$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft File: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft (raw, json) Hash identifier: PKSD0vOzAtwHv4njfwLHyYuxJ7Jp2MpB9sTfUZJz4jA= Subject key identifier: 3F:C4:35:C9:C3:B4:1B:93:86:F5:04:A5:64:E6:A4:2F:DD:DF:0B:7D Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D Certificate issuer: /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Certificate serial: 635225CEBF28367F4182749D548C100A3A48B217 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft Manifest number: 04CF Signing time: Tue 13 May 2025 03:01:43 +0000 Manifest this update: Tue 13 May 2025 02:56:43 +0000 Manifest next update: Fri 16 May 2025 14:21:43 +0000 Files and hashes: 1: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: IQUiR0JlPz/+uykrQRdA9C7xBIr9HwH3lFNNO16XUss=) 2: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl (hash: 7XVB6x7v/VK5iKqAje/rxGMa+bOWVzdk++0fn3MZcFw=) 3: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: DhsUJ+0QPmB3umy124lOVAjIsaGFsn7lzyzelnOboow=) 4: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: j8AfGsExf9Z1d3r0akft+56xnsz2WsBFBLfSdrsxdS8=) 5: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: ayWxpT8yZl1hhBQSv+ekeM1m9KqAyHCeTFs073YkKvk=) 6: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: AzI/2bJav2Aj60o9IPwEY1AeK6Tbpch8Oq7GrpIqn/o=) 7: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: PxZnjWPfJrMlHFV+vFpu4lzDV/NqacyuVyPH6Bygl6s=) 8: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: sLu7RqiRGzYnQBrSMZHIelJFjQSR1Hs3pZgdklGokNI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 14:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:52:25:ce:bf:28:36:7f:41:82:74:9d:54:8c:10:0a:3a:48:b2:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Validity Not Before: May 13 02:56:43 2025 GMT Not After : May 16 14:21:43 2025 GMT Subject: CN=3FC435C9C3B41B9386F504A564E6A42FDDDF0B7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7b:9c:23:a2:ae:c2:d8:a5:08:56:91:b6:5d: 6f:11:17:53:66:9d:43:34:d6:c2:38:44:24:72:57: 04:32:77:d1:fa:d4:7e:7e:be:cc:6b:07:50:da:80: 9c:2b:52:72:b1:4a:5c:be:37:29:01:1d:93:4d:90: fa:c5:a3:a0:7f:1e:67:07:d9:9b:f0:7d:85:eb:5a: a6:57:d5:8d:8b:92:72:f5:1b:ad:73:68:e7:a6:9b: 17:1c:16:01:35:3a:d6:ce:88:ba:e0:b6:9c:62:29: fd:0d:2c:23:79:1f:19:60:de:0d:11:17:05:e1:a4: 26:d7:3d:c8:8f:55:28:e8:7b:49:5e:02:28:76:12: 1e:12:2b:bd:b9:f4:82:7f:f1:9f:6d:90:47:f3:c4: b3:04:25:4a:17:ca:27:12:e8:e8:3a:74:2d:e3:65: bf:2f:76:7d:e4:9b:00:c1:fc:d7:56:4e:f4:e8:ce: 1f:41:e1:eb:01:de:38:6f:7e:fa:56:de:a8:48:d7: 00:d1:c2:37:aa:b5:7c:80:a7:8e:90:5f:4c:ce:06: f9:cd:f4:a0:bd:37:20:7a:f9:6b:86:71:72:a6:5d: fe:18:e1:e2:9c:4a:f0:72:be:52:45:c0:d6:32:f8: 59:88:76:bb:af:b6:7e:04:eb:11:76:e3:d2:c0:06: 10:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C4:35:C9:C3:B4:1B:93:86:F5:04:A5:64:E6:A4:2F:DD:DF:0B:7D X509v3 Authority Key Identifier: keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:c9:22:f0:e0:08:68:6b:1e:1d:6e:f2:29:4d:60:63:cf:fc: f2:2d:e1:d0:c8:2b:34:88:a4:78:95:1c:3e:61:0a:c2:cd:03: 01:77:64:38:a1:c0:a2:dd:45:8c:cd:94:48:d3:ee:2d:0d:9b: de:7c:3d:d3:f9:33:c1:77:c8:73:29:d7:e8:93:73:2c:d3:78: e2:f4:61:37:7d:3f:3a:47:ca:b6:ab:94:33:e8:25:f8:92:d6: a2:81:59:32:70:0a:96:9b:b1:c2:de:ed:a0:b1:c6:6e:c1:a9: e4:1e:11:2d:c6:d3:7b:a0:84:ab:d7:0b:f2:22:d7:14:94:5a: 63:27:dc:86:de:29:7f:49:4a:96:e3:fd:15:6b:b2:3d:f0:db: 3a:d1:7e:fc:25:1c:90:3c:36:28:56:d5:d3:95:e6:63:5a:52: 8d:98:ae:02:ab:63:dc:3b:01:35:ed:d8:66:3e:ae:eb:1d:bf: c4:98:a8:f0:75:4c:0a:38:6a:36:ca:e9:64:40:0b:86:65:c1: e2:55:1d:67:b6:74:8b:cc:6b:35:8f:d9:02:e3:b2:21:a8:74: fa:48:33:de:02:08:28:52:7f:96:33:b2:43:64:ed:f6:db:73: ad:34:64:f5:31:9d:8f:e0:07:a6:84:f2:6d:7e:44:13:65:18: 30:b5:fa:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY1Ilzr8oNn9BgnSdVIwQCjpIshcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVF NzRFMkE2RDAeFw0yNTA1MTMwMjU2NDNaFw0yNTA1MTYxNDIxNDNaMDMxMTAvBgNV BAMTKDNGQzQzNUM5QzNCNDFCOTM4NkY1MDRBNTY0RTZBNDJGRERERjBCN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIe5wjoq7C2KUIVpG2XW8RF1Nm nUM01sI4RCRyVwQyd9H61H5+vsxrB1DagJwrUnKxSly+NykBHZNNkPrFo6B/HmcH 2ZvwfYXrWqZX1Y2LknL1G61zaOemmxccFgE1OtbOiLrgtpxiKf0NLCN5Hxlg3g0R FwXhpCbXPciPVSjoe0leAih2Eh4SK7259IJ/8Z9tkEfzxLMEJUoXyicS6Og6dC3j Zb8vdn3kmwDB/NdWTvTozh9B4esB3jhvfvpW3qhI1wDRwjeqtXyAp46QX0zOBvnN 9KC9NyB6+WuGcXKmXf4Y4eKcSvByvlJFwNYy+FmIdruvtn4E6xF249LABhBzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP8Q1ycO0G5OG9QSlZOakL93fC30wHwYDVR0j BBgwFoAUlegA6/9kcJiSy1dB2e3HXudOKm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmI1YWUxZS1iZTY2LTRhMzAtYTk0OC03ZDQ3OGMyMmVhMmIvMC85NUU4MDBFQkZG NjQ3MDk4OTJDQjU3NDFEOUVEQzc1RUU3NEUyQTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVFNzRF MkE2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZiNWFlMWUtYmU2Ni00YTMwLWE5 NDgtN2Q0NzhjMjJlYTJiLzAvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3 NUVFNzRFMkE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHJIvDgCGhrHh1u8ilNYGPP/PIt4dDIKzSI pHiVHD5hCsLNAwF3ZDihwKLdRYzNlEjT7i0Nm958PdP5M8F3yHMp1+iTcyzTeOL0 YTd9PzpHyrarlDPoJfiS1qKBWTJwCpabscLe7aCxxm7BqeQeES3G03ughKvXC/Ii 1xSUWmMn3IbeKX9JSpbj/RVrsj3w2zrRfvwlHJA8NihW1dOV5mNaUo2YrgKrY9w7 ATXt2GY+rusdv8SYqPB1TAo4ajbK6WRAC4ZlweJVHWe2dIvMazWP2QLjsiGodPpI M94CCChSf5YzskNk7fbbc600ZPUxnY/gB6aE8m1+RBNlGDC1+mM= -----END CERTIFICATE-----Generated at Tue May 13 16:23:56 2025 by rpki-client