$ rpki-client -vvf repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft File: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft (raw, json) Hash identifier: nbSiaHrmcY+WSbWmD6TNZR/w571Bg6NZ0xaMKTGBCwU= Subject key identifier: 51:3D:2F:57:43:60:3F:78:49:A7:D3:30:26:C1:66:CA:A6:54:B5:A3 Authority key identifier: 95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 Certificate issuer: /CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Certificate serial: 05D9530C6C24F13CF864DEE469E9D6F69FA46BAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft Manifest number: 04FB Signing time: Fri 22 Aug 2025 07:02:13 +0000 Manifest this update: Fri 22 Aug 2025 06:57:13 +0000 Manifest next update: Mon 25 Aug 2025 16:26:13 +0000 Files and hashes: 1: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl (hash: shqJaj7/e2EMTiJdtWu9hdHHE4MY75Gun21O5t/GN0w=) 2: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: hccolhWeQwMhTE4DUNZtMqz3UE4I8axgnsLj/aGjWu0=) 3: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: LZPQ7rMeaDVcHWLsKLTFoADUeRBC0AnGmqL6VPS4zMA=) 4: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: ifCGuusxkGprBC7NulQNufNvo7SVC5amSJ/1S4uaqjQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d9:53:0c:6c:24:f1:3c:f8:64:de:e4:69:e9:d6:f6:9f:a4:6b:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Validity Not Before: Aug 22 06:57:13 2025 GMT Not After : Aug 25 16:26:13 2025 GMT Subject: CN=513D2F5743603F7849A7D33026C166CAA654B5A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1f:ce:95:e1:2d:82:2f:55:c1:d9:7f:75:50: 15:21:2e:8f:57:4b:b5:7f:c7:02:8c:48:89:01:7e: 35:0a:6e:b9:c5:fa:32:d4:80:18:97:b1:5a:bf:cc: bb:a4:35:8f:a5:9b:3b:91:d1:c2:5f:53:10:cf:5a: 35:ed:1c:5e:f2:e6:39:ef:2b:1d:2e:18:6f:92:9f: 47:b6:ab:4d:cc:3a:65:17:c0:a0:3b:ad:6c:d8:3f: bc:52:45:16:06:a0:21:f7:07:5f:3a:9a:93:52:9b: 32:21:19:92:f1:1d:2a:33:7d:85:27:31:09:44:14: 03:ee:c6:de:35:6e:60:43:49:96:4b:b9:5e:8b:72: cb:c7:24:46:4e:21:3c:c9:66:c5:af:2b:1b:d0:a1: 97:36:0c:ce:0c:85:2f:f0:3f:36:ec:e6:54:f5:9a: b1:fd:19:47:d0:e1:66:45:e3:87:ec:a2:a3:45:37: 51:48:3c:7b:a7:46:da:45:c5:71:64:c0:c3:1b:75: 6d:70:1b:0b:26:b9:e2:1e:aa:b3:02:d9:09:a9:15: f7:4e:e3:b4:7e:98:50:3e:f3:b4:51:d4:50:d8:e7: 49:87:e3:15:d7:0e:cf:a8:5a:64:2c:0c:7b:63:1f: c9:ad:36:83:1f:5f:b1:22:85:54:4c:90:08:57:d3: 93:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3D:2F:57:43:60:3F:78:49:A7:D3:30:26:C1:66:CA:A6:54:B5:A3 X509v3 Authority Key Identifier: keyid:95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ff:82:32:01:64:d7:67:ca:06:46:65:f5:81:66:c3:01:e0: 2c:a9:e4:0f:49:11:b6:ca:6c:f2:d2:1a:77:d5:9d:22:66:93: be:92:87:89:15:c8:1d:c5:32:4f:57:36:78:1c:1c:30:3c:80: 75:df:69:4f:2d:da:ee:bf:71:6c:a4:05:44:77:c2:c3:39:41: f7:8d:61:c3:b5:b0:4f:a9:ab:a8:23:08:b6:93:4c:7f:b8:f4: be:f8:31:ca:31:b0:fe:eb:93:87:f3:5b:9e:03:cc:29:1c:60: 48:5d:41:3d:f4:b5:2e:51:fc:f2:b0:a7:f8:04:6a:a2:7f:08: ac:2e:b8:98:ce:36:4f:fd:d1:1c:c6:82:89:10:83:4c:bf:1a: 67:ba:96:f6:54:af:7c:2c:72:9b:8a:89:3f:41:6f:1c:ab:1d: 3b:b5:7b:90:58:74:e2:06:ff:6a:3b:34:96:bd:7f:d0:a6:b7: f4:c5:be:86:2f:02:4f:fd:c4:9f:00:3a:ff:64:4d:1c:e0:53: f7:cc:1e:df:ec:02:b4:93:05:fc:bf:df:1a:5c:76:ec:97:46: 5d:a5:5c:f0:a4:cd:da:c6:55:44:61:70:d0:01:cd:04:3d:ff: 54:e6:2c:85:40:73:f8:19:da:f4:cc:56:e8:33:92:89:38:da: 8e:57:d5:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBdlTDGwk8Tz4ZN7kaenW9p+ka6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0 NjQ2MUFCMzAeFw0yNTA4MjIwNjU3MTNaFw0yNTA4MjUxNjI2MTNaMDMxMTAvBgNV BAMTKDUxM0QyRjU3NDM2MDNGNzg0OUE3RDMzMDI2QzE2NkNBQTY1NEI1QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZH86V4S2CL1XB2X91UBUhLo9X S7V/xwKMSIkBfjUKbrnF+jLUgBiXsVq/zLukNY+lmzuR0cJfUxDPWjXtHF7y5jnv Kx0uGG+Sn0e2q03MOmUXwKA7rWzYP7xSRRYGoCH3B186mpNSmzIhGZLxHSozfYUn MQlEFAPuxt41bmBDSZZLuV6LcsvHJEZOITzJZsWvKxvQoZc2DM4MhS/wPzbs5lT1 mrH9GUfQ4WZF44fsoqNFN1FIPHunRtpFxXFkwMMbdW1wGwsmueIeqrMC2QmpFfdO 47R+mFA+87RR1FDY50mH4xXXDs+oWmQsDHtjH8mtNoMfX7EihVRMkAhX05NVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUT0vV0NgP3hJp9MwJsFmyqZUtaMwHwYDVR0j BBgwFoAUldkTaEX6+geVc11Kmw/590ZGGrMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc4NWU2NS01MWUyLTRiMWItODJmOS1lNzUzYWQ0YjI0MGYvMC85NUQ5MTM2ODQ1 RkFGQTA3OTU3MzVENEE5QjBGRjlGNzQ2NDYxQUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0NjQ2 MUFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5 Rjc0NjQ2MUFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHD/gjIBZNdnygZGZfWBZsMB4Cyp5A9JEbbK bPLSGnfVnSJmk76Sh4kVyB3FMk9XNngcHDA8gHXfaU8t2u6/cWykBUR3wsM5QfeN YcO1sE+pq6gjCLaTTH+49L74McoxsP7rk4fzW54DzCkcYEhdQT30tS5R/PKwp/gE aqJ/CKwuuJjONk/90RzGgokQg0y/Gme6lvZUr3wscpuKiT9BbxyrHTu1e5BYdOIG /2o7NJa9f9Cmt/TFvoYvAk/9xJ8AOv9kTRzgU/fMHt/sArSTBfy/3xpcduyXRl2l XPCkzdrGVURhcNABzQQ9/1TmLIVAc/gZ2vTMVugzkok42o5X1d0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:33:35 2025 by rpki-client