$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft File: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft (raw, json) Hash identifier: x+HYjRNVxTejb2tXWE1a5e5hD3L9HDkJ390JOjyn700= Subject key identifier: 0F:87:F6:73:C6:59:56:9D:3E:F3:C1:3A:76:86:BF:32:8D:AD:1F:EF Authority key identifier: 95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 Certificate issuer: /CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Certificate serial: 2DD8AFF16FB2E6EB587E6547AA10DAFD641DF054 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft Manifest number: 8B Signing time: Sun 13 Apr 2025 00:41:20 +0000 Manifest this update: Sun 13 Apr 2025 00:36:20 +0000 Manifest next update: Wed 16 Apr 2025 06:25:20 +0000 Files and hashes: 1: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl (hash: 153gGq+spEM7bJw1/QADZZ0Ym/9ZZVshjMj1JU09bJ0=) 2: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: PiWVlKjUs0amBWCdvxLs5cX1/7M8WB7XrVQaBgAMMxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 06:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d8:af:f1:6f:b2:e6:eb:58:7e:65:47:aa:10:da:fd:64:1d:f0:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Validity Not Before: Apr 13 00:36:20 2025 GMT Not After : Apr 16 06:25:20 2025 GMT Subject: CN=0F87F673C659569D3EF3C13A7686BF328DAD1FEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:75:78:7d:a8:96:1a:da:4b:7a:51:de:c8:be: 2e:6d:d0:69:df:b4:90:c4:65:57:e4:6a:fd:2d:26: 8b:04:e0:0d:a8:62:ee:36:8f:ff:9a:41:9c:78:8a: a8:9a:5f:09:52:c2:f3:23:ee:28:87:6a:d4:26:0e: 10:75:7f:ab:8f:ae:19:97:41:91:06:c3:82:a7:87: 24:87:45:5f:ec:aa:da:21:db:c7:18:4b:fc:86:f0: e7:9e:cd:79:f6:61:38:d5:cf:4d:b8:0e:25:83:a0: ea:f0:2b:2f:69:1c:3c:0f:8d:fd:22:c4:a5:f6:0f: cc:53:45:3f:27:77:b0:6e:7f:2b:0f:bb:1c:8f:15: 58:f4:64:bb:57:b4:e1:83:1a:ae:8d:b3:6a:9a:e3: 74:8b:b0:7c:d2:43:3f:0a:ac:c3:4e:90:b7:2d:b8: ed:04:bd:4e:b8:fb:08:ec:20:5c:c8:3f:7e:a7:ae: 0b:bc:e9:95:fd:d3:14:58:b6:f8:0b:7a:30:63:c6: df:37:d7:73:12:69:7c:b6:f6:0a:6c:23:ed:cb:5b: 0d:08:78:40:8c:63:48:cd:36:80:6c:9f:3c:db:f6: 5f:82:a5:e4:c3:3a:a7:06:1b:95:23:e4:22:7d:99: 96:e1:02:29:96:7f:c3:1d:44:f7:d8:3c:1e:c7:c7: 06:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:87:F6:73:C6:59:56:9D:3E:F3:C1:3A:76:86:BF:32:8D:AD:1F:EF X509v3 Authority Key Identifier: keyid:95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7f:e5:a1:53:26:ec:02:d3:1e:02:6d:30:cd:22:72:f2:81: bb:d7:88:22:3d:04:e9:f8:f9:12:72:11:6e:ae:7d:e0:ef:59: 13:f6:cf:12:3a:50:38:7b:f9:8f:c5:36:93:f3:e1:47:ce:7e: 8b:4c:3b:51:4c:aa:6b:8e:1b:24:ec:6a:ff:bb:a2:17:e1:e1: f5:b1:01:dd:9c:09:db:ff:b9:85:2b:c1:c5:18:cc:07:3c:97: c3:08:bf:e7:33:5f:1f:61:ae:37:1d:5b:ba:b6:32:e5:bb:46: ef:b5:be:34:d3:07:ca:e9:53:a4:2e:0f:a0:ae:45:94:34:26: 59:c5:5d:ed:91:65:0f:75:77:e9:9e:ee:47:c6:79:b8:44:fa: 7e:1e:e3:f9:96:84:e8:d5:1b:92:36:4d:90:73:bd:21:fa:55: 60:08:76:f3:97:3a:b9:f8:e6:b9:c2:23:9f:ff:05:76:d6:19: e4:85:e6:a5:8a:02:0d:e8:e1:8e:d9:d7:a7:dd:d6:d4:1a:f2: 50:b3:83:d4:a2:6e:de:1b:a9:2c:43:99:d8:50:98:aa:29:f2: 49:40:38:b5:ff:5b:92:5f:7b:6e:0c:b1:7a:ba:9d:93:90:6a: a1:79:80:08:df:02:5c:26:e9:f5:c8:0d:fc:4e:75:50:82:07: 9a:98:2e:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULdiv8W+y5utYfmVHqhDa/WQd8FQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVB MzI4RDY4OTAeFw0yNTA0MTMwMDM2MjBaFw0yNTA0MTYwNjI1MjBaMDMxMTAvBgNV BAMTKDBGODdGNjczQzY1OTU2OUQzRUYzQzEzQTc2ODZCRjMyOERBRDFGRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdXh9qJYa2kt6Ud7Ivi5t0Gnf tJDEZVfkav0tJosE4A2oYu42j/+aQZx4iqiaXwlSwvMj7iiHatQmDhB1f6uPrhmX QZEGw4KnhySHRV/sqtoh28cYS/yG8OeezXn2YTjVz024DiWDoOrwKy9pHDwPjf0i xKX2D8xTRT8nd7BufysPuxyPFVj0ZLtXtOGDGq6Ns2qa43SLsHzSQz8KrMNOkLct uO0EvU64+wjsIFzIP36nrgu86ZX90xRYtvgLejBjxt8313MSaXy29gpsI+3LWw0I eECMY0jNNoBsnzzb9l+CpeTDOqcGG5Uj5CJ9mZbhAimWf8MdRPfYPB7Hxwa9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD4f2c8ZZVp0+88E6doa/Mo2tH+8wHwYDVR0j BBgwFoAUlfrDilyyzqPl/+JJVianvqMo1okwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMC85NUZBQzM4QTVD QjJDRUEzRTVGRkUyNDk1NjI2QTdCRUEzMjhENjg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVBMzI4 RDY4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3 QkVBMzI4RDY4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJp/5aFTJuwC0x4CbTDNInLygbvXiCI9BOn4 +RJyEW6ufeDvWRP2zxI6UDh7+Y/FNpPz4UfOfotMO1FMqmuOGyTsav+7ohfh4fWx Ad2cCdv/uYUrwcUYzAc8l8MIv+czXx9hrjcdW7q2MuW7Ru+1vjTTB8rpU6QuD6Cu RZQ0JlnFXe2RZQ91d+me7kfGebhE+n4e4/mWhOjVG5I2TZBzvSH6VWAIdvOXOrn4 5rnCI5//BXbWGeSF5qWKAg3o4Y7Z16fd1tQa8lCzg9Sibt4bqSxDmdhQmKop8klA OLX/W5Jfe24MsXq6nZOQaqF5gAjfAlwm6fXIDfxOdVCCB5qYLpM= -----END CERTIFICATE-----Generated at Tue Apr 15 03:31:18 2025 by rpki-client