$ rpki-client -vvf repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft File: 095AAB2FD179056DA8846FA0E90F79F7D901792C.mft (raw, json) Hash identifier: wOd8paUK2f1bss1OssTxgkd2bC3ebHyqDUegs3lAt+U= Subject key identifier: F9:98:90:0F:91:10:85:85:87:A0:9D:1A:C5:B0:5C:48:39:F2:49:DC Authority key identifier: 09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C Certificate issuer: /CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Certificate serial: 6BD85BDD78ED09515CDD60BDFAB6912E9FEA0E9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft Manifest number: 02DB Signing time: Fri 06 Jun 2025 20:41:38 +0000 Manifest this update: Fri 06 Jun 2025 20:36:38 +0000 Manifest next update: Tue 10 Jun 2025 03:25:38 +0000 Files and hashes: 1: 3130332e3235322e35302e302f32342d3234203d3e203539313334.roa (hash: 8MZDJE1WC1E7vkSQyVEg4cMhq4rJ0podGfyeb/dye+k=) 2: 095AAB2FD179056DA8846FA0E90F79F7D901792C.crl (hash: xUO/Ep8pudUueB4MqEU++cR1EXSs6OCvpKSNwWiFxLE=) 3: 3130332e3235322e35312e302f32342d3234203d3e203539313334.roa (hash: jXXWxkm8pnllb3VSFA8uhDiro1y3hrU3S7FOIya7wEk=) 4: 3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa (hash: +AXG/pm7n+ixEywmMFKOvD7RtSSIc+foMLklPJEgEEE=) 5: 3130332e37332e3132352e302f32342d3234203d3e203539313334.roa (hash: dJop0ZIoEq7yz2OjoW0Jh2aRDWFcjn5m64yyuUs600w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 03:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d8:5b:dd:78:ed:09:51:5c:dd:60:bd:fa:b6:91:2e:9f:ea:0e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Validity Not Before: Jun 6 20:36:38 2025 GMT Not After : Jun 10 03:25:38 2025 GMT Subject: CN=F998900F9110858587A09D1AC5B05C4839F249DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3b:25:dc:24:b1:bd:d5:55:8e:89:b5:01:a3: 05:e3:5e:05:6f:1d:56:17:77:c8:eb:0f:29:e3:4f: 15:98:9d:91:c1:67:bd:92:14:fe:7a:83:9b:d1:9c: 9a:6b:8f:73:ee:82:e3:2d:31:47:6f:20:b4:b9:e8: 16:86:31:64:13:7b:d7:b6:4a:25:1a:47:62:63:35: 9c:aa:85:8a:fa:f0:8c:6e:a2:29:a8:fc:9c:01:81: 57:94:a7:05:21:eb:10:42:ed:4d:46:91:9d:f0:59: 1f:df:d8:f0:c1:68:e0:22:16:5c:21:96:7f:d4:fc: c7:24:1a:3c:df:85:3a:cd:88:01:31:59:9f:44:5b: c1:1e:71:2d:aa:f1:db:97:47:60:a4:96:b9:eb:d7: 71:57:30:62:80:92:14:92:f6:36:f4:da:15:74:90: ae:ca:4f:87:f7:34:6b:f9:5c:6c:a8:4c:d9:b5:12: 6e:2a:2e:7e:12:09:f1:cd:52:b3:46:a5:45:11:c9: 23:f4:be:ce:09:c8:22:3d:8f:d6:97:33:c3:d6:0a: ff:f2:f4:16:40:c9:9b:9d:a0:2f:45:75:4f:82:2b: ca:0b:cd:01:65:11:42:a1:d3:e5:25:c2:e9:3a:c5: 23:8a:02:3c:96:dc:ea:03:7a:4a:34:aa:d9:87:8a: ee:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:98:90:0F:91:10:85:85:87:A0:9D:1A:C5:B0:5C:48:39:F2:49:DC X509v3 Authority Key Identifier: keyid:09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:35:d2:60:59:a9:cf:dd:ba:81:ce:25:95:c6:1c:58:9f:d3: c1:e9:64:d4:25:d3:4b:bd:1a:cd:bb:e0:27:94:19:b9:13:17: 60:4d:5f:dd:3e:92:31:2d:2f:85:f8:bb:af:f2:d4:24:73:a1: 8d:b7:9b:8f:3f:aa:ca:ac:41:b4:66:ab:3c:f5:f5:79:f9:6e: 2b:6c:ae:dd:7f:58:b6:20:c6:fd:e3:2c:06:cf:f2:4a:b6:ed: 7e:7e:63:87:b1:7c:25:5f:c3:86:95:f1:8f:46:2b:33:a4:d6: 3f:a3:4c:41:88:f4:64:90:e1:a0:e9:f1:26:e6:49:22:08:fd: 34:13:a8:a9:bb:72:de:cb:bc:7b:72:88:cb:67:71:58:aa:f8: 33:d4:39:55:b1:d3:70:1e:9e:f5:f3:f7:02:05:d0:62:16:3a: 00:06:f5:d9:a6:ea:d8:15:c5:ea:8b:b2:40:68:d7:38:f5:72: 04:aa:5c:18:f8:eb:6f:db:b9:47:ce:cc:1f:74:26:40:4c:61: 2b:3b:39:14:83:82:cf:71:cc:95:3c:7c:fa:50:cb:66:f2:ce: dc:34:2f:27:1d:fd:97:d9:8f:87:65:82:fc:f6:0d:29:16:23: f5:03:dc:29:32:8d:9b:ae:02:ff:80:9c:9e:55:cb:ec:e7:58: 59:bc:f8:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa9hb3XjtCVFc3WC9+raRLp/qDpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdE OTAxNzkyQzAeFw0yNTA2MDYyMDM2MzhaFw0yNTA2MTAwMzI1MzhaMDMxMTAvBgNV BAMTKEY5OTg5MDBGOTExMDg1ODU4N0EwOUQxQUM1QjA1QzQ4MzlGMjQ5REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfOyXcJLG91VWOibUBowXjXgVv HVYXd8jrDynjTxWYnZHBZ72SFP56g5vRnJprj3PuguMtMUdvILS56BaGMWQTe9e2 SiUaR2JjNZyqhYr68Ixuoimo/JwBgVeUpwUh6xBC7U1GkZ3wWR/f2PDBaOAiFlwh ln/U/MckGjzfhTrNiAExWZ9EW8EecS2q8duXR2Cklrnr13FXMGKAkhSS9jb02hV0 kK7KT4f3NGv5XGyoTNm1Em4qLn4SCfHNUrNGpUURySP0vs4JyCI9j9aXM8PWCv/y 9BZAyZudoC9FdU+CK8oLzQFlEUKh0+Ulwuk6xSOKAjyW3OoDeko0qtmHiu5nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+ZiQD5EQhYWHoJ0axbBcSDnySdwwHwYDVR0j BBgwFoAUCVqrL9F5BW2ohG+g6Q9599kBeSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTc4OGI0YS1kNDUxLTQ5ZmItYjdjZC03MTk4MTA4NzBmMWEvMC8wOTVBQUIyRkQx NzkwNTZEQTg4NDZGQTBFOTBGNzlGN0Q5MDE3OTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdEOTAx NzkyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3ODhiNGEtZDQ1MS00OWZiLWI3 Y2QtNzE5ODEwODcwZjFhLzAvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5 RjdEOTAxNzkyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKM10mBZqc/duoHOJZXGHFif08HpZNQl00u9 Gs274CeUGbkTF2BNX90+kjEtL4X4u6/y1CRzoY23m48/qsqsQbRmqzz19Xn5bits rt1/WLYgxv3jLAbP8kq27X5+Y4exfCVfw4aV8Y9GKzOk1j+jTEGI9GSQ4aDp8Sbm SSII/TQTqKm7ct7LvHtyiMtncViq+DPUOVWx03AenvXz9wIF0GIWOgAG9dmm6tgV xeqLskBo1zj1cgSqXBj462/buUfOzB90JkBMYSs7ORSDgs9xzJU8fPpQy2byztw0 Lycd/ZfZj4dlgvz2DSkWI/UD3CkyjZuuAv+AnJ5Vy+znWFm8+PM= -----END CERTIFICATE-----Generated at Sat Jun 7 22:10:11 2025 by rpki-client