$ rpki-client -vvf repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft File: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft (raw, json) Hash identifier: 2EOdFDuBplQqOLO3kMiH3hUrUOV/Qadhip6ey85Esl4= Subject key identifier: A9:78:49:A2:A8:D9:1E:9B:19:B3:EE:65:BF:B9:74:E1:F2:2A:C4:7E Authority key identifier: 95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 Certificate issuer: /CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Certificate serial: 19DC9A9B1C4B6423A252DD498989363E081C26C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft Manifest number: 0506 Signing time: Fri 05 Sep 2025 11:01:28 +0000 Manifest this update: Fri 05 Sep 2025 10:56:28 +0000 Manifest next update: Mon 08 Sep 2025 15:21:28 +0000 Files and hashes: 1: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (hash: mKTM+95IO3RuRjGvD78UIawuJIUBHI8BVt6K80x3Fpw=) 2: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (hash: KI4DRCx0w4L0nKpvK1CNtCzzpw68TT41WCumN5kF9lM=) 3: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl (hash: urvyFwwUSPFimxvXq+QNy1CpOPflkEf1xlqH9YoSIFw=) 4: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (hash: mAx24Mrm6AI9KeLaD2h/5RLJ5ztWp5mCELhp+sgXhQM=) 5: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (hash: 75/DAONeN65KHxljOFhq+chBgFEKtm0A6zWkkY+QXDo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:dc:9a:9b:1c:4b:64:23:a2:52:dd:49:89:89:36:3e:08:1c:26:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Validity Not Before: Sep 5 10:56:28 2025 GMT Not After : Sep 8 15:21:28 2025 GMT Subject: CN=A97849A2A8D91E9B19B3EE65BFB974E1F22AC47E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:13:ff:15:fa:5b:94:71:1b:3d:0a:a8:03:6f: 39:af:b5:a5:cc:a3:cf:ed:8d:cd:52:d3:ef:94:8a: be:c0:f7:f2:ab:0c:5c:0e:d2:02:3f:d6:07:15:50: b7:56:5b:ae:d9:87:4e:21:ee:fc:52:de:95:76:46: 7e:a9:7d:bd:07:33:93:63:ff:ed:2c:a3:7f:36:c2: 94:05:56:9a:af:b8:af:bc:74:d9:ac:b5:74:8b:0b: d1:75:7c:de:e7:eb:11:30:c8:e7:b0:2e:67:3e:96: 15:c5:74:7b:52:d6:04:ee:9b:b0:48:5d:8a:45:9d: 3c:0c:c5:12:e3:76:b6:ba:d8:e5:d0:8d:17:d3:cc: 0c:1e:bf:0a:2f:ac:c4:15:ae:1c:0f:26:15:55:8b: b0:3e:0a:b7:c8:7c:84:48:1c:04:a3:99:a4:a3:15: 29:e0:b0:6c:28:0f:4e:0a:5f:7c:e5:ee:7c:dc:59: c3:b3:2d:b9:cf:63:61:11:3b:63:22:d8:a0:21:0f: 05:d3:68:93:cf:20:26:ed:8e:cf:67:e9:7a:36:6b: 2a:46:62:1a:34:3f:2d:7d:47:df:8b:ef:f3:0c:41: ab:77:5d:85:e2:55:c5:09:8f:37:36:59:1d:c5:5c: 61:f7:d3:87:2d:91:f8:45:e4:05:90:91:7a:4f:7a: 93:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:78:49:A2:A8:D9:1E:9B:19:B3:EE:65:BF:B9:74:E1:F2:2A:C4:7E X509v3 Authority Key Identifier: keyid:95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:95:12:43:3a:d8:6e:68:87:67:61:1b:6a:d3:6c:f6:13:8e: 38:ce:97:68:38:26:17:0c:13:77:66:18:91:21:3e:3e:45:bb: 67:df:84:90:42:d4:71:f2:ba:19:a4:98:31:45:34:e7:f2:8d: 58:61:ed:05:4b:6a:37:6e:6d:dd:b6:c4:a3:3d:eb:ea:67:6f: 28:57:62:18:88:92:25:cd:28:2d:32:31:d0:6e:91:c0:41:80: 3b:96:6b:c5:1f:26:a8:21:a2:a9:1e:7d:6c:71:db:50:d8:45: 23:52:a8:2d:f5:67:df:14:f8:ab:3b:93:9c:26:30:d9:8a:82: 07:54:94:8d:5c:94:4d:43:5e:99:df:94:0a:3d:e6:be:c8:a1: 29:5b:4f:80:49:73:1a:0a:df:54:e5:2f:ce:b4:78:ca:1d:2a: 06:6f:c8:74:04:1d:94:ac:82:83:4c:c5:2f:28:34:30:ce:b1: b3:90:30:db:ce:df:89:cc:fc:ba:77:de:4d:66:43:00:38:b8: ce:e3:af:52:f8:39:3d:09:76:c0:50:51:04:ce:d4:cb:82:d7: 5f:fa:1d:b8:ef:c2:f4:13:9d:9a:6d:b0:fa:f1:19:8b:45:54: 4b:2f:19:28:94:ba:13:e7:e1:3a:95:a1:bb:bb:b3:28:78:4b: 70:63:31:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGdyamxxLZCOiUt1JiYk2PggcJsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlE QTQ2QjNDODAeFw0yNTA5MDUxMDU2MjhaFw0yNTA5MDgxNTIxMjhaMDMxMTAvBgNV BAMTKEE5Nzg0OUEyQThEOTFFOUIxOUIzRUU2NUJGQjk3NEUxRjIyQUM0N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvE/8V+luUcRs9CqgDbzmvtaXM o8/tjc1S0++Uir7A9/KrDFwO0gI/1gcVULdWW67Zh04h7vxS3pV2Rn6pfb0HM5Nj /+0so382wpQFVpqvuK+8dNmstXSLC9F1fN7n6xEwyOewLmc+lhXFdHtS1gTum7BI XYpFnTwMxRLjdra62OXQjRfTzAwevwovrMQVrhwPJhVVi7A+CrfIfIRIHASjmaSj FSngsGwoD04KX3zl7nzcWcOzLbnPY2ERO2Mi2KAhDwXTaJPPICbtjs9n6Xo2aypG Yho0Py19R9+L7/MMQat3XYXiVcUJjzc2WR3FXGH304ctkfhF5AWQkXpPepMfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqXhJoqjZHpsZs+5lv7l04fIqxH4wHwYDVR0j BBgwFoAUlcO6fyO2NRch932oAgcx+dpGs8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBlOWM5Zi1kNjA3LTQ0OTctYWYyOC00ZDJiOTA5MmQ1YTYvMC85NUMzQkE3RjIz QjYzNTE3MjFGNzdEQTgwMjA3MzFGOURBNDZCM0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlEQTQ2 QjNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZTljOWYtZDYwNy00NDk3LWFm MjgtNGQyYjkwOTJkNWE2LzAvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMx RjlEQTQ2QjNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCVEkM62G5oh2dhG2rTbPYTjjjOl2g4JhcM E3dmGJEhPj5Fu2ffhJBC1HHyuhmkmDFFNOfyjVhh7QVLajdubd22xKM96+pnbyhX YhiIkiXNKC0yMdBukcBBgDuWa8UfJqghoqkefWxx21DYRSNSqC31Z98U+Ks7k5wm MNmKggdUlI1clE1DXpnflAo95r7IoSlbT4BJcxoK31TlL860eModKgZvyHQEHZSs goNMxS8oNDDOsbOQMNvO34nM/Lp33k1mQwA4uM7jr1L4OT0JdsBQUQTO1MuC11/6 HbjvwvQTnZptsPrxGYtFVEsvGSiUuhPn4TqVobu7syh4S3BjMQM= -----END CERTIFICATE-----Generated at Sun Sep 7 15:43:10 2025 by rpki-client