$ rpki-client -vvf repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft File: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft (raw, json) Hash identifier: USBcDvYXXgNoQXBHGspR51fODCc/CiVUUYNK/9qpJik= Subject key identifier: C0:EF:A3:B8:DD:6E:62:CF:A9:87:4E:FC:63:61:F1:36:5D:D3:ED:25 Authority key identifier: 95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 Certificate issuer: /CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Certificate serial: 2B33EECC299EEA5AD5C2312973EC760FB2735DCF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft Manifest number: 04CA Signing time: Sun 04 May 2025 22:52:09 +0000 Manifest this update: Sun 04 May 2025 22:47:09 +0000 Manifest next update: Thu 08 May 2025 07:15:09 +0000 Files and hashes: 1: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: bRRSscYjeY2YxaSN5983EHi4JM8B0mDZlHR23US7qhc=) 2: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: XLazE5Vn7z334jOwYoK8rFCOURJrA8ecY+QUwxwWDNY=) 3: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl (hash: VWFCYvER4B2NrNoTkHzzNnFysfUT19ENpFkbViH8VP4=) 4: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: 13BZZGez00+LUIyTx+ZwpCt/BEy8rtR8zU/43gX10+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 07:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:33:ee:cc:29:9e:ea:5a:d5:c2:31:29:73:ec:76:0f:b2:73:5d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Validity Not Before: May 4 22:47:09 2025 GMT Not After : May 8 07:15:09 2025 GMT Subject: CN=C0EFA3B8DD6E62CFA9874EFC6361F1365DD3ED25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b9:87:06:b9:0c:97:6c:93:b7:ce:9d:3e:ed: 1d:09:1e:bf:88:3f:75:cc:9e:2e:f5:de:f0:88:3b: 49:25:8f:cc:4c:c9:eb:4d:c4:21:96:b6:58:9c:f6: 33:b8:e3:f4:da:8c:24:c4:80:19:d8:64:ee:98:c0: 6e:d8:01:d6:88:3e:e1:8a:15:01:d7:9d:c1:67:9e: cd:b7:05:9c:5c:c3:af:13:d0:7f:a2:21:cb:6b:48: 7e:e6:f3:1f:eb:14:51:15:a4:1c:64:8a:c5:61:71: b6:a0:06:62:dc:a3:b0:c6:9e:bd:45:06:3e:b2:08: c7:7c:fc:8c:1d:eb:78:26:7a:65:85:8c:65:8a:ee: 66:88:26:3a:c7:a8:92:37:c4:45:da:1e:96:b0:49: 6e:1a:f4:54:22:0a:f0:0a:13:6a:54:8c:80:c5:2d: 31:63:55:15:9b:69:2f:d5:77:0a:8a:06:a3:c0:50: eb:b3:ea:e6:cc:2b:c0:c3:4f:89:bb:87:43:34:49: 82:76:f6:5d:b5:78:a7:c4:8c:da:6a:87:cf:4b:07: 98:99:8b:c2:ba:2f:52:33:7c:02:5e:e7:7c:bd:d9: 0e:ff:bb:81:e7:65:ed:f2:96:47:1d:9d:e7:62:33: e7:51:ff:6c:48:01:29:e3:88:a8:7c:07:75:59:41: 85:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EF:A3:B8:DD:6E:62:CF:A9:87:4E:FC:63:61:F1:36:5D:D3:ED:25 X509v3 Authority Key Identifier: keyid:95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f4:44:d7:13:35:8f:ca:e5:b7:ea:df:f1:09:2e:6b:62:62: d2:1a:a2:f7:cb:53:11:71:ae:18:34:95:2a:72:c2:cc:a9:e9: 6b:18:7f:5c:b9:a8:49:ce:6d:9c:0b:85:c2:53:95:5c:a6:56: fb:9a:df:44:0b:68:dd:37:35:44:e1:09:45:6d:ba:e8:a3:e8: 7d:64:c6:14:ef:96:98:45:4a:01:5e:8f:fb:8b:01:6c:3f:f8: d8:37:1e:32:87:89:ec:a5:f3:33:c3:5d:24:5f:13:2f:e7:d0: 4b:a8:05:49:8f:d7:8e:ad:5d:66:4a:aa:76:3b:4f:8f:c3:7d: 73:ff:16:c1:e7:d4:d9:ad:ed:1e:37:df:0a:81:ed:0b:e0:e2: 8b:5d:c4:d2:73:75:2e:3f:11:4b:2b:01:de:0b:67:f1:9d:02: 38:34:d4:5d:b7:b3:50:53:82:41:92:44:8c:86:64:ab:67:c1: 0a:b3:62:be:af:8b:59:a5:37:69:84:c5:8e:6b:d6:59:4f:38: 0e:48:4b:1e:90:d5:81:7e:22:1f:b8:01:5e:fd:5f:35:25:08: 5d:3e:24:24:17:7f:ce:57:0f:1f:20:4c:7a:0c:07:b5:87:09: 82:88:71:e9:b8:ce:6d:a4:06:2f:97:29:12:63:e2:46:8e:82: fb:33:50:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKzPuzCme6lrVwjEpc+x2D7JzXc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0 NjQ2MUFCMzAeFw0yNTA1MDQyMjQ3MDlaFw0yNTA1MDgwNzE1MDlaMDMxMTAvBgNV BAMTKEMwRUZBM0I4REQ2RTYyQ0ZBOTg3NEVGQzYzNjFGMTM2NUREM0VEMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkuYcGuQyXbJO3zp0+7R0JHr+I P3XMni713vCIO0klj8xMyetNxCGWtlic9jO44/TajCTEgBnYZO6YwG7YAdaIPuGK FQHXncFnns23BZxcw68T0H+iIctrSH7m8x/rFFEVpBxkisVhcbagBmLco7DGnr1F Bj6yCMd8/Iwd63gmemWFjGWK7maIJjrHqJI3xEXaHpawSW4a9FQiCvAKE2pUjIDF LTFjVRWbaS/VdwqKBqPAUOuz6ubMK8DDT4m7h0M0SYJ29l21eKfEjNpqh89LB5iZ i8K6L1IzfAJe53y92Q7/u4HnZe3ylkcdnediM+dR/2xIASnjiKh8B3VZQYUlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwO+juN1uYs+ph078Y2HxNl3T7SUwHwYDVR0j BBgwFoAUldkTaEX6+geVc11Kmw/590ZGGrMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc4NWU2NS01MWUyLTRiMWItODJmOS1lNzUzYWQ0YjI0MGYvMC85NUQ5MTM2ODQ1 RkFGQTA3OTU3MzVENEE5QjBGRjlGNzQ2NDYxQUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0NjQ2 MUFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5 Rjc0NjQ2MUFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABv0RNcTNY/K5bfq3/EJLmtiYtIaovfLUxFx rhg0lSpywsyp6WsYf1y5qEnObZwLhcJTlVymVvua30QLaN03NUThCUVtuuij6H1k xhTvlphFSgFej/uLAWw/+Ng3HjKHieyl8zPDXSRfEy/n0EuoBUmP146tXWZKqnY7 T4/DfXP/FsHn1Nmt7R433wqB7Qvg4otdxNJzdS4/EUsrAd4LZ/GdAjg01F23s1BT gkGSRIyGZKtnwQqzYr6vi1mlN2mExY5r1llPOA5ISx6Q1YF+Ih+4AV79XzUlCF0+ JCQXf85XDx8gTHoMB7WHCYKIcem4zm2kBi+XKRJj4kaOgvszUPM= -----END CERTIFICATE-----Generated at Tue May 6 05:51:09 2025 by rpki-client