$ rpki-client -vvf repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft File: 95966A8DB250307CF9852483F96922EE520F6E2A.mft (raw, json) Hash identifier: YPhxQDBEky0QvDoAT90XNLb3II+8E4jurZL5iMyGVWk= Subject key identifier: 4C:19:63:3D:68:11:C1:81:8F:41:84:F2:49:A9:E0:6F:56:7B:23:E2 Authority key identifier: 95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A Certificate issuer: /CN=95966A8DB250307CF9852483F96922EE520F6E2A Certificate serial: 4A3E47C9B962FCE3B8518ECBC83AEDBD2556A18A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft Manifest number: 02EB Signing time: Fri 22 Aug 2025 21:10:00 +0000 Manifest this update: Fri 22 Aug 2025 21:05:00 +0000 Manifest next update: Tue 26 Aug 2025 02:53:00 +0000 Files and hashes: 1: 95966A8DB250307CF9852483F96922EE520F6E2A.crl (hash: BMn3mbsb+OuZ3k2PPEw0yL5v7s5HqQ7IUkEbFUa2ueo=) 2: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (hash: QAndsMLECtqgWCCHyuYe9oOyMMkwnZ8QhtRk2OHf9FQ=) 3: 3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa (hash: MitWmX3yxsYyPd+sKi7YcLOVm2fefPu2Qs/7NDCXxb8=) 4: 3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa (hash: lJA11B888lTAIORO0k9rdft4p7t0vrr4FyWBG++arwA=) 5: 3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa (hash: xt2DiIsS1Hm+P8ldmkaqq+Mf+LiIX+U17UKLw/Y34Uk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:3e:47:c9:b9:62:fc:e3:b8:51:8e:cb:c8:3a:ed:bd:25:56:a1:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95966A8DB250307CF9852483F96922EE520F6E2A Validity Not Before: Aug 22 21:05:00 2025 GMT Not After : Aug 26 02:53:00 2025 GMT Subject: CN=4C19633D6811C1818F4184F249A9E06F567B23E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:51:11:fb:c3:68:45:d9:13:04:cc:db:51:9a: 3a:83:52:ed:e3:d0:1d:a6:e3:8c:bc:f1:59:15:40: e9:7c:33:90:c7:50:00:87:1d:c4:1e:97:91:db:e1: bb:dd:29:bb:13:30:0c:2a:48:2e:32:7c:73:ab:d5: a0:e1:b8:d2:5c:13:40:44:14:81:60:df:36:16:54: e9:4c:65:a8:d1:75:62:0b:19:fd:a1:59:b3:2d:96: 2f:d6:14:32:08:13:6b:e9:47:c3:1d:3e:70:ef:96: 2c:39:d1:46:19:7f:72:ef:d8:38:51:29:c3:02:84: 45:4e:bb:bc:4d:19:f2:4c:0d:43:34:36:99:64:3f: 57:31:23:07:a9:6f:c1:74:4b:47:d9:85:5c:ad:af: 51:71:0f:70:0d:ec:71:78:b6:6c:28:2d:8c:d1:3d: b6:f3:ab:d4:2a:74:f2:44:b7:3d:8b:39:ed:2e:68: 37:0e:8e:e1:8c:7f:a0:d9:e1:8c:5e:90:b2:ba:19: 64:3c:fa:9d:a1:e7:f2:75:ca:58:9c:ed:0a:1a:44: e1:0b:f7:2e:bf:73:ea:65:e6:35:36:9b:10:38:be: fc:79:a3:f5:4c:a3:32:20:9c:08:89:ae:73:27:9f: 19:80:4f:1a:fb:b2:7e:fc:4a:b5:f5:c0:8c:27:8d: ab:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:19:63:3D:68:11:C1:81:8F:41:84:F2:49:A9:E0:6F:56:7B:23:E2 X509v3 Authority Key Identifier: keyid:95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:31:95:12:83:99:90:fa:72:1c:85:86:ac:7d:9c:7e:eb:44: 0f:9c:14:76:65:e0:46:40:1e:d9:20:9e:98:09:e7:3f:dc:64: f5:eb:7b:7e:a6:e7:cc:95:99:e2:07:d0:74:28:f6:da:c0:f0: ba:5f:ff:eb:8d:30:95:d4:a8:a5:e9:83:f8:1f:13:06:0a:f4: 83:a8:e5:59:ff:79:a9:bd:8e:79:3a:04:29:4c:92:99:6b:5e: 3b:11:b8:e6:ee:97:b9:74:ce:74:50:6d:3b:4c:79:ae:bc:25: a3:3f:87:3f:17:76:23:54:8c:4c:00:ea:5e:35:55:31:09:fb: 95:75:0a:42:d4:7f:c8:a8:8a:d8:57:b4:bc:0a:13:48:b1:e1: 9c:e3:c6:99:a6:47:54:77:09:89:33:2d:2c:33:7f:31:0b:26: 69:9f:66:5e:00:ad:55:a4:45:dd:6b:2f:9d:f6:8d:c6:aa:c6: cc:c6:52:83:ef:bd:b7:14:4d:52:f3:f5:4d:90:4e:73:68:cb: d3:cf:68:d1:68:00:81:9f:64:76:a5:cc:02:84:d1:af:8b:fd: b7:20:87:75:af:a5:f0:42:bb:16:9f:12:fe:08:7c:32:88:57: c9:af:d1:42:9d:9e:69:c6:4b:59:14:23:59:6a:d2:ea:0e:a4: ba:0f:30:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSj5Hybli/OO4UY7LyDrtvSVWoYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1 MjBGNkUyQTAeFw0yNTA4MjIyMTA1MDBaFw0yNTA4MjYwMjUzMDBaMDMxMTAvBgNV BAMTKDRDMTk2MzNENjgxMUMxODE4RjQxODRGMjQ5QTlFMDZGNTY3QjIzRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVURH7w2hF2RMEzNtRmjqDUu3j 0B2m44y88VkVQOl8M5DHUACHHcQel5Hb4bvdKbsTMAwqSC4yfHOr1aDhuNJcE0BE FIFg3zYWVOlMZajRdWILGf2hWbMtli/WFDIIE2vpR8MdPnDvliw50UYZf3Lv2DhR KcMChEVOu7xNGfJMDUM0NplkP1cxIwepb8F0S0fZhVytr1FxD3AN7HF4tmwoLYzR Pbbzq9QqdPJEtz2LOe0uaDcOjuGMf6DZ4YxekLK6GWQ8+p2h5/J1ylic7QoaROEL 9y6/c+pl5jU2mxA4vvx5o/VMozIgnAiJrnMnnxmATxr7sn78SrX1wIwnjavxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTBljPWgRwYGPQYTySangb1Z7I+IwHwYDVR0j BBgwFoAUlZZqjbJQMHz5hSSD+Wki7lIPbiowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmYxNDE3YS01NzE4LTQwNzEtOWYzNS1jMTIyNTU1ZGFjN2EvMC85NTk2NkE4REIy NTAzMDdDRjk4NTI0ODNGOTY5MjJFRTUyMEY2RTJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1MjBG NkUyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJmMTQxN2EtNTcxOC00MDcxLTlm MzUtYzEyMjU1NWRhYzdhLzAvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIy RUU1MjBGNkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4xlRKDmZD6chyFhqx9nH7rRA+cFHZl4EZA HtkgnpgJ5z/cZPXre36m58yVmeIH0HQo9trA8Lpf/+uNMJXUqKXpg/gfEwYK9IOo 5Vn/eam9jnk6BClMkplrXjsRuObul7l0znRQbTtMea68JaM/hz8XdiNUjEwA6l41 VTEJ+5V1CkLUf8ioithXtLwKE0ix4ZzjxpmmR1R3CYkzLSwzfzELJmmfZl4ArVWk Rd1rL532jcaqxszGUoPvvbcUTVLz9U2QTnNoy9PPaNFoAIGfZHalzAKE0a+L/bcg h3WvpfBCuxafEv4IfDKIV8mv0UKdnmnGS1kUI1lq0uoOpLoPMHk= -----END CERTIFICATE-----Generated at Sat Aug 23 13:06:28 2025 by rpki-client