$ rpki-client -vvf repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft File: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft (raw, json) Hash identifier: Il0d/QQqKnVQ+G+//uCEJGyQu9HII+Tq6SfPWhRmaRI= Subject key identifier: DF:E3:A7:4F:CE:CB:5F:E5:71:3D:AF:E8:38:9A:CE:F4:DC:C1:37:7A Authority key identifier: 95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 Certificate issuer: /CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Certificate serial: 5E5B7065020FB932AD83A43FB4168D5E13458CCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft Manifest number: 04C7 Signing time: Mon 28 Apr 2025 17:02:09 +0000 Manifest this update: Mon 28 Apr 2025 16:57:09 +0000 Manifest next update: Thu 01 May 2025 21:21:09 +0000 Files and hashes: 1: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl (hash: eeIoz0I/TUaj9vUv5Dp3LwW/CKuJDnEHOf4QXI8GyuY=) 2: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: XLazE5Vn7z334jOwYoK8rFCOURJrA8ecY+QUwxwWDNY=) 3: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: bRRSscYjeY2YxaSN5983EHi4JM8B0mDZlHR23US7qhc=) 4: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: 13BZZGez00+LUIyTx+ZwpCt/BEy8rtR8zU/43gX10+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:5b:70:65:02:0f:b9:32:ad:83:a4:3f:b4:16:8d:5e:13:45:8c:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Validity Not Before: Apr 28 16:57:09 2025 GMT Not After : May 1 21:21:09 2025 GMT Subject: CN=DFE3A74FCECB5FE5713DAFE8389ACEF4DCC1377A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1e:93:07:78:a9:47:7d:73:87:3f:f2:cc:b6: 3c:99:f0:95:4a:b2:48:31:63:52:8f:d5:4a:e9:ad: e1:a5:c1:f7:59:5a:ce:b6:7e:63:ce:c2:7d:25:94: 45:f1:d7:d1:f0:a1:42:21:41:2a:7e:63:e5:35:dc: 4c:7a:00:58:b8:7d:47:0f:e5:df:4a:f5:23:ea:c1: 2c:d8:ab:1e:fa:c2:f1:28:a6:41:a7:a5:8b:8e:2d: 64:83:06:52:a4:bc:21:00:96:33:e4:56:17:7a:98: e7:aa:53:46:f4:4d:dd:d6:8b:b3:ce:74:29:54:02: f8:2e:f8:b7:66:6e:b6:eb:1d:9e:32:b1:68:4d:8c: 20:95:da:9a:9a:6f:48:45:cf:c2:ac:3e:e9:78:df: af:51:4e:47:1d:49:f9:d1:96:79:8b:8e:ca:2c:5f: e3:b6:e3:36:cc:a5:7d:29:21:b8:b1:9b:aa:30:08: a2:a9:56:56:33:f3:c9:76:77:b5:df:96:19:de:dd: 0e:86:84:92:59:20:e8:67:28:21:d2:0e:42:d4:bf: ab:6e:9c:f1:3c:cb:e9:2c:eb:ba:1f:40:ff:84:dc: 73:cb:9d:e0:c6:1a:6a:30:16:f9:17:f0:37:a0:e2: 38:ba:73:81:e7:ed:4f:55:2c:81:fd:c6:c8:a5:8e: c0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E3:A7:4F:CE:CB:5F:E5:71:3D:AF:E8:38:9A:CE:F4:DC:C1:37:7A X509v3 Authority Key Identifier: keyid:95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:4a:f0:19:6f:fe:04:75:63:d3:b4:fb:56:41:65:a2:27:b3: d9:a8:77:b2:30:7d:cd:b5:dc:62:c4:04:2e:e6:f9:e3:5d:54: 62:ca:c7:8d:96:f0:40:7b:35:2f:57:1e:4f:8d:b9:94:81:25: 25:87:9d:99:f8:20:00:83:7a:fd:10:f6:c2:64:61:1e:98:29: 04:2d:12:08:fb:d7:55:0a:1d:1e:bd:eb:09:c5:51:d1:93:85: 96:a7:7a:c1:a8:bd:40:5d:df:27:fa:9c:7e:65:0f:26:66:f8: 75:cc:fe:25:6c:d5:f3:5c:e4:60:3f:21:8d:39:83:f8:7b:3f: cb:08:a1:37:8e:f7:c1:89:17:e3:2a:62:01:8f:14:64:70:08: a3:2b:1a:bf:50:25:d3:27:cf:db:0d:e6:ca:a1:42:50:cd:85: 57:2b:3a:20:c6:cf:ff:cd:b1:f9:ae:6b:29:8e:68:18:bb:4b: 18:43:0b:25:33:9d:58:45:e1:a2:80:8c:18:82:c6:fb:b9:08: 98:ef:8c:fa:71:10:1d:c8:be:28:50:4c:10:87:d6:58:ba:a6: 24:33:71:46:8a:20:fd:f7:42:75:5c:87:0f:7b:b8:cb:fd:05: 4c:d9:bc:35:a2:ae:b2:f8:38:95:a7:f6:5a:a7:62:fc:d8:a6: 83:a3:f6:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXltwZQIPuTKtg6Q/tBaNXhNFjMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0 NjQ2MUFCMzAeFw0yNTA0MjgxNjU3MDlaFw0yNTA1MDEyMTIxMDlaMDMxMTAvBgNV BAMTKERGRTNBNzRGQ0VDQjVGRTU3MTNEQUZFODM4OUFDRUY0RENDMTM3N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDHpMHeKlHfXOHP/LMtjyZ8JVK skgxY1KP1UrpreGlwfdZWs62fmPOwn0llEXx19HwoUIhQSp+Y+U13Ex6AFi4fUcP 5d9K9SPqwSzYqx76wvEopkGnpYuOLWSDBlKkvCEAljPkVhd6mOeqU0b0Td3Wi7PO dClUAvgu+LdmbrbrHZ4ysWhNjCCV2pqab0hFz8KsPul4369RTkcdSfnRlnmLjsos X+O24zbMpX0pIbixm6owCKKpVlYz88l2d7Xflhne3Q6GhJJZIOhnKCHSDkLUv6tu nPE8y+ks67ofQP+E3HPLneDGGmowFvkX8Deg4ji6c4Hn7U9VLIH9xsiljsDBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3+OnT87LX+VxPa/oOJrO9NzBN3owHwYDVR0j BBgwFoAUldkTaEX6+geVc11Kmw/590ZGGrMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc4NWU2NS01MWUyLTRiMWItODJmOS1lNzUzYWQ0YjI0MGYvMC85NUQ5MTM2ODQ1 RkFGQTA3OTU3MzVENEE5QjBGRjlGNzQ2NDYxQUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0NjQ2 MUFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5 Rjc0NjQ2MUFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL1K8Blv/gR1Y9O0+1ZBZaIns9mod7Iwfc21 3GLEBC7m+eNdVGLKx42W8EB7NS9XHk+NuZSBJSWHnZn4IACDev0Q9sJkYR6YKQQt Egj711UKHR696wnFUdGThZanesGovUBd3yf6nH5lDyZm+HXM/iVs1fNc5GA/IY05 g/h7P8sIoTeO98GJF+MqYgGPFGRwCKMrGr9QJdMnz9sN5sqhQlDNhVcrOiDGz//N sfmuaymOaBi7SxhDCyUznVhF4aKAjBiCxvu5CJjvjPpxEB3IvihQTBCH1li6piQz cUaKIP33QnVchw97uMv9BUzZvDWirrL4OJWn9lqnYvzYpoOj9l0= -----END CERTIFICATE-----Generated at Wed Apr 30 21:23:30 2025 by rpki-client