$ rpki-client -vvf repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft File: 95966A8DB250307CF9852483F96922EE520F6E2A.mft (raw, json) Hash identifier: Bl4LJSHP9Z17ZcKfp4hPs6y3kOyIrDwwHr72Z9Mpqj8= Subject key identifier: BA:E1:74:64:7A:50:AA:4C:89:A3:9D:CC:87:AD:D6:0F:59:16:A6:CA Authority key identifier: 95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A Certificate issuer: /CN=95966A8DB250307CF9852483F96922EE520F6E2A Certificate serial: 120AB8D64E6CDBEA1E4DD123E7C13AB8F68EBA70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft Manifest number: 02DC Signing time: Sun 20 Jul 2025 05:10:00 +0000 Manifest this update: Sun 20 Jul 2025 05:05:00 +0000 Manifest next update: Wed 23 Jul 2025 12:13:00 +0000 Files and hashes: 1: 3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa (hash: lJA11B888lTAIORO0k9rdft4p7t0vrr4FyWBG++arwA=) 2: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (hash: QAndsMLECtqgWCCHyuYe9oOyMMkwnZ8QhtRk2OHf9FQ=) 3: 95966A8DB250307CF9852483F96922EE520F6E2A.crl (hash: siBW2wkbD9j7/eWO1gfC3WdorFtm6ThFnFxYl1iAOSQ=) 4: 3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa (hash: MitWmX3yxsYyPd+sKi7YcLOVm2fefPu2Qs/7NDCXxb8=) 5: 3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa (hash: xt2DiIsS1Hm+P8ldmkaqq+Mf+LiIX+U17UKLw/Y34Uk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 12:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:0a:b8:d6:4e:6c:db:ea:1e:4d:d1:23:e7:c1:3a:b8:f6:8e:ba:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95966A8DB250307CF9852483F96922EE520F6E2A Validity Not Before: Jul 20 05:05:00 2025 GMT Not After : Jul 23 12:13:00 2025 GMT Subject: CN=BAE174647A50AA4C89A39DCC87ADD60F5916A6CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7c:86:d7:8d:1c:35:e4:ba:6d:96:65:c1:52: 78:99:14:09:26:8a:22:85:f7:36:17:2e:a8:b8:ba: 5a:f6:ee:38:cf:68:18:d6:09:0b:dc:92:e3:0b:ac: 7f:b3:81:92:ee:cc:68:be:d2:e7:81:41:f3:77:2a: e6:60:16:e2:df:cc:b3:d1:21:4b:39:65:68:aa:58: f5:e5:97:f8:4d:3d:b4:2f:4d:77:92:3e:a1:dc:48: 00:3b:ba:f0:03:ee:e2:37:3c:6f:6e:e7:e5:cc:f5: 39:db:d3:35:a5:d6:50:7f:90:c4:ef:ed:11:7d:1d: 37:ab:c5:89:32:8c:cb:0d:92:db:f7:05:6f:72:6b: e0:b9:41:b0:a4:9c:ca:71:da:a0:ca:d8:01:40:81: 61:88:00:45:eb:d7:84:10:83:c3:99:53:77:fa:1d: a2:57:15:fb:61:2c:e2:41:ac:cd:92:49:09:57:72: fc:61:aa:03:fa:6f:a2:c9:dc:74:a0:f0:88:d2:62: 78:f0:7c:6f:be:94:a9:93:22:da:9f:e3:4e:28:4c: cb:53:fd:ce:6a:90:21:a6:e2:a2:2f:e7:50:c0:ff: c3:61:20:2c:78:b9:82:ea:20:7c:f2:bf:7a:82:b3: a1:f3:ca:0b:f2:b4:e6:56:4b:b3:90:fe:a0:67:92: 25:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E1:74:64:7A:50:AA:4C:89:A3:9D:CC:87:AD:D6:0F:59:16:A6:CA X509v3 Authority Key Identifier: keyid:95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:b2:a0:df:6a:8e:20:df:52:93:b5:78:c4:da:12:ba:a5:93: 0a:79:4a:3f:28:ad:1b:07:de:52:57:21:c9:54:07:f7:b1:79: 90:38:b5:34:b8:76:e9:2b:fc:50:6c:2c:b9:12:0e:4f:a8:69: 0b:6b:a7:e9:34:aa:14:90:1c:df:23:87:29:90:d0:f0:39:37: 9f:24:a3:71:ef:dd:29:7d:22:7d:33:c4:99:61:78:69:40:2b: 9e:cf:4a:4e:21:be:e2:9a:b5:0b:bf:9f:1c:b9:7c:92:c0:4b: f6:d7:34:5b:b5:92:ed:e7:40:22:e0:fb:93:e4:56:25:40:4e: 35:d4:94:78:c9:d1:98:fd:b2:d3:fc:87:01:ec:31:d3:58:7b: e4:70:cc:0a:be:99:aa:33:47:63:39:d2:31:67:e9:17:26:a0: cf:ef:78:6c:39:58:eb:77:aa:0a:6b:d8:73:4f:56:48:36:1e: fe:e1:1f:01:a1:8f:2a:e8:cd:70:28:9f:5f:26:fd:8d:4f:80: 19:f3:5f:93:dd:3e:e0:c3:e3:b4:15:f9:c6:dd:cb:8d:be:ec: db:23:50:27:29:92:26:4c:5e:74:23:1b:dd:be:a5:da:e2:ea: 36:75:9c:63:f2:c1:9d:4a:47:a1:6f:a7:2d:6c:26:2a:89:d2: 91:d2:ce:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEgq41k5s2+oeTdEj58E6uPaOunAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1 MjBGNkUyQTAeFw0yNTA3MjAwNTA1MDBaFw0yNTA3MjMxMjEzMDBaMDMxMTAvBgNV BAMTKEJBRTE3NDY0N0E1MEFBNEM4OUEzOURDQzg3QURENjBGNTkxNkE2Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvfIbXjRw15LptlmXBUniZFAkm iiKF9zYXLqi4ulr27jjPaBjWCQvckuMLrH+zgZLuzGi+0ueBQfN3KuZgFuLfzLPR IUs5ZWiqWPXll/hNPbQvTXeSPqHcSAA7uvAD7uI3PG9u5+XM9Tnb0zWl1lB/kMTv 7RF9HTerxYkyjMsNktv3BW9ya+C5QbCknMpx2qDK2AFAgWGIAEXr14QQg8OZU3f6 HaJXFfthLOJBrM2SSQlXcvxhqgP6b6LJ3HSg8IjSYnjwfG++lKmTItqf404oTMtT /c5qkCGm4qIv51DA/8NhICx4uYLqIHzyv3qCs6HzygvytOZWS7OQ/qBnkiXRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuuF0ZHpQqkyJo53Mh63WD1kWpsowHwYDVR0j BBgwFoAUlZZqjbJQMHz5hSSD+Wki7lIPbiowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmYxNDE3YS01NzE4LTQwNzEtOWYzNS1jMTIyNTU1ZGFjN2EvMC85NTk2NkE4REIy NTAzMDdDRjk4NTI0ODNGOTY5MjJFRTUyMEY2RTJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1MjBG NkUyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJmMTQxN2EtNTcxOC00MDcxLTlm MzUtYzEyMjU1NWRhYzdhLzAvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIy RUU1MjBGNkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOyoN9qjiDfUpO1eMTaErqlkwp5Sj8orRsH 3lJXIclUB/exeZA4tTS4dukr/FBsLLkSDk+oaQtrp+k0qhSQHN8jhymQ0PA5N58k o3Hv3Sl9In0zxJlheGlAK57PSk4hvuKatQu/nxy5fJLAS/bXNFu1ku3nQCLg+5Pk ViVATjXUlHjJ0Zj9stP8hwHsMdNYe+RwzAq+maozR2M50jFn6RcmoM/veGw5WOt3 qgpr2HNPVkg2Hv7hHwGhjyrozXAon18m/Y1PgBnzX5PdPuDD47QV+cbdy42+7Nsj UCcpkiZMXnQjG92+pdri6jZ1nGPywZ1KR6Fvpy1sJiqJ0pHSzqE= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:06 2025 by rpki-client