$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft File: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft (raw, json) Hash identifier: OKRSDLplGA77bODyIwpLTDhGBrm6LGaPdJ53VeD8UMM= Subject key identifier: 6D:77:9E:C1:AA:AC:93:7A:2E:01:62:52:26:A1:3B:B0:F6:65:68:72 Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C Certificate issuer: /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Certificate serial: 4A81742C58071744283C6DBB0B20A2DDDDE37D10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft Manifest number: 01AF Signing time: Fri 22 Aug 2025 13:41:28 +0000 Manifest this update: Fri 22 Aug 2025 13:36:28 +0000 Manifest next update: Mon 25 Aug 2025 17:42:28 +0000 Files and hashes: 1: 3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (hash: y3nVZBm+qtxgwP44vcU3kA0cMy/EmmCFhUt7zZudlQo=) 2: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (hash: 5++6GE8clmDTKMQEM/qEom9bf+61Ah3qelMFdhmesaA=) 3: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (hash: FvX/FfDWw99zVOmt+3J83lO751Y4wEfpuqgpwws/quk=) 4: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl (hash: nGTuVN0KfkhiQsx2P7B7pM/kqgQTJQSPNfS/6IbB6mw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 17:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:81:74:2c:58:07:17:44:28:3c:6d:bb:0b:20:a2:dd:dd:e3:7d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Validity Not Before: Aug 22 13:36:28 2025 GMT Not After : Aug 25 17:42:28 2025 GMT Subject: CN=6D779EC1AAAC937A2E01625226A13BB0F6656872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:30:36:5f:ff:18:d1:15:95:9e:eb:75:cf:69: 96:5f:1a:8e:f2:72:8b:9d:02:75:2c:b7:16:bb:6e: a6:94:73:fd:7e:78:a2:b2:c8:83:86:1a:0b:6d:e2: c6:39:50:8e:d6:5d:a7:ef:31:74:6c:e1:b6:f6:8a: 4f:f3:01:0e:2b:28:b8:a1:59:ca:36:47:b3:bf:22: 4b:cd:cc:87:d0:16:d3:df:bf:76:29:11:05:8c:7d: 6a:7a:6e:c6:be:c9:e5:06:c7:67:6e:8e:2e:f0:9f: c8:cf:23:4e:1a:77:cb:6d:93:38:db:5f:93:c1:28: f7:f1:fc:c4:cd:6a:0f:f8:29:36:f5:7d:07:54:b0: 0c:ac:ca:df:15:12:84:da:48:95:65:9c:61:b6:0b: 2e:8d:f9:23:4e:a3:90:7c:02:8c:87:6c:4f:75:e7: b1:2b:2c:77:35:95:dc:46:c4:d1:3b:82:6a:c7:29: 2e:91:73:f3:25:9c:4f:0d:b8:37:5b:52:69:75:16: b0:f3:11:00:56:3d:6a:f3:b7:ba:c7:89:50:d9:3d: c2:4e:47:52:b0:38:61:e3:66:de:33:54:b6:57:1a: 68:fa:ea:0b:0f:ec:22:92:86:16:37:d4:ea:21:67: 81:3d:da:d8:e4:f6:12:89:9c:28:8e:19:b3:65:59: 7f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:77:9E:C1:AA:AC:93:7A:2E:01:62:52:26:A1:3B:B0:F6:65:68:72 X509v3 Authority Key Identifier: keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:7d:e5:a1:94:d4:82:ee:31:90:c8:a8:0c:27:8a:75:53:95: 04:91:e1:3d:90:5b:53:70:a0:f0:35:12:0f:7e:82:60:e2:07: 48:13:c4:cd:be:4f:27:64:05:ac:2a:42:3a:d9:ac:b7:cd:9c: 33:4a:29:64:6c:a2:e1:2f:32:01:4f:41:6e:aa:52:c8:70:db: 47:de:ad:82:f3:8c:d9:54:db:ae:91:b8:34:be:25:ad:66:26: 45:50:b7:b3:c9:d0:e0:4d:38:a5:8d:5a:ca:cf:ea:1f:f4:16: 21:0f:81:86:fc:36:e0:60:aa:79:7e:4c:48:cd:2d:88:c3:3a: 5b:07:c7:46:06:0a:61:82:80:ac:58:65:d2:da:37:e3:bc:b9: a7:52:e6:40:de:ea:e6:e6:bb:e8:a5:81:52:c9:fe:34:07:aa: 2a:bf:55:e2:0d:27:67:12:fd:2a:34:af:f3:2c:d8:ec:4c:a4: 64:68:87:94:ac:cd:39:ed:ee:e6:dd:27:59:6e:46:61:fd:0b: 16:f4:41:1f:74:4f:f2:d1:35:22:d4:bc:51:43:f4:27:21:8a: 01:22:ce:75:27:ca:01:77:5c:65:20:28:fa:03:02:dd:58:a6: e0:24:f9:14:f9:35:43:c3:23:59:c7:d7:dc:d1:11:26:73:e0: 81:36:5a:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSoF0LFgHF0QoPG27CyCi3d3jfRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJC MkM5ODEzQzAeFw0yNTA4MjIxMzM2MjhaFw0yNTA4MjUxNzQyMjhaMDMxMTAvBgNV BAMTKDZENzc5RUMxQUFBQzkzN0EyRTAxNjI1MjI2QTEzQkIwRjY2NTY4NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5MDZf/xjRFZWe63XPaZZfGo7y coudAnUstxa7bqaUc/1+eKKyyIOGGgtt4sY5UI7WXafvMXRs4bb2ik/zAQ4rKLih Wco2R7O/IkvNzIfQFtPfv3YpEQWMfWp6bsa+yeUGx2duji7wn8jPI04ad8ttkzjb X5PBKPfx/MTNag/4KTb1fQdUsAysyt8VEoTaSJVlnGG2Cy6N+SNOo5B8AoyHbE91 57ErLHc1ldxGxNE7gmrHKS6Rc/MlnE8NuDdbUml1FrDzEQBWPWrzt7rHiVDZPcJO R1KwOGHjZt4zVLZXGmj66gsP7CKShhY31OohZ4E92tjk9hKJnCiOGbNlWX9xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbXeewaqsk3ouAWJSJqE7sPZlaHIwHwYDVR0j BBgwFoAUCU1VbKC1WvSmNoc6Gx5wMrLJgTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2QwOGViMy05MzdkLTQzMDQtOTE2Ny00NjNkN2M1OGQ1ZTQvMC8wOTRENTU2Q0Ew QjU1QUY0QTYzNjg3M0ExQjFFNzAzMkIyQzk4MTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJCMkM5 ODEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNkMDhlYjMtOTM3ZC00MzA0LTkx NjctNDYzZDdjNThkNWU0LzAvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcw MzJCMkM5ODEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKB95aGU1ILuMZDIqAwninVTlQSR4T2QW1Nw oPA1Eg9+gmDiB0gTxM2+TydkBawqQjrZrLfNnDNKKWRsouEvMgFPQW6qUshw20fe rYLzjNlU266RuDS+Ja1mJkVQt7PJ0OBNOKWNWsrP6h/0FiEPgYb8NuBgqnl+TEjN LYjDOlsHx0YGCmGCgKxYZdLaN+O8uadS5kDe6ubmu+ilgVLJ/jQHqiq/VeINJ2cS /So0r/Ms2OxMpGRoh5SszTnt7ubdJ1luRmH9Cxb0QR90T/LRNSLUvFFD9CchigEi znUnygF3XGUgKPoDAt1YpuAk+RT5NUPDI1nH19zRESZz4IE2WqQ= -----END CERTIFICATE-----Generated at Sat Aug 23 12:26:37 2025 by rpki-client