$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft File: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft (raw, json) Hash identifier: 3hjpECgAQFtyPcAi+FmYBvBh8V+ujbmR82Umi+IYKC4= Subject key identifier: 1E:2F:2F:60:E6:F1:DE:E5:A2:D5:11:82:A6:A7:B7:48:A9:F7:18:D0 Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C Certificate issuer: /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Certificate serial: 67A71BD2684383607E3FAEBF9D37C1592C2EC080 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft Manifest number: 0219 Signing time: Sat 28 Feb 2026 23:11:37 +0000 Manifest this update: Sat 28 Feb 2026 23:06:37 +0000 Manifest next update: Wed 04 Mar 2026 08:19:37 +0000 Files and hashes: 1: 3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (hash: irW6q7ITtYGefmDvXgL1C1+KbMR4s3lcy75Hz7Jf3gU=) 2: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl (hash: N8nlKOypAwdWlePdbywnA2AdkgpfC6W7qp88G/YCsmQ=) 3: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (hash: XdQf63cdrdXWBGc6MKoetBKqasSfuuo/VmeblT/8ibk=) 4: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (hash: +aaeTzESf46hiW4iCKWdgpmCd8nyx/eyhjM3ENRIOGY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 08:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:a7:1b:d2:68:43:83:60:7e:3f:ae:bf:9d:37:c1:59:2c:2e:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Validity Not Before: Feb 28 23:06:37 2026 GMT Not After : Mar 4 08:19:37 2026 GMT Subject: CN=1E2F2F60E6F1DEE5A2D51182A6A7B748A9F718D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ab:65:81:dc:1f:06:67:b8:f5:81:dd:ed:e6: 73:39:83:7a:6f:38:2a:1c:a5:48:2c:2d:43:4d:10: 55:07:80:cc:47:8a:6b:a5:f0:07:da:7a:6c:dc:24: 3d:25:2b:b2:26:f7:d9:0c:1e:6d:95:57:4d:70:df: a5:07:79:23:b4:86:01:c2:72:8e:2d:f2:8c:2d:a5: 0f:8d:4a:5b:99:2f:24:80:41:7c:29:22:34:63:a9: b8:7d:10:7b:1a:a6:74:b9:d5:ba:33:c7:f1:2c:65: 62:24:d8:a9:82:83:73:a8:04:d5:a9:22:fe:54:f8: fd:0f:4b:1f:52:19:b9:a5:4f:77:63:43:38:5e:fc: d3:5b:10:d0:29:05:2c:9f:06:4b:7b:1e:6b:9b:05: 06:10:6b:32:6f:e9:23:36:1d:a4:37:7f:b3:47:78: 98:b1:b4:b7:8d:71:55:f7:46:3e:81:f8:35:55:af: 5c:21:dc:e9:a1:6f:b6:de:e0:32:ee:b7:40:c7:5f: 2d:65:7e:0a:50:07:3e:10:d5:43:5a:e2:1c:23:33: 50:0f:e5:38:d3:4a:00:07:b3:8f:70:6f:88:9b:7a: ec:9e:dd:66:98:84:02:85:35:04:ea:e7:1f:45:04: 84:cb:d0:e9:09:53:8d:04:19:7b:ea:31:66:8a:8e: 2d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2F:2F:60:E6:F1:DE:E5:A2:D5:11:82:A6:A7:B7:48:A9:F7:18:D0 X509v3 Authority Key Identifier: keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:bb:91:d2:56:69:c1:b3:22:d4:6a:ce:3e:8f:46:42:93:f5: 7e:a2:a5:0a:7f:b6:ec:1b:57:af:ad:35:0c:21:98:c4:33:3f: 99:eb:87:b0:a7:f8:e6:ad:ee:c7:a4:11:33:ce:66:b1:cb:b9: 3b:54:8a:52:b4:94:4a:4b:08:ac:0c:ba:ca:cb:bd:46:e2:b2: b3:59:05:c1:70:68:26:f4:30:da:2f:4e:9c:eb:ef:2c:df:42: d8:88:26:07:93:a7:0d:9e:97:cc:aa:6a:a7:4a:0b:4c:f4:46: f9:5c:23:ef:17:b5:ca:1b:56:aa:ef:17:7c:8d:97:43:2f:7d: 1d:94:9e:83:8a:12:79:d7:88:07:3c:63:16:59:10:2d:3b:af: 56:e6:3f:ff:93:e5:7b:09:af:ab:7e:ac:32:9f:7c:20:6b:a6: 4e:75:d9:ef:7f:64:04:e9:30:64:d9:a0:b2:6d:65:44:21:45: e9:9a:e9:8d:17:2b:60:8d:bb:07:d2:85:74:64:d5:6b:61:3f: 64:c4:7a:f2:32:58:f5:01:fa:b6:89:b3:2f:1f:fb:bf:0c:f8: 29:00:39:58:43:05:7c:32:d1:ec:01:44:9d:32:fb:53:0b:cb: 71:c8:1e:9e:a8:8d:89:a7:27:ab:1b:ed:6c:95:aa:9a:a7:cd: 92:8c:70:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ6cb0mhDg2B+P66/nTfBWSwuwIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJC MkM5ODEzQzAeFw0yNjAyMjgyMzA2MzdaFw0yNjAzMDQwODE5MzdaMDMxMTAvBgNV BAMTKDFFMkYyRjYwRTZGMURFRTVBMkQ1MTE4MkE2QTdCNzQ4QTlGNzE4RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJq2WB3B8GZ7j1gd3t5nM5g3pv OCocpUgsLUNNEFUHgMxHimul8AfaemzcJD0lK7Im99kMHm2VV01w36UHeSO0hgHC co4t8owtpQ+NSluZLySAQXwpIjRjqbh9EHsapnS51bozx/EsZWIk2KmCg3OoBNWp Iv5U+P0PSx9SGbmlT3djQzhe/NNbENApBSyfBkt7HmubBQYQazJv6SM2HaQ3f7NH eJixtLeNcVX3Rj6B+DVVr1wh3Omhb7be4DLut0DHXy1lfgpQBz4Q1UNa4hwjM1AP 5TjTSgAHs49wb4ibeuye3WaYhAKFNQTq5x9FBITL0OkJU40EGXvqMWaKji29AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHi8vYObx3uWi1RGCpqe3SKn3GNAwHwYDVR0j BBgwFoAUCU1VbKC1WvSmNoc6Gx5wMrLJgTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2QwOGViMy05MzdkLTQzMDQtOTE2Ny00NjNkN2M1OGQ1ZTQvMC8wOTRENTU2Q0Ew QjU1QUY0QTYzNjg3M0ExQjFFNzAzMkIyQzk4MTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJCMkM5 ODEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNkMDhlYjMtOTM3ZC00MzA0LTkx NjctNDYzZDdjNThkNWU0LzAvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcw MzJCMkM5ODEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACy7kdJWacGzItRqzj6PRkKT9X6ipQp/tuwb V6+tNQwhmMQzP5nrh7Cn+Oat7sekETPOZrHLuTtUilK0lEpLCKwMusrLvUbisrNZ BcFwaCb0MNovTpzr7yzfQtiIJgeTpw2el8yqaqdKC0z0RvlcI+8XtcobVqrvF3yN l0MvfR2UnoOKEnnXiAc8YxZZEC07r1bmP/+T5XsJr6t+rDKffCBrpk512e9/ZATp MGTZoLJtZUQhRema6Y0XK2CNuwfShXRk1WthP2TEevIyWPUB+raJsy8f+78M+CkA OVhDBXwy0ewBRJ0y+1MLy3HIHp6ojYmnJ6sb7WyVqpqnzZKMcOQ= -----END CERTIFICATE-----Generated at Mon Mar 2 13:23:47 2026 by rpki-client