$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft File: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft (raw, json) Hash identifier: lctjTKJIFgeIYj6mXa0RqJ/gmcL91BADTv1KljnXeGc= Subject key identifier: B4:C0:35:88:F4:E2:73:EE:2C:FA:44:50:78:06:05:F8:75:09:79:DA Authority key identifier: 95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 Certificate issuer: /CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Certificate serial: 122D045C59090ABEA9766FDED131A95EC77517ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft Manifest number: 91 Signing time: Sat 26 Apr 2025 15:11:20 +0000 Manifest this update: Sat 26 Apr 2025 15:06:20 +0000 Manifest next update: Tue 29 Apr 2025 23:27:20 +0000 Files and hashes: 1: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: PiWVlKjUs0amBWCdvxLs5cX1/7M8WB7XrVQaBgAMMxY=) 2: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl (hash: sI80ScEG9llC/TytWA2aO6Rao3gACl2zFwjDTWNVh6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 23:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:2d:04:5c:59:09:0a:be:a9:76:6f:de:d1:31:a9:5e:c7:75:17:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Validity Not Before: Apr 26 15:06:20 2025 GMT Not After : Apr 29 23:27:20 2025 GMT Subject: CN=B4C03588F4E273EE2CFA4450780605F8750979DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ec:74:34:df:40:4a:74:08:9d:e7:a9:ab:3c: 53:10:cb:cb:a5:37:45:db:69:67:d9:38:bf:5c:a3: 2c:84:ec:bb:af:8d:b2:40:88:98:c0:f2:4f:0e:20: 9f:55:b9:d8:16:da:81:bb:99:40:82:41:39:f7:4f: cd:be:9d:bb:f8:0c:c4:95:69:02:b9:c6:0c:fe:d9: d8:58:4d:00:a6:0c:ec:13:b9:f3:3c:32:8a:c8:31: a7:9b:65:55:28:db:df:73:46:44:0d:8e:78:a8:12: 5b:8f:63:c5:97:22:7d:a5:16:e7:7a:b3:74:cb:5a: b1:45:59:da:70:57:6d:16:f4:66:13:08:02:83:b3: 14:91:1b:62:72:e8:7f:c8:40:c0:3b:54:35:ec:53: 3b:60:2a:99:83:83:6a:a9:f5:fe:c3:c0:86:61:84: d7:c5:12:37:0e:de:06:d9:af:01:bf:7e:66:db:18: d2:2b:18:c0:29:95:f4:f1:1d:22:91:ab:cf:e5:d4: 3b:a8:2b:82:99:eb:d3:59:9d:a8:47:62:7a:69:d1: b4:05:3d:06:a2:f6:07:9d:8b:39:07:2d:34:af:d0: 8a:68:2b:77:c0:ad:98:58:ed:64:72:51:d2:28:8c: d9:bd:ed:ca:86:a8:88:fe:54:f3:b5:3a:91:ba:46: de:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C0:35:88:F4:E2:73:EE:2C:FA:44:50:78:06:05:F8:75:09:79:DA X509v3 Authority Key Identifier: keyid:95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:c4:92:6f:34:3e:ff:f6:ce:12:d3:ee:12:c4:aa:b6:48:8a: 1b:74:47:e0:48:9f:47:80:5a:ca:49:15:5e:d4:97:a4:11:c3: b2:6b:47:71:d2:40:dd:b2:e7:6f:50:5e:f7:aa:ae:70:29:fd: cc:4d:e0:5d:f6:4c:43:9f:2a:d2:dc:4d:b6:20:a3:c0:27:e7: c4:8f:0e:99:d3:05:e8:c0:61:e5:7f:d0:0e:6d:32:58:8a:5c: 36:16:ad:6f:a8:41:b4:1e:ab:29:3e:71:74:9f:90:0c:63:cd: e8:74:56:46:d0:2a:19:22:d2:d1:88:33:07:18:0c:ad:32:ef: 4b:77:8d:cd:5e:2f:e6:50:2c:5b:12:6c:eb:e2:32:81:aa:6e: cd:a9:96:76:2f:df:84:a3:23:03:d7:e0:23:ce:8b:c7:8b:37: e6:e4:67:46:e9:68:91:c7:54:e4:bc:0d:77:57:70:89:87:8b: fb:1c:ea:36:73:76:2b:8a:a4:aa:8e:64:5e:95:b7:23:e3:73: f1:ef:99:5f:37:49:dc:5f:f8:5a:ef:32:5d:d7:d2:8a:19:b1: 5c:41:0c:e5:96:76:8c:09:3c:e4:8f:97:23:21:f3:2f:7a:d3: 55:4b:1f:75:68:9a:59:8c:af:64:ff:29:6a:8d:5b:ca:af:5f: 71:b8:4a:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEi0EXFkJCr6pdm/e0TGpXsd1F+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVB MzI4RDY4OTAeFw0yNTA0MjYxNTA2MjBaFw0yNTA0MjkyMzI3MjBaMDMxMTAvBgNV BAMTKEI0QzAzNTg4RjRFMjczRUUyQ0ZBNDQ1MDc4MDYwNUY4NzUwOTc5REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN7HQ030BKdAid56mrPFMQy8ul N0XbaWfZOL9coyyE7LuvjbJAiJjA8k8OIJ9VudgW2oG7mUCCQTn3T82+nbv4DMSV aQK5xgz+2dhYTQCmDOwTufM8MorIMaebZVUo299zRkQNjnioEluPY8WXIn2lFud6 s3TLWrFFWdpwV20W9GYTCAKDsxSRG2Jy6H/IQMA7VDXsUztgKpmDg2qp9f7DwIZh hNfFEjcO3gbZrwG/fmbbGNIrGMAplfTxHSKRq8/l1DuoK4KZ69NZnahHYnpp0bQF PQai9gedizkHLTSv0IpoK3fArZhY7WRyUdIojNm97cqGqIj+VPO1OpG6Rt5JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtMA1iPTic+4s+kRQeAYF+HUJedowHwYDVR0j BBgwFoAUlfrDilyyzqPl/+JJVianvqMo1okwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMC85NUZBQzM4QTVD QjJDRUEzRTVGRkUyNDk1NjI2QTdCRUEzMjhENjg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVBMzI4 RDY4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3 QkVBMzI4RDY4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfEkm80Pv/2zhLT7hLEqrZIiht0R+BIn0eA WspJFV7Ul6QRw7JrR3HSQN2y529QXveqrnAp/cxN4F32TEOfKtLcTbYgo8An58SP DpnTBejAYeV/0A5tMliKXDYWrW+oQbQeqyk+cXSfkAxjzeh0VkbQKhki0tGIMwcY DK0y70t3jc1eL+ZQLFsSbOviMoGqbs2plnYv34SjIwPX4CPOi8eLN+bkZ0bpaJHH VOS8DXdXcImHi/sc6jZzdiuKpKqOZF6VtyPjc/HvmV83Sdxf+FrvMl3X0ooZsVxB DOWWdowJPOSPlyMh8y9601VLH3VomlmMr2T/KWqNW8qvX3G4SoU= -----END CERTIFICATE-----Generated at Sun Apr 27 20:10:46 2025 by rpki-client