$ rpki-client -vvf repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft File: 95966A8DB250307CF9852483F96922EE520F6E2A.mft (raw, json) Hash identifier: x66OEg4dSvLM7mUAOsWJcFTPbcIiGpvFtEQV2yTGvaM= Subject key identifier: F1:10:BA:D4:B8:1C:00:F7:1C:33:46:D4:60:A9:35:EB:53:CA:F3:FA Authority key identifier: 95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A Certificate issuer: /CN=95966A8DB250307CF9852483F96922EE520F6E2A Certificate serial: 23D6DCAF61B714C742D75F3F45B5F02719635B2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft Manifest number: 02F2 Signing time: Sun 07 Sep 2025 13:40:00 +0000 Manifest this update: Sun 07 Sep 2025 13:35:00 +0000 Manifest next update: Wed 10 Sep 2025 13:52:00 +0000 Files and hashes: 1: 3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa (hash: MitWmX3yxsYyPd+sKi7YcLOVm2fefPu2Qs/7NDCXxb8=) 2: 3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa (hash: xt2DiIsS1Hm+P8ldmkaqq+Mf+LiIX+U17UKLw/Y34Uk=) 3: 3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa (hash: lJA11B888lTAIORO0k9rdft4p7t0vrr4FyWBG++arwA=) 4: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (hash: QAndsMLECtqgWCCHyuYe9oOyMMkwnZ8QhtRk2OHf9FQ=) 5: 95966A8DB250307CF9852483F96922EE520F6E2A.crl (hash: DgY1vXHjEIJvJqycU+DJ4X4WaZzIaChDh78KgbccqnA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d6:dc:af:61:b7:14:c7:42:d7:5f:3f:45:b5:f0:27:19:63:5b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95966A8DB250307CF9852483F96922EE520F6E2A Validity Not Before: Sep 7 13:35:00 2025 GMT Not After : Sep 10 13:52:00 2025 GMT Subject: CN=F110BAD4B81C00F71C3346D460A935EB53CAF3FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:00:e6:fc:8d:33:df:d5:af:71:f8:f7:95:60: eb:2e:e0:99:c6:18:47:3d:73:30:2f:e0:80:25:92: f8:4c:e2:b5:5a:7a:8e:ad:8f:80:12:6e:2d:c8:ad: 65:ba:d9:92:95:d8:cd:8e:23:46:f4:78:14:72:81: 38:c3:74:af:d4:e8:5e:72:5b:06:13:a4:c2:95:45: 8a:f1:9d:f7:7b:00:fc:84:a6:31:78:3c:98:f3:8e: 95:be:f0:ff:d6:6d:d0:a6:e7:f9:6c:6d:1d:66:fd: 84:74:fb:e1:c6:b4:d9:d4:b9:64:0b:b5:c3:fd:c1: ab:32:de:da:bd:b9:f3:e7:a8:54:71:e4:a8:cc:14: 04:89:39:25:c8:a4:01:4a:41:44:41:23:0c:d5:72: 12:e6:7f:a1:ad:1b:9d:dc:2a:04:dd:2a:d9:e0:b2: 14:47:45:28:d9:f3:f4:5f:0d:47:48:24:be:13:6d: 25:a3:b8:f6:59:fd:77:7a:e9:92:d6:10:6b:46:a1: a6:79:10:e8:47:1a:2e:22:04:04:93:2a:a2:40:0a: 4d:ef:87:db:4c:5c:aa:88:1d:8d:8d:ea:5f:a0:40: d8:88:05:c6:12:53:1a:c4:29:e7:70:10:00:19:1c: 0e:68:a6:6b:ac:a6:a8:9b:b5:06:6d:a8:b3:1f:1e: 69:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:10:BA:D4:B8:1C:00:F7:1C:33:46:D4:60:A9:35:EB:53:CA:F3:FA X509v3 Authority Key Identifier: keyid:95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:ea:0b:1f:63:ce:f1:e2:ab:f0:95:fe:55:e0:2c:be:14:a6: a2:7b:47:da:d7:94:58:71:ee:c5:fa:8f:6c:50:b0:e2:e5:af: ab:33:34:37:01:8a:7e:52:2b:ca:c9:dd:95:70:bf:37:09:bc: 6d:59:92:0a:3e:6d:c7:3f:89:e6:14:ac:4b:c2:08:37:8c:33: ff:ad:d4:fd:d2:51:3c:28:fa:fa:9f:8d:8f:27:d9:cc:c1:40: 50:24:75:2d:bb:29:f8:6d:06:48:3a:53:19:c6:6b:6e:62:14: 0a:e1:dd:c5:32:4b:0c:f7:88:04:38:cd:42:ef:9f:a5:68:60: 22:59:b3:c4:00:c6:3f:06:9e:04:fa:2c:f6:08:3e:cf:a1:0a: c0:3f:e9:3c:dc:f8:ac:93:89:1e:ba:05:70:02:ad:a2:0b:8a: c1:82:7d:e9:c2:a2:01:7c:cf:32:48:7f:f5:cd:26:3a:ba:0b: 99:25:14:14:8c:c0:9a:79:d0:aa:99:88:65:37:98:ca:32:e9: 53:6d:00:02:d5:85:f2:1e:95:4a:bf:01:d1:a5:64:46:20:d8: b1:87:38:d5:2c:92:cd:24:34:f7:dc:e7:68:95:6d:18:52:0c: c4:54:40:8a:bf:10:5c:0f:0b:1e:e8:e7:7c:e5:3e:e8:c7:56: e6:e1:08:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI9bcr2G3FMdC118/RbXwJxljWy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1 MjBGNkUyQTAeFw0yNTA5MDcxMzM1MDBaFw0yNTA5MTAxMzUyMDBaMDMxMTAvBgNV BAMTKEYxMTBCQUQ0QjgxQzAwRjcxQzMzNDZENDYwQTkzNUVCNTNDQUYzRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChAOb8jTPf1a9x+PeVYOsu4JnG GEc9czAv4IAlkvhM4rVaeo6tj4ASbi3IrWW62ZKV2M2OI0b0eBRygTjDdK/U6F5y WwYTpMKVRYrxnfd7APyEpjF4PJjzjpW+8P/WbdCm5/lsbR1m/YR0++HGtNnUuWQL tcP9wasy3tq9ufPnqFRx5KjMFASJOSXIpAFKQURBIwzVchLmf6GtG53cKgTdKtng shRHRSjZ8/RfDUdIJL4TbSWjuPZZ/Xd66ZLWEGtGoaZ5EOhHGi4iBASTKqJACk3v h9tMXKqIHY2N6l+gQNiIBcYSUxrEKedwEAAZHA5opmuspqibtQZtqLMfHmkdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8RC61LgcAPccM0bUYKk161PK8/owHwYDVR0j BBgwFoAUlZZqjbJQMHz5hSSD+Wki7lIPbiowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmYxNDE3YS01NzE4LTQwNzEtOWYzNS1jMTIyNTU1ZGFjN2EvMC85NTk2NkE4REIy NTAzMDdDRjk4NTI0ODNGOTY5MjJFRTUyMEY2RTJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1MjBG NkUyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJmMTQxN2EtNTcxOC00MDcxLTlm MzUtYzEyMjU1NWRhYzdhLzAvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIy RUU1MjBGNkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALnqCx9jzvHiq/CV/lXgLL4UpqJ7R9rXlFhx 7sX6j2xQsOLlr6szNDcBin5SK8rJ3ZVwvzcJvG1Zkgo+bcc/ieYUrEvCCDeMM/+t 1P3SUTwo+vqfjY8n2czBQFAkdS27KfhtBkg6UxnGa25iFArh3cUySwz3iAQ4zULv n6VoYCJZs8QAxj8GngT6LPYIPs+hCsA/6Tzc+KyTiR66BXACraILisGCfenCogF8 zzJIf/XNJjq6C5klFBSMwJp50KqZiGU3mMoy6VNtAALVhfIelUq/AdGlZEYg2LGH ONUsks0kNPfc52iVbRhSDMRUQIq/EFwPCx7o53zlPujHVubhCK8= -----END CERTIFICATE-----Generated at Sun Sep 7 15:28:36 2025 by rpki-client