$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft File: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft (raw, json) Hash identifier: Hwnw0H9C8q3CQ88ZuVtncUbSAkNCRIDg0wtmOBcFA1s= Subject key identifier: C8:D3:BF:3E:02:13:ED:03:FD:F9:46:6B:80:20:E4:1A:C4:01:97:B8 Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D Certificate issuer: /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Certificate serial: 64010F34FF5B887C9F040B38CA7D89A360D4B805 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft Manifest number: 04E4 Signing time: Sat 28 Jun 2025 14:21:42 +0000 Manifest this update: Sat 28 Jun 2025 14:16:42 +0000 Manifest next update: Tue 01 Jul 2025 22:04:42 +0000 Files and hashes: 1: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: fYXLcgnYZQvFF+Sx+nAnnoQPnhu4qBL7MV7MXCijhoM=) 2: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: tJ7W+A0ln7oQ2TKBeYCrxZXeI+2+Ch9yjit0aZIq8qs=) 3: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: MowxodGXifPkFbwcnbxmYI86u52XQ+RqEsK4tBHU6Kc=) 4: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: z8oVsj820WikG58Kg7XuHuFP7zjS3wrrsGJ5kGPWB6k=) 5: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: JYyU73FxSsbah75XLPK5+70mS+1BuWT1qs954OCbSn8=) 6: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: pnePfPpninK+12GFjtU9XZZuD9qIupgPZ4/SoFot86c=) 7: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl (hash: JeGBV2RbvDXYVcCE7XHzkTLvQD6lNRImPYIU3A9VQAo=) 8: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: 6u0QjcaXuZCe/xDwNoPsOwMyKh9MBkPufQ0B3cPlReE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 22:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:01:0f:34:ff:5b:88:7c:9f:04:0b:38:ca:7d:89:a3:60:d4:b8:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Validity Not Before: Jun 28 14:16:42 2025 GMT Not After : Jul 1 22:04:42 2025 GMT Subject: CN=C8D3BF3E0213ED03FDF9466B8020E41AC40197B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ac:aa:74:75:a6:dc:63:ff:a8:38:52:fd:20: 5a:26:79:f1:81:43:10:c3:13:46:f8:c8:da:84:11: da:4c:dc:69:bf:a5:ed:0f:a3:13:3e:86:42:39:a7: 3a:84:5f:dc:d5:43:45:0c:f6:fe:df:92:c4:55:32: 02:53:77:cd:15:26:2a:24:33:16:36:4a:ef:9a:04: 3e:ef:1d:46:32:3b:86:af:f5:9d:b6:e7:0d:9c:ce: 9d:82:c5:2d:27:75:d8:b0:1b:ba:8f:53:a9:96:bd: 47:d6:2e:d6:6f:59:44:1a:9a:57:62:9c:e9:aa:74: fe:4c:27:98:7d:08:e6:94:de:df:23:62:d9:9f:92: ca:17:c3:b9:a1:da:3d:b5:62:eb:3d:65:7d:d5:e0: b4:ae:c7:c4:29:97:15:5b:1c:26:82:45:7a:e8:ea: 24:b3:3f:2d:4c:d6:c9:13:dd:b7:8b:b2:f7:8b:29: 7d:0f:a2:2a:e1:5a:43:e5:c0:f9:f2:a4:0e:ac:2a: 02:ca:a6:4d:5b:f2:e6:2c:32:e8:fc:29:1e:33:07: 0b:33:71:00:41:cb:6c:50:e4:a5:21:1f:68:ae:27: d2:c4:85:b3:7b:ad:7a:f8:a8:56:98:cb:0a:ba:7e: cc:9f:c0:68:4b:23:82:ec:4a:5e:2e:a8:e3:fe:e8: 06:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D3:BF:3E:02:13:ED:03:FD:F9:46:6B:80:20:E4:1A:C4:01:97:B8 X509v3 Authority Key Identifier: keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:34:27:d9:47:d6:66:3c:4c:79:15:3e:84:1e:7e:d0:0f:ee: 04:4d:42:d9:55:3a:d4:ef:9f:50:d4:0c:3a:a4:53:21:52:39: 9d:e7:00:86:c7:f3:77:fb:59:41:22:d0:01:0d:8c:37:28:96: f3:99:24:85:3d:95:99:f6:14:d7:0c:48:ee:b1:9e:99:9f:f6: 82:79:a6:c5:53:06:59:da:4e:80:d7:07:a3:80:ec:d6:e5:83: 93:6c:7c:e0:8b:3c:5d:26:59:72:2c:d5:ab:7b:53:7a:a4:57: 11:53:b5:cd:08:2b:6f:0c:d0:58:82:c4:b2:6a:a1:9a:ab:5a: 06:dd:52:c4:68:a5:a5:56:bb:1a:e9:71:04:a6:0c:2f:26:73: 67:59:dd:54:3e:5d:ab:24:f2:eb:79:35:d4:a7:1a:74:ae:cc: 4e:54:cd:32:25:7e:25:67:05:eb:d2:13:f2:f2:83:ef:c8:7a: 1e:02:e8:46:3e:de:bc:06:a7:33:ee:92:d6:3a:85:ac:3d:d4: 75:9e:e2:44:fe:77:c2:14:c3:ea:7e:c6:76:2f:8c:b6:da:3c: 27:18:f8:58:23:68:c3:2b:83:4f:5e:32:43:b4:ad:fc:ea:bf: 05:56:98:ac:18:15:b2:d3:8f:50:00:c4:ca:f5:92:66:93:5d: 01:3a:03:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZAEPNP9biHyfBAs4yn2Jo2DUuAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVF NzRFMkE2RDAeFw0yNTA2MjgxNDE2NDJaFw0yNTA3MDEyMjA0NDJaMDMxMTAvBgNV BAMTKEM4RDNCRjNFMDIxM0VEMDNGREY5NDY2QjgwMjBFNDFBQzQwMTk3QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1rKp0dabcY/+oOFL9IFomefGB QxDDE0b4yNqEEdpM3Gm/pe0PoxM+hkI5pzqEX9zVQ0UM9v7fksRVMgJTd80VJiok MxY2Su+aBD7vHUYyO4av9Z225w2czp2CxS0nddiwG7qPU6mWvUfWLtZvWUQamldi nOmqdP5MJ5h9COaU3t8jYtmfksoXw7mh2j21Yus9ZX3V4LSux8QplxVbHCaCRXro 6iSzPy1M1skT3beLsveLKX0PoirhWkPlwPnypA6sKgLKpk1b8uYsMuj8KR4zBwsz cQBBy2xQ5KUhH2iuJ9LEhbN7rXr4qFaYywq6fsyfwGhLI4LsSl4uqOP+6AavAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyNO/PgIT7QP9+UZrgCDkGsQBl7gwHwYDVR0j BBgwFoAUlegA6/9kcJiSy1dB2e3HXudOKm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmI1YWUxZS1iZTY2LTRhMzAtYTk0OC03ZDQ3OGMyMmVhMmIvMC85NUU4MDBFQkZG NjQ3MDk4OTJDQjU3NDFEOUVEQzc1RUU3NEUyQTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVFNzRF MkE2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZiNWFlMWUtYmU2Ni00YTMwLWE5 NDgtN2Q0NzhjMjJlYTJiLzAvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3 NUVFNzRFMkE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIM0J9lH1mY8THkVPoQeftAP7gRNQtlVOtTv n1DUDDqkUyFSOZ3nAIbH83f7WUEi0AENjDcolvOZJIU9lZn2FNcMSO6xnpmf9oJ5 psVTBlnaToDXB6OA7Nblg5NsfOCLPF0mWXIs1at7U3qkVxFTtc0IK28M0FiCxLJq oZqrWgbdUsRopaVWuxrpcQSmDC8mc2dZ3VQ+Xask8ut5NdSnGnSuzE5UzTIlfiVn BevSE/Lyg+/Ieh4C6EY+3rwGpzPuktY6haw91HWe4kT+d8IUw+p+xnYvjLbaPCcY +FgjaMMrg09eMkO0rfzqvwVWmKwYFbLTj1AAxMr1kmaTXQE6AyU= -----END CERTIFICATE-----Generated at Mon Jun 30 00:44:15 2025 by rpki-client