$ rpki-client -vvf repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft File: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft (raw, json) Hash identifier: fdJONrpedaLj9ZFuq/Q/Cv268aahAJ0GsS/vLul5x5o= Subject key identifier: 75:A5:A7:27:56:0D:06:43:CB:41:6B:37:EB:81:4E:67:30:45:FB:6B Authority key identifier: 10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A Certificate issuer: /CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Certificate serial: 4B403A6222DCEEF61C034D7AF664B8716D561CEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft Manifest number: 04CE Signing time: Sat 10 May 2025 07:41:24 +0000 Manifest this update: Sat 10 May 2025 07:36:24 +0000 Manifest next update: Tue 13 May 2025 18:23:24 +0000 Files and hashes: 1: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl (hash: uVW+hu/hnn3/Fh4Hb9sUUrxA8GJ/5YaWV1iZLzkZ3/4=) 2: 3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa (hash: dASG0tINhRcp1PwpUynJN9mjoIEKl6bpcmTsmvEFqJA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 18:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:40:3a:62:22:dc:ee:f6:1c:03:4d:7a:f6:64:b8:71:6d:56:1c:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Validity Not Before: May 10 07:36:24 2025 GMT Not After : May 13 18:23:24 2025 GMT Subject: CN=75A5A727560D0643CB416B37EB814E673045FB6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:61:ce:39:2e:45:e2:f1:2c:45:2b:47:af:ac: dc:d7:22:92:af:7a:1b:9d:94:ca:a2:48:7e:ca:44: 7f:cb:e3:c6:ad:fb:69:f7:63:fa:6b:0e:e4:92:11: d1:ff:79:db:d8:9f:fd:e9:47:00:a0:0b:9a:f6:c8: 2a:32:fb:0c:4d:8f:53:07:7b:3e:f7:6c:9f:d0:3e: 63:84:28:4e:dd:0b:96:fa:ee:ff:74:ff:ea:53:68: 8b:06:df:89:b8:de:e9:57:5f:a2:a8:e9:24:04:19: 61:01:89:7a:f2:ac:0c:c0:9a:13:89:2b:a7:63:c3: 24:4a:4e:44:2c:c7:50:d9:32:67:ea:9e:b5:12:f7: c2:20:7b:b2:b2:42:b4:db:35:dc:e6:03:b7:a2:a4: 96:1a:e6:ca:30:a1:f3:08:40:c3:c4:97:85:a4:79: b6:ad:91:3a:20:0c:e7:b1:eb:98:b6:99:99:e3:74: cf:26:c8:fb:4f:96:84:12:1b:84:d3:ce:20:9a:16: e0:2f:d6:61:1d:ba:cb:ff:53:4a:e2:b0:30:70:c2: 06:1c:69:7a:ac:37:08:96:5a:a5:6a:88:f1:cc:fc: 61:8f:92:ba:a5:bb:53:33:d7:b9:2d:a6:74:68:23: 25:12:6a:f7:4e:2c:12:16:5f:16:2a:13:bc:a2:92: d1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A5:A7:27:56:0D:06:43:CB:41:6B:37:EB:81:4E:67:30:45:FB:6B X509v3 Authority Key Identifier: keyid:10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:15:7d:94:50:71:99:05:4f:40:c9:e7:fe:5e:03:35:e2:d6: 41:e9:79:40:ca:7d:37:de:18:4c:f6:3a:13:98:0d:ce:91:31: 22:03:db:c4:3c:90:1d:35:4e:32:6b:c8:b4:d0:41:23:f7:bd: de:bc:c1:1d:2c:92:3c:2d:db:4b:55:38:0b:ea:c7:f1:6e:36: 1a:11:3b:ea:8b:6d:bf:88:95:13:2f:e2:15:c8:ab:97:c7:55: d3:e4:c4:f2:78:ff:2d:06:d5:21:e7:e9:49:53:a0:bf:0d:cb: 00:aa:21:d1:0e:4b:79:e5:0f:85:a2:26:28:54:17:fb:14:f0: 22:59:47:db:b6:52:a8:c0:be:ac:9f:ce:23:42:9f:b7:fd:75: a4:bc:e6:8d:81:45:82:a7:c8:72:05:49:c2:89:30:0e:fd:ea: 77:2e:42:35:c9:50:58:b1:e4:3e:2f:e2:10:bd:a8:9e:2b:11: 34:8c:9c:35:b2:b0:3b:43:e7:30:6d:36:cd:f4:a8:9b:4d:fe: 16:ac:ba:1a:e2:d5:84:26:47:fb:fd:53:26:77:2d:89:86:f0: fe:b3:6b:72:4e:2f:a3:ce:55:2f:dd:58:39:6f:0a:4b:5e:97: cd:67:56:00:23:c7:93:1d:45:b0:1b:f4:ff:59:cc:c6:45:7f: 2c:84:c9:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS0A6YiLc7vYcA0169mS4cW1WHO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZB MkM0NDg1QTAeFw0yNTA1MTAwNzM2MjRaFw0yNTA1MTMxODIzMjRaMDMxMTAvBgNV BAMTKDc1QTVBNzI3NTYwRDA2NDNDQjQxNkIzN0VCODE0RTY3MzA0NUZCNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUYc45LkXi8SxFK0evrNzXIpKv ehudlMqiSH7KRH/L48at+2n3Y/prDuSSEdH/edvYn/3pRwCgC5r2yCoy+wxNj1MH ez73bJ/QPmOEKE7dC5b67v90/+pTaIsG34m43ulXX6Ko6SQEGWEBiXryrAzAmhOJ K6djwyRKTkQsx1DZMmfqnrUS98Ige7KyQrTbNdzmA7eipJYa5sowofMIQMPEl4Wk ebatkTogDOex65i2mZnjdM8myPtPloQSG4TTziCaFuAv1mEdusv/U0risDBwwgYc aXqsNwiWWqVqiPHM/GGPkrqlu1Mz17ktpnRoIyUSavdOLBIWXxYqE7yiktHTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdaWnJ1YNBkPLQWs364FOZzBF+2swHwYDVR0j BBgwFoAUEJXqeHA4Jqz1+iJB6ysbZqLESFowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTVkZDU3My0zMWY0LTQxNmMtYTFiNy02OThkNmIxNjk3YWQvMC8xMDk1RUE3ODcw MzgyNkFDRjVGQTIyNDFFQjJCMUI2NkEyQzQ0ODVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZBMkM0 NDg1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk1ZGQ1NzMtMzFmNC00MTZjLWEx YjctNjk4ZDZiMTY5N2FkLzAvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFC NjZBMkM0NDg1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAVfZRQcZkFT0DJ5/5eAzXi1kHpeUDKfTfe GEz2OhOYDc6RMSID28Q8kB01TjJryLTQQSP3vd68wR0skjwt20tVOAvqx/FuNhoR O+qLbb+IlRMv4hXIq5fHVdPkxPJ4/y0G1SHn6UlToL8NywCqIdEOS3nlD4WiJihU F/sU8CJZR9u2UqjAvqyfziNCn7f9daS85o2BRYKnyHIFScKJMA796ncuQjXJUFix 5D4v4hC9qJ4rETSMnDWysDtD5zBtNs30qJtN/hasuhri1YQmR/v9UyZ3LYmG8P6z a3JOL6POVS/dWDlvCktel81nVgAjx5MdRbAb9P9ZzMZFfyyEyWU= -----END CERTIFICATE-----Generated at Sun May 11 13:34:16 2025 by rpki-client