$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft File: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft (raw, json) Hash identifier: sINqqwVNKfVhUYcwLbOHsV7JY0UDLnfAe+8TvOqnEkY= Subject key identifier: D4:65:09:63:98:2B:F4:A6:50:3A:75:6A:75:AA:AC:81:EA:EA:28:06 Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C Certificate issuer: /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Certificate serial: 2E121E2A25B87DA67427B5F0F6929461A758F8CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft Manifest number: 0197 Signing time: Mon 30 Jun 2025 13:41:26 +0000 Manifest this update: Mon 30 Jun 2025 13:36:26 +0000 Manifest next update: Thu 03 Jul 2025 19:46:26 +0000 Files and hashes: 1: 3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (hash: y3nVZBm+qtxgwP44vcU3kA0cMy/EmmCFhUt7zZudlQo=) 2: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl (hash: JKv7mmXI6aBIeeniL1ENb7GYXT+A4Hqxrd4L0+NTp5w=) 3: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (hash: FvX/FfDWw99zVOmt+3J83lO751Y4wEfpuqgpwws/quk=) 4: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (hash: 5++6GE8clmDTKMQEM/qEom9bf+61Ah3qelMFdhmesaA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 19:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:12:1e:2a:25:b8:7d:a6:74:27:b5:f0:f6:92:94:61:a7:58:f8:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Validity Not Before: Jun 30 13:36:26 2025 GMT Not After : Jul 3 19:46:26 2025 GMT Subject: CN=D4650963982BF4A6503A756A75AAAC81EAEA2806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4c:27:cb:97:08:38:36:dc:c9:7f:eb:a0:c8: 69:10:87:5f:6f:e7:f9:78:bb:89:bb:fb:03:89:7e: 7a:dd:10:59:aa:92:34:2e:3c:cb:ef:31:ca:f9:c6: 61:de:96:29:5f:00:5b:03:84:2d:94:6d:03:9b:04: 48:31:a8:71:11:ea:db:13:c3:9e:89:c6:87:b0:4d: e0:a2:3d:3f:f3:49:46:f3:47:c9:04:51:02:4c:87: 9b:37:52:b7:1c:25:68:c0:37:28:1d:fc:a9:e0:e4: af:94:9c:d2:f8:13:9e:18:fe:22:b8:8a:50:11:f1: f9:69:10:af:20:86:40:0b:57:67:09:da:60:71:7c: 68:bc:72:c9:8e:32:28:42:2c:09:89:aa:8a:d2:6e: 33:b5:38:42:00:8b:9c:3f:35:40:5b:db:02:0f:c6: bc:3d:c8:60:d8:75:e5:df:b9:51:96:50:db:ab:7e: a7:cb:7a:39:8a:01:01:a0:47:eb:67:ec:48:f0:e7: 37:16:db:40:5a:2c:bd:ed:75:e9:b4:11:3c:0d:f6: df:cd:72:1d:ed:1b:7d:36:7e:9d:d7:52:ac:69:ce: cd:45:a9:e2:cf:24:90:8f:80:83:b7:ad:f9:1e:38: eb:04:75:d5:47:7d:c3:a7:05:22:7f:5e:e9:d2:d0: 2d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:65:09:63:98:2B:F4:A6:50:3A:75:6A:75:AA:AC:81:EA:EA:28:06 X509v3 Authority Key Identifier: keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:10:ae:58:a6:c6:e9:34:c6:69:b3:ac:c7:3e:92:03:b4:4f: ad:79:d7:a8:8b:b2:89:70:85:0d:85:ec:72:c4:8a:37:31:71: fd:22:de:3b:57:45:ea:2f:3a:94:d5:e5:b4:9b:c0:8b:d9:a0: ac:d1:ba:ef:ef:6d:a8:88:b9:3e:d9:9f:1b:18:71:47:35:3a: cd:3f:b3:1e:4a:be:aa:72:6d:1b:dd:88:48:ad:c4:7f:89:69: e0:39:dc:4c:bb:c2:f0:c1:a1:c6:a9:a9:63:71:d4:01:2d:27: 13:fe:64:f2:6c:e0:e3:b4:53:d7:9b:93:a6:b1:a7:f9:75:e5: 94:d9:2c:67:bb:f1:e2:18:19:0f:39:25:ba:d9:25:a4:db:d4: ed:be:b1:07:46:77:00:7a:22:a4:03:95:6b:7d:7c:6a:4a:1d: 9d:af:67:d2:06:b6:6d:ef:d0:72:83:a6:5d:95:92:43:50:a4: d3:0f:c3:fa:b9:60:e8:26:e3:07:4a:4f:a7:a6:31:bd:ec:9d: 11:87:24:c7:d4:55:1c:7d:45:0e:c7:f8:8c:2a:89:0b:e3:bd: ee:ce:e9:a3:80:b6:39:7f:08:c9:42:e3:78:94:ea:38:6e:c7: d1:51:05:cd:dc:91:74:55:8d:32:5c:bb:c9:30:73:83:26:40: 99:bd:f3:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULhIeKiW4faZ0J7Xw9pKUYadY+MowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJC MkM5ODEzQzAeFw0yNTA2MzAxMzM2MjZaFw0yNTA3MDMxOTQ2MjZaMDMxMTAvBgNV BAMTKEQ0NjUwOTYzOTgyQkY0QTY1MDNBNzU2QTc1QUFBQzgxRUFFQTI4MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvTCfLlwg4NtzJf+ugyGkQh19v 5/l4u4m7+wOJfnrdEFmqkjQuPMvvMcr5xmHelilfAFsDhC2UbQObBEgxqHER6tsT w56JxoewTeCiPT/zSUbzR8kEUQJMh5s3UrccJWjANygd/Kng5K+UnNL4E54Y/iK4 ilAR8flpEK8ghkALV2cJ2mBxfGi8csmOMihCLAmJqorSbjO1OEIAi5w/NUBb2wIP xrw9yGDYdeXfuVGWUNurfqfLejmKAQGgR+tn7Ejw5zcW20BaLL3tdem0ETwN9t/N ch3tG302fp3XUqxpzs1FqeLPJJCPgIO3rfkeOOsEddVHfcOnBSJ/XunS0C3DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1GUJY5gr9KZQOnVqdaqsgerqKAYwHwYDVR0j BBgwFoAUCU1VbKC1WvSmNoc6Gx5wMrLJgTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2QwOGViMy05MzdkLTQzMDQtOTE2Ny00NjNkN2M1OGQ1ZTQvMC8wOTRENTU2Q0Ew QjU1QUY0QTYzNjg3M0ExQjFFNzAzMkIyQzk4MTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJCMkM5 ODEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNkMDhlYjMtOTM3ZC00MzA0LTkx NjctNDYzZDdjNThkNWU0LzAvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcw MzJCMkM5ODEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwQrlimxuk0xmmzrMc+kgO0T61516iLsolw hQ2F7HLEijcxcf0i3jtXReovOpTV5bSbwIvZoKzRuu/vbaiIuT7ZnxsYcUc1Os0/ sx5KvqpybRvdiEitxH+JaeA53Ey7wvDBocapqWNx1AEtJxP+ZPJs4OO0U9ebk6ax p/l15ZTZLGe78eIYGQ85JbrZJaTb1O2+sQdGdwB6IqQDlWt9fGpKHZ2vZ9IGtm3v 0HKDpl2VkkNQpNMPw/q5YOgm4wdKT6emMb3snRGHJMfUVRx9RQ7H+IwqiQvjve7O 6aOAtjl/CMlC43iU6jhux9FRBc3ckXRVjTJcu8kwc4MmQJm982s= -----END CERTIFICATE-----Generated at Wed Jul 2 04:28:17 2025 by rpki-client