$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft File: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft (raw, json) Hash identifier: D+EWOwv2YpmbB7vKObguMFTW+HPKBGcWBnpsWkY497Y= Subject key identifier: D9:70:5E:90:84:61:28:B2:D9:08:85:1F:E9:B1:4C:71:C9:EF:39:8B Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D Certificate issuer: /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Certificate serial: 114A643948188B3E1383A7CEF1ABA1A42DA67339 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft Manifest number: 0504 Signing time: Sun 07 Sep 2025 10:01:42 +0000 Manifest this update: Sun 07 Sep 2025 09:56:42 +0000 Manifest next update: Wed 10 Sep 2025 15:00:42 +0000 Files and hashes: 1: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: pnePfPpninK+12GFjtU9XZZuD9qIupgPZ4/SoFot86c=) 2: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: fYXLcgnYZQvFF+Sx+nAnnoQPnhu4qBL7MV7MXCijhoM=) 3: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: tJ7W+A0ln7oQ2TKBeYCrxZXeI+2+Ch9yjit0aZIq8qs=) 4: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: 6u0QjcaXuZCe/xDwNoPsOwMyKh9MBkPufQ0B3cPlReE=) 5: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: JYyU73FxSsbah75XLPK5+70mS+1BuWT1qs954OCbSn8=) 6: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: MowxodGXifPkFbwcnbxmYI86u52XQ+RqEsK4tBHU6Kc=) 7: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: z8oVsj820WikG58Kg7XuHuFP7zjS3wrrsGJ5kGPWB6k=) 8: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl (hash: KMvDUGYPTjvigVmfcZpkuTi2AEXt6BaWcrIRmZFSZvM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:4a:64:39:48:18:8b:3e:13:83:a7:ce:f1:ab:a1:a4:2d:a6:73:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Validity Not Before: Sep 7 09:56:42 2025 GMT Not After : Sep 10 15:00:42 2025 GMT Subject: CN=D9705E90846128B2D908851FE9B14C71C9EF398B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0e:ef:66:b0:e7:32:e6:02:34:5c:d6:6c:a3: 50:db:5a:9f:ab:3f:4c:fc:21:d7:23:55:0b:18:db: 8f:a6:cd:e2:3b:c4:c0:6b:c0:be:21:fb:43:32:48: eb:35:6b:b6:2b:f9:f8:3e:8f:ef:da:6f:2f:c8:dd: fd:e9:3d:65:a3:f0:4d:cb:68:40:48:27:98:c8:07: ac:69:3b:07:ae:ae:86:1c:c4:23:b7:71:59:ef:ac: bd:91:4f:32:ea:a5:59:f4:54:99:b8:8d:53:3f:99: be:f1:40:68:5f:1b:d4:7d:e7:45:14:ff:3b:d0:19: af:c7:f7:a3:60:dd:6f:87:50:88:70:9e:9e:86:ed: 56:a6:2d:2e:61:2f:45:ef:48:90:1e:0c:44:a8:0a: e5:f4:8b:86:9b:b8:e9:78:ae:90:a9:a2:2d:47:7b: 6e:06:43:80:85:68:0c:40:d1:15:97:f1:03:89:7f: d8:29:f3:43:4a:13:1b:e5:0d:ac:7c:0e:a2:cb:c1: cb:0b:f6:c0:bd:08:04:0e:6f:a3:70:aa:a1:11:3d: 3b:2f:96:a3:37:22:8c:14:bb:55:28:38:18:e9:f5: 59:a6:b4:bc:26:d9:3f:d2:0e:b4:d9:0c:15:1f:18: 54:61:bc:a4:91:37:c8:a8:5c:8c:66:82:fb:ac:5f: f4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:70:5E:90:84:61:28:B2:D9:08:85:1F:E9:B1:4C:71:C9:EF:39:8B X509v3 Authority Key Identifier: keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:df:4e:54:82:7c:9c:7f:f4:e7:d0:5f:74:b2:e9:d0:19:ea: 07:ac:53:61:d6:96:48:7c:6c:3d:bb:d0:fa:e3:c2:76:49:e9: 92:24:d1:3e:5b:dc:b6:b0:08:dc:b6:81:ed:db:b9:40:d1:04: c5:76:3d:47:99:04:0a:9e:0d:be:67:6b:1c:aa:98:70:20:6e: ce:55:15:e6:3d:90:f2:f7:64:a7:5c:22:2a:5f:2b:68:c0:06: 18:6c:55:2d:9b:26:a8:df:9e:d6:9a:bc:46:3e:5d:cc:22:e4: a7:c0:e3:49:7a:4b:77:b3:b4:b3:6e:b5:ca:7a:58:75:ea:91: 15:5b:47:64:83:cb:b0:66:c0:2e:20:95:a0:ca:d4:d0:9a:01: 69:9b:76:9f:13:aa:8a:a9:1b:78:47:57:ca:bf:59:cd:5d:e2: 04:02:3a:23:a6:54:37:30:06:de:24:e2:1b:18:06:0f:f6:7e: cf:e3:53:1d:67:7f:7a:38:4c:ff:f8:64:86:7f:92:e6:10:08: 33:4e:d2:55:7b:90:61:8a:82:35:78:57:cd:b9:ec:49:d4:14: 36:11:05:d8:4c:3d:59:e1:75:22:a7:bd:45:31:f1:95:40:57: de:28:84:c3:6f:f9:0b:31:b8:6a:35:67:0a:21:77:38:49:71: d3:d5:23:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEUpkOUgYiz4Tg6fO8auhpC2mczkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVF NzRFMkE2RDAeFw0yNTA5MDcwOTU2NDJaFw0yNTA5MTAxNTAwNDJaMDMxMTAvBgNV BAMTKEQ5NzA1RTkwODQ2MTI4QjJEOTA4ODUxRkU5QjE0QzcxQzlFRjM5OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Du9msOcy5gI0XNZso1DbWp+r P0z8IdcjVQsY24+mzeI7xMBrwL4h+0MySOs1a7Yr+fg+j+/aby/I3f3pPWWj8E3L aEBIJ5jIB6xpOweuroYcxCO3cVnvrL2RTzLqpVn0VJm4jVM/mb7xQGhfG9R950UU /zvQGa/H96Ng3W+HUIhwnp6G7VamLS5hL0XvSJAeDESoCuX0i4abuOl4rpCpoi1H e24GQ4CFaAxA0RWX8QOJf9gp80NKExvlDax8DqLLwcsL9sC9CAQOb6NwqqERPTsv lqM3IowUu1UoOBjp9VmmtLwm2T/SDrTZDBUfGFRhvKSRN8ioXIxmgvusX/TrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2XBekIRhKLLZCIUf6bFMccnvOYswHwYDVR0j BBgwFoAUlegA6/9kcJiSy1dB2e3HXudOKm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmI1YWUxZS1iZTY2LTRhMzAtYTk0OC03ZDQ3OGMyMmVhMmIvMC85NUU4MDBFQkZG NjQ3MDk4OTJDQjU3NDFEOUVEQzc1RUU3NEUyQTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVFNzRF MkE2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZiNWFlMWUtYmU2Ni00YTMwLWE5 NDgtN2Q0NzhjMjJlYTJiLzAvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3 NUVFNzRFMkE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHfTlSCfJx/9OfQX3Sy6dAZ6gesU2HWlkh8 bD270PrjwnZJ6ZIk0T5b3LawCNy2ge3buUDRBMV2PUeZBAqeDb5naxyqmHAgbs5V FeY9kPL3ZKdcIipfK2jABhhsVS2bJqjfntaavEY+Xcwi5KfA40l6S3eztLNutcp6 WHXqkRVbR2SDy7BmwC4glaDK1NCaAWmbdp8TqoqpG3hHV8q/Wc1d4gQCOiOmVDcw Bt4k4hsYBg/2fs/jUx1nf3o4TP/4ZIZ/kuYQCDNO0lV7kGGKgjV4V8257EnUFDYR BdhMPVnhdSKnvUUx8ZVAV94ohMNv+QsxuGo1ZwohdzhJcdPVI54= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:45 2025 by rpki-client