$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft File: 295131167768CC78482F796BB58CF5A01A014393.mft (raw, json) Hash identifier: UXzzdh5GXHhgKocm2UqqHcCrfj89sSmC7WMlfMWSWQA= Subject key identifier: 91:FB:41:3E:E6:CB:EB:CE:17:FD:EC:3E:7E:10:D7:02:4E:AE:98:A7 Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 Certificate issuer: /CN=295131167768CC78482F796BB58CF5A01A014393 Certificate serial: 37C3D1E7B0ACBE7B918E8C432FC52B058F490DFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft Manifest number: AC Signing time: Tue 05 Aug 2025 23:51:29 +0000 Manifest this update: Tue 05 Aug 2025 23:46:29 +0000 Manifest next update: Sat 09 Aug 2025 09:56:29 +0000 Files and hashes: 1: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: Jp+xzrLLFcNcdbgFIyqYkAF5UwOiimjyD2ApcObjIzI=) 2: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: AX0lDEH6VgInN8VNyEQZ1Bf7VJ5RuPZOiclQbBxraVk=) 3: 295131167768CC78482F796BB58CF5A01A014393.crl (hash: Nx0VgvGV1nkm1RlmWgWg6RhD6wb53shBEo6RlwHr2QA=) 4: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: aTzve7Y6mBexH/WsjxWYP1/0CSlzvkwS9M1uSz5WL7A=) 5: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: uRuK1ozamqcEn31L5IIaIYVkb8/xiqqqwMGA40t+cIA=) 6: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: ZUUrvcV4tzaV5FI9nd3G6vecM/kD2HHsEXb/JzJw5nk=) 7: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: moFK92Lb7O04I+6FG9VzJZ/FTQ4AaEmINK+chDU1cX4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c3:d1:e7:b0:ac:be:7b:91:8e:8c:43:2f:c5:2b:05:8f:49:0d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295131167768CC78482F796BB58CF5A01A014393 Validity Not Before: Aug 5 23:46:29 2025 GMT Not After : Aug 9 09:56:29 2025 GMT Subject: CN=91FB413EE6CBEBCE17FDEC3E7E10D7024EAE98A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a4:09:a8:3c:12:d8:06:27:6a:cf:99:3f:f3: 86:1d:23:3c:c4:c2:4b:16:41:13:9a:2c:61:cc:bc: df:8a:7f:8a:e4:bf:d5:8f:1d:d0:c8:69:ae:5d:62: 67:f7:af:8e:b6:0b:0c:cb:01:e3:75:06:16:6b:ff: 41:74:64:95:0d:f5:e3:2c:ed:af:77:b7:b1:04:30: 39:ad:1b:d0:7e:09:c9:98:0f:c7:16:3b:78:0a:63: c8:67:3f:74:56:f0:b5:6a:91:25:21:51:75:fb:9a: 9b:ca:b3:b9:1a:07:e5:24:cf:c2:d4:71:90:65:f0: b3:2d:f8:6a:fe:c3:e8:42:7b:d4:ae:e8:35:e7:d6: 63:45:fa:ac:cf:1c:b6:99:0c:07:3d:ae:1b:76:01: 04:fb:28:14:ef:24:aa:f6:be:26:92:26:19:92:22: 60:89:e8:77:ee:73:b1:be:1e:e1:7f:15:9c:d2:40: 5f:27:75:7f:fb:d5:b0:be:d6:f3:75:3f:3d:37:b9: 26:0d:00:f6:16:49:f8:00:b3:bb:dc:9d:22:b8:8b: d1:f8:33:ed:05:89:35:ba:65:bf:64:26:46:cd:ab: 8e:7d:df:21:ff:5d:1d:f5:c9:08:04:a7:03:24:e0: d5:27:42:9f:e8:4c:8b:e8:bd:98:c9:7c:f4:b2:ac: 64:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FB:41:3E:E6:CB:EB:CE:17:FD:EC:3E:7E:10:D7:02:4E:AE:98:A7 X509v3 Authority Key Identifier: keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:1f:97:e8:6e:77:0d:41:95:0f:68:47:0a:5f:d8:26:18:fc: 47:bb:d8:1d:ff:68:9f:e3:08:48:b3:91:1a:1a:16:b6:b2:f1: 0a:26:75:9f:2d:64:c3:27:54:24:d6:24:21:50:06:b4:d9:8e: bd:01:d2:85:24:e9:30:10:9b:ca:e6:61:4c:34:ea:4d:df:c8: 40:5e:52:5b:df:d3:09:a6:f5:3c:1a:f0:34:d1:33:7b:dc:c7: 32:21:c8:f6:19:4e:26:b1:19:f1:99:ea:f3:b3:01:5c:fa:aa: bc:f7:25:7b:90:78:27:88:6f:9d:46:73:cd:73:e6:f6:da:5f: 78:7f:d8:9b:f4:1a:a2:43:b3:ef:ab:10:90:f8:29:b8:bb:17: 1e:f2:24:11:0c:62:70:86:c8:98:c9:2f:e2:0e:72:48:41:8c: ff:6f:06:c7:17:87:fb:f3:a6:26:3a:09:88:43:35:5c:27:e3: fc:4e:e3:9a:52:8e:ec:69:e6:55:fc:08:09:ee:75:47:64:74: e9:77:2e:72:42:86:fb:d9:f7:e3:fd:78:9f:6f:a9:18:36:b4: 84:7a:cd:45:53:16:f5:30:a4:72:b9:d5:c3:b9:2c:96:c4:a6: e9:69:28:54:6c:1d:fa:71:ea:cc:a0:8d:ef:6a:12:0f:f4:ca: 9a:fe:51:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN8PR57CsvnuRjoxDL8UrBY9JDfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAx QTAxNDM5MzAeFw0yNTA4MDUyMzQ2MjlaFw0yNTA4MDkwOTU2MjlaMDMxMTAvBgNV BAMTKDkxRkI0MTNFRTZDQkVCQ0UxN0ZERUMzRTdFMTBENzAyNEVBRTk4QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDpAmoPBLYBidqz5k/84YdIzzE wksWQROaLGHMvN+Kf4rkv9WPHdDIaa5dYmf3r462CwzLAeN1BhZr/0F0ZJUN9eMs 7a93t7EEMDmtG9B+CcmYD8cWO3gKY8hnP3RW8LVqkSUhUXX7mpvKs7kaB+Ukz8LU cZBl8LMt+Gr+w+hCe9Su6DXn1mNF+qzPHLaZDAc9rht2AQT7KBTvJKr2viaSJhmS ImCJ6Hfuc7G+HuF/FZzSQF8ndX/71bC+1vN1Pz03uSYNAPYWSfgAs7vcnSK4i9H4 M+0FiTW6Zb9kJkbNq4593yH/XR31yQgEpwMk4NUnQp/oTIvovZjJfPSyrGQvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkftBPubL684X/ew+fhDXAk6umKcwHwYDVR0j BBgwFoAUKVExFndozHhIL3lrtYz1oBoBQ5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWVjYTUwYi01NzIyLTQ5MTgtODMxNC04NTlkM2MxZjU1YTIvMC8yOTUxMzExNjc3 NjhDQzc4NDgyRjc5NkJCNThDRjVBMDFBMDE0MzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAxQTAx NDM5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDllY2E1MGItNTcyMi00OTE4LTgz MTQtODU5ZDNjMWY1NWEyLzAvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1 QTAxQTAxNDM5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgfl+hudw1BlQ9oRwpf2CYY/Ee72B3/aJ/j CEizkRoaFray8QomdZ8tZMMnVCTWJCFQBrTZjr0B0oUk6TAQm8rmYUw06k3fyEBe Ulvf0wmm9Twa8DTRM3vcxzIhyPYZTiaxGfGZ6vOzAVz6qrz3JXuQeCeIb51Gc81z 5vbaX3h/2Jv0GqJDs++rEJD4Kbi7Fx7yJBEMYnCGyJjJL+IOckhBjP9vBscXh/vz piY6CYhDNVwn4/xO45pSjuxp5lX8CAnudUdkdOl3LnJChvvZ9+P9eJ9vqRg2tIR6 zUVTFvUwpHK51cO5LJbEpulpKFRsHfpx6sygje9qEg/0ypr+UbU= -----END CERTIFICATE-----Generated at Thu Aug 7 23:57:10 2025 by rpki-client