$ rpki-client -vvf repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft File: 95966A8DB250307CF9852483F96922EE520F6E2A.mft (raw, json) Hash identifier: pS7WFM3g+SZqUHqRm6u231FZAsBYlYcPvmOdcQGEhWI= Subject key identifier: 9B:E9:98:6E:CD:61:92:A0:42:40:AD:63:2B:47:C2:A5:3E:24:0E:82 Authority key identifier: 95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A Certificate issuer: /CN=95966A8DB250307CF9852483F96922EE520F6E2A Certificate serial: 44FD25FC9AD1794C083EDE9944BC62A3BF5D937E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft Manifest number: 02BC Signing time: Fri 09 May 2025 17:00:00 +0000 Manifest this update: Fri 09 May 2025 16:55:00 +0000 Manifest next update: Tue 13 May 2025 01:14:00 +0000 Files and hashes: 1: 3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa (hash: 2Tm0gdcz+myuN01m+Uce2N/XVde2LN8VW21KDbbagQI=) 2: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (hash: JsesZ2XEjGD90Q6rb53op1u+M0C8ZTvk1vBXUWFrpwg=) 3: 3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa (hash: PdjinzPpF/36hO9HHqQU4IxHNvTYYZFMsZTPnz+oEJM=) 4: 95966A8DB250307CF9852483F96922EE520F6E2A.crl (hash: SzuAv/djDkgwDfW/ISIYhPgNi9Qnme8BNpYew7kA3og=) 5: 3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa (hash: yijgZGAzH5m/suHYf+93ec2StnmCRT8aHziW14hBnJ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 01:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:fd:25:fc:9a:d1:79:4c:08:3e:de:99:44:bc:62:a3:bf:5d:93:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95966A8DB250307CF9852483F96922EE520F6E2A Validity Not Before: May 9 16:55:00 2025 GMT Not After : May 13 01:14:00 2025 GMT Subject: CN=9BE9986ECD6192A04240AD632B47C2A53E240E82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:17:39:c8:1d:84:7d:79:77:c8:6e:5c:18:f4: fd:52:9b:43:7f:fa:b5:f1:06:04:25:d7:47:93:33: 57:b0:59:3c:59:fe:b2:c0:b6:51:94:cd:3d:d8:36: 83:4d:44:cb:b0:03:c0:2f:78:46:e3:ab:9f:d0:26: 9d:39:57:c7:b6:51:7f:ba:5b:e2:0f:3d:48:60:39: 90:6a:53:48:75:0c:25:bd:15:65:14:31:38:0f:01: d2:24:7f:94:cf:14:29:13:93:d8:37:21:7e:1f:7e: 9a:14:2e:aa:b6:a3:bf:f4:ff:82:c6:ec:59:ad:ee: 2e:df:d1:ba:bb:01:3b:5d:c1:24:05:a8:49:38:60: aa:32:63:ed:a3:3a:f5:67:8f:7f:71:af:fc:bc:d8: 69:69:0b:c1:a7:a6:f7:45:32:8b:64:1d:2f:bf:98: 9f:bf:1d:92:d7:94:7e:d7:21:12:93:fc:e1:ff:e8: ef:5e:78:a8:2b:79:60:cc:3e:1e:a4:0a:55:25:96: 40:a7:d0:e6:e2:c5:7a:fc:06:b7:8f:ca:53:21:99: 52:30:4f:f2:3b:a6:ce:b2:4c:05:a8:97:99:cf:70: b5:22:55:01:c0:91:cf:b1:2b:4e:96:02:43:8d:e0: d2:39:6f:6c:a2:9f:26:cc:12:21:ba:c1:ee:ee:94: d6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E9:98:6E:CD:61:92:A0:42:40:AD:63:2B:47:C2:A5:3E:24:0E:82 X509v3 Authority Key Identifier: keyid:95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:85:e1:0e:f2:05:31:f5:64:a9:09:f0:86:17:1b:be:2f:8d: 8e:5d:b2:25:b2:6f:fb:97:38:e1:13:31:ac:b4:dd:05:65:a3: 5f:c8:63:ea:e6:4b:10:8a:96:ad:7b:f9:55:ce:ed:30:ae:50: 1d:fc:f0:d3:90:b3:e1:8d:6a:f7:14:1c:6c:56:20:f1:06:ce: 37:00:80:62:e2:37:8a:1d:35:ed:51:79:d6:09:a5:ff:48:0d: 01:3b:e4:f9:be:7d:bd:8c:8e:44:49:fe:be:27:2d:dd:d9:14: 5e:5c:47:5d:39:f7:d8:0f:f1:02:3c:01:90:b8:09:da:32:1c: 75:f3:31:90:74:ed:02:20:eb:f2:4b:78:a1:36:a6:67:6a:8c: 9d:78:be:88:4c:be:9a:69:2d:d8:37:95:29:09:5d:bd:ec:c8: 69:01:52:2d:ad:be:be:c8:e5:ef:82:e4:fc:2f:2f:b9:a0:9d: cf:3d:58:ed:06:bf:9d:ad:ac:73:68:f1:17:44:23:fb:02:71: d6:2e:d8:4b:6e:14:e2:90:3b:6a:37:27:33:78:88:6e:8c:19: ec:ed:4e:1c:12:40:c1:80:1e:30:cc:dc:39:3f:5d:6e:c2:d3: f4:f4:0e:51:c3:52:2e:89:dc:c8:2d:93:5a:3e:fa:97:3d:4f: 09:d0:1a:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURP0l/JrReUwIPt6ZRLxio79dk34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1 MjBGNkUyQTAeFw0yNTA1MDkxNjU1MDBaFw0yNTA1MTMwMTE0MDBaMDMxMTAvBgNV BAMTKDlCRTk5ODZFQ0Q2MTkyQTA0MjQwQUQ2MzJCNDdDMkE1M0UyNDBFODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIFznIHYR9eXfIblwY9P1Sm0N/ +rXxBgQl10eTM1ewWTxZ/rLAtlGUzT3YNoNNRMuwA8AveEbjq5/QJp05V8e2UX+6 W+IPPUhgOZBqU0h1DCW9FWUUMTgPAdIkf5TPFCkTk9g3IX4ffpoULqq2o7/0/4LG 7Fmt7i7f0bq7ATtdwSQFqEk4YKoyY+2jOvVnj39xr/y82GlpC8GnpvdFMotkHS+/ mJ+/HZLXlH7XIRKT/OH/6O9eeKgreWDMPh6kClUllkCn0ObixXr8BrePylMhmVIw T/I7ps6yTAWol5nPcLUiVQHAkc+xK06WAkON4NI5b2yinybMEiG6we7ulNZHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm+mYbs1hkqBCQK1jK0fCpT4kDoIwHwYDVR0j BBgwFoAUlZZqjbJQMHz5hSSD+Wki7lIPbiowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmYxNDE3YS01NzE4LTQwNzEtOWYzNS1jMTIyNTU1ZGFjN2EvMC85NTk2NkE4REIy NTAzMDdDRjk4NTI0ODNGOTY5MjJFRTUyMEY2RTJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1MjBG NkUyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJmMTQxN2EtNTcxOC00MDcxLTlm MzUtYzEyMjU1NWRhYzdhLzAvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIy RUU1MjBGNkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMaF4Q7yBTH1ZKkJ8IYXG74vjY5dsiWyb/uX OOETMay03QVlo1/IY+rmSxCKlq17+VXO7TCuUB388NOQs+GNavcUHGxWIPEGzjcA gGLiN4odNe1RedYJpf9IDQE75Pm+fb2MjkRJ/r4nLd3ZFF5cR10599gP8QI8AZC4 CdoyHHXzMZB07QIg6/JLeKE2pmdqjJ14vohMvpppLdg3lSkJXb3syGkBUi2tvr7I 5e+C5PwvL7mgnc89WO0Gv52trHNo8RdEI/sCcdYu2EtuFOKQO2o3JzN4iG6MGezt ThwSQMGAHjDM3Dk/XW7C0/T0DlHDUi6J3Mgtk1o++pc9TwnQGjk= -----END CERTIFICATE-----Generated at Sat May 10 01:17:17 2025 by rpki-client