$ rpki-client -vvf repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft File: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft (raw, json) Hash identifier: 2kleTVQL1I8f2Ar51I0gDdV1Zu7CTZm2GEl0tJejLvU= Subject key identifier: 4E:B9:0D:39:68:DC:E4:6B:52:44:3C:49:AD:4C:F5:5D:BB:22:98:A9 Authority key identifier: 10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A Certificate issuer: /CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Certificate serial: 32ECE65E24FA4E1F11946671E1A122E3993ACA78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft Manifest number: 04FC Signing time: Sat 23 Aug 2025 00:21:25 +0000 Manifest this update: Sat 23 Aug 2025 00:16:25 +0000 Manifest next update: Tue 26 Aug 2025 10:03:25 +0000 Files and hashes: 1: 3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa (hash: XS6giku77XPtxmNRkfOOXOP+iNVcgzmhP0k5pXi56n8=) 2: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl (hash: N4J7AcmPI6/F++nyWlmXDuMEjU4qHuoq8QEt0sriWrE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ec:e6:5e:24:fa:4e:1f:11:94:66:71:e1:a1:22:e3:99:3a:ca:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Validity Not Before: Aug 23 00:16:25 2025 GMT Not After : Aug 26 10:03:25 2025 GMT Subject: CN=4EB90D3968DCE46B52443C49AD4CF55DBB2298A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:fb:d1:c4:8e:bf:ea:cb:39:05:c2:23:d5: 05:bb:6c:16:3c:10:a0:c2:eb:9c:d9:83:9a:38:5e: d1:8b:fa:b6:dd:9b:98:49:17:4d:8c:ae:53:c3:cc: 76:5a:c9:00:04:c4:70:9d:d8:55:6d:9d:7a:d7:61: 2e:72:8e:e6:ee:60:b7:22:62:da:30:1a:77:1c:00: 5b:ba:f9:6a:59:07:f7:34:4d:ef:05:ae:99:8c:bc: 5d:f8:86:6a:5c:10:b9:e8:7c:49:3d:08:be:59:57: e3:95:33:91:55:0c:a6:6a:eb:be:d2:72:34:ca:79: 6d:dd:3a:5d:18:e0:8c:de:13:61:fd:c9:0d:f3:9b: 3e:19:35:1f:67:40:9d:fa:1c:f6:73:e0:a8:b0:28: 0d:a3:de:f8:a7:da:8f:0e:18:20:c0:dc:02:b5:5c: 63:80:01:86:4c:ac:be:14:2c:47:9a:3f:cd:08:ad: ba:d5:c7:ee:cf:11:6f:9e:f1:44:5b:6d:ab:1f:1f: cc:b2:6e:7b:e6:f2:e0:e7:8b:7c:47:32:78:60:26: d1:ae:55:64:98:aa:5e:b4:e9:d6:0f:cf:a5:d7:13: 05:a3:13:15:02:11:7e:0c:97:dd:f4:1c:89:a6:d6: d4:65:43:7c:24:1d:31:55:f0:58:2a:26:ac:0b:3d: 68:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B9:0D:39:68:DC:E4:6B:52:44:3C:49:AD:4C:F5:5D:BB:22:98:A9 X509v3 Authority Key Identifier: keyid:10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:86:cf:48:86:17:9d:69:8a:52:2c:9a:08:51:66:38:46:33: ff:94:f7:30:b4:59:91:2d:9b:f0:9d:ad:de:0b:a8:f0:f3:87: ad:96:d8:ab:2e:60:38:0c:75:dc:8c:08:90:c0:b7:7c:dc:ab: 22:60:d2:33:af:0b:c0:52:89:de:62:e5:c3:c2:93:c5:3c:0d: 30:b4:a2:f8:e3:1f:53:6d:63:0a:25:ef:bd:84:05:02:f0:f3: 3d:46:e1:7b:13:66:6e:f4:f2:2b:8f:0b:e9:3d:f4:cb:8d:00: 31:75:64:01:ba:61:ef:41:03:09:b0:28:8a:6c:74:7e:3f:98: 49:03:d0:84:ce:35:bf:4d:8b:05:5f:26:c3:c5:bb:2f:59:fa: 96:d3:d4:f9:8b:5b:82:39:c9:45:b5:b6:73:43:2f:43:bf:10: f6:24:e7:ac:2a:f4:a0:ac:45:1a:49:87:bf:32:b6:52:32:93: 50:3f:fb:93:46:47:ad:96:1a:02:a3:35:23:fa:95:bf:22:33: 91:20:e5:d3:b7:02:82:8c:f9:e7:5a:bf:0f:fb:7f:66:13:5f: 18:ab:69:32:80:b6:5e:cc:dc:f7:6b:21:2d:e5:e1:13:b9:37: cb:73:2c:c1:41:6f:5e:fe:da:18:d2:23:88:f4:90:6b:6b:a8: 66:8e:0c:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuzmXiT6Th8RlGZx4aEi45k6yngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZB MkM0NDg1QTAeFw0yNTA4MjMwMDE2MjVaFw0yNTA4MjYxMDAzMjVaMDMxMTAvBgNV BAMTKDRFQjkwRDM5NjhEQ0U0NkI1MjQ0M0M0OUFENENGNTVEQkIyMjk4QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGPvRxI6/6ss5BcIj1QW7bBY8 EKDC65zZg5o4XtGL+rbdm5hJF02MrlPDzHZayQAExHCd2FVtnXrXYS5yjubuYLci YtowGnccAFu6+WpZB/c0Te8FrpmMvF34hmpcELnofEk9CL5ZV+OVM5FVDKZq677S cjTKeW3dOl0Y4IzeE2H9yQ3zmz4ZNR9nQJ36HPZz4KiwKA2j3vin2o8OGCDA3AK1 XGOAAYZMrL4ULEeaP80IrbrVx+7PEW+e8URbbasfH8yybnvm8uDni3xHMnhgJtGu VWSYql606dYPz6XXEwWjExUCEX4Ml930HImm1tRlQ3wkHTFV8FgqJqwLPWiLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTrkNOWjc5GtSRDxJrUz1XbsimKkwHwYDVR0j BBgwFoAUEJXqeHA4Jqz1+iJB6ysbZqLESFowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTVkZDU3My0zMWY0LTQxNmMtYTFiNy02OThkNmIxNjk3YWQvMC8xMDk1RUE3ODcw MzgyNkFDRjVGQTIyNDFFQjJCMUI2NkEyQzQ0ODVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZBMkM0 NDg1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk1ZGQ1NzMtMzFmNC00MTZjLWEx YjctNjk4ZDZiMTY5N2FkLzAvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFC NjZBMkM0NDg1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWGz0iGF51pilIsmghRZjhGM/+U9zC0WZEt m/Cdrd4LqPDzh62W2KsuYDgMddyMCJDAt3zcqyJg0jOvC8BSid5i5cPCk8U8DTC0 ovjjH1NtYwol772EBQLw8z1G4XsTZm708iuPC+k99MuNADF1ZAG6Ye9BAwmwKIps dH4/mEkD0ITONb9NiwVfJsPFuy9Z+pbT1PmLW4I5yUW1tnNDL0O/EPYk56wq9KCs RRpJh78ytlIyk1A/+5NGR62WGgKjNSP6lb8iM5Eg5dO3AoKM+edavw/7f2YTXxir aTKAtl7M3PdrIS3l4RO5N8tzLMFBb17+2hjSI4j0kGtrqGaODGk= -----END CERTIFICATE-----Generated at Sat Aug 23 15:14:03 2025 by rpki-client