$ rpki-client -vvf repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft File: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft (raw, json) Hash identifier: KL7Ho78lVt73wsJhAiwV+UlK3UTLCdPr/meKnKhcU/8= Subject key identifier: 72:95:A0:95:C7:51:43:26:B0:66:90:BC:43:2D:AB:BB:6D:91:EC:20 Authority key identifier: 95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 Certificate issuer: /CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Certificate serial: 51F2546895559BAE10583F02BCC7D31FB7B1A1C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft Manifest number: 04DB Signing time: Mon 02 Jun 2025 02:04:04 +0000 Manifest this update: Mon 02 Jun 2025 01:59:04 +0000 Manifest next update: Thu 05 Jun 2025 08:11:04 +0000 Files and hashes: 1: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (hash: KI4DRCx0w4L0nKpvK1CNtCzzpw68TT41WCumN5kF9lM=) 2: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (hash: mAx24Mrm6AI9KeLaD2h/5RLJ5ztWp5mCELhp+sgXhQM=) 3: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (hash: mKTM+95IO3RuRjGvD78UIawuJIUBHI8BVt6K80x3Fpw=) 4: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl (hash: M+c8PfnQbgi4H+dhK6xO6xsbqCcSPfAdoiSaizrCdN8=) 5: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (hash: 75/DAONeN65KHxljOFhq+chBgFEKtm0A6zWkkY+QXDo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 08:11:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f2:54:68:95:55:9b:ae:10:58:3f:02:bc:c7:d3:1f:b7:b1:a1:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Validity Not Before: Jun 2 01:59:04 2025 GMT Not After : Jun 5 08:11:04 2025 GMT Subject: CN=7295A095C7514326B06690BC432DABBB6D91EC20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:81:7d:2d:fb:79:54:39:fe:56:a1:7a:fd: e2:be:f4:17:01:c9:85:21:b5:8a:fd:cb:1c:36:b2: f9:70:ef:d4:51:67:5f:a9:d7:ce:1b:93:57:00:56: 68:c7:5b:9e:88:fc:fc:d9:b0:0d:01:82:59:05:53: e0:13:f1:43:26:9f:99:44:ba:9f:0a:5f:5e:d2:3e: fc:61:27:51:21:b7:0b:95:10:97:37:40:d1:d8:e4: 7f:16:83:69:68:e9:a4:74:4f:b2:51:1c:15:30:f0: 5d:54:df:4c:13:0f:10:22:38:64:ad:28:3f:9f:3c: ee:40:a7:cb:02:1c:5d:27:72:30:8c:b7:5a:f3:d4: 8d:c5:b1:f6:6d:e2:1f:1f:ff:ef:c7:e1:e0:89:cf: 2b:62:5c:54:00:74:95:ab:38:48:dc:ad:79:23:30: d1:80:9a:2c:92:56:ed:8b:ee:b9:94:ba:15:1e:b0: 08:fb:99:2f:c6:8f:dc:ef:97:9c:8c:50:fb:cf:99: 46:b4:ad:52:95:5c:86:26:40:b6:8a:50:89:66:8b: 3d:75:42:89:c1:db:b5:8f:d1:80:03:f8:25:f2:97: d7:c3:70:f5:d4:bc:ab:91:ae:93:23:8c:cc:76:5e: 24:e2:4d:3c:22:5c:c0:12:bb:0d:c7:49:1d:0d:c5: 71:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:95:A0:95:C7:51:43:26:B0:66:90:BC:43:2D:AB:BB:6D:91:EC:20 X509v3 Authority Key Identifier: keyid:95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d2:3d:b3:4e:52:59:91:c6:f2:36:42:81:aa:bc:df:3a:03: 7d:b8:73:b2:d9:93:ec:c7:10:48:07:a6:81:60:d4:dc:a8:ee: d6:1f:12:fd:8a:0e:87:e7:f5:44:c4:51:79:5b:29:fa:59:d0: 51:94:a4:ee:b7:6a:3d:5c:69:23:3c:18:6c:79:1b:b9:f8:1d: 31:56:55:2d:de:16:d7:cc:38:59:2a:f0:a7:fb:3a:23:c9:39: 1d:5d:04:93:6b:59:fc:02:35:22:d7:91:86:e5:13:1c:8e:41: 2a:b9:26:54:f3:ce:4f:c8:86:e9:bb:b3:c7:54:d9:3b:5a:11: 69:d9:11:11:ff:f8:ec:84:e8:9f:ee:fa:4b:60:c1:2b:dc:89: 3a:ec:ae:63:7d:6b:13:75:5e:d1:c3:31:c1:90:81:59:24:f4: ac:02:b8:cf:5b:fa:3d:09:3f:58:d8:3f:b7:6c:a8:68:9e:41: 0a:75:e9:e5:66:b2:d8:9d:60:c5:eb:92:7f:15:e8:29:96:9b: 81:ed:b1:1f:13:76:06:49:7e:fb:df:c1:c0:ad:1d:9f:98:36: 2a:2d:ae:06:ed:84:c5:17:79:7b:a0:70:f6:f5:01:13:aa:52: d4:32:ee:6b:df:44:4e:00:29:30:f6:3f:ac:7e:03:18:74:e9: 64:66:51:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUfJUaJVVm64QWD8CvMfTH7exocEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlE QTQ2QjNDODAeFw0yNTA2MDIwMTU5MDRaFw0yNTA2MDUwODExMDRaMDMxMTAvBgNV BAMTKDcyOTVBMDk1Qzc1MTQzMjZCMDY2OTBCQzQzMkRBQkJCNkQ5MUVDMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDL4F9Lft5VDn+VqF6/eK+9BcB yYUhtYr9yxw2svlw79RRZ1+p184bk1cAVmjHW56I/PzZsA0BglkFU+AT8UMmn5lE up8KX17SPvxhJ1EhtwuVEJc3QNHY5H8Wg2lo6aR0T7JRHBUw8F1U30wTDxAiOGSt KD+fPO5Ap8sCHF0ncjCMt1rz1I3FsfZt4h8f/+/H4eCJzytiXFQAdJWrOEjcrXkj MNGAmiySVu2L7rmUuhUesAj7mS/Gj9zvl5yMUPvPmUa0rVKVXIYmQLaKUIlmiz11 QonB27WP0YAD+CXyl9fDcPXUvKuRrpMjjMx2XiTiTTwiXMASuw3HSR0NxXH3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcpWglcdRQyawZpC8Qy2ru22R7CAwHwYDVR0j BBgwFoAUlcO6fyO2NRch932oAgcx+dpGs8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBlOWM5Zi1kNjA3LTQ0OTctYWYyOC00ZDJiOTA5MmQ1YTYvMC85NUMzQkE3RjIz QjYzNTE3MjFGNzdEQTgwMjA3MzFGOURBNDZCM0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlEQTQ2 QjNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZTljOWYtZDYwNy00NDk3LWFm MjgtNGQyYjkwOTJkNWE2LzAvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMx RjlEQTQ2QjNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrSPbNOUlmRxvI2QoGqvN86A324c7LZk+zH EEgHpoFg1Nyo7tYfEv2KDofn9UTEUXlbKfpZ0FGUpO63aj1caSM8GGx5G7n4HTFW VS3eFtfMOFkq8Kf7OiPJOR1dBJNrWfwCNSLXkYblExyOQSq5JlTzzk/Ihum7s8dU 2TtaEWnZERH/+OyE6J/u+ktgwSvciTrsrmN9axN1XtHDMcGQgVkk9KwCuM9b+j0J P1jYP7dsqGieQQp16eVmstidYMXrkn8V6CmWm4HtsR8TdgZJfvvfwcCtHZ+YNiot rgbthMUXeXugcPb1AROqUtQy7mvfRE4AKTD2P6x+Axh06WRmUVs= -----END CERTIFICATE-----Generated at Tue Jun 3 23:38:54 2025 by rpki-client