$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft File: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft (raw, json) Hash identifier: QjFrJN8CiS/1Kl0UUmmKRYVWXkiD+WfBPdGGGiqEF4k= Subject key identifier: 9B:BE:6D:DF:2D:AD:46:C8:1F:9C:4F:47:52:14:1F:89:B3:72:72:58 Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C Certificate issuer: /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Certificate serial: 62283693A3E228D7050FF67C10E3233A51D5883C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft Manifest number: 022F Signing time: Fri 17 Apr 2026 21:59:48 +0000 Manifest this update: Fri 17 Apr 2026 21:54:48 +0000 Manifest next update: Mon 20 Apr 2026 23:58:48 +0000 Files and hashes: 1: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (hash: XdQf63cdrdXWBGc6MKoetBKqasSfuuo/VmeblT/8ibk=) 2: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (hash: +aaeTzESf46hiW4iCKWdgpmCd8nyx/eyhjM3ENRIOGY=) 3: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl (hash: V7OEUMO38qgbgMcxmWkGXA0svzR9T+ORoXh7xbjbYsU=) 4: 3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (hash: irW6q7ITtYGefmDvXgL1C1+KbMR4s3lcy75Hz7Jf3gU=) 5: 3130332e3131322e3134342e302f32332d3233203d3e20313534343130.roa (hash: /qMLrXcaufdP3ZWAcq7Mm/BgnHRXKAZu3LykPHWDZbA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 23:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:28:36:93:a3:e2:28:d7:05:0f:f6:7c:10:e3:23:3a:51:d5:88:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Validity Not Before: Apr 17 21:54:48 2026 GMT Not After : Apr 20 23:58:48 2026 GMT Subject: CN=9BBE6DDF2DAD46C81F9C4F4752141F89B3727258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:34:f3:4f:af:39:95:0c:4d:79:91:bc:06:35: bf:37:12:eb:d9:07:2b:4b:80:0c:80:92:2e:13:3c: e9:14:c1:a6:4a:01:33:89:1d:02:8a:5c:9d:5a:64: 52:a9:d0:ea:cb:c3:9f:b8:07:b2:7f:6e:4d:9d:1f: c3:6d:0b:22:4f:66:44:77:57:08:3d:d0:96:ba:29: 87:72:52:b4:b9:86:1e:53:e3:fe:c3:9e:e8:25:eb: 7a:4e:76:1b:51:ab:01:9b:84:78:7d:cf:66:92:0f: f9:cf:2c:92:ba:76:7d:a6:67:d5:e9:dd:6f:98:eb: d6:c4:7b:b7:7b:d8:70:42:72:4d:96:87:f0:29:a1: 56:92:69:d7:b7:cf:19:c8:a9:7c:bc:5b:c7:ec:61: 28:05:ce:ed:fb:e6:67:8d:39:3c:bd:38:07:a1:38: c6:ed:4a:26:ef:68:90:14:30:76:ab:4c:b6:39:4b: b5:3a:b2:85:5b:38:7a:c8:03:99:d6:e1:ce:1f:07: a8:eb:66:a0:79:a2:0f:df:0e:11:dd:3b:9c:84:6c: 21:06:e8:f3:8a:93:2f:13:41:56:9e:bc:dd:ac:2b: 87:68:d6:7d:34:ab:3c:64:96:9c:ff:dd:da:3e:30: a1:51:5c:22:81:a9:2b:af:b3:5a:18:87:12:b3:a4: 0f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BE:6D:DF:2D:AD:46:C8:1F:9C:4F:47:52:14:1F:89:B3:72:72:58 X509v3 Authority Key Identifier: keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:1f:3c:fe:03:43:2f:0f:ae:1c:ea:6f:9b:52:bc:f0:1d:74: a0:23:a9:2f:c9:da:fa:7a:cd:ea:8f:a4:8f:2d:6c:3f:75:88: a8:1b:6e:ec:7e:13:4b:1e:d8:16:84:a4:2f:e7:81:d5:d1:63: 15:36:5b:39:62:0b:54:fb:40:cc:c1:f8:72:d1:62:fb:7c:6e: bd:9a:b8:c8:92:3d:d4:57:b9:c1:f6:6b:28:06:82:55:fd:0d: 2d:48:c1:55:c6:b5:49:d3:68:1c:5f:16:22:ef:4e:03:07:04: 22:22:c0:bd:f7:fe:0b:8f:67:05:97:9b:d5:f8:d4:dd:9c:4f: 90:ec:79:dc:88:b9:df:47:2f:0d:3d:5e:3e:ea:8f:d1:af:e0: 74:6c:08:3f:c0:c2:38:c5:6f:71:ca:23:27:ca:58:d8:a2:da: 3e:26:c4:77:4c:cd:e9:8d:59:f1:2b:e2:e8:d2:84:ef:5b:9d: 71:98:86:2e:5e:d9:a5:2d:c4:80:de:67:fa:0a:75:40:4e:a7: 5d:d3:0b:09:2c:dd:4e:54:1b:16:4c:01:b1:7b:67:16:de:1c: 7b:55:56:a1:b3:0b:51:67:d0:9e:c4:ad:c8:1d:c2:ce:21:b2: 6c:23:2a:9f:6c:2c:f0:ba:83:af:6d:5b:b5:18:2b:f2:5e:3d: f8:f2:79:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYig2k6PiKNcFD/Z8EOMjOlHViDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJC MkM5ODEzQzAeFw0yNjA0MTcyMTU0NDhaFw0yNjA0MjAyMzU4NDhaMDMxMTAvBgNV BAMTKDlCQkU2RERGMkRBRDQ2QzgxRjlDNEY0NzUyMTQxRjg5QjM3MjcyNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjNPNPrzmVDE15kbwGNb83EuvZ BytLgAyAki4TPOkUwaZKATOJHQKKXJ1aZFKp0OrLw5+4B7J/bk2dH8NtCyJPZkR3 Vwg90Ja6KYdyUrS5hh5T4/7Dnugl63pOdhtRqwGbhHh9z2aSD/nPLJK6dn2mZ9Xp 3W+Y69bEe7d72HBCck2Wh/ApoVaSade3zxnIqXy8W8fsYSgFzu375meNOTy9OAeh OMbtSibvaJAUMHarTLY5S7U6soVbOHrIA5nW4c4fB6jrZqB5og/fDhHdO5yEbCEG 6POKky8TQVaevN2sK4do1n00qzxklpz/3do+MKFRXCKBqSuvs1oYhxKzpA8PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm75t3y2tRsgfnE9HUhQfibNyclgwHwYDVR0j BBgwFoAUCU1VbKC1WvSmNoc6Gx5wMrLJgTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2QwOGViMy05MzdkLTQzMDQtOTE2Ny00NjNkN2M1OGQ1ZTQvMC8wOTRENTU2Q0Ew QjU1QUY0QTYzNjg3M0ExQjFFNzAzMkIyQzk4MTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJCMkM5 ODEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNkMDhlYjMtOTM3ZC00MzA0LTkx NjctNDYzZDdjNThkNWU0LzAvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcw MzJCMkM5ODEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMfPP4DQy8Prhzqb5tSvPAddKAjqS/J2vp6 zeqPpI8tbD91iKgbbux+E0se2BaEpC/ngdXRYxU2WzliC1T7QMzB+HLRYvt8br2a uMiSPdRXucH2aygGglX9DS1IwVXGtUnTaBxfFiLvTgMHBCIiwL33/guPZwWXm9X4 1N2cT5DsedyIud9HLw09Xj7qj9Gv4HRsCD/AwjjFb3HKIyfKWNii2j4mxHdMzemN WfEr4ujShO9bnXGYhi5e2aUtxIDeZ/oKdUBOp13TCwks3U5UGxZMAbF7ZxbeHHtV VqGzC1Fn0J7Ercgdws4hsmwjKp9sLPC6g69tW7UYK/JePfjyeT8= -----END CERTIFICATE-----Generated at Sat Apr 18 07:32:43 2026 by rpki-client