$ rpki-client -vvf repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft File: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft (raw, json) Hash identifier: UN7dFBaH6NMKLuz8r05jqoEoRNEiQvtWfm2ND1Tk+ns= Subject key identifier: AE:0E:79:F9:D3:7C:72:82:B6:D3:51:07:5F:A9:DC:7E:1F:D4:E8:18 Authority key identifier: 95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 Certificate issuer: /CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Certificate serial: 525BA27CE4942397985B3F086BAE316907163431 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft Manifest number: 04FF Signing time: Thu 21 Aug 2025 11:01:28 +0000 Manifest this update: Thu 21 Aug 2025 10:56:28 +0000 Manifest next update: Sun 24 Aug 2025 17:53:28 +0000 Files and hashes: 1: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (hash: mAx24Mrm6AI9KeLaD2h/5RLJ5ztWp5mCELhp+sgXhQM=) 2: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (hash: 75/DAONeN65KHxljOFhq+chBgFEKtm0A6zWkkY+QXDo=) 3: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (hash: KI4DRCx0w4L0nKpvK1CNtCzzpw68TT41WCumN5kF9lM=) 4: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (hash: mKTM+95IO3RuRjGvD78UIawuJIUBHI8BVt6K80x3Fpw=) 5: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl (hash: k3pVChd0DB73EiXPMzpPTxTU5cu8+Edp5066GRYAfH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:5b:a2:7c:e4:94:23:97:98:5b:3f:08:6b:ae:31:69:07:16:34:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Validity Not Before: Aug 21 10:56:28 2025 GMT Not After : Aug 24 17:53:28 2025 GMT Subject: CN=AE0E79F9D37C7282B6D351075FA9DC7E1FD4E818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5e:ed:09:03:b0:c8:cf:e4:9c:56:3e:90:4b: 35:5c:c3:44:7f:30:d7:da:5d:16:ac:1b:83:08:71: 75:7a:33:2c:35:28:d7:55:0e:c5:c8:4b:2b:ab:11: 14:6e:4a:97:ba:7c:20:89:b4:f1:e3:1b:ed:13:b1: e2:7d:46:55:36:33:4a:ac:1a:14:99:05:52:cf:d3: 0b:0a:08:41:64:5a:62:11:47:94:df:a0:6d:bb:be: fb:20:f9:40:44:be:17:bf:3a:c4:34:04:1e:16:91: be:0a:41:d8:c0:26:45:27:04:c2:83:bf:9d:91:ae: c3:09:fd:c8:b6:9f:d0:36:68:58:ea:35:73:54:18: d5:41:7c:52:73:09:30:af:84:00:2b:52:ee:d3:8f: 66:54:24:ea:2b:d3:02:18:d4:ef:8c:0a:a7:ac:96: f8:5e:38:04:16:8a:b6:ad:e3:2c:9a:f3:9f:a4:d3: 37:44:42:e4:e6:b8:2a:c7:46:eb:c4:08:d8:94:44: 1c:d8:57:2a:21:73:ed:3d:df:1e:2b:d0:41:b8:1a: 9a:75:6b:96:9b:9d:c1:4b:14:84:a3:22:9a:29:c6: f4:50:03:ff:0e:bb:c2:ee:54:1b:b7:52:48:e3:f4: f2:0d:8a:26:f7:24:7f:ce:89:aa:1b:26:e8:43:be: 27:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0E:79:F9:D3:7C:72:82:B6:D3:51:07:5F:A9:DC:7E:1F:D4:E8:18 X509v3 Authority Key Identifier: keyid:95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:9e:19:12:cd:90:09:a4:af:e5:fe:53:05:7b:be:be:1c:b3: 26:85:c9:ec:b4:15:1d:fb:13:9e:8a:f1:02:a6:6a:1a:21:b9: 5f:45:1e:4b:94:5a:50:7d:07:6d:f7:60:cd:cb:42:b5:82:bb: f6:92:81:85:15:24:6b:a9:89:9c:ab:ab:58:0f:45:c0:13:e2: 0f:bb:cd:7d:19:6a:e3:46:c7:a1:b8:c7:b9:91:1b:b2:5f:44: cf:77:ec:8e:94:b0:ff:55:4b:d7:83:21:f8:b1:07:4a:39:b3: 5c:d6:be:5d:42:2a:9b:7b:77:78:f2:b9:79:1b:10:f9:63:8b: 51:e5:b5:8d:43:73:8c:10:00:6c:3d:c0:8b:33:37:33:9f:ad: 98:b2:b9:9d:a5:ad:a8:9f:28:c2:49:fd:e1:e3:fa:08:4d:eb: 01:7d:d4:74:b4:44:3f:a6:4c:60:55:1e:26:28:2c:b3:fb:4b: 9a:3c:57:56:1e:c6:23:1c:7a:ef:10:d0:3b:b8:7e:fd:30:11: 0a:2e:c3:c3:bc:30:71:2f:3d:19:51:3b:88:95:98:88:1f:e2: 11:b1:88:1a:61:31:7e:0e:3d:60:3a:06:98:3e:5e:bc:40:a3: da:17:be:5f:c7:61:f2:66:76:4f:e4:95:79:a4:88:01:ff:78: 5e:0d:0b:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUluifOSUI5eYWz8Ia64xaQcWNDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlE QTQ2QjNDODAeFw0yNTA4MjExMDU2MjhaFw0yNTA4MjQxNzUzMjhaMDMxMTAvBgNV BAMTKEFFMEU3OUY5RDM3QzcyODJCNkQzNTEwNzVGQTlEQzdFMUZENEU4MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyXu0JA7DIz+ScVj6QSzVcw0R/ MNfaXRasG4MIcXV6Myw1KNdVDsXISyurERRuSpe6fCCJtPHjG+0TseJ9RlU2M0qs GhSZBVLP0wsKCEFkWmIRR5TfoG27vvsg+UBEvhe/OsQ0BB4Wkb4KQdjAJkUnBMKD v52RrsMJ/ci2n9A2aFjqNXNUGNVBfFJzCTCvhAArUu7Tj2ZUJOor0wIY1O+MCqes lvheOAQWirat4yya85+k0zdEQuTmuCrHRuvECNiURBzYVyohc+093x4r0EG4Gpp1 a5abncFLFISjIpopxvRQA/8Ou8LuVBu3Ukjj9PINiib3JH/OiaobJuhDvif3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrg55+dN8coK201EHX6ncfh/U6BgwHwYDVR0j BBgwFoAUlcO6fyO2NRch932oAgcx+dpGs8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBlOWM5Zi1kNjA3LTQ0OTctYWYyOC00ZDJiOTA5MmQ1YTYvMC85NUMzQkE3RjIz QjYzNTE3MjFGNzdEQTgwMjA3MzFGOURBNDZCM0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlEQTQ2 QjNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZTljOWYtZDYwNy00NDk3LWFm MjgtNGQyYjkwOTJkNWE2LzAvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMx RjlEQTQ2QjNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSeGRLNkAmkr+X+UwV7vr4csyaFyey0FR37 E56K8QKmahohuV9FHkuUWlB9B233YM3LQrWCu/aSgYUVJGupiZyrq1gPRcAT4g+7 zX0ZauNGx6G4x7mRG7JfRM937I6UsP9VS9eDIfixB0o5s1zWvl1CKpt7d3jyuXkb EPlji1HltY1Dc4wQAGw9wIszNzOfrZiyuZ2lraifKMJJ/eHj+ghN6wF91HS0RD+m TGBVHiYoLLP7S5o8V1YexiMceu8Q0Du4fv0wEQouw8O8MHEvPRlRO4iVmIgf4hGx iBphMX4OPWA6Bpg+XrxAo9oXvl/HYfJmdk/klXmkiAH/eF4NC9Q= -----END CERTIFICATE-----Generated at Sat Aug 23 14:00:20 2025 by rpki-client