$ rpki-client -vvf repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft File: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft (raw, json) Hash identifier: udKzZOn1dXehhkYiq6m0ZWZKk6oU+kDcuLGA5ot9mNk= Subject key identifier: 08:71:F5:D0:2C:89:E0:B4:A5:E9:62:CA:56:BA:0B:A1:BC:67:5A:A5 Authority key identifier: 10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A Certificate issuer: /CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Certificate serial: 79A5F4A38AF3B67B2A9499558F1C904A3931BE72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft Manifest number: 04F5 Signing time: Wed 06 Aug 2025 20:31:35 +0000 Manifest this update: Wed 06 Aug 2025 20:26:35 +0000 Manifest next update: Sun 10 Aug 2025 07:26:35 +0000 Files and hashes: 1: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl (hash: YYGNj2DnhAeikiAfm0/a86NJ6oTLVnAblhdeioa13Ys=) 2: 3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa (hash: XS6giku77XPtxmNRkfOOXOP+iNVcgzmhP0k5pXi56n8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 07:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a5:f4:a3:8a:f3:b6:7b:2a:94:99:55:8f:1c:90:4a:39:31:be:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Validity Not Before: Aug 6 20:26:35 2025 GMT Not After : Aug 10 07:26:35 2025 GMT Subject: CN=0871F5D02C89E0B4A5E962CA56BA0BA1BC675AA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ad:a8:0e:f8:7d:00:f9:4b:47:56:34:83:2a: 96:d0:70:4c:c2:89:25:30:74:ba:92:7d:d6:49:4b: 3c:73:33:fe:69:71:6e:6c:f5:66:8a:36:e6:cf:f6: 74:ac:f0:a5:aa:89:27:0d:4a:9a:1f:dc:bc:e3:1b: a9:29:04:2b:3e:9f:34:3c:6f:a7:9b:e9:2e:c6:5a: f6:3a:cc:dc:7a:b6:f8:72:ec:0b:cd:9e:26:53:b8: 87:b6:81:7e:91:58:3e:7d:1b:19:8d:fe:78:ef:a2: 5c:b8:bd:24:97:ae:e5:d3:5c:e0:38:b0:a3:81:63: ab:dd:68:d9:ea:e4:f9:00:b8:32:92:da:fa:0f:e5: c9:d3:b3:2e:27:2c:0a:84:55:59:3a:58:b9:c7:ce: 96:af:c7:ee:1c:d2:a2:64:7a:01:32:26:ee:0b:b4: 41:1e:b6:78:fd:8f:1e:33:2b:75:93:3f:24:ff:90: d9:f7:1d:d9:cd:d8:99:0e:f0:7b:2c:d9:e9:02:98: 12:1f:25:cb:87:74:69:42:95:c5:b1:a8:c4:6f:81: f8:e6:e6:fb:35:3b:8e:a1:4d:b1:a3:f1:6d:63:4c: d2:3e:cb:f9:0b:21:10:11:27:22:a3:fc:5d:d5:71: ea:8d:e6:e9:2a:b3:ef:30:23:3b:06:7b:4c:7f:16: 8e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:71:F5:D0:2C:89:E0:B4:A5:E9:62:CA:56:BA:0B:A1:BC:67:5A:A5 X509v3 Authority Key Identifier: keyid:10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:04:2a:17:02:46:f8:68:9b:9c:6b:c8:c2:c7:cb:1f:1e:aa: 31:b8:ed:0c:84:d6:98:ea:48:cb:6c:75:51:00:35:53:9f:06: 01:c6:3d:86:f4:f5:82:be:3f:34:c4:13:d9:61:a4:41:37:94: d8:d5:5c:66:33:c4:b5:1b:c1:19:b7:36:84:6d:2c:dc:44:9c: b0:c2:65:ca:5d:ca:8d:6f:fb:72:12:e5:6c:f4:cc:f2:f5:01: d9:0b:e2:fe:84:63:bd:e1:d7:ef:b5:19:60:b2:9c:60:f4:c9: 7d:c2:88:6d:ca:4a:b4:18:bc:4c:da:6a:1a:ec:7b:07:51:18: be:fb:84:4b:a1:7c:92:f7:06:e7:a5:27:a6:1b:b0:82:c5:39: 0d:57:90:d9:84:31:55:87:f6:c1:54:44:55:0c:9d:21:0b:1c: 19:aa:6f:10:12:29:fc:5b:27:d6:83:7b:79:27:9a:0f:d8:c4: 26:77:78:f6:cd:a1:9a:4f:82:a0:24:a4:77:4f:a5:76:b6:d4: 64:8c:86:69:d0:7e:55:be:80:53:d1:4b:a7:f3:60:68:42:19: d3:02:24:f6:8c:cd:a5:35:de:7a:9f:ee:f6:b8:0f:3a:95:f3: 2a:71:0d:2f:3a:7b:86:12:d3:0b:de:d9:e1:ff:55:44:49:df: 39:80:a8:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeaX0o4rztnsqlJlVjxyQSjkxvnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZB MkM0NDg1QTAeFw0yNTA4MDYyMDI2MzVaFw0yNTA4MTAwNzI2MzVaMDMxMTAvBgNV BAMTKDA4NzFGNUQwMkM4OUUwQjRBNUU5NjJDQTU2QkEwQkExQkM2NzVBQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJragO+H0A+UtHVjSDKpbQcEzC iSUwdLqSfdZJSzxzM/5pcW5s9WaKNubP9nSs8KWqiScNSpof3LzjG6kpBCs+nzQ8 b6eb6S7GWvY6zNx6tvhy7AvNniZTuIe2gX6RWD59GxmN/njvoly4vSSXruXTXOA4 sKOBY6vdaNnq5PkAuDKS2voP5cnTsy4nLAqEVVk6WLnHzpavx+4c0qJkegEyJu4L tEEetnj9jx4zK3WTPyT/kNn3HdnN2JkO8Hss2ekCmBIfJcuHdGlClcWxqMRvgfjm 5vs1O46hTbGj8W1jTNI+y/kLIRARJyKj/F3VceqN5ukqs+8wIzsGe0x/Fo5lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCHH10CyJ4LSl6WLKVroLobxnWqUwHwYDVR0j BBgwFoAUEJXqeHA4Jqz1+iJB6ysbZqLESFowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTVkZDU3My0zMWY0LTQxNmMtYTFiNy02OThkNmIxNjk3YWQvMC8xMDk1RUE3ODcw MzgyNkFDRjVGQTIyNDFFQjJCMUI2NkEyQzQ0ODVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZBMkM0 NDg1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk1ZGQ1NzMtMzFmNC00MTZjLWEx YjctNjk4ZDZiMTY5N2FkLzAvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFC NjZBMkM0NDg1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUEKhcCRvhom5xryMLHyx8eqjG47QyE1pjq SMtsdVEANVOfBgHGPYb09YK+PzTEE9lhpEE3lNjVXGYzxLUbwRm3NoRtLNxEnLDC Zcpdyo1v+3IS5Wz0zPL1AdkL4v6EY73h1++1GWCynGD0yX3CiG3KSrQYvEzaahrs ewdRGL77hEuhfJL3BuelJ6YbsILFOQ1XkNmEMVWH9sFURFUMnSELHBmqbxASKfxb J9aDe3knmg/YxCZ3ePbNoZpPgqAkpHdPpXa21GSMhmnQflW+gFPRS6fzYGhCGdMC JPaMzaU13nqf7va4DzqV8ypxDS86e4YS0wve2eH/VURJ3zmAqNs= -----END CERTIFICATE-----Generated at Fri Aug 8 13:09:11 2025 by rpki-client