oct 2025 20:13:27 +0000 Files and hashes: 1: 295131167768CC78482F796BB58CF5A01A014393.crl (hash: r2fcZCj5HJ+aeyyoDxkreLIwfQV7YrdcRSmt0Kd3+dc=) 2: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: aIfX6W1wJsuWGyj92Zq4X0k5Z/7Dz5tO4tJOY1Wnlo8=) 3: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: 0V0z+LtHyEetsdKzNz3fDG9TWng43zw65Ia1bT84+ig=) 4: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: Jp+xzrLLFcNcdbgFIyqYkAF5UwOiimjyD2ApcObjIzI=) 5: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: uRuK1ozamqcEn31L5IIaIYVkb8/xiqqqwMGA40t+cIA=) 6: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: AX0lDEH6VgInN8VNyEQZ1Bf7VJ5RuPZOiclQbBxraVk=) 7: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: ItdPic80wypsThSkca8xGdGFm8YCN4V6loLuyuZH6qY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:bd:81:07:80:ed:75:9c:51:20:c9:02:16:37:22:1c:53:23:3a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295131167768CC78482F796BB58CF5A01A014393 Validity Not Before: Oct 20 17:06:27 2025 GMT Not After : Oct 23 20:13:27 2025 GMT Subject: CN=190FB40C9380A0F9AB9DF50814D80CF5C5F6FB4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:39:08:c8:ae:74:a5:ef:f3:e0:99:a3:60:56: 19:7a:ba:7d:87:1a:71:f6:2c:24:33:13:9d:8f:ca: 4c:37:44:19:1a:3f:5d:97:4f:bb:fa:be:38:d1:ea: 81:da:3a:c4:15:43:e7:54:85:7b:6d:a0:50:ff:d3: 35:63:b5:ac:de:50:1a:cf:92:9b:e6:3e:ea:c3:36: 28:c6:6c:8d:33:b2:bd:e7:d7:96:b3:c3:e1:d6:f7: 5b:3b:0d:28:1b:a3:a3:f9:27:99:29:4d:68:fb:ae: 9c:c8:43:26:46:2d:37:d3:61:7d:28:60:6f:eb:b1: ac:8e:33:7c:c5:5f:f8:71:98:6d:92:e5:30:66:e7: 5e:88:34:b2:a3:19:a5:71:4d:1c:94:f4:04:43:e1: 2f:fa:06:5d:1e:24:7b:26:85:f9:b8:c0:ba:c4:f3: ab:4b:50:ea:f1:fe:18:d5:80:ab:75:fb:28:5d:6a: 20:52:1a:5f:71:0a:ee:9f:6a:97:a0:5b:8c:10:2e: b3:c5:73:c7:48:ec:58:93:ce:f6:42:74:b8:11:0e: 35:52:62:87:bd:1a:64:f6:61:1e:a7:c6:41:c9:ad: 93:be:60:45:6a:61:3c:cf:9e:3d:1a:46:70:94:1d: 60:81:c2:bf:77:18:b8:c0:97:58:30:e3:d7:8f:3c: 0a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0F:B4:0C:93:80:A0:F9:AB:9D:F5:08:14:D8:0C:F5:C5:F6:FB:4C X509v3 Authority Key Identifier: keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:00:00:17:0a:80:02:7c:b9:15:ca:23:30:32:d2:8a:ed:05: 53:a1:4c:48:b4:b6:c0:a9:7e:e1:90:91:5b:66:9b:e9:18:71: 92:5a:89:7b:53:3c:89:38:d6:a4:e4:33:12:ee:5e:65:a4:99: 66:8c:06:a0:91:89:08:d8:bc:f7:19:92:fd:bf:c9:c3:ba:be: 9d:aa:a3:b3:c8:7d:cc:51:03:ee:7a:01:da:d4:2b:17:5e:76: 01:d9:74:0e:34:75:88:70:46:4c:69:51:0d:cd:08:98:b9:f6: 06:0b:a6:d8:07:08:48:ea:da:a8:26:07:89:91:a2:93:a4:0b: f4:7a:3a:c1:96:25:33:51:2c:ef:8a:5d:e9:7b:48:ee:6c:66: fc:c8:c5:bd:94:84:65:4f:fb:4f:56:9d:69:21:0f:3b:51:90: 99:88:f3:fa:3c:6e:ff:d5:fb:27:6c:6e:24:32:cc:3b:b3:a8: 8f:47:79:d7:1a:e1:5d:81:68:bd:de:9d:8b:4a:25:eb:ad:71: cb:c4:3f:eb:70:6a:fb:69:24:c6:b6:18:5b:cc:ec:d4:53:42: 75:59:57:db:76:3e:ed:fd:09:9f:41:4b:9d:77:23:a8:b6:ce: b9:d9:91:08:97:5b:f5:0f:7b:ab:0e:19:56:a2:aa:ae:dc:0e: 94:b1:ba:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUer2BB4DtdZxRIMkCFjciHFMjOhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAx QTAxNDM5MzAeFw0yNTEwMjAxNzA2MjdaFw0yNTEwMjMyMDEzMjdaMDMxMTAvBgNV BAMTKDE5MEZCNDBDOTM4MEEwRjlBQjlERjUwODE0RDgwQ0Y1QzVGNkZCNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDOQjIrnSl7/PgmaNgVhl6un2H GnH2LCQzE52Pykw3RBkaP12XT7v6vjjR6oHaOsQVQ+dUhXttoFD/0zVjtazeUBrP kpvmPurDNijGbI0zsr3n15azw+HW91s7DSgbo6P5J5kpTWj7rpzIQyZGLTfTYX0o YG/rsayOM3zFX/hxmG2S5TBm516INLKjGaVxTRyU9ARD4S/6Bl0eJHsmhfm4wLrE 86tLUOrx/hjVgKt1+yhdaiBSGl9xCu6fapegW4wQLrPFc8dI7FiTzvZCdLgRDjVS Yoe9GmT2YR6nxkHJrZO+YEVqYTzPnj0aRnCUHWCBwr93GLjAl1gw49ePPApnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGQ+0DJOAoPmrnfUIFNgM9cX2+0wwHwYDVR0j BBgwFoAUKVExFndozHhIL3lrtYz1oBoBQ5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWVjYTUwYi01NzIyLTQ5MTgtODMxNC04NTlkM2MxZjU1YTIvMC8yOTUxMzExNjc3 NjhDQzc4NDgyRjc5NkJCNThDRjVBMDFBMDE0MzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAxQTAx NDM5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDllY2E1MGItNTcyMi00OTE4LTgz MTQtODU5ZDNjMWY1NWEyLzAvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1 QTAxQTAxNDM5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoAABcKgAJ8uRXKIzAy0ortBVOhTEi0tsCp fuGQkVtmm+kYcZJaiXtTPIk41qTkMxLuXmWkmWaMBqCRiQjYvPcZkv2/ycO6vp2q o7PIfcxRA+56AdrUKxdedgHZdA40dYhwRkxpUQ3NCJi59gYLptgHCEjq2qgmB4mR opOkC/R6OsGWJTNRLO+KXel7SO5sZvzIxb2UhGVP+09WnWkhDztRkJmI8/o8bv/V +ydsbiQyzDuzqI9Hedca4V2BaL3enYtKJeutccvEP+twavtpJMa2GFvM7NRTQnVZ V9t2Pu39CZ9BS513I6i2zrnZkQiXW/UPe6sOGVaiqq7cDpSxulI= -----END CERTIFICATE-----Generated at Mon Oct 20 21:09:38 2025 by rpki-client