$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft File: 295CEF87CDB74B1A43287E630C3FE568272D2F33.mft (raw, json) Hash identifier: Wl/+YutTFXg1Zo73qgKnYq3ijeJak1iOsAcoEHJrNCU= Subject key identifier: 71:10:1C:10:13:50:B0:6B:8F:BC:33:68:52:74:36:F5:D5:7B:E9:E5 Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 Certificate issuer: /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Certificate serial: 1246E0E2107B5D67E91815099B396F69F4DC0B4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft Manifest number: 04D3 Signing time: Tue 29 Apr 2025 05:21:35 +0000 Manifest this update: Tue 29 Apr 2025 05:16:35 +0000 Manifest next update: Fri 02 May 2025 14:14:35 +0000 Files and hashes: 1: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: nBKHI+10Ut06FOJtH41J5R/AAE9svDrS9ER1fZDd350=) 2: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: 0qgtJcGFp2PSnsHTLVJD3e7NXsCz70cPkWqnqoXUWi0=) 3: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: UDms7HIaDGeGiYCJtIOU53UdSKHvDK+0OFralrpfjuY=) 4: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: gU2bGz0QcfX7jz+4pmy6dDNu6epMK9rp4iwrG6+Vboc=) 5: 295CEF87CDB74B1A43287E630C3FE568272D2F33.crl (hash: WqCW1daCyNSwBXFWqlFpR/CrLUcQk1PGZqHeUA50Q5w=) 6: 3232332e3133302e32322e302f32332d3234203d3e2039343232.roa (hash: T0qy24Jw4nMkx0vavFP/FymLrM7UIs0+axCAYFq5t24=) 7: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: M8Jg7RXp9q2IokSrSE72Qz1D7tYQ3VERLgs0YJ8PYrM=) 8: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: P7Z6XRJZfWLIwLc37QAohPD8GShqj3t7azYOQZsaPgs=) 9: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: Ccc9Rz2j35EkvfbNz2T6X50a6oTWv2x4bbeSyVrqI+E=) 10: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: d4njcKCxXvuiPQpiLgPI2iTaalRvfXwt51s7xl9S/7E=) 11: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: 4XaAtrPhzGDBzDHWlHXMB0whCb6rytr+C1+HuznU5f0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 14:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:46:e0:e2:10:7b:5d:67:e9:18:15:09:9b:39:6f:69:f4:dc:0b:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Validity Not Before: Apr 29 05:16:35 2025 GMT Not After : May 2 14:14:35 2025 GMT Subject: CN=71101C101350B06B8FBC3368527436F5D57BE9E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:db:7c:f1:a9:77:f8:b9:ed:7e:df:54:da:0a: 06:22:80:92:6a:b7:2f:5a:45:35:e3:34:07:99:eb: c1:65:c8:33:e7:4e:9b:81:13:35:3f:ea:63:96:1b: 6d:c1:0b:f9:88:7e:74:f1:f3:d8:14:69:92:d1:d2: 0e:40:fb:eb:06:5b:f6:95:a1:d7:04:fc:1d:4b:95: d8:cb:62:f9:71:dc:1a:3f:e3:1f:91:d5:b3:26:22: ef:18:57:18:0f:ae:72:87:21:e4:cb:f8:de:68:26: e1:b1:34:8a:75:7a:2a:1b:90:bd:29:3c:46:a3:d1: 5f:70:78:49:85:0b:0a:12:75:df:6b:ec:bf:a5:ea: 47:92:64:2f:3a:ae:79:e7:06:b0:ea:83:62:69:78: 3c:35:b7:c9:7e:1c:14:74:f5:49:8a:49:14:3c:e3: eb:99:17:6d:42:fd:08:0f:ec:86:92:d9:ae:6d:76: 5f:d2:57:f0:c1:cc:72:0d:5e:d8:6e:bd:56:c5:e5: 6d:cc:40:61:10:f2:18:be:fc:02:f8:71:1e:4e:36: 54:b5:6a:95:8a:fc:3e:53:6a:ce:28:7c:97:b0:cf: a9:84:18:0c:6b:cf:31:84:90:84:b5:e3:0c:fe:ed: 95:82:57:da:4d:58:9c:a5:6c:12:ad:8c:2b:39:98: 05:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:10:1C:10:13:50:B0:6B:8F:BC:33:68:52:74:36:F5:D5:7B:E9:E5 X509v3 Authority Key Identifier: keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:9e:e5:c8:f0:20:fc:ef:3c:d4:1a:91:78:bb:73:53:33:72: 1c:fc:46:d1:9c:e8:f1:7b:eb:ef:13:4a:db:82:f0:0c:11:29: ee:0c:70:6c:67:9a:ee:70:75:75:fa:7a:6a:90:a2:79:4c:0e: cf:92:57:16:cb:93:c4:f4:46:a8:00:00:19:03:64:6c:9b:5b: 2f:89:02:d7:7c:e5:fc:09:fc:72:d3:80:90:16:10:f9:40:85: fb:83:f4:7f:08:0e:5e:82:d8:ec:35:ef:15:51:75:ed:29:77: fd:84:40:fe:fa:aa:65:66:54:dd:3c:bc:c4:d9:2e:2c:8e:2d: 42:30:bb:d3:f8:4b:ed:7b:3f:ff:9a:4a:32:e5:fd:39:a8:65: 4e:c5:27:26:99:39:ea:8e:ce:1b:e4:4c:5b:65:1a:e0:be:62: 31:87:00:0e:d6:3e:85:41:59:d4:a2:e4:fb:d2:34:95:bf:75: b9:e6:96:41:c2:92:c1:d8:30:1e:9f:c7:8b:53:aa:a9:51:7f: 17:b6:c7:cf:db:04:aa:39:77:be:8a:86:69:29:93:17:05:c5: 8b:92:e6:cf:46:15:9e:30:1a:0f:f2:c7:46:ef:b1:be:02:60: e9:a2:0e:40:45:5c:b2:a3:59:9a:88:ed:2d:72:82:cb:c9:4b: 74:83:07:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkbg4hB7XWfpGBUJmzlvafTcC0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1Njgy NzJEMkYzMzAeFw0yNTA0MjkwNTE2MzVaFw0yNTA1MDIxNDE0MzVaMDMxMTAvBgNV BAMTKDcxMTAxQzEwMTM1MEIwNkI4RkJDMzM2ODUyNzQzNkY1RDU3QkU5RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV23zxqXf4ue1+31TaCgYigJJq ty9aRTXjNAeZ68FlyDPnTpuBEzU/6mOWG23BC/mIfnTx89gUaZLR0g5A++sGW/aV odcE/B1LldjLYvlx3Bo/4x+R1bMmIu8YVxgPrnKHIeTL+N5oJuGxNIp1eiobkL0p PEaj0V9weEmFCwoSdd9r7L+l6keSZC86rnnnBrDqg2JpeDw1t8l+HBR09UmKSRQ8 4+uZF21C/QgP7IaS2a5tdl/SV/DBzHINXthuvVbF5W3MQGEQ8hi+/AL4cR5ONlS1 apWK/D5Tas4ofJewz6mEGAxrzzGEkIS14wz+7ZWCV9pNWJylbBKtjCs5mAUnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcRAcEBNQsGuPvDNoUnQ29dV76eUwHwYDVR0j BBgwFoAUKVzvh823SxpDKH5jDD/laCctLzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NE Qjc0QjFBNDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1NjgyNzJE MkYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg3ZDc5YmEtZmI1NS00OWE1LTk2 N2ItMWVkYzc0OWQwMTI4LzAvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1 NjgyNzJEMkYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWe5cjwIPzvPNQakXi7c1Mzchz8RtGc6PF7 6+8TStuC8AwRKe4McGxnmu5wdXX6emqQonlMDs+SVxbLk8T0RqgAABkDZGybWy+J Atd85fwJ/HLTgJAWEPlAhfuD9H8IDl6C2Ow17xVRde0pd/2EQP76qmVmVN08vMTZ LiyOLUIwu9P4S+17P/+aSjLl/TmoZU7FJyaZOeqOzhvkTFtlGuC+YjGHAA7WPoVB WdSi5PvSNJW/dbnmlkHCksHYMB6fx4tTqqlRfxe2x8/bBKo5d76KhmkpkxcFxYuS 5s9GFZ4wGg/yx0bvsb4CYOmiDkBFXLKjWZqI7S1ygsvJS3SDB2s= -----END CERTIFICATE-----Generated at Wed Apr 30 04:53:04 2025 by rpki-client