$ rpki-client -vvf repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft File: 95966A8DB250307CF9852483F96922EE520F6E2A.mft (raw, json) Hash identifier: t2DXTaa3+OBvxgGv9THJm8r2RXhRefcUNr44IVnwijc= Subject key identifier: 5D:34:A9:0C:CD:47:A3:D8:FF:0D:8D:E3:25:3A:13:C5:6C:2D:C1:6C Authority key identifier: 95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A Certificate issuer: /CN=95966A8DB250307CF9852483F96922EE520F6E2A Certificate serial: 38F16F10269F0FD3FB10AD3DEABA5AF34B51358F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft Manifest number: 02AD Signing time: Sun 06 Apr 2025 05:40:00 +0000 Manifest this update: Sun 06 Apr 2025 05:35:00 +0000 Manifest next update: Wed 09 Apr 2025 05:59:00 +0000 Files and hashes: 1: 3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa (hash: yijgZGAzH5m/suHYf+93ec2StnmCRT8aHziW14hBnJ4=) 2: 3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa (hash: PdjinzPpF/36hO9HHqQU4IxHNvTYYZFMsZTPnz+oEJM=) 3: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (hash: JsesZ2XEjGD90Q6rb53op1u+M0C8ZTvk1vBXUWFrpwg=) 4: 3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa (hash: 2Tm0gdcz+myuN01m+Uce2N/XVde2LN8VW21KDbbagQI=) 5: 95966A8DB250307CF9852483F96922EE520F6E2A.crl (hash: 9rpaHi75bf65Mv5k1eSSveU5OavL5+iS4xdpTByllsE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 05:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f1:6f:10:26:9f:0f:d3:fb:10:ad:3d:ea:ba:5a:f3:4b:51:35:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95966A8DB250307CF9852483F96922EE520F6E2A Validity Not Before: Apr 6 05:35:00 2025 GMT Not After : Apr 9 05:59:00 2025 GMT Subject: CN=5D34A90CCD47A3D8FF0D8DE3253A13C56C2DC16C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:80:f9:4c:b9:63:16:75:69:22:c8:3c:f3:ae: 94:3d:7c:d4:4b:d6:95:9c:ab:58:5a:a5:d5:9b:af: 7c:02:58:ee:7d:cc:e3:d9:dc:6d:1d:5f:a0:67:d7: 45:60:e1:d2:5a:78:00:be:3c:9c:83:e2:02:f0:23: c5:81:4e:34:fa:ca:f5:ab:d3:81:9d:36:6f:6d:3b: ea:b7:21:53:63:96:7c:3a:91:7a:6b:f1:24:cc:dc: 73:5b:65:87:0c:13:c7:01:ee:0b:47:14:7a:7e:63: b9:02:87:62:22:b9:8b:2c:bd:86:b3:04:31:40:5e: 99:b8:50:fd:ee:f0:5a:48:fa:1a:4c:2e:11:aa:e1: 07:92:eb:69:5d:15:ab:27:48:93:01:da:1a:be:3e: c4:73:9f:d3:89:12:a6:49:47:79:35:ce:9e:29:a9: 27:4b:aa:4f:33:9e:5a:e3:bf:2a:a0:42:c2:8d:0e: 52:64:e4:87:76:17:7f:f8:1c:7d:ba:7f:f7:9b:83: a6:ae:b2:34:6d:20:f3:fa:52:55:20:13:d4:7a:36: 9a:f1:71:d0:71:26:89:69:7c:63:ee:3b:dc:fd:38: f5:c9:34:74:b6:f0:37:ed:ea:cf:d4:d6:eb:40:7e: e7:b5:30:bd:2b:ae:7c:a9:05:bd:4b:99:dc:2b:fa: 7d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:34:A9:0C:CD:47:A3:D8:FF:0D:8D:E3:25:3A:13:C5:6C:2D:C1:6C X509v3 Authority Key Identifier: keyid:95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:6d:cc:02:3d:17:a7:7f:2b:e8:f4:8d:b1:b9:59:a7:12:22: 05:1b:6d:73:7a:79:3c:90:4b:c7:be:4b:c7:ed:75:f3:9d:a1: 8c:37:cb:7c:b8:63:f6:c1:28:5c:3d:f5:d1:66:ae:a8:3f:cd: 2a:61:ad:8b:d9:30:59:00:06:a8:ba:eb:7b:0a:05:22:b9:1f: 0d:93:19:66:4e:a7:05:b6:3a:73:4c:d3:cb:5b:9c:e8:61:91: c9:e8:89:9e:35:b3:94:3c:c2:82:43:91:7e:19:21:fc:92:60: 01:d3:e7:c0:a8:fe:96:73:c3:e7:cb:07:98:57:45:3a:d2:e6: c5:f1:1a:fd:fd:81:8f:c9:23:b9:2b:10:3a:99:48:02:12:16: 14:e2:17:c0:ef:b7:c9:b2:b1:e2:4b:43:2e:ca:4e:98:8c:4e: 19:66:b7:de:19:13:51:f0:b9:cf:ff:f3:e8:88:f7:26:03:3c: fc:fe:c2:ee:e2:69:38:9f:1f:1e:30:8e:c8:9a:7c:00:47:6c: 2a:5f:e2:72:80:65:55:39:71:2f:bb:ee:39:83:f1:5b:a8:22: 06:0a:5c:ca:7c:88:e4:50:c9:59:47:00:39:40:89:e5:fc:ad: 56:86:60:ad:87:46:a2:a7:b5:c3:ca:6b:41:24:db:3d:f4:22: 64:62:c7:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOPFvECafD9P7EK096rpa80tRNY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1 MjBGNkUyQTAeFw0yNTA0MDYwNTM1MDBaFw0yNTA0MDkwNTU5MDBaMDMxMTAvBgNV BAMTKDVEMzRBOTBDQ0Q0N0EzRDhGRjBEOERFMzI1M0ExM0M1NkMyREMxNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVgPlMuWMWdWkiyDzzrpQ9fNRL 1pWcq1hapdWbr3wCWO59zOPZ3G0dX6Bn10Vg4dJaeAC+PJyD4gLwI8WBTjT6yvWr 04GdNm9tO+q3IVNjlnw6kXpr8STM3HNbZYcME8cB7gtHFHp+Y7kCh2IiuYssvYaz BDFAXpm4UP3u8FpI+hpMLhGq4QeS62ldFasnSJMB2hq+PsRzn9OJEqZJR3k1zp4p qSdLqk8znlrjvyqgQsKNDlJk5Id2F3/4HH26f/ebg6ausjRtIPP6UlUgE9R6Nprx cdBxJolpfGPuO9z9OPXJNHS28Dft6s/U1utAfue1ML0rrnypBb1Lmdwr+n1VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXTSpDM1Ho9j/DY3jJToTxWwtwWwwHwYDVR0j BBgwFoAUlZZqjbJQMHz5hSSD+Wki7lIPbiowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmYxNDE3YS01NzE4LTQwNzEtOWYzNS1jMTIyNTU1ZGFjN2EvMC85NTk2NkE4REIy NTAzMDdDRjk4NTI0ODNGOTY5MjJFRTUyMEY2RTJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1MjBG NkUyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJmMTQxN2EtNTcxOC00MDcxLTlm MzUtYzEyMjU1NWRhYzdhLzAvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIy RUU1MjBGNkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFtzAI9F6d/K+j0jbG5WacSIgUbbXN6eTyQ S8e+S8ftdfOdoYw3y3y4Y/bBKFw99dFmrqg/zSphrYvZMFkABqi663sKBSK5Hw2T GWZOpwW2OnNM08tbnOhhkcnoiZ41s5Q8woJDkX4ZIfySYAHT58Co/pZzw+fLB5hX RTrS5sXxGv39gY/JI7krEDqZSAISFhTiF8Dvt8myseJLQy7KTpiMThlmt94ZE1Hw uc//8+iI9yYDPPz+wu7iaTifHx4wjsiafABHbCpf4nKAZVU5cS+77jmD8VuoIgYK XMp8iORQyVlHADlAieX8rVaGYK2HRqKntcPKa0Ek2z30ImRixwE= -----END CERTIFICATE-----Generated at Sun Apr 6 11:47:15 2025 by rpki-client