$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft File: 295131167768CC78482F796BB58CF5A01A014393.mft (raw, json) Hash identifier: NlIikYyZUpxP1wFKweTPDrUVbJZpGvzGqA8Ox7grQ04= Subject key identifier: B5:E6:15:B8:1B:74:32:A7:9E:14:A4:65:51:F9:BF:BD:F2:85:AF:E4 Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 Certificate issuer: /CN=295131167768CC78482F796BB58CF5A01A014393 Certificate serial: 68D62BD391C3D7D3CD86DBC49B704D79B0B6E7E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft Manifest number: B3 Signing time: Thu 21 Aug 2025 23:11:26 +0000 Manifest this update: Thu 21 Aug 2025 23:06:26 +0000 Manifest next update: Mon 25 Aug 2025 02:50:26 +0000 Files and hashes: 1: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: aTzve7Y6mBexH/WsjxWYP1/0CSlzvkwS9M1uSz5WL7A=) 2: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: uRuK1ozamqcEn31L5IIaIYVkb8/xiqqqwMGA40t+cIA=) 3: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: Jp+xzrLLFcNcdbgFIyqYkAF5UwOiimjyD2ApcObjIzI=) 4: 295131167768CC78482F796BB58CF5A01A014393.crl (hash: oNCxpnzrQEI92FATPYvE347K2R/eT80VvwtjxbtqD0Q=) 5: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: moFK92Lb7O04I+6FG9VzJZ/FTQ4AaEmINK+chDU1cX4=) 6: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: AX0lDEH6VgInN8VNyEQZ1Bf7VJ5RuPZOiclQbBxraVk=) 7: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: ZUUrvcV4tzaV5FI9nd3G6vecM/kD2HHsEXb/JzJw5nk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d6:2b:d3:91:c3:d7:d3:cd:86:db:c4:9b:70:4d:79:b0:b6:e7:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295131167768CC78482F796BB58CF5A01A014393 Validity Not Before: Aug 21 23:06:26 2025 GMT Not After : Aug 25 02:50:26 2025 GMT Subject: CN=B5E615B81B7432A79E14A46551F9BFBDF285AFE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:6e:00:67:d2:64:6c:5b:88:cf:8f:22:98: 21:33:cc:8c:09:88:d1:ee:ee:a5:80:9d:52:cc:d7: f6:52:10:2f:01:ea:1d:5b:bb:43:6c:df:03:4a:e7: 4a:7e:25:08:6b:dd:d5:bd:72:08:0c:6c:56:65:af: 3a:ce:31:b8:83:b5:9b:fb:d8:2b:59:84:b8:b7:48: bf:49:8b:e9:3e:f9:c6:43:09:94:ec:a2:48:e5:e5: 15:b5:bc:4e:e8:10:ee:75:8c:6b:8e:d6:b2:1a:6a: c0:f0:80:74:65:85:d9:fa:90:7e:7a:57:3e:cb:d0: 28:6f:0f:77:58:72:28:ee:ed:34:e4:4c:42:14:af: 47:81:0f:09:37:11:9f:34:c6:a5:c5:61:8d:b3:79: 59:42:f5:1c:2e:f2:79:7a:23:bb:e4:94:10:f2:cf: f2:0a:d8:54:d1:e3:b8:f7:ac:53:27:45:16:40:78: 05:16:cb:cf:7f:b9:51:3f:1e:27:fb:b7:2a:d6:be: 3a:d1:36:fe:5c:58:c0:f0:81:ad:0c:c7:31:ef:4b: f9:f3:bc:49:41:e8:23:3d:a7:36:fb:30:69:b4:37: 3d:ba:a4:e0:42:34:c0:e3:f5:e2:11:c8:82:4d:91: f8:0e:b8:a5:49:52:fd:57:5d:4d:a7:66:4e:25:18: 10:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E6:15:B8:1B:74:32:A7:9E:14:A4:65:51:F9:BF:BD:F2:85:AF:E4 X509v3 Authority Key Identifier: keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:55:87:fc:fe:d3:d4:9d:6a:a9:5b:1b:bb:82:e6:59:b0:fd: a8:c0:8b:7f:f0:29:4c:0f:c3:5a:a4:b6:6d:41:ee:e7:b6:98: d5:d5:d8:94:8d:8a:78:92:59:d1:20:24:ea:56:24:f3:20:e6: 97:f6:28:70:ef:e9:0e:05:c1:54:82:31:0d:7f:30:9d:8d:ad: 6e:b8:3a:0f:b7:88:be:fc:ef:b6:ca:64:82:17:34:64:b4:4c: 52:ed:65:4e:78:6d:17:13:2f:18:c0:60:be:b6:9f:e4:d3:a0: 18:64:84:68:9a:d8:af:4a:f1:06:4b:4b:ae:ea:55:69:de:ad: d2:79:b0:4a:2b:e1:75:19:6a:6f:80:7d:a6:93:1c:dc:a3:f5: 6b:f1:e9:02:74:4f:aa:bd:1a:9d:8a:5f:d1:ea:68:1b:a8:71: 44:7a:08:47:4b:7d:0b:6e:08:22:3a:47:a6:cf:70:30:c3:0e: 98:5d:fb:ce:a6:a8:70:68:e5:ba:5b:2d:e4:88:f9:05:24:4e: 6c:80:8e:51:63:02:20:1b:2e:51:54:2a:79:d3:f4:1f:3f:cb: ae:ff:d7:a2:66:99:b0:24:5d:92:36:7b:70:d1:70:22:08:b1: 4d:af:36:9e:f9:f4:b2:d2:01:a5:3d:a8:fb:22:01:e4:39:c3: 06:a2:7d:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaNYr05HD19PNhtvEm3BNebC25+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAx QTAxNDM5MzAeFw0yNTA4MjEyMzA2MjZaFw0yNTA4MjUwMjUwMjZaMDMxMTAvBgNV BAMTKEI1RTYxNUI4MUI3NDMyQTc5RTE0QTQ2NTUxRjlCRkJERjI4NUFGRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0FG4AZ9JkbFuIz48imCEzzIwJ iNHu7qWAnVLM1/ZSEC8B6h1bu0Ns3wNK50p+JQhr3dW9cggMbFZlrzrOMbiDtZv7 2CtZhLi3SL9Ji+k++cZDCZTsokjl5RW1vE7oEO51jGuO1rIaasDwgHRlhdn6kH56 Vz7L0ChvD3dYciju7TTkTEIUr0eBDwk3EZ80xqXFYY2zeVlC9Rwu8nl6I7vklBDy z/IK2FTR47j3rFMnRRZAeAUWy89/uVE/Hif7tyrWvjrRNv5cWMDwga0MxzHvS/nz vElB6CM9pzb7MGm0Nz26pOBCNMDj9eIRyIJNkfgOuKVJUv1XXU2nZk4lGBAdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUteYVuBt0MqeeFKRlUfm/vfKFr+QwHwYDVR0j BBgwFoAUKVExFndozHhIL3lrtYz1oBoBQ5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWVjYTUwYi01NzIyLTQ5MTgtODMxNC04NTlkM2MxZjU1YTIvMC8yOTUxMzExNjc3 NjhDQzc4NDgyRjc5NkJCNThDRjVBMDFBMDE0MzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAxQTAx NDM5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDllY2E1MGItNTcyMi00OTE4LTgz MTQtODU5ZDNjMWY1NWEyLzAvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1 QTAxQTAxNDM5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1Vh/z+09SdaqlbG7uC5lmw/ajAi3/wKUwP w1qktm1B7ue2mNXV2JSNiniSWdEgJOpWJPMg5pf2KHDv6Q4FwVSCMQ1/MJ2NrW64 Og+3iL7877bKZIIXNGS0TFLtZU54bRcTLxjAYL62n+TToBhkhGia2K9K8QZLS67q VWnerdJ5sEor4XUZam+AfaaTHNyj9Wvx6QJ0T6q9Gp2KX9HqaBuocUR6CEdLfQtu CCI6R6bPcDDDDphd+86mqHBo5bpbLeSI+QUkTmyAjlFjAiAbLlFUKnnT9B8/y67/ 16JmmbAkXZI2e3DRcCIIsU2vNp759LLSAaU9qPsiAeQ5wwaifbg= -----END CERTIFICATE-----Generated at Sun Aug 24 01:20:49 2025 by rpki-client