$ rpki-client -vvf repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft File: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft (raw, json) Hash identifier: gdDq4QkrsnN5JukGV+UI2YsM7M/+E7PQ/PsQnzKVqek= Subject key identifier: 95:7C:29:CA:39:71:6C:77:02:96:F2:E9:93:AA:EC:4B:B9:01:50:74 Authority key identifier: 10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A Certificate issuer: /CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Certificate serial: 6585545745C7061A4498DA7F2A44BF928E34D3DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft Manifest number: 04E5 Signing time: Mon 30 Jun 2025 21:21:24 +0000 Manifest this update: Mon 30 Jun 2025 21:16:24 +0000 Manifest next update: Fri 04 Jul 2025 00:21:24 +0000 Files and hashes: 1: 3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa (hash: XS6giku77XPtxmNRkfOOXOP+iNVcgzmhP0k5pXi56n8=) 2: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl (hash: sYr50e8khu/6UY74q74mebu5wHSacWXKKzvWbL6J2d4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 00:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:85:54:57:45:c7:06:1a:44:98:da:7f:2a:44:bf:92:8e:34:d3:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Validity Not Before: Jun 30 21:16:24 2025 GMT Not After : Jul 4 00:21:24 2025 GMT Subject: CN=957C29CA39716C770296F2E993AAEC4BB9015074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6e:bc:f7:40:b6:05:eb:c6:7b:b1:7d:fe:7b: 93:fb:63:d9:67:a1:e0:bb:16:7b:48:be:71:e3:f2: 14:62:69:79:c6:64:48:72:fd:e8:c6:dd:7f:3d:85: b4:c0:2a:2c:a6:3f:17:17:dd:d5:26:6c:9c:8c:70: e8:df:c7:86:84:97:e2:1f:d8:ed:6b:2e:e8:7e:83: 7c:8b:3a:1f:5c:b6:a6:25:1f:48:8e:a4:c9:3e:59: 90:00:1d:e1:c5:56:a7:ad:ee:54:65:54:80:ec:94: 48:77:7e:68:c3:bb:2d:8d:d2:78:de:f6:d7:19:0e: c0:37:bf:cc:88:32:13:4f:92:df:f7:f0:6b:bf:e6: c1:d3:ab:c6:8d:48:76:98:44:9c:a1:6c:9b:c8:fb: 30:8c:e2:61:b8:dd:cb:e1:b6:a0:63:9a:14:63:f3: 08:fd:ee:26:85:05:33:99:82:67:3d:92:02:22:c2: 66:55:33:d0:36:a2:2b:27:eb:9b:31:8c:85:41:8b: d7:68:e5:05:f9:92:12:3e:1e:a8:7d:38:61:44:fe: 20:bb:19:52:eb:eb:de:77:e1:d6:41:02:3b:78:66: 96:63:f0:bb:1d:d7:10:66:2d:34:2c:9e:86:20:48: 04:4b:22:ff:4e:94:89:e5:5f:61:4b:c6:04:c3:ad: a9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7C:29:CA:39:71:6C:77:02:96:F2:E9:93:AA:EC:4B:B9:01:50:74 X509v3 Authority Key Identifier: keyid:10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:1b:7e:46:39:f7:7e:93:29:24:19:29:ce:5a:2e:af:bb:9a: c9:a1:69:47:52:77:0c:f0:ae:a2:9b:8c:d1:87:7f:ae:34:9c: 26:00:8b:96:7f:06:83:f0:e0:80:8f:d6:4b:d0:8e:c1:9d:95: ea:8f:52:01:44:25:6c:a9:67:a4:e8:2e:4f:d7:32:69:31:ef: bc:7b:3c:4c:5b:e9:88:10:1c:ff:2a:6a:c2:99:e3:6a:dc:5b: 97:c5:47:f6:36:63:48:17:37:db:2d:68:ff:48:97:7d:fc:94: d3:71:03:f4:6b:2e:6f:f5:a9:a5:4a:0a:e0:9f:15:6e:95:93: aa:9b:4e:ac:11:78:6f:49:35:d4:d6:29:3c:a1:91:e8:ed:88: 8b:cd:98:53:6d:85:fd:52:4f:fa:3c:56:ad:c7:cd:4d:00:ca: 63:b6:2c:63:b1:06:0b:95:9d:8e:74:7b:7e:f0:d1:4a:3a:39: c9:cc:76:82:09:35:41:7f:74:e7:85:7f:c1:12:ad:80:89:20: 18:3a:51:d0:29:dc:99:1a:80:51:14:a0:f8:10:11:dc:b3:f2: 89:4a:55:92:55:e4:76:e7:0e:5e:68:cb:8a:2a:4d:80:5d:0e: 10:8c:ef:89:97:4e:33:2f:30:76:dc:ea:05:cb:e1:99:54:36: 50:a4:5c:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZYVUV0XHBhpEmNp/KkS/ko4009wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZB MkM0NDg1QTAeFw0yNTA2MzAyMTE2MjRaFw0yNTA3MDQwMDIxMjRaMDMxMTAvBgNV BAMTKDk1N0MyOUNBMzk3MTZDNzcwMjk2RjJFOTkzQUFFQzRCQjkwMTUwNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTbrz3QLYF68Z7sX3+e5P7Y9ln oeC7FntIvnHj8hRiaXnGZEhy/ejG3X89hbTAKiymPxcX3dUmbJyMcOjfx4aEl+If 2O1rLuh+g3yLOh9ctqYlH0iOpMk+WZAAHeHFVqet7lRlVIDslEh3fmjDuy2N0nje 9tcZDsA3v8yIMhNPkt/38Gu/5sHTq8aNSHaYRJyhbJvI+zCM4mG43cvhtqBjmhRj 8wj97iaFBTOZgmc9kgIiwmZVM9A2oisn65sxjIVBi9do5QX5khI+Hqh9OGFE/iC7 GVLr69534dZBAjt4ZpZj8Lsd1xBmLTQsnoYgSARLIv9OlInlX2FLxgTDralZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlXwpyjlxbHcClvLpk6rsS7kBUHQwHwYDVR0j BBgwFoAUEJXqeHA4Jqz1+iJB6ysbZqLESFowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTVkZDU3My0zMWY0LTQxNmMtYTFiNy02OThkNmIxNjk3YWQvMC8xMDk1RUE3ODcw MzgyNkFDRjVGQTIyNDFFQjJCMUI2NkEyQzQ0ODVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZBMkM0 NDg1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk1ZGQ1NzMtMzFmNC00MTZjLWEx YjctNjk4ZDZiMTY5N2FkLzAvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFC NjZBMkM0NDg1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0bfkY5936TKSQZKc5aLq+7msmhaUdSdwzw rqKbjNGHf640nCYAi5Z/BoPw4ICP1kvQjsGdleqPUgFEJWypZ6ToLk/XMmkx77x7 PExb6YgQHP8qasKZ42rcW5fFR/Y2Y0gXN9staP9Il338lNNxA/RrLm/1qaVKCuCf FW6Vk6qbTqwReG9JNdTWKTyhkejtiIvNmFNthf1ST/o8Vq3HzU0AymO2LGOxBguV nY50e37w0Uo6OcnMdoIJNUF/dOeFf8ESrYCJIBg6UdAp3JkagFEUoPgQEdyz8olK VZJV5HbnDl5oy4oqTYBdDhCM74mXTjMvMHbc6gXL4ZlUNlCkXDk= -----END CERTIFICATE-----Generated at Tue Jul 1 21:20:47 2025 by rpki-client