$ rpki-client -vvf repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft File: 95966A8DB250307CF9852483F96922EE520F6E2A.mft (raw, json) Hash identifier: HYW+FKm5SBdQXKYUt1or8yrf8WuBWE2eCKKyaK20IOU= Subject key identifier: E7:33:40:85:F7:79:F9:4D:42:7F:E0:F0:09:5D:E3:8A:88:AA:F6:A9 Authority key identifier: 95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A Certificate issuer: /CN=95966A8DB250307CF9852483F96922EE520F6E2A Certificate serial: 691A3F198953C778E251AA17A2884AA9B688BA9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft Manifest number: 0305 Signing time: Sat 18 Oct 2025 20:00:00 +0000 Manifest this update: Sat 18 Oct 2025 19:55:00 +0000 Manifest next update: Tue 21 Oct 2025 23:18:00 +0000 Files and hashes: 1: 95966A8DB250307CF9852483F96922EE520F6E2A.crl (hash: LYURqNft3wDVaHZJ4C5EaGZCRro6uRZprtBCETdAo+U=) 2: 3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa (hash: lJA11B888lTAIORO0k9rdft4p7t0vrr4FyWBG++arwA=) 3: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (hash: QAndsMLECtqgWCCHyuYe9oOyMMkwnZ8QhtRk2OHf9FQ=) 4: 3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa (hash: xt2DiIsS1Hm+P8ldmkaqq+Mf+LiIX+U17UKLw/Y34Uk=) 5: 3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa (hash: MitWmX3yxsYyPd+sKi7YcLOVm2fefPu2Qs/7NDCXxb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 23:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:1a:3f:19:89:53:c7:78:e2:51:aa:17:a2:88:4a:a9:b6:88:ba:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95966A8DB250307CF9852483F96922EE520F6E2A Validity Not Before: Oct 18 19:55:00 2025 GMT Not After : Oct 21 23:18:00 2025 GMT Subject: CN=E7334085F779F94D427FE0F0095DE38A88AAF6A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:0c:b2:70:46:09:24:0a:e1:9e:5d:a9:2f: bf:28:b3:68:c2:66:52:e0:1c:d0:e4:c6:79:f1:ef: 0b:58:fb:20:39:e1:58:d5:57:9c:ee:01:42:f2:33: 60:22:33:8a:2e:ca:a9:e2:19:d5:6a:34:8e:8d:78: 61:34:1b:3e:ea:b9:72:ba:53:a9:14:ec:9a:29:58: 66:ed:cc:29:c1:a6:e6:26:e1:9f:e0:59:54:22:49: 55:e7:69:64:9b:53:e8:d1:a6:11:c8:93:88:cf:e5: d4:cb:76:50:46:3a:c5:fa:9b:4a:16:b5:08:db:32: bf:c3:34:4e:77:f7:85:5f:3e:19:c8:89:35:44:39: b3:33:a8:d8:9f:a8:25:6f:7d:2d:58:a8:f6:d2:09: 88:a9:9e:eb:5a:74:a1:37:46:1c:8a:90:9a:09:fd: 9a:3a:dc:aa:c0:e4:b5:19:4d:a5:14:41:ca:35:8e: 4b:be:e2:96:b4:02:78:16:69:c4:a1:e6:22:83:0d: 82:c6:fe:5a:59:7f:55:9e:14:8e:0e:a2:2f:e8:a0: 6c:31:47:09:6a:21:a3:50:ea:55:3d:1d:45:57:ba: 5e:8b:80:82:43:79:5d:9b:b5:fa:c3:61:7e:31:8f: 38:2a:2e:84:32:a4:33:0c:62:9a:1d:4a:84:15:4a: 3b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:33:40:85:F7:79:F9:4D:42:7F:E0:F0:09:5D:E3:8A:88:AA:F6:A9 X509v3 Authority Key Identifier: keyid:95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:0c:cb:7f:d2:a8:01:d5:d3:27:80:8b:6e:b5:d1:d8:f5:5d: 4c:54:5a:53:d9:64:e4:63:3b:83:e9:a5:db:8a:d7:ef:03:1f: ac:9c:b3:47:8d:e0:79:7e:ca:4b:f2:03:58:8f:c5:5d:e9:a7: b9:a3:40:4d:51:5f:2a:23:86:53:ef:f5:bf:0b:21:d4:3a:44: 8a:13:95:58:66:9f:e1:41:e4:33:2d:ec:65:9f:88:2a:13:4a: 64:a3:76:26:4f:82:e4:d4:69:c5:20:dd:f1:96:32:20:94:b5: b4:c8:d2:3b:09:d7:86:b9:0e:16:40:3d:ba:38:cd:e3:34:61: c0:63:36:44:d3:25:b1:0b:77:6e:6d:9f:89:d8:3e:c0:00:a7: 2f:83:68:43:1b:bb:50:fc:b1:9c:a4:92:db:ce:ac:52:91:4f: bf:15:fa:58:ad:fc:91:21:47:67:e3:fb:54:9a:75:41:d7:12: 5f:e8:a6:7f:50:8d:57:09:1c:4c:25:a0:c1:9a:d6:23:70:5b: 42:4b:7d:60:e3:99:64:fd:b8:b7:e0:4d:0d:92:d9:74:84:61: fd:1c:6b:ba:1d:53:2b:d9:f4:6e:66:85:9b:b4:29:94:77:fa: b9:1c:b5:d3:05:f3:db:b8:b2:bb:74:2d:c8:96:b0:14:6f:d3: d6:ac:a1:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaRo/GYlTx3jiUaoXoohKqbaIupswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1 MjBGNkUyQTAeFw0yNTEwMTgxOTU1MDBaFw0yNTEwMjEyMzE4MDBaMDMxMTAvBgNV BAMTKEU3MzM0MDg1Rjc3OUY5NEQ0MjdGRTBGMDA5NURFMzhBODhBQUY2QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6wgyycEYJJArhnl2pL78os2jC ZlLgHNDkxnnx7wtY+yA54VjVV5zuAULyM2AiM4ouyqniGdVqNI6NeGE0Gz7quXK6 U6kU7JopWGbtzCnBpuYm4Z/gWVQiSVXnaWSbU+jRphHIk4jP5dTLdlBGOsX6m0oW tQjbMr/DNE5394VfPhnIiTVEObMzqNifqCVvfS1YqPbSCYipnutadKE3RhyKkJoJ /Zo63KrA5LUZTaUUQco1jku+4pa0AngWacSh5iKDDYLG/lpZf1WeFI4Ooi/ooGwx RwlqIaNQ6lU9HUVXul6LgIJDeV2btfrDYX4xjzgqLoQypDMMYpodSoQVSjv9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5zNAhfd5+U1Cf+DwCV3jioiq9qkwHwYDVR0j BBgwFoAUlZZqjbJQMHz5hSSD+Wki7lIPbiowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmYxNDE3YS01NzE4LTQwNzEtOWYzNS1jMTIyNTU1ZGFjN2EvMC85NTk2NkE4REIy NTAzMDdDRjk4NTI0ODNGOTY5MjJFRTUyMEY2RTJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1MjBG NkUyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJmMTQxN2EtNTcxOC00MDcxLTlm MzUtYzEyMjU1NWRhYzdhLzAvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIy RUU1MjBGNkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkMy3/SqAHV0yeAi2610dj1XUxUWlPZZORj O4PppduK1+8DH6ycs0eN4Hl+ykvyA1iPxV3pp7mjQE1RXyojhlPv9b8LIdQ6RIoT lVhmn+FB5DMt7GWfiCoTSmSjdiZPguTUacUg3fGWMiCUtbTI0jsJ14a5DhZAPbo4 zeM0YcBjNkTTJbELd25tn4nYPsAApy+DaEMbu1D8sZykktvOrFKRT78V+lit/JEh R2fj+1SadUHXEl/opn9QjVcJHEwloMGa1iNwW0JLfWDjmWT9uLfgTQ2S2XSEYf0c a7odUyvZ9G5mhZu0KZR3+rkctdMF89u4srt0LciWsBRv09asoTY= -----END CERTIFICATE-----Generated at Mon Oct 20 09:23:22 2025 by rpki-client