$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft File: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft (raw, json) Hash identifier: QxVdFtmfrkjRrWTjvdRO0g4puIabtAzDtfn//D2hJC0= Subject key identifier: FE:4F:71:85:BA:56:5D:31:EF:9C:41:CB:AA:CB:66:8B:9A:C9:77:E6 Authority key identifier: 95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 Certificate issuer: /CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Certificate serial: 63A0F0DA607985C1DB7B2B5DB2EF2E1500EE949E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft Manifest number: B7 Signing time: Sun 20 Jul 2025 04:31:23 +0000 Manifest this update: Sun 20 Jul 2025 04:26:23 +0000 Manifest next update: Wed 23 Jul 2025 09:26:23 +0000 Files and hashes: 1: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl (hash: hzWQqpTWb7reeyETAzGHfVFKM6GDcZMAPD8Wu/pEJZg=) 2: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: +Xk0mxGkc/lCxZDeUptrpwZhCqCSnBV/uCVgeNZ+WpY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 09:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a0:f0:da:60:79:85:c1:db:7b:2b:5d:b2:ef:2e:15:00:ee:94:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Validity Not Before: Jul 20 04:26:23 2025 GMT Not After : Jul 23 09:26:23 2025 GMT Subject: CN=FE4F7185BA565D31EF9C41CBAACB668B9AC977E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:30:f7:9a:e7:3d:9a:55:d6:7e:d2:e5:5b:da: a9:0a:48:9e:6b:72:e7:5d:ec:aa:24:49:e3:86:90: 69:0d:e5:5e:fc:dd:64:f3:7d:f9:da:64:95:09:ec: 01:cc:26:60:9e:83:03:89:4a:c7:05:d1:74:66:40: 37:4d:eb:03:41:b2:4f:b6:a7:17:7e:9c:cd:6e:fe: 7a:41:2e:f7:b8:37:62:ce:90:50:db:73:b0:0d:c8: c0:17:fe:70:cb:f8:8f:d6:42:f3:ba:c0:ec:00:98: d6:47:42:58:13:6a:a7:52:86:2a:c1:86:a9:19:69: f2:81:88:e9:1b:8a:fd:7c:29:83:7c:d3:46:59:5f: 8d:71:c3:68:80:c0:ba:3a:9f:b9:d2:56:48:77:f4: 90:dd:51:5b:e8:6b:40:03:33:ab:70:ef:2a:fe:d5: 2e:f5:b8:9b:cc:f6:a8:14:a0:bf:36:cf:09:86:6e: 25:f0:ef:50:c7:d1:e2:28:ec:97:3f:25:cb:8e:8c: 3e:ae:13:7e:79:c3:91:e6:89:5e:7e:d4:05:0d:d0: b6:c0:86:32:50:60:91:8b:4e:c7:44:c4:8f:49:3b: 54:55:d0:f1:5c:9d:f1:43:d5:c3:e5:f8:75:1c:fa: 28:1e:1f:4b:e2:b9:f7:ff:76:a9:92:e2:4a:40:fc: 5f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4F:71:85:BA:56:5D:31:EF:9C:41:CB:AA:CB:66:8B:9A:C9:77:E6 X509v3 Authority Key Identifier: keyid:95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:fb:f0:4a:02:47:94:cd:92:fd:31:26:6e:0e:c2:60:5a:b7: 5b:c0:69:1d:e0:ab:9b:54:17:83:05:de:be:73:c3:a7:24:61: 65:38:b2:43:56:eb:ec:66:33:16:f4:30:a3:55:4e:e5:79:56: 8b:4e:76:d5:86:14:10:ff:ea:21:41:f2:14:9b:aa:31:8d:3e: ad:f8:7e:36:e6:4f:b4:73:7f:fa:7c:bf:39:b4:3c:25:d1:28: f4:e4:72:6b:4e:f2:e7:da:d9:83:c1:66:ba:31:d0:89:51:03: 8c:9d:8a:61:25:97:5d:2d:9d:62:de:a5:0e:fe:24:7b:15:c6: 24:b5:4e:d7:38:ab:29:3b:14:af:7e:30:49:b1:b4:8f:9d:14: 36:e8:82:9e:58:e3:63:42:78:d5:6d:2a:6e:08:ef:55:a5:44: e9:54:d1:9b:cc:e8:5c:9b:cc:aa:91:f9:1f:d8:54:b8:9a:f0: 9a:b6:00:c1:f3:62:0b:56:1c:b3:2f:2f:9e:3c:ae:ed:c8:33: d7:a1:19:ce:d2:3c:45:4b:7c:f0:4f:07:e7:24:d6:79:66:9b: 1a:23:e6:c7:69:66:34:4a:0b:be:b7:82:38:69:70:e1:04:4f: 5c:8f:1d:a7:1e:dd:c6:b3:c0:eb:0e:d2:72:46:c0:47:ac:75: 80:3c:37:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY6Dw2mB5hcHbeytdsu8uFQDulJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVB MzI4RDY4OTAeFw0yNTA3MjAwNDI2MjNaFw0yNTA3MjMwOTI2MjNaMDMxMTAvBgNV BAMTKEZFNEY3MTg1QkE1NjVEMzFFRjlDNDFDQkFBQ0I2NjhCOUFDOTc3RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9MPea5z2aVdZ+0uVb2qkKSJ5r cudd7KokSeOGkGkN5V783WTzffnaZJUJ7AHMJmCegwOJSscF0XRmQDdN6wNBsk+2 pxd+nM1u/npBLve4N2LOkFDbc7ANyMAX/nDL+I/WQvO6wOwAmNZHQlgTaqdShirB hqkZafKBiOkbiv18KYN800ZZX41xw2iAwLo6n7nSVkh39JDdUVvoa0ADM6tw7yr+ 1S71uJvM9qgUoL82zwmGbiXw71DH0eIo7Jc/JcuOjD6uE355w5HmiV5+1AUN0LbA hjJQYJGLTsdExI9JO1RV0PFcnfFD1cPl+HUc+igeH0viuff/dqmS4kpA/F/LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/k9xhbpWXTHvnEHLqstmi5rJd+YwHwYDVR0j BBgwFoAUlfrDilyyzqPl/+JJVianvqMo1okwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMC85NUZBQzM4QTVD QjJDRUEzRTVGRkUyNDk1NjI2QTdCRUEzMjhENjg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVBMzI4 RDY4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3 QkVBMzI4RDY4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAID78EoCR5TNkv0xJm4OwmBat1vAaR3gq5tU F4MF3r5zw6ckYWU4skNW6+xmMxb0MKNVTuV5VotOdtWGFBD/6iFB8hSbqjGNPq34 fjbmT7Rzf/p8vzm0PCXRKPTkcmtO8ufa2YPBZrox0IlRA4ydimEll10tnWLepQ7+ JHsVxiS1Ttc4qyk7FK9+MEmxtI+dFDbogp5Y42NCeNVtKm4I71WlROlU0ZvM6Fyb zKqR+R/YVLia8Jq2AMHzYgtWHLMvL548ru3IM9ehGc7SPEVLfPBPB+ck1nlmmxoj 5sdpZjRKC763gjhpcOEET1yPHace3cazwOsO0nJGwEesdYA8NwE= -----END CERTIFICATE-----Generated at Mon Jul 21 13:21:19 2025 by rpki-client