$ rpki-client -vvf repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft File: 095AAB2FD179056DA8846FA0E90F79F7D901792C.mft (raw, json) Hash identifier: wK2fBsp3UztsLSQNZ19sS1TCV38QVw9//O3XUdEx6GQ= Subject key identifier: 3E:DC:28:0B:04:31:4D:C7:B4:7E:A0:A3:FD:2E:74:58:85:D3:35:3D Authority key identifier: 09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C Certificate issuer: /CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Certificate serial: 0674CD5B45039CC3DA80A5BBE96BF21B4F982FA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft Manifest number: 0318 Signing time: Sun 19 Oct 2025 17:41:36 +0000 Manifest this update: Sun 19 Oct 2025 17:36:36 +0000 Manifest next update: Wed 22 Oct 2025 20:41:36 +0000 Files and hashes: 1: 3130332e3235322e35312e302f32342d3234203d3e203539313334.roa (hash: 92hDDvlrQq6+Ep7VlgXGUFdRGUo5NBqpCP5dHFzwWeg=) 2: 3130332e37332e3132352e302f32342d3234203d3e203539313334.roa (hash: Z1EVykTQp5ACC1NPq9JOZKOUUZ9JHZ3If1yc5kffoxA=) 3: 3130332e3130382e3132362e302f32342d3234203d3e203539313334.roa (hash: JQPY1hR36z2SwsI5Y4cr/zQo0NDgsurp+zEd8VFWX3Q=) 4: 3130332e3235322e35302e302f32342d3234203d3e203539313334.roa (hash: tg5kgcB+/SuzaicgIITC9CS9oqxnux/xS4/nsX+npzw=) 5: 095AAB2FD179056DA8846FA0E90F79F7D901792C.crl (hash: +Iv+JH8ciLWV4s0t6CAWjQy+HAhVmxkBpa0TilWKGH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:41:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:74:cd:5b:45:03:9c:c3:da:80:a5:bb:e9:6b:f2:1b:4f:98:2f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095AAB2FD179056DA8846FA0E90F79F7D901792C Validity Not Before: Oct 19 17:36:36 2025 GMT Not After : Oct 22 20:41:36 2025 GMT Subject: CN=3EDC280B04314DC7B47EA0A3FD2E745885D3353D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ce:cb:c5:b9:0b:01:16:b9:cf:a9:ff:01:8b: f2:4b:86:82:01:d9:10:62:aa:b5:a9:c0:8e:7d:08: 8a:d7:fb:bf:a8:f6:70:2f:c0:4c:50:3f:61:97:73: 32:ac:80:d7:ef:56:79:eb:25:58:6b:80:46:65:d9: 9b:40:d3:d7:04:ea:cf:01:12:41:97:5e:ce:a4:db: b4:d7:73:55:10:c6:77:c2:39:99:1a:a8:dc:8c:77: 7f:22:27:c8:91:bd:ad:6e:c3:86:de:69:05:aa:95: ba:44:09:0f:70:83:26:14:83:67:73:b6:80:d1:10: 00:62:f6:fe:fa:8a:d2:86:58:0a:e1:5c:ab:50:67: 73:f7:9d:77:dd:9c:ce:4f:dd:29:7c:c9:88:42:39: 0a:0f:80:03:06:05:d0:b0:8e:af:1b:e4:82:cc:58: cc:8f:85:28:f4:95:5e:ef:a6:fd:bb:38:44:75:be: 21:7e:ff:ed:99:7d:06:19:81:08:6b:8b:ca:7c:91: 90:8a:e1:ec:3b:cd:39:a3:f6:43:fc:a3:13:3a:ef: b9:e2:19:bb:b8:00:80:c6:cd:74:53:7c:dd:18:81: 72:dc:53:17:bd:1b:5d:1e:71:9d:9f:84:dd:a2:3f: b2:ce:9d:63:6b:41:52:07:29:e6:19:fc:c1:6d:ff: f7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DC:28:0B:04:31:4D:C7:B4:7E:A0:A3:FD:2E:74:58:85:D3:35:3D X509v3 Authority Key Identifier: keyid:09:5A:AB:2F:D1:79:05:6D:A8:84:6F:A0:E9:0F:79:F7:D9:01:79:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/095AAB2FD179056DA8846FA0E90F79F7D901792C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a788b4a-d451-49fb-b7cd-719810870f1a/0/095AAB2FD179056DA8846FA0E90F79F7D901792C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c6:0a:c9:2d:50:73:ba:02:00:37:60:56:64:c0:e4:45:96: c5:35:80:24:10:56:bb:27:a1:1d:16:8d:5a:60:8f:af:fe:37: 2f:68:e6:88:03:b9:e9:67:18:52:0e:f7:5a:46:de:41:f6:91: 6d:51:8b:01:5e:a3:cc:6d:a8:5f:eb:78:a0:64:40:82:28:fd: 64:55:76:78:16:b1:74:28:60:dc:e2:4b:d8:6d:33:1d:a2:9c: c6:39:99:fa:14:98:0d:40:5b:13:e0:86:a0:6f:cf:01:86:a1: cc:c9:ce:b4:45:b4:e1:24:9b:67:66:39:3e:ba:e7:53:90:b3: 3f:8c:ff:76:83:7e:9c:23:cb:87:8a:79:f0:3f:e0:76:e0:d7: 67:12:09:31:73:ad:f3:fb:4d:50:7b:0e:36:6a:77:02:b8:56: 63:28:3f:c6:0d:58:b6:91:03:a0:d5:b9:3a:8e:e4:25:93:e7: 54:df:eb:bd:aa:41:42:5c:37:61:f0:9f:28:b8:d9:47:e2:27: 78:4d:e0:9c:56:36:20:e9:0e:62:28:c3:9a:3c:ab:22:2b:b3: b2:d2:0a:ed:57:1a:a1:a5:ee:dd:a1:93:9b:02:ee:72:c6:0f: 1b:c9:d1:12:20:b6:b3:51:11:92:65:fe:00:ca:62:24:e3:76: bd:0c:16:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBnTNW0UDnMPagKW76WvyG0+YL6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdE OTAxNzkyQzAeFw0yNTEwMTkxNzM2MzZaFw0yNTEwMjIyMDQxMzZaMDMxMTAvBgNV BAMTKDNFREMyODBCMDQzMTREQzdCNDdFQTBBM0ZEMkU3NDU4ODVEMzM1M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtzsvFuQsBFrnPqf8Bi/JLhoIB 2RBiqrWpwI59CIrX+7+o9nAvwExQP2GXczKsgNfvVnnrJVhrgEZl2ZtA09cE6s8B EkGXXs6k27TXc1UQxnfCOZkaqNyMd38iJ8iRva1uw4beaQWqlbpECQ9wgyYUg2dz toDREABi9v76itKGWArhXKtQZ3P3nXfdnM5P3Sl8yYhCOQoPgAMGBdCwjq8b5ILM WMyPhSj0lV7vpv27OER1viF+/+2ZfQYZgQhri8p8kZCK4ew7zTmj9kP8oxM677ni Gbu4AIDGzXRTfN0YgXLcUxe9G10ecZ2fhN2iP7LOnWNrQVIHKeYZ/MFt//dZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPtwoCwQxTce0fqCj/S50WIXTNT0wHwYDVR0j BBgwFoAUCVqrL9F5BW2ohG+g6Q9599kBeSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTc4OGI0YS1kNDUxLTQ5ZmItYjdjZC03MTk4MTA4NzBmMWEvMC8wOTVBQUIyRkQx NzkwNTZEQTg4NDZGQTBFOTBGNzlGN0Q5MDE3OTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5RjdEOTAx NzkyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3ODhiNGEtZDQ1MS00OWZiLWI3 Y2QtNzE5ODEwODcwZjFhLzAvMDk1QUFCMkZEMTc5MDU2REE4ODQ2RkEwRTkwRjc5 RjdEOTAxNzkyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfGCsktUHO6AgA3YFZkwORFlsU1gCQQVrsn oR0WjVpgj6/+Ny9o5ogDuelnGFIO91pG3kH2kW1RiwFeo8xtqF/reKBkQIIo/WRV dngWsXQoYNziS9htMx2inMY5mfoUmA1AWxPghqBvzwGGoczJzrRFtOEkm2dmOT66 51OQsz+M/3aDfpwjy4eKefA/4Hbg12cSCTFzrfP7TVB7DjZqdwK4VmMoP8YNWLaR A6DVuTqO5CWT51Tf672qQUJcN2Hwnyi42UfiJ3hN4JxWNiDpDmIow5o8qyIrs7LS Cu1XGqGl7t2hk5sC7nLGDxvJ0RIgtrNREZJl/gDKYiTjdr0MFqI= -----END CERTIFICATE-----Generated at Mon Oct 20 07:38:38 2025 by rpki-client