$ rpki-client -vvf repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft File: 95966A8DB250307CF9852483F96922EE520F6E2A.mft (raw, json) Hash identifier: 1yQWX0StcUbIuNbaPyt+GUhozmWbVLt2Zk10NmtiGZU= Subject key identifier: BD:69:39:7C:4A:1B:45:99:12:1B:66:E6:B8:9E:2C:35:A0:3A:F9:06 Authority key identifier: 95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A Certificate issuer: /CN=95966A8DB250307CF9852483F96922EE520F6E2A Certificate serial: 1008BB58A9A33FAC64DDE08E0D8F8530958C2616 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft Manifest number: 02D3 Signing time: Sun 29 Jun 2025 22:40:00 +0000 Manifest this update: Sun 29 Jun 2025 22:35:00 +0000 Manifest next update: Thu 03 Jul 2025 08:56:00 +0000 Files and hashes: 1: 95966A8DB250307CF9852483F96922EE520F6E2A.crl (hash: t+qKiM9KEpbPXPwBGCATTrL/IelGHLXQmtyKP12OcRs=) 2: 3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa (hash: PdjinzPpF/36hO9HHqQU4IxHNvTYYZFMsZTPnz+oEJM=) 3: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (hash: JsesZ2XEjGD90Q6rb53op1u+M0C8ZTvk1vBXUWFrpwg=) 4: 3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa (hash: 2Tm0gdcz+myuN01m+Uce2N/XVde2LN8VW21KDbbagQI=) 5: 3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa (hash: yijgZGAzH5m/suHYf+93ec2StnmCRT8aHziW14hBnJ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:08:bb:58:a9:a3:3f:ac:64:dd:e0:8e:0d:8f:85:30:95:8c:26:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95966A8DB250307CF9852483F96922EE520F6E2A Validity Not Before: Jun 29 22:35:00 2025 GMT Not After : Jul 3 08:56:00 2025 GMT Subject: CN=BD69397C4A1B4599121B66E6B89E2C35A03AF906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:93:99:a4:15:77:d9:04:38:0f:d2:a2:ef:3a: 7f:e7:ec:62:21:43:e4:a6:c8:c4:76:5e:91:d0:0e: 0a:85:42:11:e3:b3:4c:cb:71:62:bc:ef:86:93:43: 1a:a6:9b:25:b4:69:f1:be:23:5a:2f:57:9d:58:62: 42:bf:cd:da:ae:14:46:94:6e:0d:9f:cd:b9:07:7e: 87:ca:d6:4d:b1:fb:80:58:f5:5d:83:8e:a9:ca:15: 2b:c0:fc:b5:c3:62:57:bd:e8:80:e8:02:a9:ad:8b: cc:37:f8:0d:a3:72:bf:98:51:c0:3f:1f:83:0d:f0: 77:e1:e9:05:e7:a2:dd:03:f9:0f:0d:2f:03:16:03: 47:9a:d7:bf:2a:0b:c5:ac:8d:e4:a7:63:cc:72:6f: ef:a8:26:b4:82:9d:20:ed:a0:a2:dd:b5:f1:ee:f9: 89:18:cc:d7:fc:af:ec:b3:93:c7:64:37:c6:eb:0e: 97:3a:52:e1:59:4a:98:76:25:ff:18:63:f6:f8:83: f7:3b:95:bc:f8:09:76:56:3e:39:eb:77:89:87:17: 65:16:98:3a:7e:34:9e:6a:a6:1e:82:9f:5c:41:fd: 0d:0b:a9:cc:82:cc:51:61:44:d8:81:35:45:76:94: 0e:1d:c3:63:ad:69:34:5a:e8:1b:b0:1c:1e:ea:b2: 49:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:69:39:7C:4A:1B:45:99:12:1B:66:E6:B8:9E:2C:35:A0:3A:F9:06 X509v3 Authority Key Identifier: keyid:95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:18:40:01:31:07:1d:24:9d:ee:13:f8:4e:72:4a:e9:94:f5: d5:dc:c1:f0:89:ab:c4:8b:42:77:96:bc:53:73:44:3f:c3:95: b1:2d:c3:2c:ee:4b:0e:e5:7d:2c:17:ba:ae:9f:bb:7d:42:72: 38:9f:9d:33:6c:70:10:69:ed:67:39:7d:3c:a0:6a:40:fb:fd: 8a:2b:8c:91:76:4d:fa:d3:9f:78:d2:6d:0a:bd:90:71:de:40: 61:52:5c:15:58:bf:a9:77:eb:95:e7:94:83:5b:8f:e0:ab:61: 74:0e:6e:02:b6:a0:f6:b1:87:af:2c:22:21:94:c8:8e:ab:b3: 8c:01:ae:cc:18:c6:52:a5:11:a7:f2:5f:a1:0a:62:f6:bc:43: 1c:b1:4e:a7:54:55:26:7d:2e:44:60:cc:82:40:c8:5a:41:50: a9:c3:69:78:df:1f:83:5b:70:07:29:f8:cc:65:f9:25:f0:8f: dd:ef:69:57:d9:d6:0d:a2:02:3e:05:67:96:81:9b:f7:09:2b: 3d:4a:e1:60:26:85:99:54:f0:57:c2:ff:67:6f:bb:93:b1:84: 64:eb:c2:2a:d5:26:a5:ad:08:01:e1:5a:e5:bd:9c:b3:cd:08: e4:81:cf:72:81:04:da:e8:1f:0c:7b:84:16:5f:05:ac:ee:bc: 8a:51:b4:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEAi7WKmjP6xk3eCODY+FMJWMJhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1 MjBGNkUyQTAeFw0yNTA2MjkyMjM1MDBaFw0yNTA3MDMwODU2MDBaMDMxMTAvBgNV BAMTKEJENjkzOTdDNEExQjQ1OTkxMjFCNjZFNkI4OUUyQzM1QTAzQUY5MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrk5mkFXfZBDgP0qLvOn/n7GIh Q+SmyMR2XpHQDgqFQhHjs0zLcWK874aTQxqmmyW0afG+I1ovV51YYkK/zdquFEaU bg2fzbkHfofK1k2x+4BY9V2DjqnKFSvA/LXDYle96IDoAqmti8w3+A2jcr+YUcA/ H4MN8Hfh6QXnot0D+Q8NLwMWA0ea178qC8WsjeSnY8xyb++oJrSCnSDtoKLdtfHu +YkYzNf8r+yzk8dkN8brDpc6UuFZSph2Jf8YY/b4g/c7lbz4CXZWPjnrd4mHF2UW mDp+NJ5qph6Cn1xB/Q0LqcyCzFFhRNiBNUV2lA4dw2OtaTRa6BuwHB7qskm5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvWk5fEobRZkSG2bmuJ4sNaA6+QYwHwYDVR0j BBgwFoAUlZZqjbJQMHz5hSSD+Wki7lIPbiowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmYxNDE3YS01NzE4LTQwNzEtOWYzNS1jMTIyNTU1ZGFjN2EvMC85NTk2NkE4REIy NTAzMDdDRjk4NTI0ODNGOTY5MjJFRTUyMEY2RTJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1MjBG NkUyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJmMTQxN2EtNTcxOC00MDcxLTlm MzUtYzEyMjU1NWRhYzdhLzAvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIy RUU1MjBGNkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEYQAExBx0kne4T+E5ySumU9dXcwfCJq8SL QneWvFNzRD/DlbEtwyzuSw7lfSwXuq6fu31CcjifnTNscBBp7Wc5fTygakD7/Yor jJF2TfrTn3jSbQq9kHHeQGFSXBVYv6l365XnlINbj+CrYXQObgK2oPaxh68sIiGU yI6rs4wBrswYxlKlEafyX6EKYva8QxyxTqdUVSZ9LkRgzIJAyFpBUKnDaXjfH4Nb cAcp+Mxl+SXwj93vaVfZ1g2iAj4FZ5aBm/cJKz1K4WAmhZlU8FfC/2dvu5OxhGTr wirVJqWtCAHhWuW9nLPNCOSBz3KBBNroHwx7hBZfBazuvIpRtHE= -----END CERTIFICATE-----Generated at Mon Jun 30 02:28:19 2025 by rpki-client