$ rpki-client -vvf repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft File: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft (raw, json) Hash identifier: 74imeQyQGYM1V1TnoHtbd8Lw6MUbn6NfK1rZMNokVqg= Subject key identifier: D4:80:1C:4A:2E:62:93:C7:B1:05:8A:D0:75:8B:A6:D3:A0:16:06:08 Authority key identifier: 95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 Certificate issuer: /CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Certificate serial: 67D7EA8B4BE5B08DADD8DA1EE5CC21979F9EC3A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft Manifest number: 04D7 Signing time: Mon 02 Jun 2025 02:04:19 +0000 Manifest this update: Mon 02 Jun 2025 01:59:19 +0000 Manifest next update: Thu 05 Jun 2025 09:54:19 +0000 Files and hashes: 1: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: hccolhWeQwMhTE4DUNZtMqz3UE4I8axgnsLj/aGjWu0=) 2: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl (hash: gXnE+kO526ls1BMfmw7kmEmPif5Ug9IW4bAwbjREQ4Y=) 3: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: ifCGuusxkGprBC7NulQNufNvo7SVC5amSJ/1S4uaqjQ=) 4: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: LZPQ7rMeaDVcHWLsKLTFoADUeRBC0AnGmqL6VPS4zMA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 09:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d7:ea:8b:4b:e5:b0:8d:ad:d8:da:1e:e5:cc:21:97:9f:9e:c3:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Validity Not Before: Jun 2 01:59:19 2025 GMT Not After : Jun 5 09:54:19 2025 GMT Subject: CN=D4801C4A2E6293C7B1058AD0758BA6D3A0160608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:29:89:ca:cb:de:6f:5b:40:2b:9d:c0:c5:e9: 28:93:a9:92:8f:40:31:6b:96:2d:50:a1:78:77:c3: aa:c4:a7:16:55:ed:04:6d:d7:0c:64:03:66:f9:03: 25:91:f6:cf:88:63:2f:ef:22:09:83:2b:43:6e:34: 7a:21:eb:ab:2f:1c:16:72:5a:fa:82:96:55:9b:62: 1a:fd:78:72:ac:a8:41:d3:a8:57:ec:7e:fb:42:ab: d5:1a:60:a9:f3:73:c8:7a:32:e4:db:5d:ab:5d:ea: 05:6c:04:cf:6c:91:48:ce:12:0f:47:8f:0d:c9:72: 1a:d0:5f:1c:ab:23:65:8a:a0:f3:2e:37:37:c5:fa: 56:6d:97:83:42:55:e2:26:e2:b5:35:ce:0c:11:c7: e2:75:88:13:69:ac:0f:81:d6:1d:01:f4:48:c2:77: d6:40:24:8f:5f:32:47:98:8c:c0:ea:60:e6:99:c3: 9d:d3:fa:ce:3e:72:ad:69:a2:2d:b7:a6:ba:41:fd: 4e:37:e4:20:cf:c0:f0:80:59:60:48:2f:17:00:2f: 29:c9:4d:7f:3a:40:4d:96:20:37:74:39:61:47:ef: d4:f8:d2:90:f7:1b:73:51:17:43:1f:28:ee:51:c5: 2f:b2:47:72:7c:38:92:d6:b7:66:4b:3f:15:fd:e1: fb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:80:1C:4A:2E:62:93:C7:B1:05:8A:D0:75:8B:A6:D3:A0:16:06:08 X509v3 Authority Key Identifier: keyid:95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:ce:ea:81:c3:e5:a2:a0:47:1f:d9:0a:68:ff:0c:22:21:23: 81:f9:e0:f5:d8:e9:0d:05:61:55:c2:00:c8:5e:a7:e3:c5:23: 6b:94:36:11:35:aa:09:91:02:cc:05:8e:70:5b:a6:f6:6a:55: c3:b5:95:4b:8b:f1:6f:68:1c:37:43:8f:9f:1e:de:7f:8e:c7: 0e:71:58:91:c3:a3:df:e8:84:70:b2:b4:da:24:87:67:a6:fc: c7:c5:b9:ac:81:5c:fa:bf:93:69:f7:41:b1:49:5c:6e:91:f5: b8:ae:e1:03:ac:0c:8b:dd:79:56:6a:6b:35:92:2a:8e:57:fa: 4a:cc:a6:d6:b6:4a:9b:87:c6:8e:18:b1:7d:d0:e9:24:a6:eb: a7:d0:32:13:7a:56:8f:d3:16:ef:be:23:b4:d2:f9:1c:d9:18: 01:c4:5c:59:73:a9:9d:7a:d7:9b:8f:93:b6:f4:58:f4:f4:fd: c5:37:9d:ea:20:e4:9e:63:be:90:91:21:9b:e1:cd:2e:6d:e5: bb:c7:82:30:f5:2e:88:9b:b7:43:54:19:91:64:e5:f5:8d:56: 39:f2:bc:16:52:cb:ab:c4:13:bf:96:db:b7:60:7e:3f:68:93: b6:ad:56:9f:bc:3a:88:39:4c:2e:7a:38:ae:0f:ba:3c:43:2d: ed:b7:06:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ9fqi0vlsI2t2Noe5cwhl5+ew6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0 NjQ2MUFCMzAeFw0yNTA2MDIwMTU5MTlaFw0yNTA2MDUwOTU0MTlaMDMxMTAvBgNV BAMTKEQ0ODAxQzRBMkU2MjkzQzdCMTA1OEFEMDc1OEJBNkQzQTAxNjA2MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEKYnKy95vW0ArncDF6SiTqZKP QDFrli1QoXh3w6rEpxZV7QRt1wxkA2b5AyWR9s+IYy/vIgmDK0NuNHoh66svHBZy WvqCllWbYhr9eHKsqEHTqFfsfvtCq9UaYKnzc8h6MuTbXatd6gVsBM9skUjOEg9H jw3JchrQXxyrI2WKoPMuNzfF+lZtl4NCVeIm4rU1zgwRx+J1iBNprA+B1h0B9EjC d9ZAJI9fMkeYjMDqYOaZw53T+s4+cq1poi23prpB/U435CDPwPCAWWBILxcALynJ TX86QE2WIDd0OWFH79T40pD3G3NRF0MfKO5RxS+yR3J8OJLWt2ZLPxX94fsBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1IAcSi5ik8exBYrQdYum06AWBggwHwYDVR0j BBgwFoAUldkTaEX6+geVc11Kmw/590ZGGrMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc4NWU2NS01MWUyLTRiMWItODJmOS1lNzUzYWQ0YjI0MGYvMC85NUQ5MTM2ODQ1 RkFGQTA3OTU3MzVENEE5QjBGRjlGNzQ2NDYxQUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0NjQ2 MUFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5 Rjc0NjQ2MUFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDO6oHD5aKgRx/ZCmj/DCIhI4H54PXY6Q0F YVXCAMhep+PFI2uUNhE1qgmRAswFjnBbpvZqVcO1lUuL8W9oHDdDj58e3n+Oxw5x WJHDo9/ohHCytNokh2em/MfFuayBXPq/k2n3QbFJXG6R9biu4QOsDIvdeVZqazWS Ko5X+krMpta2SpuHxo4YsX3Q6SSm66fQMhN6Vo/TFu++I7TS+RzZGAHEXFlzqZ16 15uPk7b0WPT0/cU3neog5J5jvpCRIZvhzS5t5bvHgjD1Loibt0NUGZFk5fWNVjny vBZSy6vEE7+W27dgfj9ok7atVp+8Oog5TC56OK4PujxDLe23BoA= -----END CERTIFICATE-----Generated at Tue Jun 3 23:17:45 2025 by rpki-client