$ rpki-client -vvf repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft File: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft (raw, json) Hash identifier: kjTIuIQ0nfQ1+zPjVjHRlHTZ5am57erTkQHUXYISaO0= Subject key identifier: F8:47:E0:38:FF:E3:01:10:93:C0:5F:B0:7C:EB:32:94:FB:1F:04:1D Authority key identifier: 95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 Certificate issuer: /CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Certificate serial: 51E8F3ABA1A3671DA16460228740FF2668E355A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft Manifest number: 051C Signing time: Tue 04 Nov 2025 04:53:14 +0000 Manifest this update: Tue 04 Nov 2025 04:48:14 +0000 Manifest next update: Fri 07 Nov 2025 14:20:14 +0000 Files and hashes: 1: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: ifCGuusxkGprBC7NulQNufNvo7SVC5amSJ/1S4uaqjQ=) 2: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: hccolhWeQwMhTE4DUNZtMqz3UE4I8axgnsLj/aGjWu0=) 3: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl (hash: b6Lzx1cuRSUzd9qNBsqpe6kSOm/1iw7VGQOzE6yk5W0=) 4: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: LZPQ7rMeaDVcHWLsKLTFoADUeRBC0AnGmqL6VPS4zMA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 14:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:e8:f3:ab:a1:a3:67:1d:a1:64:60:22:87:40:ff:26:68:e3:55:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Validity Not Before: Nov 4 04:48:14 2025 GMT Not After : Nov 7 14:20:14 2025 GMT Subject: CN=F847E038FFE3011093C05FB07CEB3294FB1F041D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:27:a2:f0:dd:a0:c4:ac:87:b6:bc:d9:35:48: 3d:bf:e2:25:bf:86:15:08:7f:d2:97:64:ed:32:89: 1a:4c:99:bf:67:66:72:9f:86:11:ea:d2:28:a6:2a: 2f:e4:07:17:5b:5a:ad:9d:d5:67:0e:d4:8c:79:17: d0:86:72:de:c5:40:a5:8f:6a:d1:bd:67:53:64:6a: 59:58:fa:e8:1b:91:d6:d8:a4:02:7f:f0:16:b2:a7: c0:70:c1:65:35:33:4f:98:bc:cc:94:28:f9:02:e2: ff:52:a0:93:2b:03:2d:6a:0e:51:b0:ae:2b:2c:55: 26:b7:c9:df:99:2e:e3:f0:a4:d3:87:33:aa:2d:a3: bc:b2:01:14:06:61:87:7f:1c:27:1a:0c:79:a5:f3: a4:d6:a4:df:7c:cf:f7:cb:9a:68:1a:28:d3:87:59: b3:e1:b5:69:06:2e:22:f8:16:53:d8:e2:9b:f9:06: 25:45:59:87:39:d8:8a:64:a3:d7:78:9f:9f:36:6c: e1:0d:f7:6a:61:6d:30:a2:a6:e5:dc:a4:99:75:46: c8:24:6f:d3:31:81:b8:b7:96:a4:9c:da:d1:76:7e: 44:ca:c7:a0:76:ad:88:bd:8e:f8:76:3f:02:6f:5d: 22:47:73:29:63:70:b8:93:f9:92:fd:3f:83:11:af: 67:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:47:E0:38:FF:E3:01:10:93:C0:5F:B0:7C:EB:32:94:FB:1F:04:1D X509v3 Authority Key Identifier: keyid:95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5b:e2:51:05:e9:c1:b3:9b:76:70:fd:8a:06:54:c5:5c:5d: 29:cc:9a:21:a3:02:4c:1e:e8:69:11:d8:cb:26:86:b0:b2:ec: ca:6d:fe:dd:78:ec:05:3d:c9:40:b2:e6:8b:54:1e:dd:bf:df: 65:6c:2a:60:b2:fa:51:4c:5d:9c:d2:6a:d0:62:85:ff:50:f0: fa:60:1f:6f:36:d4:3a:8d:f0:63:fd:0c:c0:d0:4d:ba:9e:e1: 9f:eb:7d:5c:44:0b:4e:73:65:31:db:e7:57:3f:bf:68:39:41: 31:1f:6b:78:3c:90:db:8b:4c:88:df:4e:ad:5e:4c:fe:55:29: ba:73:13:1e:b9:c4:84:32:6e:f7:64:19:b6:5f:ba:83:84:ca: 9b:5c:6d:75:13:c3:58:03:99:63:19:28:36:6a:15:e0:11:06: 15:0b:06:8f:b9:f1:53:fc:78:95:61:25:ba:ae:14:2c:48:b8: 32:b3:19:c7:27:26:e2:6b:b1:38:a0:3f:76:66:f7:d7:24:c6: 29:13:58:75:b9:2e:e1:a2:48:37:fd:9a:87:a2:92:ab:1a:20: e5:3c:50:a3:64:ac:73:30:f3:fd:e3:aa:76:11:fe:e3:c6:97: fc:91:8d:a3:ca:b0:33:f1:fc:02:1c:ae:79:d4:49:34:a6:3f: 60:ff:67:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUejzq6GjZx2hZGAih0D/JmjjVaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0 NjQ2MUFCMzAeFw0yNTExMDQwNDQ4MTRaFw0yNTExMDcxNDIwMTRaMDMxMTAvBgNV BAMTKEY4NDdFMDM4RkZFMzAxMTA5M0MwNUZCMDdDRUIzMjk0RkIxRjA0MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/J6Lw3aDErIe2vNk1SD2/4iW/ hhUIf9KXZO0yiRpMmb9nZnKfhhHq0iimKi/kBxdbWq2d1WcO1Ix5F9CGct7FQKWP atG9Z1NkallY+ugbkdbYpAJ/8Bayp8BwwWU1M0+YvMyUKPkC4v9SoJMrAy1qDlGw rissVSa3yd+ZLuPwpNOHM6oto7yyARQGYYd/HCcaDHml86TWpN98z/fLmmgaKNOH WbPhtWkGLiL4FlPY4pv5BiVFWYc52Ipko9d4n582bOEN92phbTCipuXcpJl1Rsgk b9Mxgbi3lqSc2tF2fkTKx6B2rYi9jvh2PwJvXSJHcyljcLiT+ZL9P4MRr2chAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+EfgOP/jARCTwF+wfOsylPsfBB0wHwYDVR0j BBgwFoAUldkTaEX6+geVc11Kmw/590ZGGrMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc4NWU2NS01MWUyLTRiMWItODJmOS1lNzUzYWQ0YjI0MGYvMC85NUQ5MTM2ODQ1 RkFGQTA3OTU3MzVENEE5QjBGRjlGNzQ2NDYxQUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0NjQ2 MUFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5 Rjc0NjQ2MUFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtb4lEF6cGzm3Zw/YoGVMVcXSnMmiGjAkwe 6GkR2MsmhrCy7Mpt/t147AU9yUCy5otUHt2/32VsKmCy+lFMXZzSatBihf9Q8Ppg H2821DqN8GP9DMDQTbqe4Z/rfVxEC05zZTHb51c/v2g5QTEfa3g8kNuLTIjfTq1e TP5VKbpzEx65xIQybvdkGbZfuoOEyptcbXUTw1gDmWMZKDZqFeARBhULBo+58VP8 eJVhJbquFCxIuDKzGccnJuJrsTigP3Zm99ckxikTWHW5LuGiSDf9moeikqsaIOU8 UKNkrHMw8/3jqnYR/uPGl/yRjaPKsDPx/AIcrnnUSTSmP2D/ZxU= -----END CERTIFICATE-----Generated at Wed Nov 5 08:46:04 2025 by rpki-client