$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft File: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft (raw, json) Hash identifier: pLRubo6/hOzB05TVFozb2ytx35LNn/a+WfJBdlxiEHE= Subject key identifier: 63:98:21:1C:86:4A:21:33:56:93:2A:4A:72:59:79:9B:68:56:66:15 Authority key identifier: 95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 Certificate issuer: /CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Certificate serial: 0A3ADEBBDD1F428B411A178032E642C452AAE17B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft Manifest number: CC Signing time: Fri 05 Sep 2025 22:11:22 +0000 Manifest this update: Fri 05 Sep 2025 22:06:22 +0000 Manifest next update: Tue 09 Sep 2025 04:55:22 +0000 Files and hashes: 1: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: +Xk0mxGkc/lCxZDeUptrpwZhCqCSnBV/uCVgeNZ+WpY=) 2: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl (hash: 47In6DrE4m3xPJOAVpIIy7E3BMySoInqRek5b+a6keY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 04:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:3a:de:bb:dd:1f:42:8b:41:1a:17:80:32:e6:42:c4:52:aa:e1:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Validity Not Before: Sep 5 22:06:22 2025 GMT Not After : Sep 9 04:55:22 2025 GMT Subject: CN=6398211C864A213356932A4A7259799B68566615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:08:bd:d8:39:64:2a:6e:9e:58:ce:5c:56:aa: 62:9d:9d:d1:6c:b2:a6:f7:72:50:d1:1d:ff:95:54: 0d:fe:46:50:c2:43:ac:37:7f:77:02:56:25:8d:d1: da:60:40:00:74:1a:47:e8:21:e2:7c:a8:ea:66:f7: 65:3e:55:1d:73:c6:d7:75:76:cc:8f:ad:e3:7b:3a: c3:47:80:bc:5c:3f:1f:f0:74:30:17:ae:41:d5:45: cf:cc:5a:fa:51:7e:11:e3:15:47:01:6c:3a:58:48: 39:61:3d:6b:d1:f5:af:50:a2:28:f5:62:76:10:04: 00:6d:49:34:50:c0:be:08:3e:e6:e8:3a:81:32:7c: 69:8c:ba:19:02:f2:74:f2:37:06:23:e5:c1:3b:dd: 86:1b:e7:53:36:19:5f:c2:48:58:f6:fe:7b:5a:67: 62:e1:c7:62:6c:da:9c:af:c3:61:4d:bc:6c:94:eb: ab:f6:c3:1a:e8:e4:d0:be:07:7c:98:45:ee:88:6d: 8a:c7:bb:f6:81:cb:af:3d:80:27:32:bc:cf:f3:95: 5d:db:a3:84:78:87:2a:5b:99:8a:0d:c8:03:a7:02: f7:a7:f7:93:6c:dd:2d:fe:15:41:a2:13:26:33:a1: f9:0d:8c:2a:3b:5a:af:5e:26:ed:75:0a:cc:35:6b: 06:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:98:21:1C:86:4A:21:33:56:93:2A:4A:72:59:79:9B:68:56:66:15 X509v3 Authority Key Identifier: keyid:95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:c1:2e:a8:a1:56:a4:fe:08:22:69:d8:8b:64:b1:dc:ee:e8: 77:f6:2e:e9:85:ff:04:92:73:18:36:a7:7c:3d:20:85:9f:18: eb:f1:25:0d:b1:9f:26:9d:6f:47:91:f7:8a:1f:89:89:f3:26: 80:21:c1:cf:4a:39:65:94:ed:9b:7c:9b:7f:c2:56:c9:86:f0: 74:3f:db:6d:f5:0e:3f:0e:75:28:fc:94:71:93:25:13:1b:b8: a1:70:7f:b1:97:01:e5:5d:e0:a3:9a:0b:ab:fc:48:4b:fa:21: 46:31:21:89:4f:29:0f:db:05:ab:10:0b:56:1e:c1:db:5a:86: 87:bf:65:0c:ac:10:f3:c6:56:61:2f:87:a1:bc:01:24:a1:e8: 0d:48:d3:62:73:96:75:b2:d3:93:be:ff:3c:d6:90:5d:e9:49: 14:96:22:c2:45:d6:b2:83:8a:95:08:f9:8c:13:28:cf:2b:56: d3:47:b2:95:e8:f8:0e:58:45:fe:2b:cd:98:82:c6:4c:09:2d: b9:b0:27:ad:4b:48:1d:b8:48:c4:5c:ad:c5:f0:de:88:bb:ad: 9e:20:06:74:64:c5:59:7c:b5:25:e2:0b:2c:39:9d:4a:c7:c8: a1:7c:04:66:50:4c:54:02:c2:ea:77:7c:5d:92:40:ea:d1:0f: 2f:03:69:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCjreu90fQotBGheAMuZCxFKq4XswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVB MzI4RDY4OTAeFw0yNTA5MDUyMjA2MjJaFw0yNTA5MDkwNDU1MjJaMDMxMTAvBgNV BAMTKDYzOTgyMTFDODY0QTIxMzM1NjkzMkE0QTcyNTk3OTlCNjg1NjY2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8CL3YOWQqbp5YzlxWqmKdndFs sqb3clDRHf+VVA3+RlDCQ6w3f3cCViWN0dpgQAB0GkfoIeJ8qOpm92U+VR1zxtd1 dsyPreN7OsNHgLxcPx/wdDAXrkHVRc/MWvpRfhHjFUcBbDpYSDlhPWvR9a9Qoij1 YnYQBABtSTRQwL4IPuboOoEyfGmMuhkC8nTyNwYj5cE73YYb51M2GV/CSFj2/nta Z2Lhx2Js2pyvw2FNvGyU66v2wxro5NC+B3yYRe6IbYrHu/aBy689gCcyvM/zlV3b o4R4hypbmYoNyAOnAven95Ns3S3+FUGiEyYzofkNjCo7Wq9eJu11Csw1awZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY5ghHIZKITNWkypKcll5m2hWZhUwHwYDVR0j BBgwFoAUlfrDilyyzqPl/+JJVianvqMo1okwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMC85NUZBQzM4QTVD QjJDRUEzRTVGRkUyNDk1NjI2QTdCRUEzMjhENjg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVBMzI4 RDY4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3 QkVBMzI4RDY4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbBLqihVqT+CCJp2Itksdzu6Hf2LumF/wSS cxg2p3w9IIWfGOvxJQ2xnyadb0eR94ofiYnzJoAhwc9KOWWU7Zt8m3/CVsmG8HQ/ 2231Dj8OdSj8lHGTJRMbuKFwf7GXAeVd4KOaC6v8SEv6IUYxIYlPKQ/bBasQC1Ye wdtahoe/ZQysEPPGVmEvh6G8ASSh6A1I02JzlnWy05O+/zzWkF3pSRSWIsJF1rKD ipUI+YwTKM8rVtNHspXo+A5YRf4rzZiCxkwJLbmwJ61LSB24SMRcrcXw3oi7rZ4g BnRkxVl8tSXiCyw5nUrHyKF8BGZQTFQCwup3fF2SQOrRDy8DaZU= -----END CERTIFICATE-----Generated at Mon Sep 8 05:12:16 2025 by rpki-client