$ rpki-client -vvf repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft File: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft (raw, json) Hash identifier: DrYufO21PaRKeZO1k89wRhFgIw/HsnWtjc/w/8upHbs= Subject key identifier: E9:44:80:27:2E:1B:92:D7:35:10:8D:C2:93:BE:EC:49:B6:F8:33:3C Authority key identifier: 10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A Certificate issuer: /CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Certificate serial: 299B4EF32CADA0DDA173A78CB7C1A1EF61420AA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft Manifest number: 055C Signing time: Thu 26 Mar 2026 09:51:37 +0000 Manifest this update: Thu 26 Mar 2026 09:46:37 +0000 Manifest next update: Sun 29 Mar 2026 13:35:37 +0000 Files and hashes: 1: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl (hash: g+uHPB6kROCgIX7naDE+NJ8BQBIkp+2iMe6AuwEIgFg=) 2: 3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa (hash: XS6giku77XPtxmNRkfOOXOP+iNVcgzmhP0k5pXi56n8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 13:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:9b:4e:f3:2c:ad:a0:dd:a1:73:a7:8c:b7:c1:a1:ef:61:42:0a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Validity Not Before: Mar 26 09:46:37 2026 GMT Not After : Mar 29 13:35:37 2026 GMT Subject: CN=E94480272E1B92D735108DC293BEEC49B6F8333C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:02:4a:c0:69:99:79:43:d4:54:20:f3:a2:b7: fd:ca:17:88:9e:7d:95:e3:80:ae:28:41:8c:c4:db: 1b:db:7a:91:f2:05:29:60:42:b1:ca:5c:fd:1f:8a: e3:2a:10:86:b6:73:bf:45:c2:11:08:07:93:33:c8: dd:6c:cf:7d:2d:c3:f1:a7:de:7b:fb:16:91:7e:f6: 07:67:aa:f5:52:56:ec:75:c3:6f:dd:ad:2f:6c:a8: 19:2a:75:37:eb:15:30:fa:b8:34:01:03:42:33:ae: 38:57:23:98:78:a0:5c:f5:78:92:a4:39:6e:af:c8: ae:18:02:da:b8:cd:76:02:1f:1c:59:49:58:f4:1f: 6b:5a:1c:f8:03:fa:75:52:e8:f4:f6:9b:63:49:82: 43:cc:59:c3:55:a7:37:4a:62:47:af:68:fb:4e:38: 6e:8b:b2:6c:16:58:d2:96:e7:ad:ce:7e:a5:a9:af: 4e:ac:ea:d4:ec:58:c2:3d:a0:52:8f:dc:8a:58:bb: fc:12:b1:f3:eb:01:ab:a1:62:cf:73:7c:54:ab:82: 5c:b9:61:6d:e1:05:a4:04:32:4b:83:99:04:66:25: e2:b8:60:84:3e:dc:34:42:57:f7:79:d6:fe:80:b0: 4a:e1:3d:c2:1a:2f:20:ea:a1:1a:0f:e3:08:2f:a1: 3e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:44:80:27:2E:1B:92:D7:35:10:8D:C2:93:BE:EC:49:B6:F8:33:3C X509v3 Authority Key Identifier: keyid:10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3c:16:ae:4f:aa:ec:d8:12:93:06:28:14:56:89:53:70:6e: 84:d3:fa:27:44:24:06:9a:06:52:3e:4f:ac:fa:2d:ce:26:a4: a5:6e:e3:7b:4b:37:d8:f9:d3:1f:5e:c8:f9:e8:d2:e7:9b:88: 4e:b5:14:68:52:b7:ed:58:4a:87:7c:12:3e:d1:9a:1c:34:ce: c8:b9:23:8b:6d:bd:d5:e8:b1:31:b1:23:5b:2b:d0:77:04:30: 62:c0:ec:d6:90:c0:52:4e:8f:49:f4:ed:2e:da:c8:5c:b0:bb: 36:57:15:9c:f4:68:74:1e:03:e4:de:f8:c8:7a:1e:0c:2a:87: 8c:ac:2a:c9:d9:0f:c2:a5:ae:6c:a1:af:4e:06:75:03:e0:58: 0c:8a:82:12:09:ff:dd:d1:f7:4e:76:30:80:8b:d2:d8:6e:87: c9:25:bf:8d:4f:1b:70:f2:cf:3b:fe:06:80:40:9f:ea:af:e2: e3:7f:90:1d:a1:c6:b9:a8:5e:4f:d2:86:a8:8e:09:8f:5b:c6: 59:cf:5d:92:fa:92:f6:89:a7:4f:e5:af:be:cc:67:e1:3f:b8: 14:71:02:b5:f1:69:e7:e0:68:96:53:1d:c7:21:e0:a5:1a:0e: 53:b4:c9:16:b4:3d:a9:9e:ee:c6:38:48:a5:38:c8:45:2d:17: 15:7b:e3:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKZtO8yytoN2hc6eMt8Gh72FCCqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZB MkM0NDg1QTAeFw0yNjAzMjYwOTQ2MzdaFw0yNjAzMjkxMzM1MzdaMDMxMTAvBgNV BAMTKEU5NDQ4MDI3MkUxQjkyRDczNTEwOERDMjkzQkVFQzQ5QjZGODMzM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIAkrAaZl5Q9RUIPOit/3KF4ie fZXjgK4oQYzE2xvbepHyBSlgQrHKXP0fiuMqEIa2c79FwhEIB5MzyN1sz30tw/Gn 3nv7FpF+9gdnqvVSVux1w2/drS9sqBkqdTfrFTD6uDQBA0IzrjhXI5h4oFz1eJKk OW6vyK4YAtq4zXYCHxxZSVj0H2taHPgD+nVS6PT2m2NJgkPMWcNVpzdKYkevaPtO OG6LsmwWWNKW563OfqWpr06s6tTsWMI9oFKP3IpYu/wSsfPrAauhYs9zfFSrgly5 YW3hBaQEMkuDmQRmJeK4YIQ+3DRCV/d51v6AsErhPcIaLyDqoRoP4wgvoT7/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6USAJy4bktc1EI3Ck77sSbb4MzwwHwYDVR0j BBgwFoAUEJXqeHA4Jqz1+iJB6ysbZqLESFowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTVkZDU3My0zMWY0LTQxNmMtYTFiNy02OThkNmIxNjk3YWQvMC8xMDk1RUE3ODcw MzgyNkFDRjVGQTIyNDFFQjJCMUI2NkEyQzQ0ODVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZBMkM0 NDg1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk1ZGQ1NzMtMzFmNC00MTZjLWEx YjctNjk4ZDZiMTY5N2FkLzAvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFC NjZBMkM0NDg1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACo8Fq5PquzYEpMGKBRWiVNwboTT+idEJAaa BlI+T6z6Lc4mpKVu43tLN9j50x9eyPno0uebiE61FGhSt+1YSod8Ej7Rmhw0zsi5 I4ttvdXosTGxI1sr0HcEMGLA7NaQwFJOj0n07S7ayFywuzZXFZz0aHQeA+Te+Mh6 Hgwqh4ysKsnZD8Klrmyhr04GdQPgWAyKghIJ/93R9052MICL0thuh8klv41PG3Dy zzv+BoBAn+qv4uN/kB2hxrmoXk/ShqiOCY9bxlnPXZL6kvaJp0/lr77MZ+E/uBRx ArXxaefgaJZTHcch4KUaDlO0yRa0Pame7sY4SKU4yEUtFxV742c= -----END CERTIFICATE-----Generated at Thu Mar 26 16:44:09 2026 by rpki-client