$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft File: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft (raw, json) Hash identifier: qM2D9EJIrNP0eteyluKSPCMU4oO1ZvFKvDrQegV90kU= Subject key identifier: 33:7A:74:68:FA:04:A3:ED:62:2C:82:28:EF:F6:71:B3:C1:41:54:B8 Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D Certificate issuer: /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Certificate serial: 7B6E155CFDF4C67F28AD55C69DA1A69ED0D8ED98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft Manifest number: 0517 Signing time: Mon 20 Oct 2025 07:21:44 +0000 Manifest this update: Mon 20 Oct 2025 07:16:44 +0000 Manifest next update: Thu 23 Oct 2025 17:36:44 +0000 Files and hashes: 1: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl (hash: cLywJp62AJY3ofS9AlaWOAGe+vyKb0BaYtJJmQ4vfc8=) 2: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: 6u0QjcaXuZCe/xDwNoPsOwMyKh9MBkPufQ0B3cPlReE=) 3: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: z8oVsj820WikG58Kg7XuHuFP7zjS3wrrsGJ5kGPWB6k=) 4: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: pnePfPpninK+12GFjtU9XZZuD9qIupgPZ4/SoFot86c=) 5: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: JYyU73FxSsbah75XLPK5+70mS+1BuWT1qs954OCbSn8=) 6: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: tJ7W+A0ln7oQ2TKBeYCrxZXeI+2+Ch9yjit0aZIq8qs=) 7: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: fYXLcgnYZQvFF+Sx+nAnnoQPnhu4qBL7MV7MXCijhoM=) 8: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: MowxodGXifPkFbwcnbxmYI86u52XQ+RqEsK4tBHU6Kc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:6e:15:5c:fd:f4:c6:7f:28:ad:55:c6:9d:a1:a6:9e:d0:d8:ed:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Validity Not Before: Oct 20 07:16:44 2025 GMT Not After : Oct 23 17:36:44 2025 GMT Subject: CN=337A7468FA04A3ED622C8228EFF671B3C14154B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a1:64:70:98:a1:50:df:4f:6d:50:ee:61:ea: c0:46:5a:d0:c5:52:55:7a:e5:74:df:f0:59:02:0d: 70:73:b6:55:bf:12:07:5c:2d:7f:ce:44:33:75:ce: 33:66:65:b5:6a:9c:af:72:d8:8c:b9:69:56:f0:3a: f5:0a:22:82:77:d1:fa:a0:f4:cc:28:73:f4:f3:3c: 79:c3:e5:d4:41:83:43:9a:f5:a3:4f:4b:83:a4:a8: b7:a5:9c:8e:78:20:f0:b8:61:30:b1:a7:6d:ec:85: 31:29:50:cb:1d:6d:c9:f5:f2:db:d3:23:92:26:66: 57:88:c3:45:26:8f:37:1b:a9:20:e7:d8:01:83:67: 81:c2:1e:b0:3e:a6:1f:19:e4:f1:42:0d:6e:4d:8f: fc:7f:3b:75:5e:7a:9c:67:31:61:2d:c8:98:7f:75: c6:a5:b6:99:16:96:93:50:40:48:f0:ad:98:50:a0: 58:37:69:dc:2a:56:e6:1a:a4:3b:be:63:bd:40:19: 2e:18:9c:5b:a8:05:e2:b3:31:2c:4e:96:c6:ab:e3: ba:61:da:f8:a0:a5:5a:d1:89:7c:24:2f:3a:69:3b: e3:8b:1a:3d:6e:37:c3:b6:71:e3:bc:96:04:83:58: 29:7d:5b:88:dd:56:ba:33:3d:bc:05:32:c7:5c:1a: 2d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7A:74:68:FA:04:A3:ED:62:2C:82:28:EF:F6:71:B3:C1:41:54:B8 X509v3 Authority Key Identifier: keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:83:d9:83:0f:ef:fc:d6:20:08:71:e4:8d:05:2f:8a:26:99: c8:de:4a:29:9e:e4:1a:24:69:e1:ea:85:8e:e2:ac:41:c7:6e: 16:e5:79:1d:de:3a:30:1f:c8:47:f2:bf:8b:7c:ed:ae:e0:ba: 08:00:14:f4:ac:13:12:dc:32:36:aa:61:a0:52:20:a1:0a:c4: 33:14:8e:09:47:a7:d8:44:2a:d9:5d:d8:d8:7f:58:d5:d3:ee: eb:9a:89:e6:6e:e9:a4:2c:fb:54:aa:11:cc:d9:df:51:17:1f: 8a:7c:44:15:38:98:c0:63:cf:eb:f0:f9:cc:5b:a6:1e:70:dc: cd:67:75:0e:9a:ca:47:c6:0d:20:fd:56:56:d0:4c:5d:62:a0: 05:bc:69:90:43:d0:c9:19:61:d4:43:45:76:05:ae:47:8e:ea: f2:05:da:b5:b5:2e:44:37:0a:4d:9c:a6:07:2b:8a:f0:2e:e7: 2b:44:d1:fd:a5:84:c7:03:e3:3b:89:de:f0:bd:d8:af:e5:35: fd:f4:cf:37:86:f5:45:2b:c0:cf:26:32:c8:34:72:73:8c:5a: d0:28:46:37:6b:df:12:b5:e0:eb:97:9e:ca:9d:1a:45:f5:12: 2a:d1:7b:28:eb:d9:5f:49:23:5e:bb:0b:05:2c:d4:a7:df:98: 3f:0b:51:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe24VXP30xn8orVXGnaGmntDY7ZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVF NzRFMkE2RDAeFw0yNTEwMjAwNzE2NDRaFw0yNTEwMjMxNzM2NDRaMDMxMTAvBgNV BAMTKDMzN0E3NDY4RkEwNEEzRUQ2MjJDODIyOEVGRjY3MUIzQzE0MTU0QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/oWRwmKFQ309tUO5h6sBGWtDF UlV65XTf8FkCDXBztlW/EgdcLX/ORDN1zjNmZbVqnK9y2Iy5aVbwOvUKIoJ30fqg 9Mwoc/TzPHnD5dRBg0Oa9aNPS4OkqLelnI54IPC4YTCxp23shTEpUMsdbcn18tvT I5ImZleIw0UmjzcbqSDn2AGDZ4HCHrA+ph8Z5PFCDW5Nj/x/O3VeepxnMWEtyJh/ dcaltpkWlpNQQEjwrZhQoFg3adwqVuYapDu+Y71AGS4YnFuoBeKzMSxOlsar47ph 2vigpVrRiXwkLzppO+OLGj1uN8O2ceO8lgSDWCl9W4jdVrozPbwFMsdcGi2fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM3p0aPoEo+1iLIIo7/Zxs8FBVLgwHwYDVR0j BBgwFoAUlegA6/9kcJiSy1dB2e3HXudOKm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmI1YWUxZS1iZTY2LTRhMzAtYTk0OC03ZDQ3OGMyMmVhMmIvMC85NUU4MDBFQkZG NjQ3MDk4OTJDQjU3NDFEOUVEQzc1RUU3NEUyQTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVFNzRF MkE2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZiNWFlMWUtYmU2Ni00YTMwLWE5 NDgtN2Q0NzhjMjJlYTJiLzAvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3 NUVFNzRFMkE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWD2YMP7/zWIAhx5I0FL4ommcjeSime5Bok aeHqhY7irEHHbhbleR3eOjAfyEfyv4t87a7guggAFPSsExLcMjaqYaBSIKEKxDMU jglHp9hEKtld2Nh/WNXT7uuaieZu6aQs+1SqEczZ31EXH4p8RBU4mMBjz+vw+cxb ph5w3M1ndQ6aykfGDSD9VlbQTF1ioAW8aZBD0MkZYdRDRXYFrkeO6vIF2rW1LkQ3 Ck2cpgcrivAu5ytE0f2lhMcD4zuJ3vC92K/lNf30zzeG9UUrwM8mMsg0cnOMWtAo Rjdr3xK14OuXnsqdGkX1EirReyjr2V9JI167CwUs1KffmD8LUTQ= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:32 2025 by rpki-client