$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft File: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft (raw, json) Hash identifier: 14qbkHEfUBKjot4DMztz3gETR3dAINAxPWYopI1xAao= Subject key identifier: FF:B4:73:20:D0:5B:39:55:C1:3E:A4:CB:2D:24:60:6C:65:18:B6:92 Authority key identifier: 95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 Certificate issuer: /CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Certificate serial: 306BCAA7B2DD75238A68FAE56CB94722B3AE7204 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft Manifest number: BF Signing time: Thu 07 Aug 2025 15:01:23 +0000 Manifest this update: Thu 07 Aug 2025 14:56:23 +0000 Manifest next update: Mon 11 Aug 2025 00:19:23 +0000 Files and hashes: 1: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: +Xk0mxGkc/lCxZDeUptrpwZhCqCSnBV/uCVgeNZ+WpY=) 2: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl (hash: JOS9k19LZrxt9asUPIJiUyfHOB6P4uiUJVn4KFq+9AY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 00:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:6b:ca:a7:b2:dd:75:23:8a:68:fa:e5:6c:b9:47:22:b3:ae:72:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Validity Not Before: Aug 7 14:56:23 2025 GMT Not After : Aug 11 00:19:23 2025 GMT Subject: CN=FFB47320D05B3955C13EA4CB2D24606C6518B692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:46:f4:f7:76:a7:43:29:16:e9:26:70:93:f6: 54:f6:b6:6b:8b:35:b7:56:d8:7f:49:de:f2:27:07: 37:31:7d:76:df:b9:e5:11:2d:08:c5:9b:3d:22:c9: 49:fb:17:bf:b7:65:0e:c6:68:a7:60:f2:50:b4:b2: 0e:d9:b7:77:8c:11:fb:48:20:14:94:7c:78:e4:dc: 39:45:72:ac:b9:aa:23:91:5f:52:14:52:8b:2e:d4: a5:31:47:83:91:c4:6a:ea:5f:f5:74:3f:f8:02:6c: e7:62:fa:d6:f8:9c:d4:12:3b:26:ae:61:5d:5f:7e: b6:67:e5:6b:80:66:65:b7:b9:b4:76:1c:5e:ba:47: ab:97:b0:4d:63:5e:f1:e8:2f:3a:dd:c8:27:48:69: 42:0f:68:e1:48:5d:de:ee:85:4c:34:d8:a3:5f:eb: ab:2c:f6:1a:4d:9b:1c:20:70:8c:28:4a:47:b1:84: f5:06:f3:61:6f:9f:64:b0:57:ea:c8:8a:87:8b:14: ed:68:8e:58:a9:32:ca:8d:0d:36:ba:db:96:58:f8: c0:32:e8:51:6f:19:5c:c2:6c:05:8e:76:a2:9a:9d: 8a:f0:89:ea:ca:19:ed:55:22:62:ba:b4:17:5b:76: e2:4d:67:ba:6d:b8:e2:6b:49:f8:e7:b4:c2:1c:66: c0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B4:73:20:D0:5B:39:55:C1:3E:A4:CB:2D:24:60:6C:65:18:B6:92 X509v3 Authority Key Identifier: keyid:95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a1:48:ed:1f:9c:14:68:62:7b:ea:f9:a8:e1:4d:78:97:b0: c0:72:06:c8:32:ac:2a:89:4d:c6:73:22:e9:16:d3:03:c0:53: 36:03:94:bd:40:11:90:fb:d0:82:48:1e:2f:14:48:42:4b:fe: 03:f3:8f:d1:90:5d:39:10:4f:01:ed:d0:c9:62:18:d3:aa:61: 65:2f:63:f6:a0:14:28:aa:70:4e:d8:94:d6:f9:fc:63:e4:d4: ee:86:d2:48:d0:c6:5c:b2:29:3b:3a:a3:6a:bd:e9:db:bb:a0: 1d:3c:96:66:5e:2e:c3:fd:29:4e:57:ed:9a:77:bb:97:0d:5f: a3:c8:dc:48:79:72:49:b1:2e:1e:85:5d:79:91:ff:8b:07:70: f0:71:df:21:b3:f2:4b:03:1c:dd:97:df:ea:e5:6f:d0:bd:b9: 1b:5e:ff:f5:b4:e1:35:6d:35:6d:e0:c8:70:e0:01:88:db:23: 61:43:42:f2:13:7c:5e:22:2e:e7:1d:d3:1f:cf:5f:1b:ec:5f: 52:f4:0d:65:27:22:13:c8:3a:c0:86:14:19:af:3b:ee:dd:f9: 23:fb:99:84:9f:77:22:4b:d7:39:fb:e7:2c:3c:ad:86:f3:25: f9:db:bd:c8:6d:82:b7:dc:01:ce:e0:61:7f:ef:90:46:c5:05: 46:40:d2:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMGvKp7LddSOKaPrlbLlHIrOucgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVB MzI4RDY4OTAeFw0yNTA4MDcxNDU2MjNaFw0yNTA4MTEwMDE5MjNaMDMxMTAvBgNV BAMTKEZGQjQ3MzIwRDA1QjM5NTVDMTNFQTRDQjJEMjQ2MDZDNjUxOEI2OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGRvT3dqdDKRbpJnCT9lT2tmuL NbdW2H9J3vInBzcxfXbfueURLQjFmz0iyUn7F7+3ZQ7GaKdg8lC0sg7Zt3eMEftI IBSUfHjk3DlFcqy5qiORX1IUUosu1KUxR4ORxGrqX/V0P/gCbOdi+tb4nNQSOyau YV1ffrZn5WuAZmW3ubR2HF66R6uXsE1jXvHoLzrdyCdIaUIPaOFIXd7uhUw02KNf 66ss9hpNmxwgcIwoSkexhPUG82Fvn2SwV+rIioeLFO1ojlipMsqNDTa625ZY+MAy 6FFvGVzCbAWOdqKanYrwierKGe1VImK6tBdbduJNZ7ptuOJrSfjntMIcZsBdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/7RzINBbOVXBPqTLLSRgbGUYtpIwHwYDVR0j BBgwFoAUlfrDilyyzqPl/+JJVianvqMo1okwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMC85NUZBQzM4QTVD QjJDRUEzRTVGRkUyNDk1NjI2QTdCRUEzMjhENjg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVBMzI4 RDY4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3 QkVBMzI4RDY4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2hSO0fnBRoYnvq+ajhTXiXsMByBsgyrCqJ TcZzIukW0wPAUzYDlL1AEZD70IJIHi8USEJL/gPzj9GQXTkQTwHt0MliGNOqYWUv Y/agFCiqcE7YlNb5/GPk1O6G0kjQxlyyKTs6o2q96du7oB08lmZeLsP9KU5X7Zp3 u5cNX6PI3Eh5ckmxLh6FXXmR/4sHcPBx3yGz8ksDHN2X3+rlb9C9uRte//W04TVt NW3gyHDgAYjbI2FDQvITfF4iLucd0x/PXxvsX1L0DWUnIhPIOsCGFBmvO+7d+SP7 mYSfdyJL1zn75yw8rYbzJfnbvchtgrfcAc7gYX/vkEbFBUZA0tk= -----END CERTIFICATE-----Generated at Sat Aug 9 00:59:30 2025 by rpki-client