$ rpki-client -vvf repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft File: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft (raw, json) Hash identifier: JPAEfDptm3yXxFMT2Wzxjv2xtRRCwieXcauTmGjATiE= Subject key identifier: DF:52:D3:B2:53:82:0A:00:D8:F6:16:53:E2:C6:39:23:4A:83:07:84 Authority key identifier: 95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 Certificate issuer: /CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Certificate serial: 6F0FE1249D615CB3FD96D20325113AB7003AB923 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft Manifest number: 04BD Signing time: Sat 05 Apr 2025 19:02:18 +0000 Manifest this update: Sat 05 Apr 2025 18:57:18 +0000 Manifest next update: Tue 08 Apr 2025 22:14:18 +0000 Files and hashes: 1: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl (hash: OkyaU63LeOebVHTaK2q9S2/ait9JAmxtbHd647izJ6I=) 2: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: XLazE5Vn7z334jOwYoK8rFCOURJrA8ecY+QUwxwWDNY=) 3: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: 13BZZGez00+LUIyTx+ZwpCt/BEy8rtR8zU/43gX10+4=) 4: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: bRRSscYjeY2YxaSN5983EHi4JM8B0mDZlHR23US7qhc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:0f:e1:24:9d:61:5c:b3:fd:96:d2:03:25:11:3a:b7:00:3a:b9:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Validity Not Before: Apr 5 18:57:18 2025 GMT Not After : Apr 8 22:14:18 2025 GMT Subject: CN=DF52D3B253820A00D8F61653E2C639234A830784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:23:05:7e:b2:89:0f:c9:69:d0:bc:cd:64:56: 60:7a:3f:6c:b4:90:8e:63:39:f2:7c:10:c9:66:41: f4:ff:f6:94:9b:ba:01:d8:90:cf:e8:4e:16:b8:c8: 06:39:67:1d:46:ab:b1:6e:ff:5f:c9:fc:bd:a5:05: 1b:1b:2f:54:cf:1e:79:8a:da:a0:d2:5a:08:b8:e9: d3:18:82:0b:6b:73:98:c7:a5:2e:a7:6d:0c:0d:c2: 0a:7a:96:c7:07:4f:33:5f:8d:62:21:87:f3:59:03: f4:ac:d0:33:bc:0c:71:3e:a6:c7:f9:09:a7:65:89: d6:99:8c:80:79:f9:17:de:7e:3f:3a:e3:b3:7e:60: 7e:73:7a:54:d0:e3:40:bc:18:15:4c:95:e1:9e:55: 60:b5:1e:9b:80:3b:4a:aa:c0:2b:16:b6:13:80:ac: d7:b2:2c:1b:21:60:06:57:c6:26:e9:75:89:79:7b: cb:3b:c2:2a:38:13:ff:5b:5a:bc:a1:b3:f5:1b:6e: 6e:ab:bb:46:2c:0c:cb:34:ee:47:5a:cd:c5:c6:8e: fb:0d:84:68:1e:ed:86:09:0e:20:53:81:1e:63:f5: cc:a7:9f:58:04:da:6b:d1:52:3f:85:4a:9d:d8:51: 75:d8:4b:47:23:65:3c:8f:fd:67:79:59:3f:02:28: 1e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:52:D3:B2:53:82:0A:00:D8:F6:16:53:E2:C6:39:23:4A:83:07:84 X509v3 Authority Key Identifier: keyid:95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:a3:e5:dd:62:61:a1:62:26:69:2f:41:50:81:3a:83:29:bb: 76:af:ec:67:cb:cb:d2:19:d0:8c:a7:c9:07:b9:63:71:a3:45: c6:04:6d:6c:39:11:b3:45:3d:18:b2:80:61:83:b5:5f:7b:49: 77:88:fd:aa:d6:1c:9f:29:2a:d2:c2:93:94:91:55:c5:72:f3: 04:af:fe:2e:4f:2c:dc:92:05:f4:e6:89:a3:19:7e:eb:91:60: b9:39:98:2c:6d:03:61:38:62:58:63:d2:87:d2:05:27:aa:af: 9b:a3:82:56:7c:db:38:19:08:d3:23:bf:7b:4f:11:15:b2:80: a2:ba:76:49:16:9e:84:d7:3f:0e:28:5d:82:70:a8:cf:ff:52: a4:6c:88:1f:1e:70:a7:b9:18:4e:34:f5:1d:08:d9:e2:20:4e: db:b9:56:fd:ab:6a:32:56:92:c0:31:07:66:ee:ab:df:8c:d0: fd:d8:62:34:ce:13:61:4f:eb:18:5f:68:19:5d:8c:05:4e:2f: 50:d8:79:8a:08:7d:3a:22:a5:9a:0e:ed:45:1a:6b:2f:a2:a0: 84:7d:02:fc:8b:2e:4d:c2:41:dc:77:ef:df:6d:54:18:02:65: 22:69:34:13:04:bd:16:46:91:2f:70:3d:3a:82:91:31:36:e4: 3e:26:81:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbw/hJJ1hXLP9ltIDJRE6twA6uSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0 NjQ2MUFCMzAeFw0yNTA0MDUxODU3MThaFw0yNTA0MDgyMjE0MThaMDMxMTAvBgNV BAMTKERGNTJEM0IyNTM4MjBBMDBEOEY2MTY1M0UyQzYzOTIzNEE4MzA3ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqIwV+sokPyWnQvM1kVmB6P2y0 kI5jOfJ8EMlmQfT/9pSbugHYkM/oTha4yAY5Zx1Gq7Fu/1/J/L2lBRsbL1TPHnmK 2qDSWgi46dMYggtrc5jHpS6nbQwNwgp6lscHTzNfjWIhh/NZA/Ss0DO8DHE+psf5 CadlidaZjIB5+Rfefj8647N+YH5zelTQ40C8GBVMleGeVWC1HpuAO0qqwCsWthOA rNeyLBshYAZXxibpdYl5e8s7wio4E/9bWryhs/Ubbm6ru0YsDMs07kdazcXGjvsN hGge7YYJDiBTgR5j9cynn1gE2mvRUj+FSp3YUXXYS0cjZTyP/Wd5WT8CKB5zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU31LTslOCCgDY9hZT4sY5I0qDB4QwHwYDVR0j BBgwFoAUldkTaEX6+geVc11Kmw/590ZGGrMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc4NWU2NS01MWUyLTRiMWItODJmOS1lNzUzYWQ0YjI0MGYvMC85NUQ5MTM2ODQ1 RkFGQTA3OTU3MzVENEE5QjBGRjlGNzQ2NDYxQUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0NjQ2 MUFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5 Rjc0NjQ2MUFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWj5d1iYaFiJmkvQVCBOoMpu3av7GfLy9IZ 0IynyQe5Y3GjRcYEbWw5EbNFPRiygGGDtV97SXeI/arWHJ8pKtLCk5SRVcVy8wSv /i5PLNySBfTmiaMZfuuRYLk5mCxtA2E4Ylhj0ofSBSeqr5ujglZ82zgZCNMjv3tP ERWygKK6dkkWnoTXPw4oXYJwqM//UqRsiB8ecKe5GE409R0I2eIgTtu5Vv2rajJW ksAxB2buq9+M0P3YYjTOE2FP6xhfaBldjAVOL1DYeYoIfToipZoO7UUaay+ioIR9 AvyLLk3CQdx3799tVBgCZSJpNBMEvRZGkS9wPTqCkTE25D4mgSk= -----END CERTIFICATE-----Generated at Sat Apr 5 22:29:18 2025 by rpki-client