$ rpki-client -vvf repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft File: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft (raw, json) Hash identifier: Zk4wwak0ed6lKK0gebQfTJrMdpyk4pNjxRaxR1NXD+0= Subject key identifier: 67:30:E8:7F:0C:D1:81:1B:30:D7:5A:35:7A:1C:5A:00:17:FB:7E:31 Authority key identifier: 95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 Certificate issuer: /CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Certificate serial: 5D0C69DBBBD68D5C6384E8ABBA88803D5059C556 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft Manifest number: 04F8 Signing time: Tue 05 Aug 2025 01:11:28 +0000 Manifest this update: Tue 05 Aug 2025 01:06:28 +0000 Manifest next update: Fri 08 Aug 2025 12:29:28 +0000 Files and hashes: 1: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (hash: mKTM+95IO3RuRjGvD78UIawuJIUBHI8BVt6K80x3Fpw=) 2: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (hash: 75/DAONeN65KHxljOFhq+chBgFEKtm0A6zWkkY+QXDo=) 3: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (hash: mAx24Mrm6AI9KeLaD2h/5RLJ5ztWp5mCELhp+sgXhQM=) 4: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl (hash: 0bYovUtGxDau3e6YgVgPHivMrF/CvCozBIZaB0PqiGQ=) 5: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (hash: KI4DRCx0w4L0nKpvK1CNtCzzpw68TT41WCumN5kF9lM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 12:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:0c:69:db:bb:d6:8d:5c:63:84:e8:ab:ba:88:80:3d:50:59:c5:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Validity Not Before: Aug 5 01:06:28 2025 GMT Not After : Aug 8 12:29:28 2025 GMT Subject: CN=6730E87F0CD1811B30D75A357A1C5A0017FB7E31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b0:4d:d4:43:77:8b:10:ce:e5:06:f9:ba:1f: 22:3f:3e:c3:1c:8e:18:63:62:72:58:fc:ff:6a:3d: b1:65:2a:97:d8:1e:d2:cd:d1:69:e8:c6:fc:fc:7b: cd:40:56:09:73:a6:6d:63:07:ca:f5:c3:d1:65:91: 00:55:a4:25:36:2b:18:e9:ea:0d:ff:19:d9:23:f0: b5:e6:41:0f:19:06:9a:b4:aa:27:45:21:b9:7e:7a: 6d:90:20:50:d8:46:cf:ae:10:ad:25:ec:e8:7a:dd: fa:d0:e2:bb:fe:ea:10:fe:13:39:dc:bf:74:e4:ce: 51:0c:df:5e:0a:07:29:9c:24:5d:08:c4:3d:fe:3c: 82:be:c1:74:23:fd:ae:32:bc:db:0c:13:2e:f3:e3: 6b:9d:e6:1b:69:28:52:e6:82:de:58:ba:04:55:d4: 09:72:6e:ca:6b:c4:e2:35:67:a5:ee:e7:55:74:f7: 88:da:ad:b6:18:31:55:19:2b:b3:07:2d:57:74:aa: bb:d5:4d:b2:c9:9e:f2:3d:c8:57:78:11:a8:bc:4b: 0c:f6:d8:2f:84:de:39:f7:18:64:3b:86:1f:4a:cf: d7:8c:6e:9d:cf:2f:86:14:7b:19:5c:57:00:f3:f3: 53:b3:5e:a5:bf:7a:73:7e:08:48:fe:b1:aa:61:ba: cc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:30:E8:7F:0C:D1:81:1B:30:D7:5A:35:7A:1C:5A:00:17:FB:7E:31 X509v3 Authority Key Identifier: keyid:95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:87:f4:8c:99:d8:62:ae:c4:0e:be:d2:0c:06:01:3c:86:7a: 0c:a3:be:4a:d0:b9:c5:30:ee:ab:41:e7:b7:5d:12:c1:fd:b9: 14:3a:88:cb:70:32:36:86:68:e0:35:fe:2a:b3:58:13:8a:c6: 6d:67:5a:8d:30:18:e3:22:e9:ad:cc:fe:51:e3:07:b5:10:9e: df:09:99:01:08:9d:85:37:56:fd:a2:26:3a:ef:cf:11:95:a8: 6b:1a:f5:a7:3b:10:52:8e:02:b6:ac:36:71:21:5c:51:a4:e8: 56:4d:cb:18:c0:3c:15:88:bd:15:66:c5:03:be:29:11:75:60: 1d:7d:81:73:f3:86:52:66:56:5b:51:a1:76:21:22:80:a9:9e: bf:9f:f8:86:56:52:31:b7:4b:6d:9b:61:6a:ad:ab:be:b6:0c: 47:08:e1:45:ea:68:a0:51:d0:d4:d5:77:44:d5:f3:64:3b:7f: 68:87:23:6c:63:3f:02:95:a9:c2:bb:a0:67:b3:a7:4a:b5:17: f4:43:4a:f6:a1:13:b3:38:81:6a:6e:e2:52:55:ef:56:8a:85: 8f:47:81:a7:13:39:0a:d4:27:54:85:6d:b0:8b:c0:0e:a4:92: 71:b1:e8:7a:8a:32:5d:fb:e0:45:dd:b3:d0:b6:39:6a:f3:75: c7:c1:29:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXQxp27vWjVxjhOiruoiAPVBZxVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlE QTQ2QjNDODAeFw0yNTA4MDUwMTA2MjhaFw0yNTA4MDgxMjI5MjhaMDMxMTAvBgNV BAMTKDY3MzBFODdGMENEMTgxMUIzMEQ3NUEzNTdBMUM1QTAwMTdGQjdFMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEsE3UQ3eLEM7lBvm6HyI/PsMc jhhjYnJY/P9qPbFlKpfYHtLN0Wnoxvz8e81AVglzpm1jB8r1w9FlkQBVpCU2Kxjp 6g3/Gdkj8LXmQQ8ZBpq0qidFIbl+em2QIFDYRs+uEK0l7Oh63frQ4rv+6hD+Eznc v3TkzlEM314KBymcJF0IxD3+PIK+wXQj/a4yvNsMEy7z42ud5htpKFLmgt5YugRV 1AlybsprxOI1Z6Xu51V094jarbYYMVUZK7MHLVd0qrvVTbLJnvI9yFd4Eai8Swz2 2C+E3jn3GGQ7hh9Kz9eMbp3PL4YUexlcVwDz81OzXqW/enN+CEj+saphusypAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZzDofwzRgRsw11o1ehxaABf7fjEwHwYDVR0j BBgwFoAUlcO6fyO2NRch932oAgcx+dpGs8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBlOWM5Zi1kNjA3LTQ0OTctYWYyOC00ZDJiOTA5MmQ1YTYvMC85NUMzQkE3RjIz QjYzNTE3MjFGNzdEQTgwMjA3MzFGOURBNDZCM0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlEQTQ2 QjNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZTljOWYtZDYwNy00NDk3LWFm MjgtNGQyYjkwOTJkNWE2LzAvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMx RjlEQTQ2QjNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeH9IyZ2GKuxA6+0gwGATyGegyjvkrQucUw 7qtB57ddEsH9uRQ6iMtwMjaGaOA1/iqzWBOKxm1nWo0wGOMi6a3M/lHjB7UQnt8J mQEInYU3Vv2iJjrvzxGVqGsa9ac7EFKOArasNnEhXFGk6FZNyxjAPBWIvRVmxQO+ KRF1YB19gXPzhlJmVltRoXYhIoCpnr+f+IZWUjG3S22bYWqtq762DEcI4UXqaKBR 0NTVd0TV82Q7f2iHI2xjPwKVqcK7oGezp0q1F/RDSvahE7M4gWpu4lJV71aKhY9H gacTOQrUJ1SFbbCLwA6kknGx6HqKMl374EXds9C2OWrzdcfBKQY= -----END CERTIFICATE-----Generated at Thu Aug 7 07:34:43 2025 by rpki-client