$ rpki-client -vvf repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft File: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft (raw, json) Hash identifier: MrGEy6p7mhc1nNpyDJOZ/VXlhVYbgW+K0raSu5eGsSg= Subject key identifier: F4:B6:25:E4:01:6F:87:65:19:83:78:00:F1:56:FE:66:11:25:EA:71 Authority key identifier: 10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A Certificate issuer: /CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Certificate serial: 37860A5B192C10B0AC32AA2ED69EAF24AB8BCF47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft Manifest number: 0551 Signing time: Sun 01 Mar 2026 16:11:34 +0000 Manifest this update: Sun 01 Mar 2026 16:06:34 +0000 Manifest next update: Thu 05 Mar 2026 03:08:34 +0000 Files and hashes: 1: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl (hash: SHOmI7o4+k6disEdgjrFaE470G8wbIvvmDPruhirny8=) 2: 3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa (hash: XS6giku77XPtxmNRkfOOXOP+iNVcgzmhP0k5pXi56n8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 03:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:86:0a:5b:19:2c:10:b0:ac:32:aa:2e:d6:9e:af:24:ab:8b:cf:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Validity Not Before: Mar 1 16:06:34 2026 GMT Not After : Mar 5 03:08:34 2026 GMT Subject: CN=F4B625E4016F876519837800F156FE661125EA71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:72:52:49:3b:e0:ae:72:7a:4a:3b:81:02:f6: 95:d4:1f:56:4b:c8:de:28:af:fe:36:ea:03:71:03: 78:6d:32:28:fe:8f:54:64:d2:e5:9e:11:43:5e:c7: ca:63:c0:13:bf:0a:4e:91:ef:0a:e5:2f:93:10:c7: 24:87:f8:9e:1a:3e:dd:14:3f:e9:f2:bd:35:1e:9a: a4:b2:ff:94:69:9b:4e:5d:61:88:bf:eb:a7:ba:5a: 94:ca:b4:dd:1c:af:fa:e5:ae:29:19:8f:03:9e:ca: 98:a3:0f:df:81:63:3f:6b:cd:40:1d:9f:e7:10:d2: 79:4a:a9:7a:84:11:0e:51:23:68:da:01:81:c8:65: ad:fa:24:03:88:ab:49:67:db:3f:86:14:12:3d:fe: b8:8d:f0:a2:ae:5b:dc:45:15:b0:22:0f:67:b0:e4: 2d:3a:a4:e6:f0:f3:76:98:18:bf:ca:f2:70:98:04: 54:ef:a0:c9:89:ba:15:4f:0d:6c:1d:0a:f4:76:d5: 78:13:19:70:93:ee:ea:7e:f9:f1:e9:54:58:1c:ff: 1d:37:47:00:7a:cd:dd:e0:ea:d6:f0:15:c4:39:2d: 9c:c1:90:68:df:38:89:25:c3:b3:6b:a8:9b:b6:9e: 88:4c:49:1f:5b:37:50:3e:81:fa:1e:72:68:00:c5: 3b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B6:25:E4:01:6F:87:65:19:83:78:00:F1:56:FE:66:11:25:EA:71 X509v3 Authority Key Identifier: keyid:10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:8f:b6:23:41:fa:cd:17:e4:75:61:6d:ea:14:f0:68:84:12: 48:28:1f:fe:46:ee:dc:94:e8:18:51:bf:30:1e:96:86:7f:7e: ed:15:9e:a3:34:48:14:8d:90:c0:ba:2c:c1:1f:3a:7a:cc:4d: 04:5e:55:2b:0a:24:85:88:22:ec:9c:25:5f:84:09:a5:26:f5: c3:b5:f1:0f:ab:59:61:73:d6:b9:86:15:c9:02:0d:4c:2b:c4: 19:0d:e4:9c:01:7e:e2:c0:60:ad:bf:d7:44:f9:84:93:40:81: 6c:02:b9:42:28:0b:25:43:4c:15:5d:42:db:c0:40:60:5d:1d: f5:58:5e:b2:85:d7:13:53:f8:fc:3f:ba:01:78:93:90:c8:29: 2d:9a:7f:3f:5c:75:59:76:22:bd:bc:ec:d3:c0:ed:f2:4d:b9: fb:45:2a:78:c7:17:30:d4:1f:5e:a5:f4:9b:f0:2d:64:69:f4: 43:ec:c2:4b:c8:af:a7:0b:65:91:5e:9c:a2:e1:ff:48:9c:08: 16:c3:7e:43:e4:d2:0c:32:c2:9e:3b:15:8c:e7:4b:71:9c:df: f6:36:4e:3c:fd:d5:58:6d:f3:a7:ba:03:10:5e:fb:7f:3f:48: 19:a6:e0:f8:c2:f0:46:ed:50:c6:1d:b0:ff:45:d4:04:d1:a8: 32:2e:dd:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN4YKWxksELCsMqou1p6vJKuLz0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZB MkM0NDg1QTAeFw0yNjAzMDExNjA2MzRaFw0yNjAzMDUwMzA4MzRaMDMxMTAvBgNV BAMTKEY0QjYyNUU0MDE2Rjg3NjUxOTgzNzgwMEYxNTZGRTY2MTEyNUVBNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaclJJO+CucnpKO4EC9pXUH1ZL yN4or/426gNxA3htMij+j1Rk0uWeEUNex8pjwBO/Ck6R7wrlL5MQxySH+J4aPt0U P+nyvTUemqSy/5Rpm05dYYi/66e6WpTKtN0cr/rlrikZjwOeypijD9+BYz9rzUAd n+cQ0nlKqXqEEQ5RI2jaAYHIZa36JAOIq0ln2z+GFBI9/riN8KKuW9xFFbAiD2ew 5C06pObw83aYGL/K8nCYBFTvoMmJuhVPDWwdCvR21XgTGXCT7up++fHpVFgc/x03 RwB6zd3g6tbwFcQ5LZzBkGjfOIklw7NrqJu2nohMSR9bN1A+gfoecmgAxTuFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9LYl5AFvh2UZg3gA8Vb+ZhEl6nEwHwYDVR0j BBgwFoAUEJXqeHA4Jqz1+iJB6ysbZqLESFowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTVkZDU3My0zMWY0LTQxNmMtYTFiNy02OThkNmIxNjk3YWQvMC8xMDk1RUE3ODcw MzgyNkFDRjVGQTIyNDFFQjJCMUI2NkEyQzQ0ODVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZBMkM0 NDg1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk1ZGQ1NzMtMzFmNC00MTZjLWEx YjctNjk4ZDZiMTY5N2FkLzAvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFC NjZBMkM0NDg1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqPtiNB+s0X5HVhbeoU8GiEEkgoH/5G7tyU 6BhRvzAeloZ/fu0VnqM0SBSNkMC6LMEfOnrMTQReVSsKJIWIIuycJV+ECaUm9cO1 8Q+rWWFz1rmGFckCDUwrxBkN5JwBfuLAYK2/10T5hJNAgWwCuUIoCyVDTBVdQtvA QGBdHfVYXrKF1xNT+Pw/ugF4k5DIKS2afz9cdVl2Ir287NPA7fJNuftFKnjHFzDU H16l9JvwLWRp9EPswkvIr6cLZZFenKLh/0icCBbDfkPk0gwywp47FYznS3Gc3/Y2 Tjz91Vht86e6AxBe+38/SBmm4PjC8EbtUMYdsP9F1ATRqDIu3c8= -----END CERTIFICATE-----Generated at Mon Mar 2 12:49:51 2026 by rpki-client