$ rpki-client -vvf repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft File: 095AAB2FD179056DA8846FA0E90F79F7D901792C.mft (raw, json) Hash identifier: LeqgSA1k+IsdZS/Z3A6DGojpyL7T8r1/p8FymgzrKQU= Subject key identifier: 0B:52:F7:08:F5:03:50:61:66:F6:29:F3:E5:66:37:56:59:7D:B2:81 Authority key identifier: 09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C Certificate issuer: /CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Certificate serial: 4966299994771D87A1B430F9ADDA4AC1CE8ADD25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft Manifest number: 02F7 Signing time: Tue 05 Aug 2025 13:51:43 +0000 Manifest this update: Tue 05 Aug 2025 13:46:43 +0000 Manifest next update: Sat 09 Aug 2025 00:48:43 +0000 Files and hashes: 1: 3130332e3235322e35312e302f32342d3234203d3e203539313334.roa (hash: 92hDDvlrQq6+Ep7VlgXGUFdRGUo5NBqpCP5dHFzwWeg=) 2: 095AAB2FD179056DA8846FA0E90F79F7D901792C.crl (hash: DE7BSMCbomMoa7MJx5L5aFVY8itrCpaC0qj4N6VfnHI=) 3: 3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa (hash: JQPY1hR36z2SwsI5Y4cr/zQo0NDgsurp+zEd8VFWX3Q=) 4: 3130332e37332e3132352e302f32342d3234203d3e203539313334.roa (hash: Z1EVykTQp5ACC1NPq9JOZKOUUZ9JHZ3If1yc5kffoxA=) 5: 3130332e3235322e35302e302f32342d3234203d3e203539313334.roa (hash: tg5kgcB+/SuzaicgIITC9CS9oqxnux/xS4/nsX+npzw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 00:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:66:29:99:94:77:1d:87:a1:b4:30:f9:ad:da:4a:c1:ce:8a:dd:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Validity Not Before: Aug 5 13:46:43 2025 GMT Not After : Aug 9 00:48:43 2025 GMT Subject: CN=0B52F708F503506166F629F3E5663756597DB281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:26:65:20:06:2d:36:e4:88:e6:7f:8a:23:d4: 54:e7:32:d5:ac:51:94:b7:e1:70:aa:eb:e2:12:ae: 75:72:58:b8:47:18:61:e9:61:5f:c0:46:9d:4e:dc: 6b:f0:90:a1:b1:42:e5:54:19:d9:6f:61:3b:75:2b: 96:56:78:dd:07:cd:ca:6d:6d:d8:a9:69:ee:71:1f: 9a:ff:5c:b9:b8:81:bb:9f:50:38:55:41:f4:b8:ff: 44:5b:95:31:a3:34:4f:8c:f2:42:9e:be:78:bd:70: ff:52:3e:1b:ba:ea:f1:ba:55:e8:99:6a:6d:17:7a: ba:b6:96:36:d1:9f:25:43:81:f1:ea:ca:20:22:99: 7e:6e:09:af:40:3b:5d:37:e7:4d:b1:85:cf:51:29: f3:5f:50:88:06:78:90:10:46:fd:e2:ca:9a:29:8e: 4e:e8:57:96:95:ed:ab:a3:db:b4:c2:27:ad:97:5e: 44:31:4e:c2:b0:5c:ed:45:be:0e:63:89:75:6d:2d: 3e:36:f1:41:b9:d1:ce:85:9f:4e:27:bd:75:60:45: d8:83:07:23:ab:5b:fe:d1:8f:ca:53:f5:42:7e:44: ec:c8:7a:7a:7f:f8:69:93:d7:57:e4:d8:fd:46:8b: 4d:5e:d8:b5:fa:46:a3:7e:08:9f:ba:82:f2:19:13: 34:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:52:F7:08:F5:03:50:61:66:F6:29:F3:E5:66:37:56:59:7D:B2:81 X509v3 Authority Key Identifier: keyid:09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:1f:14:8b:ff:32:40:34:b4:39:f5:b8:23:f5:06:db:9c:0a: 1d:56:0d:bd:00:da:3f:32:2e:1f:4c:03:8e:45:3f:e6:62:e7: 00:ed:98:63:17:6a:73:87:9d:17:ab:72:c6:89:32:46:7c:4e: f3:8a:f2:63:a0:dc:bc:80:cd:b4:85:ea:f2:4e:c9:14:72:27: 10:18:cf:c5:0b:97:58:b5:18:ac:18:34:57:b4:a5:93:cc:93: 8f:54:39:f7:de:58:79:22:3a:05:91:17:c3:9e:6a:7b:ae:a9: 2c:06:64:6a:44:38:ce:6d:b5:8f:f1:65:c2:6c:cc:31:43:da: 03:5a:06:2e:80:87:4a:ac:57:b0:fc:30:be:b7:75:01:02:f7: 79:c3:8b:8f:58:ff:40:76:e0:e1:e7:56:e5:96:61:49:a4:2d: 73:8b:fd:03:98:b2:7b:79:ac:cf:ad:28:d9:26:df:54:fc:43: 45:2b:df:ba:de:5d:14:be:b7:a8:44:d8:9f:46:b2:0b:ca:87: 4d:3f:30:55:ba:70:43:95:69:b5:c2:7c:7e:06:ba:ff:7a:56: 49:9d:ab:c4:10:3d:f6:b7:22:e9:a7:de:81:60:07:8f:bd:6a: c4:f2:76:cc:0c:18:fc:a5:7e:33:4a:8e:7a:10:41:e6:b3:eb: 93:53:70:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSWYpmZR3HYehtDD5rdpKwc6K3SUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdE OTAxNzkyQzAeFw0yNTA4MDUxMzQ2NDNaFw0yNTA4MDkwMDQ4NDNaMDMxMTAvBgNV BAMTKDBCNTJGNzA4RjUwMzUwNjE2NkY2MjlGM0U1NjYzNzU2NTk3REIyODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHJmUgBi025Ijmf4oj1FTnMtWs UZS34XCq6+ISrnVyWLhHGGHpYV/ARp1O3GvwkKGxQuVUGdlvYTt1K5ZWeN0Hzcpt bdipae5xH5r/XLm4gbufUDhVQfS4/0RblTGjNE+M8kKevni9cP9SPhu66vG6VeiZ am0Xerq2ljbRnyVDgfHqyiAimX5uCa9AO103502xhc9RKfNfUIgGeJAQRv3iypop jk7oV5aV7auj27TCJ62XXkQxTsKwXO1Fvg5jiXVtLT428UG50c6Fn04nvXVgRdiD ByOrW/7Rj8pT9UJ+ROzIenp/+GmT11fk2P1Gi01e2LX6RqN+CJ+6gvIZEzR/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC1L3CPUDUGFm9inz5WY3Vll9soEwHwYDVR0j BBgwFoAUCVqrL9F5BW2ohG+g6Q9599kBeSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTc4OGI0YS1kNDUxLTQ5ZmItYjdjZC03MTk4MTA4NzBmMWEvMC8wOTVBQUIyRkQx NzkwNTZEQTg4NDZGQTBFOTBGNzlGN0Q5MDE3OTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdEOTAx NzkyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3ODhiNGEtZDQ1MS00OWZiLWI3 Y2QtNzE5ODEwODcwZjFhLzAvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5 RjdEOTAxNzkyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcfFIv/MkA0tDn1uCP1BtucCh1WDb0A2j8y Lh9MA45FP+Zi5wDtmGMXanOHnRercsaJMkZ8TvOK8mOg3LyAzbSF6vJOyRRyJxAY z8ULl1i1GKwYNFe0pZPMk49UOffeWHkiOgWRF8OeanuuqSwGZGpEOM5ttY/xZcJs zDFD2gNaBi6Ah0qsV7D8ML63dQEC93nDi49Y/0B24OHnVuWWYUmkLXOL/QOYsnt5 rM+tKNkm31T8Q0Ur37reXRS+t6hE2J9GsgvKh00/MFW6cEOVabXCfH4Guv96Vkmd q8QQPfa3Iumn3oFgB4+9asTydswMGPylfjNKjnoQQeaz65NTcLM= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:37 2025 by rpki-client