$ rpki-client -vvf repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft File: 095AAB2FD179056DA8846FA0E90F79F7D901792C.mft (raw, json) Hash identifier: 1l2M5+74apQb5J2TKLkQFDdvwm51YBJt3xQWcK+xRsQ= Subject key identifier: F0:DB:79:FD:52:92:07:E8:72:86:AA:EC:7E:DF:E7:9D:67:BE:5A:28 Authority key identifier: 09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C Certificate issuer: /CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Certificate serial: 5205B73E3DA12EE45145B2BEF12A2D278E5401AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft Manifest number: 0354 Signing time: Wed 04 Mar 2026 01:41:47 +0000 Manifest this update: Wed 04 Mar 2026 01:36:47 +0000 Manifest next update: Sat 07 Mar 2026 11:50:47 +0000 Files and hashes: 1: 3130332e3235322e35302e302f32342d3234203d3e203539313334.roa (hash: tg5kgcB+/SuzaicgIITC9CS9oqxnux/xS4/nsX+npzw=) 2: 3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa (hash: JQPY1hR36z2SwsI5Y4cr/zQo0NDgsurp+zEd8VFWX3Q=) 3: 3130332e3235322e35312e302f32342d3234203d3e203539313334.roa (hash: 92hDDvlrQq6+Ep7VlgXGUFdRGUo5NBqpCP5dHFzwWeg=) 4: 095AAB2FD179056DA8846FA0E90F79F7D901792C.crl (hash: Gz7rNhj1934X1PjWKy4FSTKg5SelXxfIdsiRjdqYaVA=) 5: 3130332e37332e3132352e302f32342d3234203d3e203539313334.roa (hash: Z1EVykTQp5ACC1NPq9JOZKOUUZ9JHZ3If1yc5kffoxA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 11:50:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:05:b7:3e:3d:a1:2e:e4:51:45:b2:be:f1:2a:2d:27:8e:54:01:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Validity Not Before: Mar 4 01:36:47 2026 GMT Not After : Mar 7 11:50:47 2026 GMT Subject: CN=F0DB79FD529207E87286AAEC7EDFE79D67BE5A28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7c:85:89:e3:77:d6:62:70:62:10:73:bd:d7: 14:5b:ec:54:df:a6:2f:46:5c:32:91:76:52:55:7d: 8c:ee:af:b2:f1:a6:4f:b0:70:f1:58:07:3e:cc:dd: 15:87:65:cb:3c:d1:e0:46:23:5d:99:87:ef:24:77: a2:42:cf:3f:f7:bc:b4:c3:a4:62:d0:14:17:99:86: cc:55:e7:47:f9:61:0d:32:69:1c:17:36:d2:b7:aa: c6:19:93:d3:13:fd:34:93:78:c3:19:c1:e7:86:01: da:e9:fe:89:80:83:1a:ce:02:fd:de:e9:62:b9:e9: 82:6b:ae:88:cf:be:bb:25:91:8c:35:09:9e:26:ea: 0f:17:d7:d9:b3:74:db:1c:da:26:d6:92:e7:4a:85: 44:7a:aa:93:86:ca:a5:3a:0d:a0:dd:9f:65:be:b1: a1:1d:49:20:c6:23:4f:7d:75:e1:7e:4a:37:7f:b1: 20:77:7f:da:4f:22:a1:c5:90:71:7d:11:46:1f:fe: 5f:3f:a0:3c:1c:7e:ef:1a:54:82:f7:59:88:24:7d: 90:7a:44:3f:a0:b0:db:b0:b2:b0:e3:30:33:ce:70: 40:80:f4:8d:ba:b5:8c:16:36:02:be:ba:35:92:1b: b6:82:dd:94:30:3c:7f:69:28:a3:4c:93:a4:76:92: 86:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DB:79:FD:52:92:07:E8:72:86:AA:EC:7E:DF:E7:9D:67:BE:5A:28 X509v3 Authority Key Identifier: keyid:09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:53:98:4e:a0:40:d3:58:74:36:13:9e:ed:c5:82:9a:0c:94: 4b:90:5f:8d:02:09:32:b4:4e:e0:83:21:69:5b:38:7a:3b:5f: f7:57:9f:35:5c:35:1b:8a:8e:bb:48:87:66:60:04:7a:27:1b: f4:f4:95:9c:56:8d:2a:42:a7:d7:18:33:d9:4c:80:a7:91:94: 93:52:ef:33:a1:34:0e:b4:bc:1a:b3:7c:4d:26:a2:b1:40:35: 2e:b3:9b:dc:da:d7:89:d7:42:2b:7d:74:29:54:39:eb:83:08: ee:20:b6:7e:4f:83:ed:9c:22:c8:e7:5a:61:c5:a6:23:b6:74: 60:ed:b3:24:76:e6:84:3b:e2:40:f6:64:1c:09:5d:b9:84:73: 76:32:36:d7:11:c3:f9:e9:1b:f2:09:da:82:e8:87:33:e2:e6: da:59:26:d9:ac:58:99:da:3e:14:7f:80:8a:b7:de:9e:67:74: 73:7e:59:b8:9a:78:f4:ac:9c:90:c4:96:db:02:53:8b:ce:53: 39:13:2f:4b:e5:7a:5b:22:37:92:cd:19:55:f3:f4:53:59:51: 9c:11:44:2b:05:f3:51:6e:a3:13:89:b3:83:bd:08:fc:84:63: f5:18:d5:6f:73:a3:ce:41:6a:09:53:c4:a1:72:71:a9:5c:83: 90:8e:67:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUgW3Pj2hLuRRRbK+8SotJ45UAa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdE OTAxNzkyQzAeFw0yNjAzMDQwMTM2NDdaFw0yNjAzMDcxMTUwNDdaMDMxMTAvBgNV BAMTKEYwREI3OUZENTI5MjA3RTg3Mjg2QUFFQzdFREZFNzlENjdCRTVBMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbfIWJ43fWYnBiEHO91xRb7FTf pi9GXDKRdlJVfYzur7Lxpk+wcPFYBz7M3RWHZcs80eBGI12Zh+8kd6JCzz/3vLTD pGLQFBeZhsxV50f5YQ0yaRwXNtK3qsYZk9MT/TSTeMMZweeGAdrp/omAgxrOAv3e 6WK56YJrrojPvrslkYw1CZ4m6g8X19mzdNsc2ibWkudKhUR6qpOGyqU6DaDdn2W+ saEdSSDGI099deF+Sjd/sSB3f9pPIqHFkHF9EUYf/l8/oDwcfu8aVIL3WYgkfZB6 RD+gsNuwsrDjMDPOcECA9I26tYwWNgK+ujWSG7aC3ZQwPH9pKKNMk6R2koaVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Nt5/VKSB+hyhqrsft/nnWe+WigwHwYDVR0j BBgwFoAUCVqrL9F5BW2ohG+g6Q9599kBeSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTc4OGI0YS1kNDUxLTQ5ZmItYjdjZC03MTk4MTA4NzBmMWEvMC8wOTVBQUIyRkQx NzkwNTZEQTg4NDZGQTBFOTBGNzlGN0Q5MDE3OTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdEOTAx NzkyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3ODhiNGEtZDQ1MS00OWZiLWI3 Y2QtNzE5ODEwODcwZjFhLzAvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5 RjdEOTAxNzkyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNTmE6gQNNYdDYTnu3FgpoMlEuQX40CCTK0 TuCDIWlbOHo7X/dXnzVcNRuKjrtIh2ZgBHonG/T0lZxWjSpCp9cYM9lMgKeRlJNS 7zOhNA60vBqzfE0morFANS6zm9za14nXQit9dClUOeuDCO4gtn5Pg+2cIsjnWmHF piO2dGDtsyR25oQ74kD2ZBwJXbmEc3YyNtcRw/npG/IJ2oLohzPi5tpZJtmsWJna PhR/gIq33p5ndHN+WbiaePSsnJDEltsCU4vOUzkTL0vlelsiN5LNGVXz9FNZUZwR RCsF81FuoxOJs4O9CPyEY/UY1W9zo85BaglTxKFycalcg5COZxc= -----END CERTIFICATE-----Generated at Wed Mar 4 15:41:14 2026 by rpki-client