$ rpki-client -vvf repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft File: 095AAB2FD179056DA8846FA0E90F79F7D901792C.mft (raw, json) Hash identifier: Sqm5SWzVJ5oDm2c8GK4hcy3iDvrMRS0rNJKzmIke0kc= Subject key identifier: DF:99:81:16:A2:3E:D9:8A:FD:73:D9:AC:39:C7:7F:0A:C7:13:BA:EF Authority key identifier: 09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C Certificate issuer: /CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Certificate serial: 477292E23A4E24271F597D5ADF49806FB8F3C7AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft Manifest number: 0353 Signing time: Sun 01 Mar 2026 21:21:51 +0000 Manifest this update: Sun 01 Mar 2026 21:16:51 +0000 Manifest next update: Thu 05 Mar 2026 01:34:51 +0000 Files and hashes: 1: 3130332e3235322e35312e302f32342d3234203d3e203539313334.roa (hash: 92hDDvlrQq6+Ep7VlgXGUFdRGUo5NBqpCP5dHFzwWeg=) 2: 095AAB2FD179056DA8846FA0E90F79F7D901792C.crl (hash: fGO1pcta/kkMvtIhhLf8Q7jl4cSuylm8IbyRYirCRNo=) 3: 3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa (hash: JQPY1hR36z2SwsI5Y4cr/zQo0NDgsurp+zEd8VFWX3Q=) 4: 3130332e3235322e35302e302f32342d3234203d3e203539313334.roa (hash: tg5kgcB+/SuzaicgIITC9CS9oqxnux/xS4/nsX+npzw=) 5: 3130332e37332e3132352e302f32342d3234203d3e203539313334.roa (hash: Z1EVykTQp5ACC1NPq9JOZKOUUZ9JHZ3If1yc5kffoxA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 01:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:72:92:e2:3a:4e:24:27:1f:59:7d:5a:df:49:80:6f:b8:f3:c7:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Validity Not Before: Mar 1 21:16:51 2026 GMT Not After : Mar 5 01:34:51 2026 GMT Subject: CN=DF998116A23ED98AFD73D9AC39C77F0AC713BAEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:dc:95:b3:60:8e:52:52:6a:fe:b2:ab:b1:4b: c6:59:55:67:ad:c6:4f:fe:e7:40:c0:c3:10:7c:98: 76:96:7b:4e:95:50:a6:4a:e4:a1:76:2b:15:2a:96: dd:ee:6f:39:63:e6:54:72:92:10:b0:fe:92:90:96: 88:ba:2d:56:a6:2b:73:4a:e9:f4:9e:62:31:fc:04: ba:8d:4e:59:9e:81:bb:db:37:13:bd:e6:76:30:2d: 2d:73:b6:9e:81:f5:2c:94:c1:2a:fa:63:6a:cd:d4: d2:ce:df:c5:bd:ac:47:68:96:36:89:9c:4f:41:03: 33:d9:af:2a:c8:56:50:b3:84:cd:98:a5:99:43:8f: 49:0e:c2:fb:49:41:fc:5b:ff:da:14:e0:8e:68:77: e6:e0:f3:62:20:05:0c:70:72:cf:3e:be:5f:05:a5: e7:48:c9:e4:f0:6e:68:56:08:79:f7:b3:92:cd:b7: de:f0:ea:b6:67:bc:21:40:47:3b:95:79:f3:40:7d: 88:f5:90:48:96:73:37:1e:5e:4b:4c:ef:e4:29:2a: 27:c2:91:09:54:4f:e2:8e:19:06:ec:2a:43:46:e7: ff:54:d5:97:29:c7:b1:dc:c6:be:47:24:9d:a9:62: a3:ff:cd:ec:04:d4:3c:63:4e:d7:28:83:ca:d7:3a: 58:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:99:81:16:A2:3E:D9:8A:FD:73:D9:AC:39:C7:7F:0A:C7:13:BA:EF X509v3 Authority Key Identifier: keyid:09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:ac:65:7e:a6:a5:6d:55:5f:da:99:05:e0:e1:09:8c:64:a7: d0:2b:54:01:4f:6b:09:49:09:e3:0d:9a:b1:4f:23:f4:b5:0b: ee:e1:fd:bd:d2:03:5c:cb:70:3b:a3:5e:98:72:fd:7b:86:73: f0:1b:ab:d0:80:94:07:61:12:7f:65:8e:7c:05:66:13:60:3a: 81:5c:e5:f0:40:ac:32:03:16:01:08:b5:33:11:5d:db:84:a5: b3:4e:cc:e6:87:25:77:19:dd:91:6e:9f:3c:16:2d:1e:05:ba: c8:a1:2b:6f:db:ce:5b:3e:b0:ab:df:7a:bd:d4:19:38:57:ea: d7:3b:97:97:2e:5a:b2:5b:30:59:30:93:78:14:72:4c:ca:c4: 45:d2:47:9e:07:2f:6b:60:2b:f6:69:80:63:46:da:5e:be:cf: b8:d3:09:9c:5d:88:1f:af:b8:26:bf:6b:a6:b1:fa:7f:c4:52: 8c:43:dd:43:e4:a4:8e:57:9f:3d:cb:b6:ff:f7:4d:b1:0c:20: 29:c1:78:b2:4d:58:42:e5:00:bf:76:91:ed:24:3b:20:88:d9: d5:c7:9e:ab:1f:a4:4a:f7:f5:6c:d9:92:d3:7a:00:f5:f5:d1: 8b:34:22:72:f4:c9:08:51:1b:c5:a7:fa:46:de:26:5e:32:f0: a0:51:85:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR3KS4jpOJCcfWX1a30mAb7jzx6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdE OTAxNzkyQzAeFw0yNjAzMDEyMTE2NTFaFw0yNjAzMDUwMTM0NTFaMDMxMTAvBgNV BAMTKERGOTk4MTE2QTIzRUQ5OEFGRDczRDlBQzM5Qzc3RjBBQzcxM0JBRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs3JWzYI5SUmr+squxS8ZZVWet xk/+50DAwxB8mHaWe06VUKZK5KF2KxUqlt3ubzlj5lRykhCw/pKQloi6LVamK3NK 6fSeYjH8BLqNTlmegbvbNxO95nYwLS1ztp6B9SyUwSr6Y2rN1NLO38W9rEdoljaJ nE9BAzPZryrIVlCzhM2YpZlDj0kOwvtJQfxb/9oU4I5od+bg82IgBQxwcs8+vl8F pedIyeTwbmhWCHn3s5LNt97w6rZnvCFARzuVefNAfYj1kEiWczceXktM7+QpKifC kQlUT+KOGQbsKkNG5/9U1Zcpx7Hcxr5HJJ2pYqP/zewE1DxjTtcog8rXOljfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU35mBFqI+2Yr9c9msOcd/CscTuu8wHwYDVR0j BBgwFoAUCVqrL9F5BW2ohG+g6Q9599kBeSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTc4OGI0YS1kNDUxLTQ5ZmItYjdjZC03MTk4MTA4NzBmMWEvMC8wOTVBQUIyRkQx NzkwNTZEQTg4NDZGQTBFOTBGNzlGN0Q5MDE3OTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdEOTAx NzkyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3ODhiNGEtZDQ1MS00OWZiLWI3 Y2QtNzE5ODEwODcwZjFhLzAvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5 RjdEOTAxNzkyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANusZX6mpW1VX9qZBeDhCYxkp9ArVAFPawlJ CeMNmrFPI/S1C+7h/b3SA1zLcDujXphy/XuGc/Abq9CAlAdhEn9ljnwFZhNgOoFc 5fBArDIDFgEItTMRXduEpbNOzOaHJXcZ3ZFunzwWLR4FusihK2/bzls+sKvfer3U GThX6tc7l5cuWrJbMFkwk3gUckzKxEXSR54HL2tgK/ZpgGNG2l6+z7jTCZxdiB+v uCa/a6ax+n/EUoxD3UPkpI5Xnz3Ltv/3TbEMICnBeLJNWELlAL92ke0kOyCI2dXH nqsfpEr39WzZktN6APX10Ys0InL0yQhRG8Wn+kbeJl4y8KBRhS8= -----END CERTIFICATE-----Generated at Mon Mar 2 06:51:25 2026 by rpki-client