$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft File: 295131167768CC78482F796BB58CF5A01A014393.mft (raw, json) Hash identifier: 0Uj3jjKIyNTCZLSECJz+ndH/mc2GyX1/xhzKH1mEXRg= Subject key identifier: BB:52:6E:C2:56:E0:E3:CB:F5:2A:EE:8B:B3:80:6B:B5:CE:A0:4B:5E Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 Certificate issuer: /CN=295131167768CC78482F796BB58CF5A01A014393 Certificate serial: 49E95E1088C6BDC74BA3ED57EDD776761DAA8CFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft Manifest number: 9B Signing time: Sat 28 Jun 2025 12:01:26 +0000 Manifest this update: Sat 28 Jun 2025 11:56:26 +0000 Manifest next update: Tue 01 Jul 2025 16:13:26 +0000 Files and hashes: 1: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: moFK92Lb7O04I+6FG9VzJZ/FTQ4AaEmINK+chDU1cX4=) 2: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: aTzve7Y6mBexH/WsjxWYP1/0CSlzvkwS9M1uSz5WL7A=) 3: 295131167768CC78482F796BB58CF5A01A014393.crl (hash: ecbGssYXRu7+iqiPrtsqwbu520xlfXjmQTxxyc3Aj1g=) 4: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: uRuK1ozamqcEn31L5IIaIYVkb8/xiqqqwMGA40t+cIA=) 5: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: Jp+xzrLLFcNcdbgFIyqYkAF5UwOiimjyD2ApcObjIzI=) 6: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: ZUUrvcV4tzaV5FI9nd3G6vecM/kD2HHsEXb/JzJw5nk=) 7: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: AX0lDEH6VgInN8VNyEQZ1Bf7VJ5RuPZOiclQbBxraVk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 16:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:e9:5e:10:88:c6:bd:c7:4b:a3:ed:57:ed:d7:76:76:1d:aa:8c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295131167768CC78482F796BB58CF5A01A014393 Validity Not Before: Jun 28 11:56:26 2025 GMT Not After : Jul 1 16:13:26 2025 GMT Subject: CN=BB526EC256E0E3CBF52AEE8BB3806BB5CEA04B5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:43:f1:c0:a2:66:bc:61:0d:de:d5:5d:88:ff: 3e:10:e4:0f:97:07:23:9c:07:32:77:ac:0c:b1:eb: 04:bc:d0:cd:66:a8:29:23:cf:60:02:9a:27:1c:b6: ea:06:3e:f9:f8:bc:d6:83:d1:e7:d1:0f:15:25:77: 10:f0:9d:f3:ad:a9:a4:2c:86:0b:4d:f9:93:d0:5b: 9a:23:5c:cd:45:99:56:7e:9a:9a:63:90:30:3d:1f: 12:36:8b:04:04:c4:7f:01:83:eb:a7:7f:75:dd:01: d9:d5:3c:c6:30:dc:8d:6f:df:50:73:56:4d:df:9e: 3a:35:28:04:9a:22:2f:a2:17:cc:5f:49:c9:11:74: 04:70:52:5c:21:b7:4d:ca:80:ed:66:a9:62:fa:9a: 67:10:d2:e8:08:d3:b3:b6:ef:1b:7b:f3:90:83:ba: c2:fb:58:fc:42:7b:b9:98:b5:cd:42:27:4d:32:9e: b0:7d:9e:1d:ea:33:7f:ce:55:f2:8e:34:2d:c2:ed: 72:4d:2e:9d:2c:02:54:e4:6a:10:b1:eb:5c:e7:b1: be:dd:36:8f:f8:9b:65:02:67:24:01:4a:54:a0:e6: c6:91:da:a6:cc:cc:4c:09:13:ec:6a:ad:fb:09:b9: 69:4a:c8:dd:09:f4:d2:80:11:a2:18:01:61:03:f5: e1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:52:6E:C2:56:E0:E3:CB:F5:2A:EE:8B:B3:80:6B:B5:CE:A0:4B:5E X509v3 Authority Key Identifier: keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:35:4d:d2:08:03:ec:65:d1:73:64:4c:0c:2d:03:e1:4d:a5: 08:5b:2d:de:fa:9d:f1:c5:8c:19:89:0a:70:3d:13:1b:be:e0: 51:3b:53:47:af:a4:7b:2c:d3:8f:00:d0:e7:f5:b2:58:05:35: f8:ae:5e:ab:0c:fd:60:a8:61:4a:d3:74:97:da:54:fb:bd:da: 3f:68:50:e9:10:ec:86:19:01:57:73:ab:38:c0:15:6c:59:a9: c1:ea:d5:09:f7:bb:06:44:0a:e6:14:98:cd:68:9b:8e:72:49: 44:29:60:47:e1:f9:7d:f2:f3:09:9b:e5:0c:e9:67:c1:79:fb: 14:57:61:4c:ba:70:07:f7:3d:7b:b0:1d:70:69:0e:79:bf:64: 84:2d:b2:e5:eb:32:0b:46:12:fb:3a:2d:76:d6:6f:3e:58:96: 08:28:e4:82:57:70:ed:fb:b5:3c:6b:18:65:4e:5f:aa:d7:39: 84:1a:08:45:05:56:ed:f2:92:a5:f6:73:19:cd:2d:91:71:6c: cd:bc:85:10:62:81:4f:c0:94:99:e5:25:9b:fa:40:36:18:c3: c4:d9:f1:5c:e6:7b:77:2a:21:60:58:3a:71:e3:11:bf:f8:51: 17:e8:7b:87:7f:7e:75:42:f4:98:42:c5:33:21:f9:fc:6a:37: f3:90:24:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSeleEIjGvcdLo+1X7dd2dh2qjP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAx QTAxNDM5MzAeFw0yNTA2MjgxMTU2MjZaFw0yNTA3MDExNjEzMjZaMDMxMTAvBgNV BAMTKEJCNTI2RUMyNTZFMEUzQ0JGNTJBRUU4QkIzODA2QkI1Q0VBMDRCNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfQ/HAoma8YQ3e1V2I/z4Q5A+X ByOcBzJ3rAyx6wS80M1mqCkjz2ACmicctuoGPvn4vNaD0efRDxUldxDwnfOtqaQs hgtN+ZPQW5ojXM1FmVZ+mppjkDA9HxI2iwQExH8Bg+unf3XdAdnVPMYw3I1v31Bz Vk3fnjo1KASaIi+iF8xfSckRdARwUlwht03KgO1mqWL6mmcQ0ugI07O27xt785CD usL7WPxCe7mYtc1CJ00ynrB9nh3qM3/OVfKONC3C7XJNLp0sAlTkahCx61znsb7d No/4m2UCZyQBSlSg5saR2qbMzEwJE+xqrfsJuWlKyN0J9NKAEaIYAWED9eGdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu1Juwlbg48v1Ku6Ls4Brtc6gS14wHwYDVR0j BBgwFoAUKVExFndozHhIL3lrtYz1oBoBQ5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWVjYTUwYi01NzIyLTQ5MTgtODMxNC04NTlkM2MxZjU1YTIvMC8yOTUxMzExNjc3 NjhDQzc4NDgyRjc5NkJCNThDRjVBMDFBMDE0MzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAxQTAx NDM5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDllY2E1MGItNTcyMi00OTE4LTgz MTQtODU5ZDNjMWY1NWEyLzAvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1 QTAxQTAxNDM5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJc1TdIIA+xl0XNkTAwtA+FNpQhbLd76nfHF jBmJCnA9Exu+4FE7U0evpHss048A0Of1slgFNfiuXqsM/WCoYUrTdJfaVPu92j9o UOkQ7IYZAVdzqzjAFWxZqcHq1Qn3uwZECuYUmM1om45ySUQpYEfh+X3y8wmb5Qzp Z8F5+xRXYUy6cAf3PXuwHXBpDnm/ZIQtsuXrMgtGEvs6LXbWbz5Ylggo5IJXcO37 tTxrGGVOX6rXOYQaCEUFVu3ykqX2cxnNLZFxbM28hRBigU/AlJnlJZv6QDYYw8TZ 8Vzme3cqIWBYOnHjEb/4URfoe4d/fnVC9JhCxTMh+fxqN/OQJFU= -----END CERTIFICATE-----Generated at Mon Jun 30 14:26:59 2025 by rpki-client