$ rpki-client -vvf repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft File: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft (raw, json) Hash identifier: uL+ZDNVRsqfHi+Nusuj3Q0nfAgJEWqhp2lyjNc8NIGw= Subject key identifier: FD:0B:71:75:7C:BA:C4:26:2F:86:F1:23:AF:B9:1D:09:17:01:2E:C0 Authority key identifier: 10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A Certificate issuer: /CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Certificate serial: 654BB20A37AEBC395FC77DCE21AF5991E737AA08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft Manifest number: 0515 Signing time: Sun 19 Oct 2025 00:21:25 +0000 Manifest this update: Sun 19 Oct 2025 00:16:25 +0000 Manifest next update: Wed 22 Oct 2025 00:51:25 +0000 Files and hashes: 1: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl (hash: iYh5Cns2rwdh0PLS3GEgikfSTCljEschqx45cLDn9X8=) 2: 3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa (hash: XS6giku77XPtxmNRkfOOXOP+iNVcgzmhP0k5pXi56n8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:4b:b2:0a:37:ae:bc:39:5f:c7:7d:ce:21:af:59:91:e7:37:aa:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Validity Not Before: Oct 19 00:16:25 2025 GMT Not After : Oct 22 00:51:25 2025 GMT Subject: CN=FD0B71757CBAC4262F86F123AFB91D0917012EC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:17:f0:cf:fa:be:37:7d:45:8b:ed:8b:f5:70: 2d:ab:d2:e9:b4:b9:14:ba:e6:53:96:2b:8c:8a:3f: 90:b3:0a:05:d9:a9:eb:ed:29:0a:87:38:db:a3:ff: 90:a2:6b:d2:d8:49:50:af:d8:66:70:21:32:fc:ee: 11:09:04:47:c3:c6:c0:73:ed:5f:fc:8c:c0:3d:3b: 6b:be:87:f2:31:39:d2:af:39:59:7d:5f:84:0e:64: 53:de:1d:16:22:e2:35:e8:05:2f:71:ff:7d:57:40: 8c:47:8a:d2:45:0c:d8:6d:f8:c0:36:37:62:a4:5c: 5a:a7:65:0a:4d:42:8b:06:8c:52:19:b9:c2:71:1e: 03:f5:6e:64:e7:77:98:67:88:a7:89:b3:7d:7c:bc: 9b:d5:99:38:59:af:7f:1d:13:c7:99:5f:b0:50:7b: f8:8a:e0:1d:42:9c:f4:9d:7d:cf:59:c9:db:85:88: 91:80:5d:a3:e2:ec:3e:65:b5:14:8f:91:db:1f:a2: ae:4a:8f:f4:a3:04:42:f1:78:8b:c8:6d:6c:dd:f7: dd:8d:b1:63:ef:4c:99:76:34:c8:a1:ec:ed:40:e6: 92:03:65:0d:6b:2a:02:d6:ba:22:24:46:e8:13:1e: be:28:cb:aa:7c:55:cf:2e:af:29:9a:01:f3:ad:4e: 11:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0B:71:75:7C:BA:C4:26:2F:86:F1:23:AF:B9:1D:09:17:01:2E:C0 X509v3 Authority Key Identifier: keyid:10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:13:a2:e9:52:00:62:27:14:ae:05:6a:f7:3a:d2:d1:ac:0b: 55:18:e1:56:67:96:05:49:31:d2:61:31:ae:5a:5e:20:6c:3f: 8a:73:85:c2:6c:ef:d3:f3:41:c1:af:24:61:f2:19:2f:02:ad: 6a:f5:4b:de:c0:a5:ea:4a:b5:9e:61:2a:18:e8:cc:74:8b:46: f7:26:fd:6e:44:b2:f4:c5:69:fa:f5:ff:3e:bd:88:2c:d8:bb: fd:77:2a:7b:97:37:c0:84:b5:13:18:4b:cb:12:13:b0:35:04: 57:2f:d3:35:9d:3b:47:7c:fd:6c:8c:0c:6a:2b:5e:2b:56:77: dc:56:2f:47:b6:2f:1f:4f:83:df:be:e2:9f:ac:46:67:0a:d8: 78:75:d1:1c:aa:32:ba:ed:e2:10:54:ed:2a:9c:38:ed:d3:f4: 9a:d4:2c:4a:0b:54:76:be:49:e4:6b:e8:93:fb:37:68:8d:0b: 6a:bb:a1:d3:0b:2a:a7:aa:5e:d7:1d:f2:9b:da:41:da:d1:e3: 1d:71:34:4c:d4:d5:b7:d1:e7:ca:56:f8:18:82:8c:fc:46:e4: e9:0a:06:78:50:06:6b:74:5e:97:5d:62:70:ae:4e:83:9e:12: 88:49:b1:3d:ff:ea:d7:71:1c:fe:f5:25:07:c8:83:a3:37:3a: bd:04:30:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZUuyCjeuvDlfx33OIa9Zkec3qggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZB MkM0NDg1QTAeFw0yNTEwMTkwMDE2MjVaFw0yNTEwMjIwMDUxMjVaMDMxMTAvBgNV BAMTKEZEMEI3MTc1N0NCQUM0MjYyRjg2RjEyM0FGQjkxRDA5MTcwMTJFQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUF/DP+r43fUWL7Yv1cC2r0um0 uRS65lOWK4yKP5CzCgXZqevtKQqHONuj/5Cia9LYSVCv2GZwITL87hEJBEfDxsBz 7V/8jMA9O2u+h/IxOdKvOVl9X4QOZFPeHRYi4jXoBS9x/31XQIxHitJFDNht+MA2 N2KkXFqnZQpNQosGjFIZucJxHgP1bmTnd5hniKeJs318vJvVmThZr38dE8eZX7BQ e/iK4B1CnPSdfc9ZyduFiJGAXaPi7D5ltRSPkdsfoq5Kj/SjBELxeIvIbWzd992N sWPvTJl2NMih7O1A5pIDZQ1rKgLWuiIkRugTHr4oy6p8Vc8urymaAfOtThFHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/QtxdXy6xCYvhvEjr7kdCRcBLsAwHwYDVR0j BBgwFoAUEJXqeHA4Jqz1+iJB6ysbZqLESFowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTVkZDU3My0zMWY0LTQxNmMtYTFiNy02OThkNmIxNjk3YWQvMC8xMDk1RUE3ODcw MzgyNkFDRjVGQTIyNDFFQjJCMUI2NkEyQzQ0ODVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZBMkM0 NDg1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk1ZGQ1NzMtMzFmNC00MTZjLWEx YjctNjk4ZDZiMTY5N2FkLzAvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFC NjZBMkM0NDg1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0ToulSAGInFK4Favc60tGsC1UY4VZnlgVJ MdJhMa5aXiBsP4pzhcJs79PzQcGvJGHyGS8CrWr1S97ApepKtZ5hKhjozHSLRvcm /W5EsvTFafr1/z69iCzYu/13KnuXN8CEtRMYS8sSE7A1BFcv0zWdO0d8/WyMDGor XitWd9xWL0e2Lx9Pg9++4p+sRmcK2Hh10RyqMrrt4hBU7SqcOO3T9JrULEoLVHa+ SeRr6JP7N2iNC2q7odMLKqeqXtcd8pvaQdrR4x1xNEzU1bfR58pW+BiCjPxG5OkK BnhQBmt0XpddYnCuToOeEohJsT3/6tdxHP71JQfIg6M3Or0EMDg= -----END CERTIFICATE-----Generated at Sun Oct 19 15:39:22 2025 by rpki-client