$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft File: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft (raw, json) Hash identifier: 1NVnfw1SSecxnGYagnFkCY98KdiQ03jsg8ZWoiQ91Nc= Subject key identifier: 69:9F:D5:A1:71:CF:8D:58:A2:F4:9A:42:94:BA:96:89:7E:89:10:07 Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C Certificate issuer: /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Certificate serial: 746042F59E0B97D93E6093C5CEEDCF35E1FD0CDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft Manifest number: 01A8 Signing time: Wed 06 Aug 2025 23:31:28 +0000 Manifest this update: Wed 06 Aug 2025 23:26:28 +0000 Manifest next update: Sun 10 Aug 2025 08:38:28 +0000 Files and hashes: 1: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl (hash: 1liBIVeGkZv7n6+WiFJziTpcbPTTTmZt8qDn25K0gH0=) 2: 3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (hash: y3nVZBm+qtxgwP44vcU3kA0cMy/EmmCFhUt7zZudlQo=) 3: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (hash: FvX/FfDWw99zVOmt+3J83lO751Y4wEfpuqgpwws/quk=) 4: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (hash: 5++6GE8clmDTKMQEM/qEom9bf+61Ah3qelMFdhmesaA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 08:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:60:42:f5:9e:0b:97:d9:3e:60:93:c5:ce:ed:cf:35:e1:fd:0c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Validity Not Before: Aug 6 23:26:28 2025 GMT Not After : Aug 10 08:38:28 2025 GMT Subject: CN=699FD5A171CF8D58A2F49A4294BA96897E891007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:77:78:0e:c1:89:0d:4a:fc:a9:0d:f7:f8: 80:4e:19:66:12:cd:1d:f8:36:b7:ab:d0:fc:93:d9: 59:4e:8b:18:ff:6b:aa:97:fa:7a:28:1d:8c:d0:ea: ff:df:86:b0:82:2e:99:97:94:a7:e7:41:d0:3f:26: 92:cf:2c:83:d3:af:e4:a7:1b:a1:9c:3f:de:4a:4f: 69:bc:0d:44:de:ac:f8:cd:e7:93:a0:84:f3:05:2b: 02:40:32:f2:f5:14:9e:d2:7c:2f:ee:8b:9a:2b:e3: 71:6a:b8:05:67:47:3b:12:07:2f:17:bd:d3:8b:c8: 23:6b:f3:ff:1a:05:81:4d:e9:17:e2:a9:a3:6f:07: 01:35:2d:e8:ae:3e:e6:7e:77:e8:53:38:8c:05:99: 24:53:09:21:c2:c5:67:f9:1b:ca:8a:8c:da:39:c6: d8:65:22:83:aa:08:2c:17:3a:72:75:2a:22:99:bd: ce:bf:2a:f9:55:17:4f:07:79:c3:af:bc:42:97:3c: cc:01:b3:8f:22:88:da:28:b4:5a:1b:ec:92:c9:b3: ba:43:ad:7f:c9:28:4e:a4:89:0c:8f:b1:c3:67:15: 45:24:c2:4f:d8:aa:a2:c5:d5:bc:6a:f9:0b:40:32: fc:1d:3b:47:ef:68:bc:d4:51:32:37:42:87:a3:0e: ce:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9F:D5:A1:71:CF:8D:58:A2:F4:9A:42:94:BA:96:89:7E:89:10:07 X509v3 Authority Key Identifier: keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:17:64:55:47:ef:da:a5:9d:7e:03:46:ab:06:94:ad:1b:91: c8:b8:79:50:18:ad:fc:2b:66:ce:e8:05:39:85:e9:cf:73:84: 23:12:00:7f:38:8a:9f:75:9c:0b:d8:4c:59:d5:a7:01:29:a5: 2e:e8:e0:b4:fe:d3:6b:d4:cb:e7:50:54:f9:fa:f9:76:71:fa: 8d:57:e2:5c:ad:84:61:cb:cd:8d:3c:d1:dd:ae:83:77:63:37: 93:54:fe:a3:bc:aa:b1:2a:4b:ec:34:aa:ee:3b:ba:24:b4:f5: b4:e0:da:bb:30:97:bc:24:28:6c:89:df:8a:ed:cb:9e:eb:ae: ad:aa:74:3e:1a:a1:34:ea:5e:d3:00:1e:91:80:74:2d:c8:55: e3:6c:ac:0f:65:4c:ab:ae:6c:46:12:23:56:7c:f5:31:40:7a: 5e:6a:d4:3c:ad:27:41:85:92:e9:56:4d:2b:c7:2e:7d:a9:2c: 0b:73:e2:39:5e:a8:5a:44:73:0e:eb:67:80:29:49:2a:6a:47: 09:f0:81:fe:70:c0:53:15:cd:2b:0e:4d:ee:c5:3d:61:35:cc: 9f:49:8c:77:10:d3:50:d2:9b:7b:cc:b9:fe:7a:4d:fd:64:87: f6:66:29:51:ef:dc:c7:d7:90:27:62:4e:15:1c:b0:e5:80:c7: 05:08:ba:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdGBC9Z4Ll9k+YJPFzu3PNeH9DNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJC MkM5ODEzQzAeFw0yNTA4MDYyMzI2MjhaFw0yNTA4MTAwODM4MjhaMDMxMTAvBgNV BAMTKDY5OUZENUExNzFDRjhENThBMkY0OUE0Mjk0QkE5Njg5N0U4OTEwMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC17Xd4DsGJDUr8qQ33+IBOGWYS zR34Nrer0PyT2VlOixj/a6qX+nooHYzQ6v/fhrCCLpmXlKfnQdA/JpLPLIPTr+Sn G6GcP95KT2m8DUTerPjN55OghPMFKwJAMvL1FJ7SfC/ui5or43FquAVnRzsSBy8X vdOLyCNr8/8aBYFN6RfiqaNvBwE1LeiuPuZ+d+hTOIwFmSRTCSHCxWf5G8qKjNo5 xthlIoOqCCwXOnJ1KiKZvc6/KvlVF08HecOvvEKXPMwBs48iiNootFob7JLJs7pD rX/JKE6kiQyPscNnFUUkwk/YqqLF1bxq+QtAMvwdO0fvaLzUUTI3QoejDs71AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaZ/VoXHPjVii9JpClLqWiX6JEAcwHwYDVR0j BBgwFoAUCU1VbKC1WvSmNoc6Gx5wMrLJgTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2QwOGViMy05MzdkLTQzMDQtOTE2Ny00NjNkN2M1OGQ1ZTQvMC8wOTRENTU2Q0Ew QjU1QUY0QTYzNjg3M0ExQjFFNzAzMkIyQzk4MTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJCMkM5 ODEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNkMDhlYjMtOTM3ZC00MzA0LTkx NjctNDYzZDdjNThkNWU0LzAvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcw MzJCMkM5ODEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAXZFVH79qlnX4DRqsGlK0bkci4eVAYrfwr Zs7oBTmF6c9zhCMSAH84ip91nAvYTFnVpwEppS7o4LT+02vUy+dQVPn6+XZx+o1X 4lythGHLzY080d2ug3djN5NU/qO8qrEqS+w0qu47uiS09bTg2rswl7wkKGyJ34rt y57rrq2qdD4aoTTqXtMAHpGAdC3IVeNsrA9lTKuubEYSI1Z89TFAel5q1DytJ0GF kulWTSvHLn2pLAtz4jleqFpEcw7rZ4ApSSpqRwnwgf5wwFMVzSsOTe7FPWE1zJ9J jHcQ01DSm3vMuf56Tf1kh/ZmKVHv3MfXkCdiThUcsOWAxwUIups= -----END CERTIFICATE-----Generated at Sat Aug 9 00:59:23 2025 by rpki-client