$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft File: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft (raw, json) Hash identifier: k6n2O/UZh1S6UhUGQPqMRd5MAFmooLOt6QvXoOqo8ZM= Subject key identifier: D6:A7:1B:41:1A:3E:08:A4:CF:FD:C0:D4:29:D4:3A:3F:7D:92:5C:46 Authority key identifier: 95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 Certificate issuer: /CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Certificate serial: 3CA041D6FB1D9019ECBE423505652EEF25211CED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft Manifest number: A9 Signing time: Wed 18 Jun 2025 03:01:22 +0000 Manifest this update: Wed 18 Jun 2025 02:56:22 +0000 Manifest next update: Sat 21 Jun 2025 14:29:22 +0000 Files and hashes: 1: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: +Xk0mxGkc/lCxZDeUptrpwZhCqCSnBV/uCVgeNZ+WpY=) 2: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl (hash: fEasTqfiHzFe1sSi1xt20X4qlPtZzSHUjT1OXNQSX74=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 03:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a0:41:d6:fb:1d:90:19:ec:be:42:35:05:65:2e:ef:25:21:1c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Validity Not Before: Jun 18 02:56:22 2025 GMT Not After : Jun 21 14:29:22 2025 GMT Subject: CN=D6A71B411A3E08A4CFFDC0D429D43A3F7D925C46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:7c:92:39:9a:18:ac:34:95:97:5f:ad:4a: 97:ef:a4:9e:37:70:e1:97:8f:44:f2:b5:4f:c0:42: 11:c9:bd:8e:e2:16:89:74:fd:cb:8c:f5:7d:28:3c: 68:46:7b:8b:c2:0a:3e:6e:ab:99:12:01:63:fe:a8: 39:80:2b:3a:14:b9:b3:68:72:02:13:cf:ca:91:4a: f8:81:3f:38:65:df:05:9c:01:a3:c3:4b:a2:30:ef: f5:f3:fb:ec:4b:98:35:d5:98:e5:b4:dd:cc:4e:fd: fb:2d:a9:ff:43:c3:af:26:87:18:57:10:3a:75:7f: d9:19:ea:39:fc:66:ed:27:c6:3f:2f:db:42:b9:5a: 4e:ae:97:35:fd:ee:d2:a1:35:49:c7:c4:3d:72:c4: 62:e7:9f:f8:9a:04:22:28:da:f9:aa:86:3d:13:c4: 2d:63:5c:5d:a0:be:cc:bf:99:87:b8:b9:04:91:ac: 22:d3:89:e7:9a:7c:ea:46:23:c0:5e:52:80:33:80: e6:da:c0:77:dc:49:25:49:56:a4:29:8c:c9:bb:5a: 12:42:c1:9b:f5:1c:76:a6:10:7f:d2:fb:e4:16:ca: 77:e2:11:0d:57:90:91:76:40:71:b1:9b:88:2e:17: 9d:b6:61:f5:34:c0:b1:70:7d:84:d4:b0:bb:b8:19: d1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A7:1B:41:1A:3E:08:A4:CF:FD:C0:D4:29:D4:3A:3F:7D:92:5C:46 X509v3 Authority Key Identifier: keyid:95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:be:d2:28:2f:7e:bc:17:ae:a3:c9:ab:bc:df:2a:ca:35:86: 93:32:9d:5f:f8:d0:77:41:97:8f:39:c2:e3:39:65:5b:29:02: 69:97:69:f6:0d:66:e7:36:6f:da:26:18:67:4a:ed:ba:07:31: 33:58:17:e4:3f:f7:79:68:c0:78:e4:13:00:29:aa:25:ce:76: 73:3d:48:a8:ef:06:5f:b4:d0:19:38:01:f4:39:74:82:30:52: a4:80:e1:9c:17:00:61:3f:e5:84:7b:92:46:29:8f:c0:a7:54: 5c:7a:f4:0f:19:22:56:72:7c:f4:81:7f:96:34:1b:f0:aa:f3: 75:bd:39:8e:96:61:11:85:94:94:ff:f5:05:64:3b:b8:5a:6f: 59:e1:f5:7f:ae:93:5f:a2:9a:21:e4:de:7b:7d:57:91:94:ef: fc:df:7d:d2:5d:89:b1:7b:06:a4:81:bd:35:39:95:81:0c:46: ab:e0:5e:37:1f:7c:1c:62:dc:7f:91:95:4c:32:3c:2e:71:4b: 62:a3:d3:b2:9a:85:58:77:ce:6f:db:9f:82:ed:50:65:6e:63: c3:e3:19:ba:a7:1d:9f:3d:9a:fb:55:b5:86:b6:71:de:82:d1: d6:ed:0e:4f:75:42:fb:30:03:a0:4d:4e:ff:ed:f3:be:5a:9a: 18:59:f8:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKBB1vsdkBnsvkI1BWUu7yUhHO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVB MzI4RDY4OTAeFw0yNTA2MTgwMjU2MjJaFw0yNTA2MjExNDI5MjJaMDMxMTAvBgNV BAMTKEQ2QTcxQjQxMUEzRTA4QTRDRkZEQzBENDI5RDQzQTNGN0Q5MjVDNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7M3ySOZoYrDSVl1+tSpfvpJ43 cOGXj0TytU/AQhHJvY7iFol0/cuM9X0oPGhGe4vCCj5uq5kSAWP+qDmAKzoUubNo cgITz8qRSviBPzhl3wWcAaPDS6Iw7/Xz++xLmDXVmOW03cxO/fstqf9Dw68mhxhX EDp1f9kZ6jn8Zu0nxj8v20K5Wk6ulzX97tKhNUnHxD1yxGLnn/iaBCIo2vmqhj0T xC1jXF2gvsy/mYe4uQSRrCLTieeafOpGI8BeUoAzgObawHfcSSVJVqQpjMm7WhJC wZv1HHamEH/S++QWynfiEQ1XkJF2QHGxm4guF522YfU0wLFwfYTUsLu4GdGvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1qcbQRo+CKTP/cDUKdQ6P32SXEYwHwYDVR0j BBgwFoAUlfrDilyyzqPl/+JJVianvqMo1okwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMC85NUZBQzM4QTVD QjJDRUEzRTVGRkUyNDk1NjI2QTdCRUEzMjhENjg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVBMzI4 RDY4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3 QkVBMzI4RDY4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHS+0igvfrwXrqPJq7zfKso1hpMynV/40HdB l485wuM5ZVspAmmXafYNZuc2b9omGGdK7boHMTNYF+Q/93lowHjkEwApqiXOdnM9 SKjvBl+00Bk4AfQ5dIIwUqSA4ZwXAGE/5YR7kkYpj8CnVFx69A8ZIlZyfPSBf5Y0 G/Cq83W9OY6WYRGFlJT/9QVkO7hab1nh9X+uk1+imiHk3nt9V5GU7/zffdJdibF7 BqSBvTU5lYEMRqvgXjcffBxi3H+RlUwyPC5xS2Kj07KahVh3zm/bn4LtUGVuY8Pj GbqnHZ89mvtVtYa2cd6C0dbtDk91QvswA6BNTv/t875amhhZ+GQ= -----END CERTIFICATE-----Generated at Wed Jun 18 15:54:49 2025 by rpki-client