$ rpki-client -vvf repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft File: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft (raw, json) Hash identifier: Os73N3xALRZgj6v0BYFs+wkXCYJw33ZnC0FGfofF54s= Subject key identifier: ED:E4:44:F0:C1:38:3B:27:79:42:08:45:50:70:1C:65:C0:3A:AF:A2 Authority key identifier: 95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 Certificate issuer: /CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Certificate serial: 091D9C73DBE7DF4074BEF96421A097D8C5F1CD50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft Manifest number: 04DD Signing time: Sun 15 Jun 2025 05:52:11 +0000 Manifest this update: Sun 15 Jun 2025 05:47:10 +0000 Manifest next update: Wed 18 Jun 2025 15:25:10 +0000 Files and hashes: 1: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: ifCGuusxkGprBC7NulQNufNvo7SVC5amSJ/1S4uaqjQ=) 2: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: LZPQ7rMeaDVcHWLsKLTFoADUeRBC0AnGmqL6VPS4zMA=) 3: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl (hash: fVzVaf4u3uiwjDIE3gTaoCAdXVUn9+8nbh47HoP4o1g=) 4: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: hccolhWeQwMhTE4DUNZtMqz3UE4I8axgnsLj/aGjWu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 15:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:1d:9c:73:db:e7:df:40:74:be:f9:64:21:a0:97:d8:c5:f1:cd:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Validity Not Before: Jun 15 05:47:10 2025 GMT Not After : Jun 18 15:25:10 2025 GMT Subject: CN=EDE444F0C1383B277942084550701C65C03AAFA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f7:66:6d:d3:13:dc:50:82:ce:37:a3:38:37: 0a:28:f6:26:04:a0:2a:65:7b:5f:13:b5:64:59:13: cd:8d:1b:f4:8a:2a:d7:a8:f2:de:0a:16:cf:5e:5d: 6c:66:4d:f6:b6:45:e8:48:ed:0d:c0:bd:53:60:7f: c4:d7:7b:22:b1:3e:51:ce:d7:9b:d2:0c:d5:72:80: 9f:eb:69:fe:6a:0c:74:0c:5a:77:69:d6:b2:06:5a: ab:73:4a:88:72:de:08:a2:b0:b3:aa:8d:b9:9c:d2: 9e:5b:ec:08:3d:4c:9b:c1:55:c3:98:c5:31:3b:b2: ff:07:e5:72:7f:14:78:f0:77:1e:d7:9b:bd:15:d8: 05:c1:4b:64:93:d0:61:ce:99:30:49:71:18:34:77: e4:18:14:7a:42:07:8c:9a:19:ce:0b:c1:7f:79:2a: dc:91:e9:3b:80:cb:43:0b:89:ed:55:00:bb:20:54: 8b:07:e1:89:0b:38:65:3c:e5:ef:fc:fe:b3:42:1d: 39:a7:d5:f6:16:da:fa:f2:28:47:d5:68:98:45:76: db:57:76:e8:4e:7a:6a:13:69:07:3d:b6:03:2e:ab: 55:6f:61:e5:da:bf:bc:54:f8:84:58:f2:96:09:c5: 04:68:cd:c9:fd:03:ed:41:fa:ad:3f:90:19:f5:6c: 90:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E4:44:F0:C1:38:3B:27:79:42:08:45:50:70:1C:65:C0:3A:AF:A2 X509v3 Authority Key Identifier: keyid:95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a7:f8:5d:6a:eb:5f:e2:1d:b4:5a:23:d2:6e:c3:73:c9:ed: a1:27:bc:83:a5:29:40:ec:a4:3c:32:38:0f:1e:d0:f8:9b:66: 85:41:e8:13:58:f9:20:ac:81:33:89:ff:a8:42:b4:b5:62:18: e8:bc:ab:f0:a5:ef:f2:68:a2:ad:e5:48:14:95:73:ea:16:9a: cf:3f:b0:ad:61:22:29:11:fa:5d:7e:50:23:27:73:d0:96:75: a3:c5:d2:c2:28:6e:18:6b:f2:c7:77:7e:db:79:15:b4:cf:7d: ed:a1:24:9d:7c:23:2a:99:6e:0c:e3:40:be:09:c9:d4:ce:e5: 87:f1:5d:3e:f8:2a:2b:bb:7b:23:fc:be:cf:83:b4:e2:84:6b: 62:36:2f:19:fd:3a:b5:cf:a0:4f:13:d4:e9:48:0c:e9:4a:78: bd:fb:d8:83:48:18:b9:7d:d3:30:8b:ac:79:b9:f7:b4:37:d0: ac:81:4e:da:50:7c:dc:c2:48:46:62:65:9e:30:af:1b:ce:5a: f7:99:c7:97:59:7f:2b:2f:99:2f:9e:7c:fa:b0:6d:bd:9f:6c: ba:b3:e5:e2:54:b0:28:9d:e3:2f:bf:27:5a:89:19:42:84:43: 29:1d:20:7f:8d:a9:41:9a:83:85:ec:61:1e:f4:2f:a9:7a:3a: 4c:cb:f6:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCR2cc9vn30B0vvlkIaCX2MXxzVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0 NjQ2MUFCMzAeFw0yNTA2MTUwNTQ3MTBaFw0yNTA2MTgxNTI1MTBaMDMxMTAvBgNV BAMTKEVERTQ0NEYwQzEzODNCMjc3OTQyMDg0NTUwNzAxQzY1QzAzQUFGQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb92Zt0xPcUILON6M4Nwoo9iYE oCple18TtWRZE82NG/SKKteo8t4KFs9eXWxmTfa2RehI7Q3AvVNgf8TXeyKxPlHO 15vSDNVygJ/raf5qDHQMWndp1rIGWqtzSohy3giisLOqjbmc0p5b7Ag9TJvBVcOY xTE7sv8H5XJ/FHjwdx7Xm70V2AXBS2ST0GHOmTBJcRg0d+QYFHpCB4yaGc4LwX95 KtyR6TuAy0MLie1VALsgVIsH4YkLOGU85e/8/rNCHTmn1fYW2vryKEfVaJhFdttX duhOemoTaQc9tgMuq1VvYeXav7xU+IRY8pYJxQRozcn9A+1B+q0/kBn1bJBBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7eRE8ME4Oyd5QghFUHAcZcA6r6IwHwYDVR0j BBgwFoAUldkTaEX6+geVc11Kmw/590ZGGrMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc4NWU2NS01MWUyLTRiMWItODJmOS1lNzUzYWQ0YjI0MGYvMC85NUQ5MTM2ODQ1 RkFGQTA3OTU3MzVENEE5QjBGRjlGNzQ2NDYxQUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0NjQ2 MUFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5 Rjc0NjQ2MUFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOn+F1q61/iHbRaI9Juw3PJ7aEnvIOlKUDs pDwyOA8e0PibZoVB6BNY+SCsgTOJ/6hCtLViGOi8q/Cl7/Jooq3lSBSVc+oWms8/ sK1hIikR+l1+UCMnc9CWdaPF0sIobhhr8sd3ftt5FbTPfe2hJJ18IyqZbgzjQL4J ydTO5YfxXT74Kiu7eyP8vs+DtOKEa2I2Lxn9OrXPoE8T1OlIDOlKeL372INIGLl9 0zCLrHm597Q30KyBTtpQfNzCSEZiZZ4wrxvOWveZx5dZfysvmS+efPqwbb2fbLqz 5eJUsCid4y+/J1qJGUKEQykdIH+NqUGag4XsYR70L6l6OkzL9nw= -----END CERTIFICATE-----Generated at Tue Jun 17 03:28:40 2025 by rpki-client