$ rpki-client -vvf repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft File: 095AAB2FD179056DA8846FA0E90F79F7D901792C.mft (raw, json) Hash identifier: IXbGe6W7V3fliyxcTh37nazsN80EaAGBwsX2VXpFtjQ= Subject key identifier: 20:CF:89:05:70:A4:F2:BA:E3:62:26:66:27:93:AC:1B:95:1A:1C:D0 Authority key identifier: 09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C Certificate issuer: /CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Certificate serial: 2E3901BDB4C29A0FD9ADFEC989DE56414A0F96C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft Manifest number: 0305 Signing time: Sat 06 Sep 2025 22:21:33 +0000 Manifest this update: Sat 06 Sep 2025 22:16:33 +0000 Manifest next update: Tue 09 Sep 2025 23:58:33 +0000 Files and hashes: 1: 3130332e3235322e35302e302f32342d3234203d3e203539313334.roa (hash: tg5kgcB+/SuzaicgIITC9CS9oqxnux/xS4/nsX+npzw=) 2: 3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa (hash: JQPY1hR36z2SwsI5Y4cr/zQo0NDgsurp+zEd8VFWX3Q=) 3: 3130332e3235322e35312e302f32342d3234203d3e203539313334.roa (hash: 92hDDvlrQq6+Ep7VlgXGUFdRGUo5NBqpCP5dHFzwWeg=) 4: 3130332e37332e3132352e302f32342d3234203d3e203539313334.roa (hash: Z1EVykTQp5ACC1NPq9JOZKOUUZ9JHZ3If1yc5kffoxA=) 5: 095AAB2FD179056DA8846FA0E90F79F7D901792C.crl (hash: mctKGCna1AFMf3eA0/Cv8ei7L2f0HbuEn2K6e+LD6Co=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 23:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:39:01:bd:b4:c2:9a:0f:d9:ad:fe:c9:89:de:56:41:4a:0f:96:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Validity Not Before: Sep 6 22:16:33 2025 GMT Not After : Sep 9 23:58:33 2025 GMT Subject: CN=20CF890570A4F2BAE36226662793AC1B951A1CD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:10:bb:c5:76:9b:84:7b:38:ca:19:9e:46:b6: 17:6c:dc:b9:e6:f0:18:0c:b0:15:b0:0f:3b:bb:0e: 11:1b:6f:28:12:fd:17:6c:a7:27:b9:03:6c:e3:91: 7f:5f:fd:23:5a:58:6e:2f:d3:ba:64:04:a4:6c:b3: c8:3c:52:f2:a1:db:69:27:e6:47:92:fc:fc:1f:a7: a0:1e:e0:e0:5e:0d:66:d2:14:fb:92:0a:b6:e2:f2: 8f:ae:a9:6b:2c:8e:c5:b3:39:33:ca:56:45:58:00: 30:61:57:42:8a:8c:03:17:28:c7:50:b2:69:bb:db: f5:51:09:35:90:53:43:df:7d:04:17:14:c9:6c:5d: 5f:b4:fd:42:86:bc:cb:a3:7f:3b:40:d4:cf:e5:a4: 11:36:c1:00:dd:73:a4:31:df:5c:b8:5b:75:34:31: 43:34:95:7f:1e:6f:d6:ec:20:26:21:a2:3e:5d:7f: 9a:73:bb:38:72:a6:1c:40:6a:fe:b6:d8:16:0a:da: aa:9e:2d:1a:66:03:7c:6d:dd:db:3e:d0:5f:c5:3a: fc:0e:40:bf:f8:a2:76:93:fc:6d:47:d5:48:7f:c8: d2:c2:8e:cb:53:e0:09:f8:30:96:c7:93:7b:c5:52: ad:83:2f:2b:be:6d:1d:67:d7:1a:95:77:98:8e:f8: 3c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CF:89:05:70:A4:F2:BA:E3:62:26:66:27:93:AC:1B:95:1A:1C:D0 X509v3 Authority Key Identifier: keyid:09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c8:58:37:66:78:59:fa:9b:40:d2:a1:4a:4c:42:d3:b9:1b: c5:b5:33:a3:8d:57:a3:6d:a7:7b:cb:13:0b:82:0d:70:5d:e5: 39:7a:3b:6b:a4:19:a0:38:52:21:fa:6f:0a:6d:2a:00:3b:f1: 99:18:23:02:7f:fd:3d:b0:30:f3:69:d3:3f:ef:33:6a:6b:6e: 2c:ac:71:8b:74:7c:cd:9e:89:e1:fd:87:c5:84:68:b6:a6:e1: 2f:9c:33:60:74:94:a9:ba:e9:b9:f6:e9:2a:1c:af:a1:75:e0: 7e:d9:cb:59:66:c1:d2:76:f8:d6:6a:a7:04:80:06:90:82:f0: 20:93:7d:e0:b8:14:e1:7a:af:68:f3:c6:11:2e:ae:16:b8:3c: 78:25:53:e2:2c:37:4d:99:5a:98:41:68:8b:00:74:f7:21:f4: 7e:e8:91:ed:e6:dc:b3:5c:6c:2c:5a:47:29:4c:f2:f8:c5:b2: b4:d8:aa:d8:24:2e:e4:2c:ab:e4:43:f4:ed:6f:0d:ed:55:ba: 76:3a:69:d5:89:f0:64:aa:bd:1b:82:7d:dd:8e:be:4f:08:10: f6:72:d1:1f:97:06:9b:0d:c7:cd:9a:6f:ec:ee:78:9c:4d:67: 6c:9e:ec:a6:a6:5f:c2:f9:9e:f0:72:e6:f2:39:7e:cb:65:7e: 68:57:93:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULjkBvbTCmg/Zrf7Jid5WQUoPlsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdE OTAxNzkyQzAeFw0yNTA5MDYyMjE2MzNaFw0yNTA5MDkyMzU4MzNaMDMxMTAvBgNV BAMTKDIwQ0Y4OTA1NzBBNEYyQkFFMzYyMjY2NjI3OTNBQzFCOTUxQTFDRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ELvFdpuEezjKGZ5Gthds3Lnm 8BgMsBWwDzu7DhEbbygS/Rdspye5A2zjkX9f/SNaWG4v07pkBKRss8g8UvKh22kn 5keS/Pwfp6Ae4OBeDWbSFPuSCrbi8o+uqWssjsWzOTPKVkVYADBhV0KKjAMXKMdQ smm72/VRCTWQU0PffQQXFMlsXV+0/UKGvMujfztA1M/lpBE2wQDdc6Qx31y4W3U0 MUM0lX8eb9bsICYhoj5df5pzuzhyphxAav622BYK2qqeLRpmA3xt3ds+0F/FOvwO QL/4onaT/G1H1Uh/yNLCjstT4An4MJbHk3vFUq2DLyu+bR1n1xqVd5iO+DyRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIM+JBXCk8rrjYiZmJ5OsG5UaHNAwHwYDVR0j BBgwFoAUCVqrL9F5BW2ohG+g6Q9599kBeSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTc4OGI0YS1kNDUxLTQ5ZmItYjdjZC03MTk4MTA4NzBmMWEvMC8wOTVBQUIyRkQx NzkwNTZEQTg4NDZGQTBFOTBGNzlGN0Q5MDE3OTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdEOTAx NzkyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3ODhiNGEtZDQ1MS00OWZiLWI3 Y2QtNzE5ODEwODcwZjFhLzAvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5 RjdEOTAxNzkyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInIWDdmeFn6m0DSoUpMQtO5G8W1M6ONV6Nt p3vLEwuCDXBd5Tl6O2ukGaA4UiH6bwptKgA78ZkYIwJ//T2wMPNp0z/vM2prbiys cYt0fM2eieH9h8WEaLam4S+cM2B0lKm66bn26Socr6F14H7Zy1lmwdJ2+NZqpwSA BpCC8CCTfeC4FOF6r2jzxhEurha4PHglU+IsN02ZWphBaIsAdPch9H7oke3m3LNc bCxaRylM8vjFsrTYqtgkLuQsq+RD9O1vDe1VunY6adWJ8GSqvRuCfd2Ovk8IEPZy 0R+XBpsNx82ab+zueJxNZ2ye7KamX8L5nvBy5vI5fstlfmhXk2o= -----END CERTIFICATE-----Generated at Sun Sep 7 15:13:22 2025 by rpki-client