$ rpki-client -vvf repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft File: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft (raw, json) Hash identifier: XqNZ6N3fcnngYKcQsKVzkXiQIJFvntDARlUF90GJ1JM= Subject key identifier: 7D:4E:6D:64:92:59:AB:2D:69:2F:F5:DA:54:4A:13:27:74:C1:D3:C3 Authority key identifier: 10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A Certificate issuer: /CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Certificate serial: 3E1648646D3A6870E9D47E1AB3FF07894C93D91C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft Manifest number: 04D9 Signing time: Wed 04 Jun 2025 02:41:24 +0000 Manifest this update: Wed 04 Jun 2025 02:36:24 +0000 Manifest next update: Sat 07 Jun 2025 10:12:24 +0000 Files and hashes: 1: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl (hash: edCk6b+yEOBn/b4FicWWefhKMFn4RG3fU/cKVIX3yjQ=) 2: 3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa (hash: XS6giku77XPtxmNRkfOOXOP+iNVcgzmhP0k5pXi56n8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 10:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:16:48:64:6d:3a:68:70:e9:d4:7e:1a:b3:ff:07:89:4c:93:d9:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Validity Not Before: Jun 4 02:36:24 2025 GMT Not After : Jun 7 10:12:24 2025 GMT Subject: CN=7D4E6D649259AB2D692FF5DA544A132774C1D3C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:5f:93:5f:3b:b0:29:10:63:9c:db:0c:36: f7:6b:c9:03:0a:02:4a:84:da:a7:89:ea:f8:4e:bc: 18:0a:36:e8:60:9c:50:98:c7:db:0c:1c:3b:f6:d5: 96:6a:c1:38:ff:35:00:38:97:f3:98:d0:21:c6:79: ec:bc:80:05:fd:d5:a1:89:0c:40:98:d9:87:63:08: b3:70:fc:43:53:59:ca:b4:ea:e6:99:bd:24:47:b5: 87:a7:3b:7c:d5:98:95:61:fb:1b:cc:8c:71:09:85: 27:d5:60:34:70:6a:63:e6:dc:e4:ff:f1:51:47:f2: 12:29:a1:5b:92:59:35:d0:ad:46:be:50:aa:09:aa: 9a:e3:33:d1:07:d0:44:7a:01:ca:18:71:07:c0:bc: 3f:2a:06:da:a7:fa:5d:52:da:ff:4b:53:0a:76:99: ef:f2:67:05:93:81:44:ca:48:f4:bb:d8:d2:d4:12: f7:c7:99:ad:58:8f:60:de:e8:04:63:f2:eb:6e:02: 7a:00:36:0f:e7:7b:ac:b7:5a:05:a3:4e:dc:86:ba: 88:8f:f8:20:2d:c4:b4:e6:cd:a6:92:41:06:2b:e2: ae:0a:21:c1:ad:3b:47:42:9b:97:b0:b2:ff:96:46: 87:a6:e5:90:65:ef:03:ed:0a:47:5a:c9:f0:54:df: fb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4E:6D:64:92:59:AB:2D:69:2F:F5:DA:54:4A:13:27:74:C1:D3:C3 X509v3 Authority Key Identifier: keyid:10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ee:a8:72:c7:bb:e5:1f:dc:1f:18:d6:89:8f:a6:81:b7:2c: 49:18:bf:ae:5c:4f:89:12:4d:9a:7c:23:50:da:e0:e4:bb:be: 94:70:d9:25:df:96:d2:a5:5d:41:3b:9b:4f:b3:6d:4b:06:3c: 03:f9:0a:87:d6:df:0e:06:cb:e3:ca:f3:21:62:31:28:47:fd: be:03:6d:c3:09:d6:ef:50:5c:4b:d4:8b:1b:44:2b:53:ae:45: ca:24:c0:d6:a5:21:33:23:23:ab:19:27:66:02:6e:c1:51:60: d7:4d:2e:c5:61:a1:16:d3:79:9c:6d:cb:75:ab:84:56:5f:d1: 95:37:37:4a:4f:fe:28:83:14:81:17:06:8c:05:d6:a9:39:3c: 79:a2:79:91:ed:27:cd:f9:01:da:2a:68:95:2c:2f:66:9d:c2: ea:a5:22:c7:09:a9:35:7f:d2:fc:82:14:b0:48:f4:05:3d:b3: 25:bd:56:a9:45:5b:ec:50:f4:64:d6:e9:be:07:84:30:05:7c: 82:49:1a:85:87:bd:36:7c:5a:1c:f5:e6:5e:40:bd:f1:05:7b: 02:9b:08:11:97:70:6b:83:93:84:ec:3c:7d:2d:70:8d:92:8b: bd:a4:59:f6:53:e0:7b:e6:e0:87:41:19:ff:97:8e:12:96:f8: 89:4c:40:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPhZIZG06aHDp1H4as/8HiUyT2RwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZB MkM0NDg1QTAeFw0yNTA2MDQwMjM2MjRaFw0yNTA2MDcxMDEyMjRaMDMxMTAvBgNV BAMTKDdENEU2RDY0OTI1OUFCMkQ2OTJGRjVEQTU0NEExMzI3NzRDMUQzQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5R1+TXzuwKRBjnNsMNvdryQMK AkqE2qeJ6vhOvBgKNuhgnFCYx9sMHDv21ZZqwTj/NQA4l/OY0CHGeey8gAX91aGJ DECY2YdjCLNw/ENTWcq06uaZvSRHtYenO3zVmJVh+xvMjHEJhSfVYDRwamPm3OT/ 8VFH8hIpoVuSWTXQrUa+UKoJqprjM9EH0ER6AcoYcQfAvD8qBtqn+l1S2v9LUwp2 me/yZwWTgUTKSPS72NLUEvfHma1Yj2De6ARj8utuAnoANg/ne6y3WgWjTtyGuoiP +CAtxLTmzaaSQQYr4q4KIcGtO0dCm5ewsv+WRoem5ZBl7wPtCkdayfBU3/u9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfU5tZJJZqy1pL/XaVEoTJ3TB08MwHwYDVR0j BBgwFoAUEJXqeHA4Jqz1+iJB6ysbZqLESFowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTVkZDU3My0zMWY0LTQxNmMtYTFiNy02OThkNmIxNjk3YWQvMC8xMDk1RUE3ODcw MzgyNkFDRjVGQTIyNDFFQjJCMUI2NkEyQzQ0ODVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZBMkM0 NDg1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk1ZGQ1NzMtMzFmNC00MTZjLWEx YjctNjk4ZDZiMTY5N2FkLzAvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFC NjZBMkM0NDg1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGruqHLHu+Uf3B8Y1omPpoG3LEkYv65cT4kS TZp8I1Da4OS7vpRw2SXfltKlXUE7m0+zbUsGPAP5CofW3w4Gy+PK8yFiMShH/b4D bcMJ1u9QXEvUixtEK1OuRcokwNalITMjI6sZJ2YCbsFRYNdNLsVhoRbTeZxty3Wr hFZf0ZU3N0pP/iiDFIEXBowF1qk5PHmieZHtJ835AdoqaJUsL2adwuqlIscJqTV/ 0vyCFLBI9AU9syW9VqlFW+xQ9GTW6b4HhDAFfIJJGoWHvTZ8Whz15l5AvfEFewKb CBGXcGuDk4TsPH0tcI2Si72kWfZT4Hvm4IdBGf+XjhKW+IlMQKs= -----END CERTIFICATE-----Generated at Thu Jun 5 19:48:05 2025 by rpki-client