$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft File: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft (raw, json) Hash identifier: 3syDMIUKlqYTSqD9skf2tgzpUR6U8Dc3IsE2Zmde8MI= Subject key identifier: 0D:13:07:E9:E4:D3:22:4F:83:A3:E1:09:95:40:20:94:C9:A1:97:0D Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C Certificate issuer: /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Certificate serial: BC3F61928AB472714C5EC9447E2A994CF478B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft Manifest number: 0224 Signing time: Tue 24 Mar 2026 15:52:02 +0000 Manifest this update: Tue 24 Mar 2026 15:47:02 +0000 Manifest next update: Sat 28 Mar 2026 02:26:02 +0000 Files and hashes: 1: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl (hash: bzgofuFYWeHj4yztY8AEL+WQ2WtUum30UK85Hrj/h48=) 2: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (hash: XdQf63cdrdXWBGc6MKoetBKqasSfuuo/VmeblT/8ibk=) 3: 3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (hash: irW6q7ITtYGefmDvXgL1C1+KbMR4s3lcy75Hz7Jf3gU=) 4: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (hash: +aaeTzESf46hiW4iCKWdgpmCd8nyx/eyhjM3ENRIOGY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: bc:3f:61:92:8a:b4:72:71:4c:5e:c9:44:7e:2a:99:4c:f4:78:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Validity Not Before: Mar 24 15:47:02 2026 GMT Not After : Mar 28 02:26:02 2026 GMT Subject: CN=0D1307E9E4D3224F83A3E10995402094C9A1970D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b7:b9:4e:89:b2:b5:03:82:6a:0a:7b:78:42: 12:19:ac:97:de:aa:ed:c2:eb:7e:18:d2:e7:a6:97: 0a:bb:32:58:f6:f2:f5:fb:e0:eb:51:31:bf:f4:53: 0d:de:59:34:12:fd:dd:f6:8a:f4:30:3c:08:4c:4f: ba:d4:e5:c8:9c:86:42:b1:99:94:ff:bf:a7:96:27: 25:b1:46:05:b9:38:5f:46:8d:98:02:84:4e:37:02: d1:e5:7c:91:33:a9:db:27:a1:94:ad:6a:14:6d:44: 81:7d:9b:76:13:7b:d8:3e:85:5b:f6:46:8b:72:75: 93:ce:3d:2d:45:8d:e7:e0:a1:c8:67:85:aa:48:6e: 42:45:dc:45:1e:50:f0:b4:00:94:fe:98:d8:9a:0a: a3:e5:29:e3:78:59:c3:21:b8:a9:22:22:9e:ae:4a: 7e:32:56:cf:55:62:73:d0:88:7f:0e:cd:db:cc:99: e5:c6:36:dd:66:ad:8d:59:1f:f9:ca:f8:86:d8:a8: e9:36:a0:96:e9:59:4e:41:a0:79:f4:9e:13:cd:0a: 3d:cd:e3:07:36:9a:10:81:73:31:b3:82:dd:39:97: f6:13:ac:96:b4:26:d7:27:2f:fe:fa:5e:e0:b7:50: bb:4f:bf:95:89:d0:4a:3a:aa:cb:7f:9f:ae:6b:65: 85:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:13:07:E9:E4:D3:22:4F:83:A3:E1:09:95:40:20:94:C9:A1:97:0D X509v3 Authority Key Identifier: keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:6f:90:4c:71:bb:70:67:e9:b1:b7:b1:92:c3:2b:fe:b4:fb: 2b:4d:91:fa:85:e8:18:60:72:7d:d7:db:3c:dc:70:6c:1a:76: 68:8e:b9:39:97:37:a1:f1:49:d5:ff:8b:b6:c9:db:be:60:d0: ea:62:82:2a:01:00:84:bb:9f:13:0e:3a:b9:05:b3:48:3c:f3: 30:73:4d:42:df:d2:41:a3:04:a1:d8:0d:43:d8:76:c4:21:0a: bf:0d:d5:71:d6:20:69:38:77:39:76:27:74:a4:a8:1c:22:74: de:c3:df:eb:44:8c:4c:c7:01:40:b2:72:bb:fd:65:80:5d:f7: e4:3d:0a:e8:82:b5:7f:cd:33:16:2e:58:ae:e1:e6:24:85:38: 54:d1:3b:ee:3c:dc:c6:9c:3c:0c:88:f6:72:06:ff:a0:27:1d: f9:d0:b1:13:c6:65:e3:b8:68:2b:e3:c7:55:9d:bb:12:4e:b3: de:44:25:6a:19:cb:40:67:5d:de:24:a4:fb:b6:97:8e:56:b7: 1f:7b:4e:d1:3c:88:a1:1c:42:cc:59:72:f3:80:9a:a0:70:a9: eb:10:55:66:1d:e3:e4:05:be:ce:40:84:90:6b:2d:61:47:5c: ab:24:bd:99:60:88:99:0f:07:ba:b6:9b:45:21:cb:0e:ac:d4: 2c:36:54:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUALw/YZKKtHJxTF7JRH4qmUz0eLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJC MkM5ODEzQzAeFw0yNjAzMjQxNTQ3MDJaFw0yNjAzMjgwMjI2MDJaMDMxMTAvBgNV BAMTKDBEMTMwN0U5RTREMzIyNEY4M0EzRTEwOTk1NDAyMDk0QzlBMTk3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBt7lOibK1A4JqCnt4QhIZrJfe qu3C634Y0uemlwq7Mlj28vX74OtRMb/0Uw3eWTQS/d32ivQwPAhMT7rU5cichkKx mZT/v6eWJyWxRgW5OF9GjZgChE43AtHlfJEzqdsnoZStahRtRIF9m3YTe9g+hVv2 RotydZPOPS1FjefgochnhapIbkJF3EUeUPC0AJT+mNiaCqPlKeN4WcMhuKkiIp6u Sn4yVs9VYnPQiH8OzdvMmeXGNt1mrY1ZH/nK+IbYqOk2oJbpWU5BoHn0nhPNCj3N 4wc2mhCBczGzgt05l/YTrJa0JtcnL/76XuC3ULtPv5WJ0Eo6qst/n65rZYW1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDRMH6eTTIk+Do+EJlUAglMmhlw0wHwYDVR0j BBgwFoAUCU1VbKC1WvSmNoc6Gx5wMrLJgTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2QwOGViMy05MzdkLTQzMDQtOTE2Ny00NjNkN2M1OGQ1ZTQvMC8wOTRENTU2Q0Ew QjU1QUY0QTYzNjg3M0ExQjFFNzAzMkIyQzk4MTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJCMkM5 ODEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNkMDhlYjMtOTM3ZC00MzA0LTkx NjctNDYzZDdjNThkNWU0LzAvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcw MzJCMkM5ODEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRvkExxu3Bn6bG3sZLDK/60+ytNkfqF6Bhg cn3X2zzccGwadmiOuTmXN6HxSdX/i7bJ275g0OpigioBAIS7nxMOOrkFs0g88zBz TULf0kGjBKHYDUPYdsQhCr8N1XHWIGk4dzl2J3SkqBwidN7D3+tEjEzHAUCycrv9 ZYBd9+Q9CuiCtX/NMxYuWK7h5iSFOFTRO+483MacPAyI9nIG/6AnHfnQsRPGZeO4 aCvjx1WduxJOs95EJWoZy0BnXd4kpPu2l45Wtx97TtE8iKEcQsxZcvOAmqBwqesQ VWYd4+QFvs5AhJBrLWFHXKskvZlgiJkPB7q2m0Uhyw6s1Cw2VO0= -----END CERTIFICATE-----Generated at Thu Mar 26 18:56:46 2026 by rpki-client