$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft File: 295CEF87CDB74B1A43287E630C3FE568272D2F33.mft (raw, json) Hash identifier: tLhmpVuEErzbjgai14wEfetw7OLO7oeIL+s57KOBIBw= Subject key identifier: D0:0B:CE:22:B0:9D:CD:B9:70:CA:46:8A:C4:5C:75:5A:C9:5A:49:BA Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 Certificate issuer: /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Certificate serial: 1CD33B6B94E011EC4ED7CBDB3EA1AF1F98FC2B38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft Manifest number: 04E9 Signing time: Sun 15 Jun 2025 08:31:37 +0000 Manifest this update: Sun 15 Jun 2025 08:26:37 +0000 Manifest next update: Wed 18 Jun 2025 12:28:37 +0000 Files and hashes: 1: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: 4XaAtrPhzGDBzDHWlHXMB0whCb6rytr+C1+HuznU5f0=) 2: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: 6l4eA4hgKKdV7HePb7GT4qkO7B2rOBXkYrSr+9u6X7c=) 3: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: S3vWYnYF+l4dhX20RDpIzaZuA3umTZ3b74Itz4An65E=) 4: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: 0qgtJcGFp2PSnsHTLVJD3e7NXsCz70cPkWqnqoXUWi0=) 5: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: ECzNZR+t4Bdt6LAAlKcBfTJvufVHsod6z7EXxaTCQXQ=) 6: 3232332e3133302e32322e302f32332d3234203d3e2039343232.roa (hash: 7z/4k9uh8qc3CYPaIfLqUwfu/s9Fgtg25t7b4ka8UOQ=) 7: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: 73W8GLSa6I8P01k3aFdjjpvb756Sn1uc1jeTJZ00bq4=) 8: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: PMWu4w2Q+6FhMFUf3/IiRjbR53qP/H9SS7SsSz4BOlo=) 9: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: pPyEloQMF0TdeYTY5eM6CCjgFQy8xkkymm+/u9Rl4Cw=) 10: 295CEF87CDB74B1A43287E630C3FE568272D2F33.crl (hash: /SpmdmmOO0wO2537/IWRNd8KQAttAw20wr+YgKMbIbY=) 11: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: nhGmrbnsJZJKbXEVM2224rOUYqSyOnxXP3J6DVLRP58=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 12:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d3:3b:6b:94:e0:11:ec:4e:d7:cb:db:3e:a1:af:1f:98:fc:2b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Validity Not Before: Jun 15 08:26:37 2025 GMT Not After : Jun 18 12:28:37 2025 GMT Subject: CN=D00BCE22B09DCDB970CA468AC45C755AC95A49BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:34:cf:e3:b5:00:c0:ac:1d:15:6f:64:89:d7: bb:db:4b:a4:a1:ea:ae:31:59:a1:9f:94:14:b8:e7: 39:ae:fb:b1:b1:b8:12:cf:3c:08:22:aa:ea:3b:67: d1:7e:25:3f:37:d3:c0:65:1a:a7:44:ee:99:78:83: 4a:e5:6e:cf:4a:13:f9:cd:cd:7b:72:5e:29:73:d5: fc:5c:2d:f1:fa:61:26:9d:fb:bf:50:07:1f:7e:87: 7f:37:d5:52:4a:90:9d:a2:7c:62:14:d5:38:8a:8b: 7c:ed:77:eb:11:42:fe:76:d9:fe:ac:39:33:21:fe: 8f:4e:a5:4c:a8:f4:db:7c:c0:b1:3b:a8:9d:ab:57: 5b:dd:a8:71:ea:3c:db:29:cd:4a:e6:91:b2:7e:37: 39:00:ff:d0:68:bb:27:92:99:f7:ce:c0:75:4c:67: 1c:12:19:11:69:2e:e0:69:cb:da:13:e6:76:4c:b9: b0:bb:2b:45:27:0b:4b:7f:c0:a0:4b:cb:60:92:93: 88:0f:b9:3c:67:c4:7a:50:79:0a:d9:ec:c0:0e:63: 7a:d1:dc:69:17:e3:81:97:dd:2c:1a:68:74:2e:a8: e2:a5:5a:c5:c8:6e:3c:af:c9:50:c5:76:c1:99:80: c3:4b:9d:58:7e:92:eb:7e:30:1f:d5:de:1a:70:7d: c0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0B:CE:22:B0:9D:CD:B9:70:CA:46:8A:C4:5C:75:5A:C9:5A:49:BA X509v3 Authority Key Identifier: keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:12:d7:99:32:3c:32:97:f7:53:e1:22:41:5e:17:f6:a8:bc: e5:1b:88:ab:28:38:c0:ed:96:37:4a:6d:f9:f6:09:0f:2d:79: 88:f8:2c:cf:fe:43:10:15:a0:d2:4d:b4:6c:27:11:54:51:bd: 18:aa:99:4f:b1:96:46:4c:8c:55:06:28:c2:5f:8a:b5:5f:8e: b8:69:79:3c:bb:80:df:a9:e7:8b:3a:51:d7:a8:61:2f:02:fd: 30:66:5c:74:91:ff:82:fe:f7:20:96:85:05:d9:30:00:f7:35: 51:42:90:60:2e:89:40:c0:c5:56:5e:af:10:a1:18:8b:7f:00: 63:1e:19:7a:0e:b9:35:b0:08:74:98:18:4a:02:9a:2b:5e:29: 94:57:26:8c:97:e7:47:3c:df:1c:6d:1b:50:3a:ba:44:56:14: ce:9c:37:da:6d:38:48:ef:99:e8:bc:39:77:05:47:9e:c5:9c: 74:01:4e:d8:6e:1e:fe:12:2c:51:dc:39:30:95:58:9c:47:9f: 49:2d:fa:40:73:a2:bd:c8:35:e4:52:cd:42:cd:7e:bf:83:a2: 69:0a:a0:6b:16:fe:e2:0f:08:42:43:2b:d7:fb:cd:db:05:dc: 71:63:c6:1e:e3:97:82:83:0a:f3:5a:70:ed:36:25:83:84:5b: bb:13:6a:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHNM7a5TgEexO18vbPqGvH5j8KzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1Njgy NzJEMkYzMzAeFw0yNTA2MTUwODI2MzdaFw0yNTA2MTgxMjI4MzdaMDMxMTAvBgNV BAMTKEQwMEJDRTIyQjA5RENEQjk3MENBNDY4QUM0NUM3NTVBQzk1QTQ5QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSNM/jtQDArB0Vb2SJ17vbS6Sh 6q4xWaGflBS45zmu+7GxuBLPPAgiquo7Z9F+JT8308BlGqdE7pl4g0rlbs9KE/nN zXtyXilz1fxcLfH6YSad+79QBx9+h3831VJKkJ2ifGIU1TiKi3ztd+sRQv522f6s OTMh/o9OpUyo9Nt8wLE7qJ2rV1vdqHHqPNspzUrmkbJ+NzkA/9BouyeSmffOwHVM ZxwSGRFpLuBpy9oT5nZMubC7K0UnC0t/wKBLy2CSk4gPuTxnxHpQeQrZ7MAOY3rR 3GkX44GX3SwaaHQuqOKlWsXIbjyvyVDFdsGZgMNLnVh+kut+MB/V3hpwfcB/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0AvOIrCdzblwykaKxFx1WslaSbowHwYDVR0j BBgwFoAUKVzvh823SxpDKH5jDD/laCctLzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NE Qjc0QjFBNDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1NjgyNzJE MkYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg3ZDc5YmEtZmI1NS00OWE1LTk2 N2ItMWVkYzc0OWQwMTI4LzAvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1 NjgyNzJEMkYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4S15kyPDKX91PhIkFeF/aovOUbiKsoOMDt ljdKbfn2CQ8teYj4LM/+QxAVoNJNtGwnEVRRvRiqmU+xlkZMjFUGKMJfirVfjrhp eTy7gN+p54s6UdeoYS8C/TBmXHSR/4L+9yCWhQXZMAD3NVFCkGAuiUDAxVZerxCh GIt/AGMeGXoOuTWwCHSYGEoCmiteKZRXJoyX50c83xxtG1A6ukRWFM6cN9ptOEjv mei8OXcFR57FnHQBTthuHv4SLFHcOTCVWJxHn0kt+kBzor3INeRSzULNfr+DomkK oGsW/uIPCEJDK9f7zdsF3HFjxh7jl4KDCvNacO02JYOEW7sTaiE= -----END CERTIFICATE-----Generated at Tue Jun 17 04:44:13 2025 by rpki-client