$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft File: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft (raw, json) Hash identifier: fLpwtqtXHKaRhws/BL13a+IFFZvTBcTkMQ1s6lEcm1M= Subject key identifier: C3:BB:23:EC:B3:7B:69:B4:01:01:7C:CF:31:65:4E:CF:69:AB:3B:81 Authority key identifier: 95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 Certificate issuer: /CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Certificate serial: 4E1CDA98790DD47B5D5027E74BF3EC09385C67C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft Manifest number: E7 Signing time: Tue 04 Nov 2025 09:41:24 +0000 Manifest this update: Tue 04 Nov 2025 09:36:24 +0000 Manifest next update: Fri 07 Nov 2025 18:59:24 +0000 Files and hashes: 1: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl (hash: +jZTb8xm710TIq/peppqDDhfm/Y0STIfPRDOnU3VYVg=) 2: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: +Xk0mxGkc/lCxZDeUptrpwZhCqCSnBV/uCVgeNZ+WpY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 18:59:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:1c:da:98:79:0d:d4:7b:5d:50:27:e7:4b:f3:ec:09:38:5c:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Validity Not Before: Nov 4 09:36:24 2025 GMT Not After : Nov 7 18:59:24 2025 GMT Subject: CN=C3BB23ECB37B69B401017CCF31654ECF69AB3B81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f7:5e:67:22:75:c3:a9:a1:75:5c:c8:83:c2: 83:cd:5c:49:b3:fc:de:21:8c:6a:a2:be:cf:5a:7c: 66:35:44:5b:7c:dd:81:94:47:a1:87:73:ab:63:4f: b0:34:55:ca:b5:27:50:1a:90:fd:15:7f:ca:3a:bc: 25:be:98:ae:ae:ca:51:07:5d:a6:c8:1a:7e:2d:c9: 8e:0c:42:13:57:49:a7:d8:60:00:57:c1:64:aa:30: dc:44:14:91:83:8f:2f:29:fb:78:59:c7:02:ae:39: aa:2e:53:da:fb:88:9b:26:36:2f:32:ed:2e:82:93: bd:7a:36:1d:b4:95:01:1f:21:31:00:32:74:43:06: ec:34:26:a3:4e:22:88:f3:a5:75:8e:94:22:4d:47: 16:f9:e4:7a:04:75:13:c9:c4:9d:73:97:3d:58:0c: 26:ad:7e:71:a7:84:4a:88:00:02:37:e4:ba:04:82: 94:03:dc:a5:f3:c1:4d:58:1b:29:a3:a0:07:59:7f: 85:22:e1:34:1c:83:ee:23:4f:a0:8d:86:a7:bf:71: c9:b1:f1:86:c0:8d:fd:6e:3a:07:ee:15:1e:81:22: 4f:42:76:72:38:0d:0e:1b:19:52:1c:f8:c0:21:00: 4c:cb:80:31:42:f4:7b:cf:84:a8:6a:1c:9d:c8:fc: a7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BB:23:EC:B3:7B:69:B4:01:01:7C:CF:31:65:4E:CF:69:AB:3B:81 X509v3 Authority Key Identifier: keyid:95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:92:31:ac:d6:31:51:fd:2c:8a:f8:33:61:e2:37:0b:d0:86: ed:85:0b:4c:af:ba:7c:5a:d0:4b:32:e9:76:5d:90:c6:51:e7: d5:02:88:71:61:90:e9:4d:6d:d7:0e:d0:23:ac:1d:5b:98:ba: 25:ff:c7:12:a3:e0:7c:32:30:a0:7d:27:1a:3b:8e:6a:76:2d: 17:f2:43:5b:c3:fb:e2:e3:53:d3:9d:f6:95:f9:ab:2c:04:e6: a7:27:57:3d:66:74:a9:5d:8f:61:4f:89:bb:05:9b:a1:6b:92: e8:d8:72:68:db:d4:f4:29:21:e3:58:df:9c:a0:22:b6:e8:dd: a1:58:8e:a8:b6:7e:31:74:13:3b:0c:1c:ce:dc:46:7c:be:22: fe:a5:f4:40:bf:48:2f:dd:97:c7:7a:2e:4a:8d:ee:c3:98:69: 3c:2e:6f:b6:3e:45:f1:98:5c:65:a9:91:b8:b6:78:10:e0:4c: 01:8f:55:1a:9f:f6:49:c5:4f:7b:84:74:91:13:62:9e:5e:69: b1:09:2a:f0:48:28:bb:ca:24:f7:a5:4f:c3:70:fa:61:fe:f8: 90:81:90:1f:1e:56:2c:ec:62:f2:80:08:c7:78:f1:af:c9:9f: 4d:93:e7:4d:69:94:58:a2:24:03:88:1f:a9:9f:f7:9b:e0:3a: 38:be:08:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUThzamHkN1HtdUCfnS/PsCThcZ8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVB MzI4RDY4OTAeFw0yNTExMDQwOTM2MjRaFw0yNTExMDcxODU5MjRaMDMxMTAvBgNV BAMTKEMzQkIyM0VDQjM3QjY5QjQwMTAxN0NDRjMxNjU0RUNGNjlBQjNCODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE915nInXDqaF1XMiDwoPNXEmz /N4hjGqivs9afGY1RFt83YGUR6GHc6tjT7A0Vcq1J1AakP0Vf8o6vCW+mK6uylEH XabIGn4tyY4MQhNXSafYYABXwWSqMNxEFJGDjy8p+3hZxwKuOaouU9r7iJsmNi8y 7S6Ck716Nh20lQEfITEAMnRDBuw0JqNOIojzpXWOlCJNRxb55HoEdRPJxJ1zlz1Y DCatfnGnhEqIAAI35LoEgpQD3KXzwU1YGymjoAdZf4Ui4TQcg+4jT6CNhqe/ccmx 8YbAjf1uOgfuFR6BIk9CdnI4DQ4bGVIc+MAhAEzLgDFC9HvPhKhqHJ3I/KcZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw7sj7LN7abQBAXzPMWVOz2mrO4EwHwYDVR0j BBgwFoAUlfrDilyyzqPl/+JJVianvqMo1okwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMC85NUZBQzM4QTVD QjJDRUEzRTVGRkUyNDk1NjI2QTdCRUEzMjhENjg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVBMzI4 RDY4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3 QkVBMzI4RDY4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAeSMazWMVH9LIr4M2HiNwvQhu2FC0yvunxa 0Esy6XZdkMZR59UCiHFhkOlNbdcO0COsHVuYuiX/xxKj4HwyMKB9Jxo7jmp2LRfy Q1vD++LjU9Od9pX5qywE5qcnVz1mdKldj2FPibsFm6FrkujYcmjb1PQpIeNY35yg Irbo3aFYjqi2fjF0EzsMHM7cRny+Iv6l9EC/SC/dl8d6LkqN7sOYaTwub7Y+RfGY XGWpkbi2eBDgTAGPVRqf9knFT3uEdJETYp5eabEJKvBIKLvKJPelT8Nw+mH++JCB kB8eVizsYvKACMd48a/Jn02T501plFiiJAOIH6mf95vgOji+CLQ= -----END CERTIFICATE-----Generated at Wed Nov 5 09:18:57 2025 by rpki-client