$ rpki-client -vvf repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft File: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft (raw, json) Hash identifier: yCok2xH4VFNL0Sy97pFOB4GO3lE3O2Us/5Duqz42GRM= Subject key identifier: 85:00:8E:04:C5:36:9A:08:1F:8E:59:EF:CC:F2:69:3B:CD:A0:5B:4E Authority key identifier: 95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 Certificate issuer: /CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Certificate serial: 0D989C72243F1D84954B164FEE3F4B995D829252 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft Manifest number: 04F2 Signing time: Wed 23 Jul 2025 15:01:28 +0000 Manifest this update: Wed 23 Jul 2025 14:56:28 +0000 Manifest next update: Sat 26 Jul 2025 15:20:28 +0000 Files and hashes: 1: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (hash: 75/DAONeN65KHxljOFhq+chBgFEKtm0A6zWkkY+QXDo=) 2: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl (hash: HnwY9Cq1bnIJ9BUBkyjQVEe9gJOSrY/Gml2rP6VTG4A=) 3: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (hash: mAx24Mrm6AI9KeLaD2h/5RLJ5ztWp5mCELhp+sgXhQM=) 4: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (hash: mKTM+95IO3RuRjGvD78UIawuJIUBHI8BVt6K80x3Fpw=) 5: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (hash: KI4DRCx0w4L0nKpvK1CNtCzzpw68TT41WCumN5kF9lM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 15:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:98:9c:72:24:3f:1d:84:95:4b:16:4f:ee:3f:4b:99:5d:82:92:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Validity Not Before: Jul 23 14:56:28 2025 GMT Not After : Jul 26 15:20:28 2025 GMT Subject: CN=85008E04C5369A081F8E59EFCCF2693BCDA05B4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:56:84:5f:e5:58:c9:ca:59:f1:41:b5:d0:3a: a5:52:05:34:a9:90:9b:5e:6d:a4:64:2b:67:ea:45: 1e:7c:92:e0:f5:9a:a5:b7:b5:42:d9:99:bd:d7:f9: 95:07:98:5d:54:87:13:29:0c:4b:b1:a0:e8:c2:60: 10:22:14:97:4a:c0:63:ab:bb:d4:7d:61:b5:69:58: b8:e9:1e:b3:a1:01:b7:f4:0f:0c:60:56:cc:7d:12: 67:90:6d:43:a9:aa:bb:d5:f4:5a:b1:06:1a:64:3e: bb:ec:ff:d5:19:12:43:b0:97:fd:0c:0c:92:f6:51: fd:fa:4d:79:bc:a2:f6:a7:fc:c4:3a:49:c8:ea:eb: 97:03:19:42:48:00:1c:fd:5e:02:40:ae:c1:f5:9c: e9:27:e2:c0:1e:f2:99:00:c6:d1:04:47:77:dc:3f: 54:98:5e:ec:d4:5b:35:83:8e:6b:ab:b6:e1:3a:8e: bc:e8:67:81:31:46:4d:4a:79:a7:8d:f8:b1:f6:82: f8:a2:28:bf:9d:01:16:81:bd:25:c6:a4:47:19:e8: 58:15:36:75:6d:3b:64:18:96:0c:1c:da:10:59:7e: 14:57:cc:55:7b:3e:9f:8b:d5:c6:52:9d:2e:f4:b0: 59:53:63:ed:6f:4f:cc:50:e0:a8:87:9e:ea:1e:b6: 71:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:00:8E:04:C5:36:9A:08:1F:8E:59:EF:CC:F2:69:3B:CD:A0:5B:4E X509v3 Authority Key Identifier: keyid:95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:63:e7:5b:6e:fe:35:b8:be:a4:a6:0a:94:c0:a3:86:43:aa: 35:8e:a3:b3:38:dc:6b:74:f9:d2:87:ca:28:02:5f:f1:fd:6b: 50:81:3c:b7:ab:0e:aa:26:a2:db:aa:83:88:04:4a:62:70:77: 54:6e:80:4c:43:11:33:b6:4e:17:35:bd:42:78:10:20:24:17: b2:0b:d6:e3:04:63:2c:35:13:2c:ae:7d:49:03:b1:6c:09:89: f1:56:e0:1a:7f:82:5b:3a:18:50:3d:fe:9e:5b:17:55:18:c9: 97:a1:9c:fb:47:68:b9:1a:39:fe:29:f2:fe:c8:33:e1:3a:e7: 59:1e:48:8a:e9:76:fb:f6:e1:85:00:3b:84:5b:1d:09:06:43: 11:67:6f:f5:58:3d:d8:51:1b:cc:bf:b1:98:20:a5:48:54:81: 6d:cf:10:8a:67:ee:a6:0f:c2:53:6e:fa:46:a5:04:82:89:11: f5:b1:32:e7:2a:c0:74:67:7e:8b:e1:8d:83:ee:fa:3d:f8:03: 1f:53:1d:27:4f:ea:11:43:81:b3:b9:c9:39:dd:4d:f8:f8:0e: da:94:1b:32:b2:ce:25:a2:ef:f2:d5:b2:a6:e1:1c:d8:eb:e8: 8d:07:9d:c5:31:7e:81:26:16:52:79:58:fd:bc:e7:4c:12:d4: 3c:76:5c:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDZicciQ/HYSVSxZP7j9LmV2CklIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlE QTQ2QjNDODAeFw0yNTA3MjMxNDU2MjhaFw0yNTA3MjYxNTIwMjhaMDMxMTAvBgNV BAMTKDg1MDA4RTA0QzUzNjlBMDgxRjhFNTlFRkNDRjI2OTNCQ0RBMDVCNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxVoRf5VjJylnxQbXQOqVSBTSp kJtebaRkK2fqRR58kuD1mqW3tULZmb3X+ZUHmF1UhxMpDEuxoOjCYBAiFJdKwGOr u9R9YbVpWLjpHrOhAbf0DwxgVsx9EmeQbUOpqrvV9FqxBhpkPrvs/9UZEkOwl/0M DJL2Uf36TXm8ovan/MQ6Scjq65cDGUJIABz9XgJArsH1nOkn4sAe8pkAxtEER3fc P1SYXuzUWzWDjmurtuE6jrzoZ4ExRk1KeaeN+LH2gviiKL+dARaBvSXGpEcZ6FgV NnVtO2QYlgwc2hBZfhRXzFV7Pp+L1cZSnS70sFlTY+1vT8xQ4KiHnuoetnEFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhQCOBMU2mggfjlnvzPJpO82gW04wHwYDVR0j BBgwFoAUlcO6fyO2NRch932oAgcx+dpGs8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBlOWM5Zi1kNjA3LTQ0OTctYWYyOC00ZDJiOTA5MmQ1YTYvMC85NUMzQkE3RjIz QjYzNTE3MjFGNzdEQTgwMjA3MzFGOURBNDZCM0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlEQTQ2 QjNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZTljOWYtZDYwNy00NDk3LWFm MjgtNGQyYjkwOTJkNWE2LzAvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMx RjlEQTQ2QjNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJj51tu/jW4vqSmCpTAo4ZDqjWOo7M43Gt0 +dKHyigCX/H9a1CBPLerDqomotuqg4gESmJwd1RugExDETO2Thc1vUJ4ECAkF7IL 1uMEYyw1EyyufUkDsWwJifFW4Bp/gls6GFA9/p5bF1UYyZehnPtHaLkaOf4p8v7I M+E651keSIrpdvv24YUAO4RbHQkGQxFnb/VYPdhRG8y/sZggpUhUgW3PEIpn7qYP wlNu+kalBIKJEfWxMucqwHRnfovhjYPu+j34Ax9THSdP6hFDgbO5yTndTfj4DtqU GzKyziWi7/LVsqbhHNjr6I0HncUxfoEmFlJ5WP2850wS1Dx2XB0= -----END CERTIFICATE-----Generated at Thu Jul 24 08:17:19 2025 by rpki-client