$ rpki-client -vvf repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft File: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft (raw, json) Hash identifier: ZcgVwfkUTDLPy+SQMNPch+s9SOf7h6w7YxemBsUmD6g= Subject key identifier: 1E:9A:D5:3C:93:20:9E:7B:39:46:A5:9B:0B:68:39:D4:EF:8A:07:30 Authority key identifier: 95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 Certificate issuer: /CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Certificate serial: 4E9444D92FA59AB92EB012E22135477E0B099EAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft Manifest number: 04F4 Signing time: Wed 06 Aug 2025 03:22:13 +0000 Manifest this update: Wed 06 Aug 2025 03:17:13 +0000 Manifest next update: Sat 09 Aug 2025 08:53:13 +0000 Files and hashes: 1: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: ifCGuusxkGprBC7NulQNufNvo7SVC5amSJ/1S4uaqjQ=) 2: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: hccolhWeQwMhTE4DUNZtMqz3UE4I8axgnsLj/aGjWu0=) 3: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl (hash: h833GHmWahsMcWD1UXTLOfNbjgEJ4Tc4y1qyzb6KHEw=) 4: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: LZPQ7rMeaDVcHWLsKLTFoADUeRBC0AnGmqL6VPS4zMA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 08:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:94:44:d9:2f:a5:9a:b9:2e:b0:12:e2:21:35:47:7e:0b:09:9e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Validity Not Before: Aug 6 03:17:13 2025 GMT Not After : Aug 9 08:53:13 2025 GMT Subject: CN=1E9AD53C93209E7B3946A59B0B6839D4EF8A0730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:97:3f:54:83:79:6b:59:a4:f8:55:de:04:aa: 96:34:d9:7d:17:91:b2:a6:7a:0f:5a:f3:2f:1a:bc: db:44:16:41:32:7b:40:60:ba:b7:f2:46:c3:cd:45: f5:0d:97:82:f0:0f:0c:f1:1b:48:92:ee:aa:38:89: 01:f2:b1:07:0c:51:1b:ef:b2:3c:30:d8:0c:02:99: 96:79:3f:60:c5:dc:1a:eb:42:86:a0:af:3e:67:f6: b8:73:26:11:ec:61:48:68:6f:b1:5d:9f:e7:25:00: de:bf:c3:d3:cb:c4:fe:c8:6a:c8:1b:01:20:b9:a4: be:8e:66:45:82:84:76:5d:d3:f0:0f:e5:e3:27:84: 22:08:72:c7:42:a9:86:c9:2d:6f:59:d8:9c:36:5c: 70:ad:39:24:da:22:b2:cf:37:97:e7:d6:ce:3f:c9: 6f:63:e7:84:75:59:39:aa:cd:5c:af:83:bf:88:93: bc:92:7f:e3:d7:48:2a:59:0b:aa:35:d9:88:b0:d1: 1e:f5:d4:ea:a3:f7:f5:8f:13:1b:ab:b2:b9:01:c7: 2b:3c:27:a7:38:33:72:55:03:8f:0a:25:53:a8:5f: e7:d5:7c:c3:68:aa:fd:d5:09:18:4b:58:4a:e4:67: e9:34:cd:bd:1f:6c:b0:26:50:1c:84:0c:d6:35:a9: 8a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9A:D5:3C:93:20:9E:7B:39:46:A5:9B:0B:68:39:D4:EF:8A:07:30 X509v3 Authority Key Identifier: keyid:95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e1:b3:65:d3:cd:11:23:0d:07:d2:f8:50:29:25:35:2e:08: b5:94:a0:ee:46:89:9f:57:a5:7e:40:04:b7:40:37:1f:fe:da: 84:31:09:37:64:ca:7c:28:57:fa:de:c5:22:c4:db:9a:1f:b0: 9d:f5:53:09:fa:85:9d:9e:be:86:43:7e:fe:69:a7:c7:70:d8: 6b:11:7e:0a:3b:7c:8c:07:c5:31:ad:13:a9:2f:b3:99:f2:2a: ad:7d:4e:51:6f:c7:6b:46:8b:c7:33:51:2e:99:9e:79:62:e3: 1c:83:f1:f4:f2:da:94:30:a7:39:21:54:36:04:9a:bd:6a:f2: 9d:a4:4b:fd:d8:a3:f1:df:1e:63:fe:35:e5:bc:53:32:b3:e7: 30:32:e7:78:5f:ce:73:83:05:6a:eb:ed:a2:ac:bf:7d:2a:e9: e2:1b:4a:2d:29:4a:1c:cc:89:3b:6d:d2:4f:07:99:b1:a2:dc: 22:79:fe:c0:0a:75:d3:c9:54:26:b0:b4:6b:1c:e3:1a:48:0c: ec:56:4a:2f:3c:5c:51:ee:a2:af:10:4c:c8:dd:38:19:55:c4: fb:25:1e:53:30:f1:bd:22:f1:de:b3:9d:71:b4:31:db:aa:62: fd:b2:c3:58:b7:4a:58:ac:80:a3:41:13:9c:c9:18:3b:ee:ea: d3:f9:f2:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTpRE2S+lmrkusBLiITVHfgsJnq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0 NjQ2MUFCMzAeFw0yNTA4MDYwMzE3MTNaFw0yNTA4MDkwODUzMTNaMDMxMTAvBgNV BAMTKDFFOUFENTNDOTMyMDlFN0IzOTQ2QTU5QjBCNjgzOUQ0RUY4QTA3MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDklz9Ug3lrWaT4Vd4EqpY02X0X kbKmeg9a8y8avNtEFkEye0BgurfyRsPNRfUNl4LwDwzxG0iS7qo4iQHysQcMURvv sjww2AwCmZZ5P2DF3BrrQoagrz5n9rhzJhHsYUhob7Fdn+clAN6/w9PLxP7Iasgb ASC5pL6OZkWChHZd0/AP5eMnhCIIcsdCqYbJLW9Z2Jw2XHCtOSTaIrLPN5fn1s4/ yW9j54R1WTmqzVyvg7+Ik7ySf+PXSCpZC6o12Yiw0R711Oqj9/WPExursrkBxys8 J6c4M3JVA48KJVOoX+fVfMNoqv3VCRhLWErkZ+k0zb0fbLAmUByEDNY1qYrbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHprVPJMgnns5RqWbC2g51O+KBzAwHwYDVR0j BBgwFoAUldkTaEX6+geVc11Kmw/590ZGGrMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc4NWU2NS01MWUyLTRiMWItODJmOS1lNzUzYWQ0YjI0MGYvMC85NUQ5MTM2ODQ1 RkFGQTA3OTU3MzVENEE5QjBGRjlGNzQ2NDYxQUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0NjQ2 MUFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5 Rjc0NjQ2MUFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7hs2XTzREjDQfS+FApJTUuCLWUoO5GiZ9X pX5ABLdANx/+2oQxCTdkynwoV/rexSLE25ofsJ31Uwn6hZ2evoZDfv5pp8dw2GsR fgo7fIwHxTGtE6kvs5nyKq19TlFvx2tGi8czUS6Znnli4xyD8fTy2pQwpzkhVDYE mr1q8p2kS/3Yo/HfHmP+NeW8UzKz5zAy53hfznODBWrr7aKsv30q6eIbSi0pShzM iTtt0k8HmbGi3CJ5/sAKddPJVCawtGsc4xpIDOxWSi88XFHuoq8QTMjdOBlVxPsl HlMw8b0i8d6znXG0MduqYv2yw1i3SlisgKNBE5zJGDvu6tP58kA= -----END CERTIFICATE-----Generated at Thu Aug 7 03:30:09 2025 by rpki-client