$ rpki-client -vvf repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft File: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft (raw, json) Hash identifier: WOId92oeANSQCHC6PZbC6vplxulf2KTLe115k9oM8nM= Subject key identifier: 05:75:74:0E:B0:34:DB:73:1A:00:D6:FB:AA:4F:73:A2:CE:4E:E2:A5 Authority key identifier: 95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 Certificate issuer: /CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Certificate serial: 658BA0A592054B5898CC841B91B75F2E36DA63B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft Manifest number: 0550 Signing time: Sun 01 Mar 2026 03:42:32 +0000 Manifest this update: Sun 01 Mar 2026 03:37:32 +0000 Manifest next update: Wed 04 Mar 2026 06:14:32 +0000 Files and hashes: 1: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: ifCGuusxkGprBC7NulQNufNvo7SVC5amSJ/1S4uaqjQ=) 2: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: hccolhWeQwMhTE4DUNZtMqz3UE4I8axgnsLj/aGjWu0=) 3: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: LZPQ7rMeaDVcHWLsKLTFoADUeRBC0AnGmqL6VPS4zMA=) 4: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl (hash: 3cMCkC+2cETN3kTRuR17BwomvLTNpu2+mYOBjq9hsVo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 06:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:8b:a0:a5:92:05:4b:58:98:cc:84:1b:91:b7:5f:2e:36:da:63:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Validity Not Before: Mar 1 03:37:32 2026 GMT Not After : Mar 4 06:14:32 2026 GMT Subject: CN=0575740EB034DB731A00D6FBAA4F73A2CE4EE2A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:50:8f:ac:24:d7:6f:e4:e4:8f:fb:5b:74:a9: f6:cf:b3:ca:9a:c2:cd:47:17:c9:aa:c1:0b:f7:90: fb:91:11:e7:12:a6:e9:ff:70:59:57:3e:18:83:46: 7a:5f:91:9c:d3:a8:47:7a:a3:be:09:12:4e:eb:f3: be:79:25:8c:7d:b4:67:79:ee:5c:33:60:5b:60:2d: 96:62:f3:79:94:b6:4b:58:89:c7:11:57:00:fc:ac: ee:48:34:d1:52:2d:f6:bd:96:5d:e8:03:cf:12:37: 4c:6f:d9:01:88:00:18:77:d3:9a:5a:9c:7a:a9:fd: 62:4b:b6:fc:57:a9:f2:a4:4b:bf:75:fe:34:fd:f3: cf:43:c0:ac:0c:9b:20:85:ef:1a:cb:30:f4:6f:52: 92:2a:96:cd:a6:94:a7:c3:8e:07:b5:f5:ef:ea:da: 7f:d8:ad:8e:a0:e7:c8:5a:78:ce:76:44:b7:d6:fb: 0d:2e:44:06:83:90:42:a6:35:c3:42:1a:51:c8:c2: fa:c7:ee:03:ee:76:21:8d:04:5e:db:f2:55:2f:e1: bc:91:89:e6:ac:ca:3b:ec:6c:ad:07:2b:98:9f:10: fa:a7:42:25:61:78:a4:05:0d:df:fd:ba:e1:b2:6a: 73:b6:c2:18:24:21:c4:b8:b5:4e:cf:63:c0:1a:81: 0d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:75:74:0E:B0:34:DB:73:1A:00:D6:FB:AA:4F:73:A2:CE:4E:E2:A5 X509v3 Authority Key Identifier: keyid:95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:ed:38:0e:4b:8d:e7:d8:fd:0f:13:f9:03:f0:9a:79:31:55: a7:fb:55:f9:1a:e7:86:0b:44:bd:0e:2a:e1:62:a3:e9:ed:f8: bb:52:dd:a2:c4:a8:8d:24:53:ed:25:93:9c:9b:16:21:06:f5: 22:44:14:2f:45:50:3f:ea:23:01:79:4e:bd:5d:93:5d:13:27: 3b:05:ef:31:52:a2:90:e9:12:6d:68:5e:e3:10:69:ec:2e:fd: b8:ac:5e:83:c7:e6:82:61:f4:1b:53:c6:4c:51:10:99:48:f0: eb:ed:e5:41:f5:15:50:fe:c2:eb:9b:36:9e:c2:f2:fd:65:85: 45:c1:5d:7c:1c:8b:78:7b:04:84:bf:eb:98:03:e1:87:bc:54: 27:0c:51:9d:77:d1:9f:5e:e9:4c:01:b1:cb:f7:fc:4c:97:fc: 17:2a:ca:49:e9:9f:46:e3:b6:a5:66:b8:0b:23:62:fb:3e:8e: da:ed:4c:7f:37:c0:73:6c:f7:db:14:dc:90:28:e0:ca:f5:e3: 52:4c:e6:41:bd:01:36:7f:17:39:a3:1c:b1:c1:8d:f5:b1:85: 53:9c:cc:5e:c6:35:e0:2b:a0:aa:45:7c:a5:7f:79:08:ff:1e: a8:e7:15:a3:7b:07:5c:3c:92:a1:a3:ec:e0:72:60:fd:b7:dc: ee:d4:9d:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZYugpZIFS1iYzIQbkbdfLjbaY7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0 NjQ2MUFCMzAeFw0yNjAzMDEwMzM3MzJaFw0yNjAzMDQwNjE0MzJaMDMxMTAvBgNV BAMTKDA1NzU3NDBFQjAzNERCNzMxQTAwRDZGQkFBNEY3M0EyQ0U0RUUyQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBUI+sJNdv5OSP+1t0qfbPs8qa ws1HF8mqwQv3kPuREecSpun/cFlXPhiDRnpfkZzTqEd6o74JEk7r8755JYx9tGd5 7lwzYFtgLZZi83mUtktYiccRVwD8rO5INNFSLfa9ll3oA88SN0xv2QGIABh305pa nHqp/WJLtvxXqfKkS791/jT9889DwKwMmyCF7xrLMPRvUpIqls2mlKfDjge19e/q 2n/YrY6g58haeM52RLfW+w0uRAaDkEKmNcNCGlHIwvrH7gPudiGNBF7b8lUv4byR ieasyjvsbK0HK5ifEPqnQiVheKQFDd/9uuGyanO2whgkIcS4tU7PY8AagQ3TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBXV0DrA023MaANb7qk9zos5O4qUwHwYDVR0j BBgwFoAUldkTaEX6+geVc11Kmw/590ZGGrMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc4NWU2NS01MWUyLTRiMWItODJmOS1lNzUzYWQ0YjI0MGYvMC85NUQ5MTM2ODQ1 RkFGQTA3OTU3MzVENEE5QjBGRjlGNzQ2NDYxQUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0NjQ2 MUFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5 Rjc0NjQ2MUFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPtOA5LjefY/Q8T+QPwmnkxVaf7Vfka54YL RL0OKuFio+nt+LtS3aLEqI0kU+0lk5ybFiEG9SJEFC9FUD/qIwF5Tr1dk10TJzsF 7zFSopDpEm1oXuMQaewu/bisXoPH5oJh9BtTxkxREJlI8Ovt5UH1FVD+wuubNp7C 8v1lhUXBXXwci3h7BIS/65gD4Ye8VCcMUZ130Z9e6UwBscv3/EyX/Bcqyknpn0bj tqVmuAsjYvs+jtrtTH83wHNs99sU3JAo4Mr141JM5kG9ATZ/FzmjHLHBjfWxhVOc zF7GNeAroKpFfKV/eQj/HqjnFaN7B1w8kqGj7OByYP233O7UnRI= -----END CERTIFICATE-----Generated at Mon Mar 2 10:55:19 2026 by rpki-client