$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft File: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft (raw, json) Hash identifier: eby04//6iqUuFY8eMqx1gOEoOcwSmMyGUc3n2ZHSUq8= Subject key identifier: 4D:FD:EA:93:3D:C5:2E:10:C7:1D:A9:55:7A:BE:E9:3A:67:34:2C:16 Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D Certificate issuer: /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Certificate serial: 0E11724201E723823186822D6EB70415FFEE4890 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft Manifest number: 04F5 Signing time: Tue 05 Aug 2025 15:21:42 +0000 Manifest this update: Tue 05 Aug 2025 15:16:42 +0000 Manifest next update: Fri 08 Aug 2025 19:28:42 +0000 Files and hashes: 1: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: tJ7W+A0ln7oQ2TKBeYCrxZXeI+2+Ch9yjit0aZIq8qs=) 2: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: fYXLcgnYZQvFF+Sx+nAnnoQPnhu4qBL7MV7MXCijhoM=) 3: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: JYyU73FxSsbah75XLPK5+70mS+1BuWT1qs954OCbSn8=) 4: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl (hash: GEJxXq6M2bdHhkx0dPGPoSdniTWJvFrfFRhgno581SE=) 5: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: MowxodGXifPkFbwcnbxmYI86u52XQ+RqEsK4tBHU6Kc=) 6: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: z8oVsj820WikG58Kg7XuHuFP7zjS3wrrsGJ5kGPWB6k=) 7: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: pnePfPpninK+12GFjtU9XZZuD9qIupgPZ4/SoFot86c=) 8: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: 6u0QjcaXuZCe/xDwNoPsOwMyKh9MBkPufQ0B3cPlReE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 19:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:11:72:42:01:e7:23:82:31:86:82:2d:6e:b7:04:15:ff:ee:48:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Validity Not Before: Aug 5 15:16:42 2025 GMT Not After : Aug 8 19:28:42 2025 GMT Subject: CN=4DFDEA933DC52E10C71DA9557ABEE93A67342C16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2e:0e:94:cf:f3:67:39:fb:0b:9a:f6:33:0c: 74:4a:4c:3e:ec:e8:eb:90:92:a7:9e:e6:c5:b3:e0: fc:67:a5:a3:1a:19:da:cf:0b:87:a5:e2:0f:37:76: 8e:a1:13:34:ce:85:aa:43:20:37:41:de:2a:4f:b4: bb:85:6f:5c:0b:a3:56:b8:fc:f6:0f:c4:5a:04:ea: 22:36:b3:b7:01:aa:ba:0e:cb:ff:c9:4d:e7:68:77: 9c:a2:4d:a2:a3:ab:dc:be:12:59:48:d9:0a:24:2f: a3:0f:a9:aa:cc:30:33:b3:36:30:2a:7c:9e:0f:93: 66:8a:47:0c:54:ba:ae:1b:45:f4:64:b1:8b:12:0e: 55:83:47:e4:ae:52:12:58:a5:f6:bb:4d:6e:22:7b: 6e:2a:c0:7a:1f:f8:88:f8:06:e2:cc:83:0e:0c:06: 3c:ad:25:ec:09:f2:30:52:a6:03:31:4b:fa:5d:94: b8:a3:d7:6f:c1:f6:0f:ba:90:43:43:4b:c1:c2:da: 36:80:cd:8f:6a:e0:f9:ab:d4:89:09:12:38:48:ad: 6c:18:0d:83:84:7b:b0:57:3e:5a:da:28:4b:b1:4c: b9:8c:c7:6b:69:16:b0:da:38:46:18:f6:57:22:12: 9b:48:9c:ad:46:57:94:ae:ee:56:3b:92:94:64:52: 78:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:FD:EA:93:3D:C5:2E:10:C7:1D:A9:55:7A:BE:E9:3A:67:34:2C:16 X509v3 Authority Key Identifier: keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4f:59:84:45:27:c2:2c:32:b5:9a:31:9b:48:c5:03:c4:9d: 66:d0:5d:d3:91:04:be:c5:8d:7d:01:0c:36:50:96:da:0d:5d: 69:ca:f0:ab:e8:1e:08:6c:95:75:83:91:d7:45:55:2c:eb:9f: 20:48:55:22:8d:83:bb:83:74:10:04:fb:10:b3:b1:4c:bd:40: 2d:f9:6c:c8:d3:1a:55:38:c1:6b:4c:44:e7:33:3f:7c:88:dd: 56:f0:90:2d:07:76:b2:90:32:b7:e6:b8:3f:bc:66:c5:2f:2b: 31:18:8a:5f:de:d1:e2:6a:2b:a8:7b:4c:b0:2a:d6:d9:2a:39: 55:c9:f3:66:e8:86:3c:2c:bc:ec:f8:2a:17:4b:c2:3e:bc:66: a3:d1:42:e0:5e:76:94:44:fe:01:47:82:93:d4:43:9d:cc:d7: 47:05:a4:f4:32:8b:6d:ff:17:bc:7a:e3:bd:0c:1a:86:75:35: 18:c6:cc:53:03:3d:98:7e:2e:71:7c:4e:bb:08:15:ed:ce:fb: ff:ae:e0:26:8e:fa:b7:e8:7a:9e:7f:a8:ae:3e:a2:11:02:f1: 6f:40:fe:72:d9:61:f1:52:70:42:42:7e:fc:26:59:97:77:2f: 51:a2:fa:3a:b7:40:5d:40:46:aa:de:0a:25:ff:87:23:8b:a6: 3a:d4:56:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDhFyQgHnI4IxhoItbrcEFf/uSJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVF NzRFMkE2RDAeFw0yNTA4MDUxNTE2NDJaFw0yNTA4MDgxOTI4NDJaMDMxMTAvBgNV BAMTKDRERkRFQTkzM0RDNTJFMTBDNzFEQTk1NTdBQkVFOTNBNjczNDJDMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkLg6Uz/NnOfsLmvYzDHRKTD7s 6OuQkqee5sWz4PxnpaMaGdrPC4el4g83do6hEzTOhapDIDdB3ipPtLuFb1wLo1a4 /PYPxFoE6iI2s7cBqroOy//JTedod5yiTaKjq9y+EllI2QokL6MPqarMMDOzNjAq fJ4Pk2aKRwxUuq4bRfRksYsSDlWDR+SuUhJYpfa7TW4ie24qwHof+Ij4BuLMgw4M BjytJewJ8jBSpgMxS/pdlLij12/B9g+6kENDS8HC2jaAzY9q4Pmr1IkJEjhIrWwY DYOEe7BXPlraKEuxTLmMx2tpFrDaOEYY9lciEptInK1GV5Su7lY7kpRkUngzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTf3qkz3FLhDHHalVer7pOmc0LBYwHwYDVR0j BBgwFoAUlegA6/9kcJiSy1dB2e3HXudOKm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmI1YWUxZS1iZTY2LTRhMzAtYTk0OC03ZDQ3OGMyMmVhMmIvMC85NUU4MDBFQkZG NjQ3MDk4OTJDQjU3NDFEOUVEQzc1RUU3NEUyQTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVFNzRF MkE2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZiNWFlMWUtYmU2Ni00YTMwLWE5 NDgtN2Q0NzhjMjJlYTJiLzAvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3 NUVFNzRFMkE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpPWYRFJ8IsMrWaMZtIxQPEnWbQXdORBL7F jX0BDDZQltoNXWnK8KvoHghslXWDkddFVSzrnyBIVSKNg7uDdBAE+xCzsUy9QC35 bMjTGlU4wWtMROczP3yI3VbwkC0HdrKQMrfmuD+8ZsUvKzEYil/e0eJqK6h7TLAq 1tkqOVXJ82bohjwsvOz4KhdLwj68ZqPRQuBedpRE/gFHgpPUQ53M10cFpPQyi23/ F7x6470MGoZ1NRjGzFMDPZh+LnF8TrsIFe3O+/+u4CaO+rfoep5/qK4+ohEC8W9A /nLZYfFScEJCfvwmWZd3L1Gi+jq3QF1ARqreCiX/hyOLpjrUVsI= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:15 2025 by rpki-client