$ rpki-client -vvf repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft File: 095AAB2FD179056DA8846FA0E90F79F7D901792C.mft (raw, json) Hash identifier: z30cfECJQ6kR+k0xvd2AgsaVahUbpFrxAgh+s1ixzl4= Subject key identifier: 2C:61:CF:E2:16:F6:BB:75:E2:96:51:63:49:E0:0D:3F:02:95:9D:98 Authority key identifier: 09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C Certificate issuer: /CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Certificate serial: 56FDB6BFC8A1374A70A391A79DE33095F1545A14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft Manifest number: 0367 Signing time: Thu 16 Apr 2026 14:21:51 +0000 Manifest this update: Thu 16 Apr 2026 14:16:51 +0000 Manifest next update: Sun 19 Apr 2026 16:59:51 +0000 Files and hashes: 1: 095AAB2FD179056DA8846FA0E90F79F7D901792C.crl (hash: xNgdJw1IRI2wkhPVTz5lY299SRmspi6e1l02jvbFJEY=) 2: 3130332e3235322e35312e302f32342d3234203d3e203539313334.roa (hash: 92hDDvlrQq6+Ep7VlgXGUFdRGUo5NBqpCP5dHFzwWeg=) 3: 3130332e37332e3132352e302f32342d3234203d3e203539313334.roa (hash: Z1EVykTQp5ACC1NPq9JOZKOUUZ9JHZ3If1yc5kffoxA=) 4: 3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa (hash: JQPY1hR36z2SwsI5Y4cr/zQo0NDgsurp+zEd8VFWX3Q=) 5: 3130332e3235322e35302e302f32342d3234203d3e203539313334.roa (hash: tg5kgcB+/SuzaicgIITC9CS9oqxnux/xS4/nsX+npzw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 16:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:fd:b6:bf:c8:a1:37:4a:70:a3:91:a7:9d:e3:30:95:f1:54:5a:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Validity Not Before: Apr 16 14:16:51 2026 GMT Not After : Apr 19 16:59:51 2026 GMT Subject: CN=2C61CFE216F6BB75E296516349E00D3F02959D98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a7:b2:03:c3:40:54:a2:bb:c0:9c:4a:24:0d: c9:cb:85:02:c3:b0:5a:1c:83:31:1b:4a:8f:13:5a: db:ce:97:7a:7b:4f:2f:e0:70:96:74:09:d2:cd:18: 05:e3:aa:c6:0a:b6:4a:8a:4c:8f:5a:2a:e8:94:fc: 9a:c6:65:87:bf:d2:82:cc:53:b7:2c:17:e4:58:b0: ce:b6:58:94:5b:f3:71:1a:7b:3b:2d:9e:c9:78:ef: cc:77:2a:dd:be:dd:34:36:69:d2:4c:70:40:b4:0b: 40:34:c4:a1:5c:ab:9a:eb:6b:9e:5b:87:a0:d5:b0: 5f:78:9a:0f:ab:ad:b1:64:6c:40:ed:a1:0b:d3:91: ba:a4:b6:b3:7a:8a:f1:63:60:9a:38:31:2e:0f:e1: 97:9c:ba:74:7f:ef:b4:3a:1a:4a:58:e7:81:d6:d2: 5a:54:d5:a2:7b:a5:08:e7:91:eb:3d:54:ad:81:79: 28:bb:f0:1f:de:97:48:93:1c:d3:c3:03:f1:1c:8c: c5:58:ad:b5:fb:99:37:df:f7:98:0f:c8:a8:62:fb: 36:16:79:66:11:c9:22:58:45:6e:8e:7e:e6:d8:56: a1:74:c1:60:39:be:10:3d:3d:5b:b8:86:25:7a:49: ab:b1:64:cf:5e:ec:19:27:0c:cf:4b:ed:c0:4e:b5: 79:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:61:CF:E2:16:F6:BB:75:E2:96:51:63:49:E0:0D:3F:02:95:9D:98 X509v3 Authority Key Identifier: keyid:09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:67:68:85:73:89:99:5f:a8:3f:23:fb:fe:95:be:25:34:2d: 4b:b5:2a:d4:d6:5c:55:d4:8c:43:02:8a:a3:8d:7a:4e:08:1a: a9:10:90:02:86:b8:e1:43:1a:f3:58:b4:95:eb:9f:ff:f2:d4: ca:3f:52:24:77:d1:8b:8a:8a:be:6d:8d:c8:b4:0b:5d:66:ac: 97:3a:40:41:62:d1:bb:da:eb:0a:88:18:2a:a6:4a:f8:e5:6a: 5c:07:21:f0:47:e0:72:ac:4b:d3:07:15:25:fd:58:8d:85:74: 4c:79:ff:3f:24:1d:ad:5e:c7:3e:5e:2c:60:47:3b:f1:05:a6: e9:f4:7b:a0:eb:b2:bc:16:55:59:98:e4:08:35:c8:25:97:1a: f6:88:af:b6:e7:df:be:87:ff:6d:5e:8c:05:03:fb:a1:9c:22: f7:05:c6:d8:0c:d9:c0:54:ed:fa:7d:36:38:22:18:38:b6:9e: 8b:c2:40:00:85:8f:8e:d8:c7:43:1e:93:3d:b9:7c:89:66:50: 4a:fa:e3:b1:01:70:5e:9b:ea:79:f9:cb:2a:de:7a:36:ef:7f: 74:d8:ab:10:20:2d:d1:86:ff:1f:22:a1:24:1f:60:ab:3f:a7: 4f:98:06:0d:ef:31:71:af:60:44:10:60:22:7c:8d:fd:7a:56: 7a:2f:5b:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVv22v8ihN0pwo5GnneMwlfFUWhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdE OTAxNzkyQzAeFw0yNjA0MTYxNDE2NTFaFw0yNjA0MTkxNjU5NTFaMDMxMTAvBgNV BAMTKDJDNjFDRkUyMTZGNkJCNzVFMjk2NTE2MzQ5RTAwRDNGMDI5NTlEOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRp7IDw0BUorvAnEokDcnLhQLD sFocgzEbSo8TWtvOl3p7Ty/gcJZ0CdLNGAXjqsYKtkqKTI9aKuiU/JrGZYe/0oLM U7csF+RYsM62WJRb83Eaezstnsl478x3Kt2+3TQ2adJMcEC0C0A0xKFcq5rra55b h6DVsF94mg+rrbFkbEDtoQvTkbqktrN6ivFjYJo4MS4P4ZecunR/77Q6GkpY54HW 0lpU1aJ7pQjnkes9VK2BeSi78B/el0iTHNPDA/EcjMVYrbX7mTff95gPyKhi+zYW eWYRySJYRW6OfubYVqF0wWA5vhA9PVu4hiV6SauxZM9e7BknDM9L7cBOtXn5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULGHP4hb2u3XillFjSeANPwKVnZgwHwYDVR0j BBgwFoAUCVqrL9F5BW2ohG+g6Q9599kBeSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTc4OGI0YS1kNDUxLTQ5ZmItYjdjZC03MTk4MTA4NzBmMWEvMC8wOTVBQUIyRkQx NzkwNTZEQTg4NDZGQTBFOTBGNzlGN0Q5MDE3OTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdEOTAx NzkyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3ODhiNGEtZDQ1MS00OWZiLWI3 Y2QtNzE5ODEwODcwZjFhLzAvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5 RjdEOTAxNzkyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJnaIVziZlfqD8j+/6VviU0LUu1KtTWXFXU jEMCiqONek4IGqkQkAKGuOFDGvNYtJXrn//y1Mo/UiR30YuKir5tjci0C11mrJc6 QEFi0bva6wqIGCqmSvjlalwHIfBH4HKsS9MHFSX9WI2FdEx5/z8kHa1exz5eLGBH O/EFpun0e6DrsrwWVVmY5Ag1yCWXGvaIr7bn376H/21ejAUD+6GcIvcFxtgM2cBU 7fp9NjgiGDi2novCQACFj47Yx0Mekz25fIlmUEr647EBcF6b6nn5yyreejbvf3TY qxAgLdGG/x8ioSQfYKs/p0+YBg3vMXGvYEQQYCJ8jf16VnovW38= -----END CERTIFICATE-----Generated at Fri Apr 17 19:56:33 2026 by rpki-client