$ rpki-client -vvf repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft File: 095AAB2FD179056DA8846FA0E90F79F7D901792C.mft (raw, json) Hash identifier: yFOlLhXw5bWRpbanMioBQmvgeXld14yjn9COHmLhat4= Subject key identifier: ED:52:CB:D5:F9:FD:4A:35:80:4A:B4:0C:27:89:B4:6D:34:5D:36:5C Authority key identifier: 09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C Certificate issuer: /CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Certificate serial: 5FD2C911902DF5FA998BD5FE11E0CBC484FDDFCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft Manifest number: 02FE Signing time: Thu 21 Aug 2025 10:01:40 +0000 Manifest this update: Thu 21 Aug 2025 09:56:40 +0000 Manifest next update: Sun 24 Aug 2025 20:41:40 +0000 Files and hashes: 1: 3130332e3235322e35312e302f32342d3234203d3e203539313334.roa (hash: 92hDDvlrQq6+Ep7VlgXGUFdRGUo5NBqpCP5dHFzwWeg=) 2: 3130332e3235322e35302e302f32342d3234203d3e203539313334.roa (hash: tg5kgcB+/SuzaicgIITC9CS9oqxnux/xS4/nsX+npzw=) 3: 3130332e37332e3132352e302f32342d3234203d3e203539313334.roa (hash: Z1EVykTQp5ACC1NPq9JOZKOUUZ9JHZ3If1yc5kffoxA=) 4: 3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa (hash: JQPY1hR36z2SwsI5Y4cr/zQo0NDgsurp+zEd8VFWX3Q=) 5: 095AAB2FD179056DA8846FA0E90F79F7D901792C.crl (hash: icR+NnfWqV948AUyLToF0Yyz4RkcANm2UeNYpNlSdIo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d2:c9:11:90:2d:f5:fa:99:8b:d5:fe:11:e0:cb:c4:84:fd:df:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Validity Not Before: Aug 21 09:56:40 2025 GMT Not After : Aug 24 20:41:40 2025 GMT Subject: CN=ED52CBD5F9FD4A35804AB40C2789B46D345D365C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9a:67:99:4f:cd:a3:bb:65:0f:f4:4f:0a:6b: e0:e6:71:43:cc:0e:bb:d4:98:e0:31:85:12:16:4f: 4e:d3:39:5d:f7:29:a8:4b:ec:76:17:69:a8:69:87: f1:c4:a4:78:1f:12:d7:d0:ca:fb:29:c1:29:a8:80: 1e:be:f0:a6:51:2a:08:03:30:13:ea:0e:f1:de:94: 74:a1:26:90:8f:61:d1:22:d7:35:2a:d3:d0:89:6e: bc:9c:bf:f3:3e:0c:d8:22:d6:ae:ef:16:e0:f4:58: ae:6b:c3:a1:7d:69:93:5c:7b:6f:15:f5:71:b1:d1: 60:02:61:0d:5b:3c:b2:29:83:73:e6:c3:b9:ec:b2: 8e:ce:71:aa:07:c5:fa:ce:c5:79:a6:3a:42:3a:b0: 9b:a2:d9:a6:42:97:f8:99:62:0c:83:25:c5:47:0e: 63:27:ea:3e:f6:8f:58:a9:0f:7b:3a:05:72:06:e4: 55:46:66:b3:5f:c8:50:cb:f4:76:5f:e7:9b:04:22: 1f:11:8b:c3:73:fc:74:5e:28:d2:e7:76:ca:7d:b7: 7c:c8:d6:35:ab:d8:0b:2c:96:77:4a:0b:37:92:2e: 11:b2:5f:54:2e:8a:dc:48:15:68:43:78:2d:bb:6a: c4:fe:19:e3:ea:69:d7:ef:0f:62:ca:0e:15:a8:87: c9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:52:CB:D5:F9:FD:4A:35:80:4A:B4:0C:27:89:B4:6D:34:5D:36:5C X509v3 Authority Key Identifier: keyid:09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:ec:46:4a:c8:2e:75:6b:8e:1b:63:78:af:3f:cd:e3:a5:bc: b9:ce:68:18:24:ee:bd:d2:ec:89:b1:5e:90:18:22:a1:74:6b: 3a:12:aa:e7:0b:e7:41:c2:05:a6:81:a6:ba:40:f7:5d:8f:da: e3:53:c3:dc:0d:5c:31:d2:31:2e:40:d1:33:f9:82:0b:ae:2d: a0:84:88:9e:3e:b1:48:9f:28:dd:b3:43:a0:b7:46:ac:52:fa: 71:95:d5:13:66:80:59:f0:b3:fe:be:1a:37:e2:53:c6:1b:07: 88:7b:33:d6:d9:34:6c:d4:d3:0f:87:7a:db:a5:ea:62:06:74: dd:4c:03:84:68:a3:b0:f0:86:30:ee:c4:93:7f:43:48:70:52: 45:f6:80:df:94:87:cf:b1:64:8f:ac:85:d8:fd:2f:5f:f1:0e: be:c1:ea:c6:49:e8:31:1e:28:fb:24:fa:11:86:7a:ba:e5:76: d7:9b:f6:6b:08:db:a7:03:9f:d3:30:6e:da:76:4f:54:9a:dd: de:c5:9f:9d:36:22:a2:63:13:6e:a3:bf:c0:72:32:67:a9:99: c9:73:21:30:6b:c9:87:8b:73:81:3a:7a:ac:45:88:a3:d3:21: 15:80:e0:1e:19:38:19:d9:e6:81:67:6a:c6:da:da:28:19:55: 30:4a:f0:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX9LJEZAt9fqZi9X+EeDLxIT9380wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdE OTAxNzkyQzAeFw0yNTA4MjEwOTU2NDBaFw0yNTA4MjQyMDQxNDBaMDMxMTAvBgNV BAMTKEVENTJDQkQ1RjlGRDRBMzU4MDRBQjQwQzI3ODlCNDZEMzQ1RDM2NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnmmeZT82ju2UP9E8Ka+DmcUPM DrvUmOAxhRIWT07TOV33KahL7HYXaahph/HEpHgfEtfQyvspwSmogB6+8KZRKggD MBPqDvHelHShJpCPYdEi1zUq09CJbrycv/M+DNgi1q7vFuD0WK5rw6F9aZNce28V 9XGx0WACYQ1bPLIpg3Pmw7nsso7OcaoHxfrOxXmmOkI6sJui2aZCl/iZYgyDJcVH DmMn6j72j1ipD3s6BXIG5FVGZrNfyFDL9HZf55sEIh8Ri8Nz/HReKNLndsp9t3zI 1jWr2AsslndKCzeSLhGyX1QuitxIFWhDeC27asT+GePqadfvD2LKDhWoh8mxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7VLL1fn9SjWASrQMJ4m0bTRdNlwwHwYDVR0j BBgwFoAUCVqrL9F5BW2ohG+g6Q9599kBeSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTc4OGI0YS1kNDUxLTQ5ZmItYjdjZC03MTk4MTA4NzBmMWEvMC8wOTVBQUIyRkQx NzkwNTZEQTg4NDZGQTBFOTBGNzlGN0Q5MDE3OTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdEOTAx NzkyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3ODhiNGEtZDQ1MS00OWZiLWI3 Y2QtNzE5ODEwODcwZjFhLzAvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5 RjdEOTAxNzkyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjsRkrILnVrjhtjeK8/zeOlvLnOaBgk7r3S 7ImxXpAYIqF0azoSqucL50HCBaaBprpA912P2uNTw9wNXDHSMS5A0TP5gguuLaCE iJ4+sUifKN2zQ6C3RqxS+nGV1RNmgFnws/6+GjfiU8YbB4h7M9bZNGzU0w+Hetul 6mIGdN1MA4Roo7DwhjDuxJN/Q0hwUkX2gN+Uh8+xZI+shdj9L1/xDr7B6sZJ6DEe KPsk+hGGerrldteb9msI26cDn9Mwbtp2T1Sa3d7Fn502IqJjE26jv8ByMmepmclz ITBryYeLc4E6eqxFiKPTIRWA4B4ZOBnZ5oFnasba2igZVTBK8G4= -----END CERTIFICATE-----Generated at Sat Aug 23 17:40:45 2025 by rpki-client