$ rpki-client -vvf repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft File: 095AAB2FD179056DA8846FA0E90F79F7D901792C.mft (raw, json) Hash identifier: HexmM8POY2mgi0KVFeTZVbl2w3bi1Oxvk8jxUCxsyKc= Subject key identifier: A4:CC:D7:68:43:5C:52:53:37:F6:16:1D:1B:99:8B:DD:6F:5D:07:7A Authority key identifier: 09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C Certificate issuer: /CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Certificate serial: 1134C49BC609D0CE6A6238E02DA82B02C6C18234 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft Manifest number: 035D Signing time: Tue 24 Mar 2026 15:31:47 +0000 Manifest this update: Tue 24 Mar 2026 15:26:47 +0000 Manifest next update: Sat 28 Mar 2026 02:11:47 +0000 Files and hashes: 1: 3130332e3235322e35312e302f32342d3234203d3e203539313334.roa (hash: 92hDDvlrQq6+Ep7VlgXGUFdRGUo5NBqpCP5dHFzwWeg=) 2: 095AAB2FD179056DA8846FA0E90F79F7D901792C.crl (hash: OD7HSlHAwrdZOpQQUCW3nV+pZxUhlIkdv0kbeVxWFt0=) 3: 3130332e37332e3132352e302f32342d3234203d3e203539313334.roa (hash: Z1EVykTQp5ACC1NPq9JOZKOUUZ9JHZ3If1yc5kffoxA=) 4: 3130332e3235322e35302e302f32342d3234203d3e203539313334.roa (hash: tg5kgcB+/SuzaicgIITC9CS9oqxnux/xS4/nsX+npzw=) 5: 3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa (hash: JQPY1hR36z2SwsI5Y4cr/zQo0NDgsurp+zEd8VFWX3Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:34:c4:9b:c6:09:d0:ce:6a:62:38:e0:2d:a8:2b:02:c6:c1:82:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Validity Not Before: Mar 24 15:26:47 2026 GMT Not After : Mar 28 02:11:47 2026 GMT Subject: CN=A4CCD768435C525337F6161D1B998BDD6F5D077A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f3:3b:99:62:ed:4f:e2:09:9d:19:2a:1f:30: b0:00:96:1f:fa:f2:23:58:4a:6b:2d:61:aa:60:63: 90:d4:e4:4f:0f:6e:85:1c:4a:7e:87:01:64:c4:a4: 3e:69:66:b2:9c:bc:b8:c5:4b:dc:2b:75:87:94:e7: a4:14:44:08:d0:23:81:ac:98:92:06:1c:af:01:9e: 6f:b1:8f:91:79:ea:7b:87:db:ac:ff:bf:4a:68:df: 75:95:c4:83:21:28:6e:14:50:1d:d5:74:92:fd:59: 65:f0:cd:cd:f1:85:8e:ca:bf:6e:3b:c4:29:0e:56: ff:31:de:bb:6b:96:ff:53:79:65:80:8c:90:20:a5: 39:b5:26:23:65:f8:1f:cd:37:6b:84:e6:22:8b:98: 00:76:50:38:2b:b5:af:7b:f1:1c:64:ad:d7:57:a3: 08:93:05:6b:64:65:df:f5:0e:be:47:82:86:f3:6d: 3e:4c:6b:cd:4c:14:20:1b:15:01:24:f2:e3:52:c7: 6b:75:4c:f1:cf:72:50:e9:b9:8c:81:f5:44:51:d6: 27:5c:81:19:82:c7:8b:26:4a:d7:c7:5a:27:53:a6: 57:a0:e4:77:87:db:28:34:17:66:e0:67:69:66:58: 46:ee:06:ed:c6:80:4a:df:e6:49:ae:62:b6:62:b7: 07:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CC:D7:68:43:5C:52:53:37:F6:16:1D:1B:99:8B:DD:6F:5D:07:7A X509v3 Authority Key Identifier: keyid:09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:62:04:d8:7f:39:dc:2a:37:a6:8e:6a:bd:d8:16:28:2c:fa: 73:e9:73:bf:54:31:9d:bb:e1:17:2b:b3:ed:fc:1a:1a:84:ca: 0b:d8:23:b6:d3:9f:b0:53:28:6f:db:17:54:bc:2d:ea:4c:22: 7c:e9:2a:1e:f2:87:f7:fb:1b:e3:c6:38:a0:5e:a6:f1:03:42: d9:af:ed:c3:37:0f:ec:7f:81:25:11:e6:28:2e:96:20:3e:9b: 3b:04:fa:ec:e3:bc:1d:47:c7:f5:e2:df:0e:16:dd:71:ed:9e: 56:5c:49:c4:47:c6:36:d4:b4:d0:ce:22:48:1e:75:f9:6e:d8: fb:7f:ae:e0:45:9f:16:7c:3f:31:0c:74:86:77:1c:49:a3:15: 8d:77:a1:da:52:a5:3c:25:c9:8b:21:99:2e:1c:73:d7:f4:e5: fb:c5:d0:86:9a:e8:6b:81:36:3c:b8:01:f4:9d:70:ae:29:1c: c1:0d:d2:e5:56:52:f2:f8:01:2d:0b:68:40:66:c3:7f:68:92: ca:1f:20:8e:62:d3:e2:73:5a:50:9c:a6:4d:31:19:79:65:8f: fc:35:cc:57:63:56:fa:f3:2c:04:40:3e:fd:be:02:b4:a0:a8: 4d:00:1f:5a:d7:d7:2a:7c:c5:e0:f4:6a:fd:cf:72:a8:c7:34: e2:11:0e:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUETTEm8YJ0M5qYjjgLagrAsbBgjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdE OTAxNzkyQzAeFw0yNjAzMjQxNTI2NDdaFw0yNjAzMjgwMjExNDdaMDMxMTAvBgNV BAMTKEE0Q0NENzY4NDM1QzUyNTMzN0Y2MTYxRDFCOTk4QkRENkY1RDA3N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh8zuZYu1P4gmdGSofMLAAlh/6 8iNYSmstYapgY5DU5E8PboUcSn6HAWTEpD5pZrKcvLjFS9wrdYeU56QURAjQI4Gs mJIGHK8Bnm+xj5F56nuH26z/v0po33WVxIMhKG4UUB3VdJL9WWXwzc3xhY7Kv247 xCkOVv8x3rtrlv9TeWWAjJAgpTm1JiNl+B/NN2uE5iKLmAB2UDgrta978RxkrddX owiTBWtkZd/1Dr5HgobzbT5Ma81MFCAbFQEk8uNSx2t1TPHPclDpuYyB9URR1idc gRmCx4smStfHWidTpleg5HeH2yg0F2bgZ2lmWEbuBu3GgErf5kmuYrZitwcFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpMzXaENcUlM39hYdG5mL3W9dB3owHwYDVR0j BBgwFoAUCVqrL9F5BW2ohG+g6Q9599kBeSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTc4OGI0YS1kNDUxLTQ5ZmItYjdjZC03MTk4MTA4NzBmMWEvMC8wOTVBQUIyRkQx NzkwNTZEQTg4NDZGQTBFOTBGNzlGN0Q5MDE3OTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdEOTAx NzkyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3ODhiNGEtZDQ1MS00OWZiLWI3 Y2QtNzE5ODEwODcwZjFhLzAvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5 RjdEOTAxNzkyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABliBNh/OdwqN6aOar3YFigs+nPpc79UMZ27 4Rcrs+38GhqEygvYI7bTn7BTKG/bF1S8LepMInzpKh7yh/f7G+PGOKBepvEDQtmv 7cM3D+x/gSUR5iguliA+mzsE+uzjvB1Hx/Xi3w4W3XHtnlZcScRHxjbUtNDOIkge dflu2Pt/ruBFnxZ8PzEMdIZ3HEmjFY13odpSpTwlyYshmS4cc9f05fvF0Iaa6GuB Njy4AfSdcK4pHMEN0uVWUvL4AS0LaEBmw39oksofII5i0+JzWlCcpk0xGXllj/w1 zFdjVvrzLARAPv2+ArSgqE0AH1rX1yp8xeD0av3PcqjHNOIRDmQ= -----END CERTIFICATE-----Generated at Thu Mar 26 12:29:30 2026 by rpki-client