$ rpki-client -vvf repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft File: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft (raw, json) Hash identifier: vfKsCoHQC1pBTfE/xIvwYJkFQhZPYdbmsRbV9BuASTs= Subject key identifier: DD:94:99:25:49:C4:6F:07:05:04:89:E6:02:AC:F4:C1:28:A0:98:97 Authority key identifier: 95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 Certificate issuer: /CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Certificate serial: 7B1A21EFAA07D187A48080CB9BD23A00CEE192D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft Manifest number: 0520 Signing time: Mon 03 Nov 2025 04:21:28 +0000 Manifest this update: Mon 03 Nov 2025 04:16:28 +0000 Manifest next update: Thu 06 Nov 2025 14:14:28 +0000 Files and hashes: 1: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (hash: mKTM+95IO3RuRjGvD78UIawuJIUBHI8BVt6K80x3Fpw=) 2: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl (hash: 8tLW+80+nFDRI3AXeut62SezzKvJcAIMktFuhE+Lcuo=) 3: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (hash: mAx24Mrm6AI9KeLaD2h/5RLJ5ztWp5mCELhp+sgXhQM=) 4: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (hash: 75/DAONeN65KHxljOFhq+chBgFEKtm0A6zWkkY+QXDo=) 5: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (hash: KI4DRCx0w4L0nKpvK1CNtCzzpw68TT41WCumN5kF9lM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 14:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:1a:21:ef:aa:07:d1:87:a4:80:80:cb:9b:d2:3a:00:ce:e1:92:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Validity Not Before: Nov 3 04:16:28 2025 GMT Not After : Nov 6 14:14:28 2025 GMT Subject: CN=DD94992549C46F07050489E602ACF4C128A09897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:15:3a:dd:1d:54:f9:53:a2:2f:8f:69:a0:56: 78:16:7d:6e:a5:42:31:8d:d4:b6:da:89:3d:54:21: e1:5e:5e:a7:87:a6:73:ec:e0:22:43:83:22:42:22: 79:a8:17:68:25:a4:f9:a9:26:a4:ff:d1:b3:5a:a1: 0d:69:d4:4c:9f:95:74:10:b5:49:5b:76:c6:e5:38: b1:09:5e:ab:f5:ce:3f:a1:0b:10:42:19:d4:e0:63: 6c:22:35:90:2a:9c:c0:39:66:88:e8:28:31:8f:a0: 98:b7:a0:1f:6a:ca:55:8a:ef:21:ea:ac:4b:83:cc: 8f:d6:c3:8d:97:2d:aa:49:6d:e7:46:ad:a0:fe:95: 71:a7:d6:63:e4:20:9b:e9:38:c1:8a:9e:a0:5b:df: 6a:ad:05:17:47:90:75:45:25:8c:b1:c7:0d:89:4a: 2c:a0:42:f9:d4:44:cd:d1:11:6c:25:1a:00:3b:61: a3:f9:5c:5b:49:47:7d:c3:ae:5a:39:17:a0:23:32: 72:7b:a3:32:d7:c0:9f:13:30:25:18:ec:85:4d:4b: 86:7c:c0:39:79:b5:56:24:c6:5a:3d:f6:04:27:bb: 18:99:48:78:68:4f:23:55:5d:85:f9:ee:8b:64:53: 75:21:75:55:88:8e:29:cf:40:33:a2:50:42:7d:3a: d9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:94:99:25:49:C4:6F:07:05:04:89:E6:02:AC:F4:C1:28:A0:98:97 X509v3 Authority Key Identifier: keyid:95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:95:29:2b:7f:22:68:0f:30:f8:9e:dc:b8:9e:5d:06:9c:6b: 9a:dd:bd:9c:92:b8:d5:d0:40:29:77:8d:15:db:12:26:46:82: cc:d3:3d:d6:f6:a3:67:6e:2a:94:66:08:4a:55:3e:b0:fc:15: dc:66:67:91:dd:7f:9c:df:2e:ab:fc:d4:86:11:cb:60:3c:f3: 8f:b7:14:92:eb:80:0f:00:9f:ce:12:6e:16:b3:9b:03:a4:2a: 6c:1e:b8:b7:1d:d1:44:ca:e5:6c:f5:1e:24:24:d0:a6:c2:5a: bf:e2:e2:c5:15:0c:3e:42:73:92:17:8c:12:88:d0:1b:e1:e2: 4e:ea:5f:cf:99:22:5c:a4:15:9d:44:c3:7b:ac:04:bb:0a:f5: 7c:17:85:03:63:7d:fd:c9:d8:02:a1:b3:23:17:7c:5c:0b:b2: 88:0f:1a:59:08:e1:33:60:cc:19:36:c8:96:29:3d:a9:2a:99: 41:48:dd:63:59:8e:75:17:af:89:d9:0c:45:00:cd:56:f0:28: 26:08:eb:2d:43:2d:84:b5:cc:83:b9:22:76:c9:4a:a8:cc:1d: a0:db:1c:ac:bf:aa:c6:eb:23:d8:bf:87:35:6e:4c:b5:90:f3: c2:5c:6c:82:69:1f:f4:48:43:d4:cb:db:dd:75:a2:93:2d:40: 67:bb:c9:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUexoh76oH0YekgIDLm9I6AM7hktEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlE QTQ2QjNDODAeFw0yNTExMDMwNDE2MjhaFw0yNTExMDYxNDE0MjhaMDMxMTAvBgNV BAMTKEREOTQ5OTI1NDlDNDZGMDcwNTA0ODlFNjAyQUNGNEMxMjhBMDk4OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxFTrdHVT5U6Ivj2mgVngWfW6l QjGN1LbaiT1UIeFeXqeHpnPs4CJDgyJCInmoF2glpPmpJqT/0bNaoQ1p1EyflXQQ tUlbdsblOLEJXqv1zj+hCxBCGdTgY2wiNZAqnMA5ZojoKDGPoJi3oB9qylWK7yHq rEuDzI/Ww42XLapJbedGraD+lXGn1mPkIJvpOMGKnqBb32qtBRdHkHVFJYyxxw2J SiygQvnURM3REWwlGgA7YaP5XFtJR33Drlo5F6AjMnJ7ozLXwJ8TMCUY7IVNS4Z8 wDl5tVYkxlo99gQnuxiZSHhoTyNVXYX57otkU3UhdVWIjinPQDOiUEJ9OtktAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3ZSZJUnEbwcFBInmAqz0wSigmJcwHwYDVR0j BBgwFoAUlcO6fyO2NRch932oAgcx+dpGs8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBlOWM5Zi1kNjA3LTQ0OTctYWYyOC00ZDJiOTA5MmQ1YTYvMC85NUMzQkE3RjIz QjYzNTE3MjFGNzdEQTgwMjA3MzFGOURBNDZCM0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlEQTQ2 QjNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZTljOWYtZDYwNy00NDk3LWFm MjgtNGQyYjkwOTJkNWE2LzAvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMx RjlEQTQ2QjNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6VKSt/ImgPMPie3LieXQaca5rdvZySuNXQ QCl3jRXbEiZGgszTPdb2o2duKpRmCEpVPrD8FdxmZ5Hdf5zfLqv81IYRy2A884+3 FJLrgA8An84SbhazmwOkKmweuLcd0UTK5Wz1HiQk0KbCWr/i4sUVDD5Cc5IXjBKI 0Bvh4k7qX8+ZIlykFZ1Ew3usBLsK9XwXhQNjff3J2AKhsyMXfFwLsogPGlkI4TNg zBk2yJYpPakqmUFI3WNZjnUXr4nZDEUAzVbwKCYI6y1DLYS1zIO5InbJSqjMHaDb HKy/qsbrI9i/hzVuTLWQ88JcbIJpH/RIQ9TL2911opMtQGe7ycQ= -----END CERTIFICATE-----Generated at Tue Nov 4 08:03:25 2025 by rpki-client