$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft File: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft (raw, json) Hash identifier: +6DZbGkXlqiNwFn92tcaj2RNZDE+TEXwgQBKyGu/ils= Subject key identifier: D3:0D:66:E3:54:BE:5E:9E:A0:D0:3A:06:28:1C:41:AA:34:5A:A4:7F Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C Certificate issuer: /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Certificate serial: 203F7C29849441F5D6B6916293880A3F3BA5A8A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft Manifest number: 01C9 Signing time: Mon 20 Oct 2025 03:21:29 +0000 Manifest this update: Mon 20 Oct 2025 03:16:29 +0000 Manifest next update: Thu 23 Oct 2025 05:30:29 +0000 Files and hashes: 1: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl (hash: OIpyGKg2wT7PbrFxK7oSh1GsvbyvmNoxBZ7RLX2GAzI=) 2: 3130332e3131322e3134342e302f32342d3234203d3e20313337333334.roa (hash: y3nVZBm+qtxgwP44vcU3kA0cMy/EmmCFhUt7zZudlQo=) 3: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (hash: 5++6GE8clmDTKMQEM/qEom9bf+61Ah3qelMFdhmesaA=) 4: 3130332e3131322e3134342e302f32332d3233203d3e20313337333334.roa (hash: FvX/FfDWw99zVOmt+3J83lO751Y4wEfpuqgpwws/quk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3f:7c:29:84:94:41:f5:d6:b6:91:62:93:88:0a:3f:3b:a5:a8:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Validity Not Before: Oct 20 03:16:29 2025 GMT Not After : Oct 23 05:30:29 2025 GMT Subject: CN=D30D66E354BE5E9EA0D03A06281C41AA345AA47F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d7:85:93:ca:80:a0:17:5e:cd:37:83:71:d0: 86:9d:fc:19:58:a5:5c:04:d5:bc:a2:96:a3:a2:ab: 91:65:da:a1:eb:e3:62:0b:fa:d5:ea:b1:73:fd:56: 6d:e2:55:61:cb:cc:93:3f:5f:0c:e8:11:92:58:58: 13:55:eb:ab:0a:be:11:74:fe:e3:10:d3:03:fe:14: d0:b9:01:52:c4:fa:5b:75:33:b2:a8:ec:2b:a5:9d: 4a:48:03:93:a4:e3:59:33:77:c8:60:62:2f:39:a8: f8:d7:d1:8c:be:04:6a:9b:97:9a:9c:9d:67:92:5f: 47:85:48:06:3d:ed:b9:c3:5c:2b:70:7b:a5:83:48: eb:e2:30:41:6b:80:40:d5:39:54:55:8c:a9:a4:78: 3b:53:82:40:5b:d7:5e:2e:24:c4:a1:1e:d2:e5:14: 7b:9e:67:b5:d5:c4:ee:b9:05:26:a7:9f:25:e7:65: fd:62:7b:35:61:81:af:13:91:2c:3c:d0:b1:75:6e: 15:94:b4:7b:37:4d:3e:13:e9:19:dc:74:db:09:9b: b7:99:76:35:5f:bb:c3:aa:9c:6c:20:c6:d2:1e:d0: 2c:ad:fa:2e:99:24:b8:eb:de:9a:31:96:a0:ca:f1: 1f:6a:28:4b:fd:10:ba:bd:7c:de:36:33:ab:47:1c: fa:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0D:66:E3:54:BE:5E:9E:A0:D0:3A:06:28:1C:41:AA:34:5A:A4:7F X509v3 Authority Key Identifier: keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:1c:ae:17:fa:1b:ab:2b:6b:9e:24:6a:28:8f:f4:07:d1:e2: 25:8f:09:c3:df:df:51:0a:04:07:50:99:62:aa:6f:0b:06:dd: fd:4a:c8:44:cb:fe:18:11:1e:d2:e8:02:44:f4:75:26:2d:2e: 9f:f1:c9:4e:f1:20:06:ac:38:c3:0e:c4:c4:f1:ae:b7:28:bc: 88:45:88:a2:81:47:87:95:ee:26:a3:d0:7f:fd:3f:3f:0a:16: 63:c8:78:1e:e1:38:85:9e:4b:ae:d2:bc:94:fc:fd:b2:ef:0b: 3c:1e:0a:08:86:0d:9f:c6:71:34:74:8e:77:95:8b:7b:58:2c: 90:58:58:af:ba:c8:09:1b:ff:18:a6:e2:31:eb:a2:02:6e:9c: 79:4d:84:2a:34:34:7b:61:d0:2e:b9:5e:e5:66:6d:83:eb:61: 80:82:23:73:41:89:57:4e:51:39:77:ea:18:f8:6d:6a:82:8a: 77:80:bf:06:0a:52:77:3f:53:fe:f2:e0:ea:21:5f:83:0c:86: 3f:c1:85:6a:bb:d2:0c:d8:f8:e9:bb:af:04:ae:55:f6:9b:36: 95:16:c8:15:04:2c:92:f7:57:51:a0:b5:59:a6:07:43:31:04: 7e:24:5b:57:9c:b0:92:57:ff:4b:3c:c6:3a:4a:a9:0d:93:01: 02:6c:44:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUID98KYSUQfXWtpFik4gKPzulqKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJC MkM5ODEzQzAeFw0yNTEwMjAwMzE2MjlaFw0yNTEwMjMwNTMwMjlaMDMxMTAvBgNV BAMTKEQzMEQ2NkUzNTRCRTVFOUVBMEQwM0EwNjI4MUM0MUFBMzQ1QUE0N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/14WTyoCgF17NN4Nx0Iad/BlY pVwE1byilqOiq5Fl2qHr42IL+tXqsXP9Vm3iVWHLzJM/XwzoEZJYWBNV66sKvhF0 /uMQ0wP+FNC5AVLE+lt1M7Ko7CulnUpIA5Ok41kzd8hgYi85qPjX0Yy+BGqbl5qc nWeSX0eFSAY97bnDXCtwe6WDSOviMEFrgEDVOVRVjKmkeDtTgkBb114uJMShHtLl FHueZ7XVxO65BSannyXnZf1iezVhga8TkSw80LF1bhWUtHs3TT4T6RncdNsJm7eZ djVfu8OqnGwgxtIe0Cyt+i6ZJLjr3poxlqDK8R9qKEv9ELq9fN42M6tHHPqDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0w1m41S+Xp6g0DoGKBxBqjRapH8wHwYDVR0j BBgwFoAUCU1VbKC1WvSmNoc6Gx5wMrLJgTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2QwOGViMy05MzdkLTQzMDQtOTE2Ny00NjNkN2M1OGQ1ZTQvMC8wOTRENTU2Q0Ew QjU1QUY0QTYzNjg3M0ExQjFFNzAzMkIyQzk4MTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJCMkM5 ODEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNkMDhlYjMtOTM3ZC00MzA0LTkx NjctNDYzZDdjNThkNWU0LzAvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcw MzJCMkM5ODEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUcrhf6G6sra54kaiiP9AfR4iWPCcPf31EK BAdQmWKqbwsG3f1KyETL/hgRHtLoAkT0dSYtLp/xyU7xIAasOMMOxMTxrrcovIhF iKKBR4eV7iaj0H/9Pz8KFmPIeB7hOIWeS67SvJT8/bLvCzweCgiGDZ/GcTR0jneV i3tYLJBYWK+6yAkb/xim4jHrogJunHlNhCo0NHth0C65XuVmbYPrYYCCI3NBiVdO UTl36hj4bWqCineAvwYKUnc/U/7y4OohX4MMhj/BhWq70gzY+Om7rwSuVfabNpUW yBUELJL3V1GgtVmmB0MxBH4kW1ecsJJX/0s8xjpKqQ2TAQJsRPM= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:23 2025 by rpki-client