$ rpki-client -vvf repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft File: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft (raw, json) Hash identifier: hzKSjkMrGC2Nqzn/jtf8rH+33Bl4aFyP70hJ9N77kLg= Subject key identifier: D1:55:BE:B4:28:A7:CF:C1:D1:85:59:79:42:74:C1:53:0A:72:D9:DF Authority key identifier: 95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 Certificate issuer: /CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Certificate serial: 5F5C3E4689AB977B5B1CBF6F801920B5AA0736DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft Manifest number: 051A Signing time: Mon 20 Oct 2025 10:11:28 +0000 Manifest this update: Mon 20 Oct 2025 10:06:28 +0000 Manifest next update: Thu 23 Oct 2025 20:45:28 +0000 Files and hashes: 1: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (hash: mKTM+95IO3RuRjGvD78UIawuJIUBHI8BVt6K80x3Fpw=) 2: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (hash: mAx24Mrm6AI9KeLaD2h/5RLJ5ztWp5mCELhp+sgXhQM=) 3: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl (hash: GGebfyROOeCb2Ex0DtDCKZM3iHDx2ZNFXV1QVjqk+L8=) 4: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (hash: 75/DAONeN65KHxljOFhq+chBgFEKtm0A6zWkkY+QXDo=) 5: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (hash: KI4DRCx0w4L0nKpvK1CNtCzzpw68TT41WCumN5kF9lM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:5c:3e:46:89:ab:97:7b:5b:1c:bf:6f:80:19:20:b5:aa:07:36:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Validity Not Before: Oct 20 10:06:28 2025 GMT Not After : Oct 23 20:45:28 2025 GMT Subject: CN=D155BEB428A7CFC1D18559794274C1530A72D9DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d3:70:45:0b:0c:ac:b1:7f:4e:d8:0f:9e:bb: 9f:f8:bb:69:69:a6:b3:87:5f:e2:f8:e9:16:82:44: 0a:43:36:cb:94:f8:b2:e2:7b:ea:7c:29:1f:b9:65: 26:2e:76:7d:cc:9a:88:bf:6d:b2:c2:aa:25:8f:b3: f6:d4:3a:e1:14:bf:fc:54:19:52:c4:02:0c:ae:ba: 94:cb:ba:a4:a5:0a:13:f7:f8:af:6e:e4:b5:40:cf: 39:39:32:67:f6:a3:9c:14:03:ab:bc:1c:f9:d4:81: a8:19:13:a3:38:84:af:47:27:ad:fd:1b:06:7d:4c: b4:a4:c9:ec:df:9d:c2:6e:40:11:57:ee:5b:6d:ee: 1d:5d:2c:6f:49:58:d5:61:19:2d:c4:a2:4b:d1:05: 96:6b:8d:3a:76:d0:9b:91:3e:f3:15:f7:5a:54:ce: 60:17:66:50:a9:7a:3e:70:28:e9:c7:1e:93:ef:99: 7f:aa:ff:d6:d0:c5:d5:ec:28:f6:c7:70:02:fd:ff: 28:62:c9:56:75:50:45:77:22:5d:27:53:e5:86:a1: e0:5d:a9:91:3f:77:89:4f:8a:2c:c9:75:b8:96:6c: a2:7f:a0:50:55:dd:d4:f0:ca:c5:25:5b:53:e9:af: 9c:f0:22:e7:97:3f:37:66:2b:c0:0d:d1:db:6c:76: 3b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:55:BE:B4:28:A7:CF:C1:D1:85:59:79:42:74:C1:53:0A:72:D9:DF X509v3 Authority Key Identifier: keyid:95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:8c:fc:65:81:d2:54:05:df:c4:dc:e0:71:48:38:60:de:09: d1:97:1b:14:3f:ef:5c:95:08:2a:7b:22:fb:60:4a:77:b0:4d: 8a:b8:ac:21:cb:cf:7e:00:76:17:94:c8:6b:25:9a:98:d1:d1: 35:88:10:a7:8f:57:c3:60:54:ef:50:65:61:85:08:cb:b3:f8: 15:8d:64:6c:00:38:ea:4c:73:c2:6e:e9:e0:4f:6e:78:a4:12: a5:89:6f:54:9a:b4:29:d2:be:b7:c9:6b:12:ac:60:dd:d4:4b: a8:b8:cf:8d:d5:96:66:45:93:5a:d1:75:56:6b:1a:f5:7c:f9: bd:42:50:fd:68:65:95:2a:4e:43:ef:ee:49:1d:00:dc:7e:84: 35:e5:b6:93:38:35:a3:79:77:53:84:d1:5d:39:19:2b:e0:d6: df:bb:b9:fe:36:cf:c7:f3:60:f4:64:d3:5c:61:6a:eb:3b:1a: c7:00:05:46:77:b3:de:43:b5:38:91:43:65:7e:13:b7:4a:86: b4:1e:dc:d4:bc:12:b4:76:fe:12:94:50:ee:d8:98:f4:fb:0a: 5f:b7:10:72:f4:65:08:66:97:72:00:74:24:a6:c2:d8:78:a9: a0:88:a8:b5:d7:96:86:26:74:9e:c7:71:ef:ab:b4:27:e9:0e: 3c:89:df:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX1w+Romrl3tbHL9vgBkgtaoHNtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlE QTQ2QjNDODAeFw0yNTEwMjAxMDA2MjhaFw0yNTEwMjMyMDQ1MjhaMDMxMTAvBgNV BAMTKEQxNTVCRUI0MjhBN0NGQzFEMTg1NTk3OTQyNzRDMTUzMEE3MkQ5REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc03BFCwyssX9O2A+eu5/4u2lp prOHX+L46RaCRApDNsuU+LLie+p8KR+5ZSYudn3Mmoi/bbLCqiWPs/bUOuEUv/xU GVLEAgyuupTLuqSlChP3+K9u5LVAzzk5Mmf2o5wUA6u8HPnUgagZE6M4hK9HJ639 GwZ9TLSkyezfncJuQBFX7ltt7h1dLG9JWNVhGS3EokvRBZZrjTp20JuRPvMV91pU zmAXZlCpej5wKOnHHpPvmX+q/9bQxdXsKPbHcAL9/yhiyVZ1UEV3Il0nU+WGoeBd qZE/d4lPiizJdbiWbKJ/oFBV3dTwysUlW1Ppr5zwIueXPzdmK8AN0dtsdjvXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0VW+tCinz8HRhVl5QnTBUwpy2d8wHwYDVR0j BBgwFoAUlcO6fyO2NRch932oAgcx+dpGs8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBlOWM5Zi1kNjA3LTQ0OTctYWYyOC00ZDJiOTA5MmQ1YTYvMC85NUMzQkE3RjIz QjYzNTE3MjFGNzdEQTgwMjA3MzFGOURBNDZCM0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlEQTQ2 QjNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZTljOWYtZDYwNy00NDk3LWFm MjgtNGQyYjkwOTJkNWE2LzAvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMx RjlEQTQ2QjNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJeM/GWB0lQF38Tc4HFIOGDeCdGXGxQ/71yV CCp7IvtgSnewTYq4rCHLz34AdheUyGslmpjR0TWIEKePV8NgVO9QZWGFCMuz+BWN ZGwAOOpMc8Ju6eBPbnikEqWJb1SatCnSvrfJaxKsYN3US6i4z43VlmZFk1rRdVZr GvV8+b1CUP1oZZUqTkPv7kkdANx+hDXltpM4NaN5d1OE0V05GSvg1t+7uf42z8fz YPRk01xhaus7GscABUZ3s95DtTiRQ2V+E7dKhrQe3NS8ErR2/hKUUO7YmPT7Cl+3 EHL0ZQhml3IAdCSmwth4qaCIqLXXloYmdJ7Hce+rtCfpDjyJ38A= -----END CERTIFICATE-----Generated at Mon Oct 20 20:43:20 2025 by rpki-client