$ rpki-client -vvf repo-rpki.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/94CD0552E50BF48CF5ADF68B11832854E09A7910.mft File: 94CD0552E50BF48CF5ADF68B11832854E09A7910.mft (raw, json) Hash identifier: Yfmzuk6pgh4gRCijeCneo6vOANlAx/rfPu40berkagY= Subject key identifier: 52:CB:C8:A1:F1:F9:FD:36:B0:E4:18:78:20:77:B9:99:E2:C6:BD:F6 Authority key identifier: 94:CD:05:52:E5:0B:F4:8C:F5:AD:F6:8B:11:83:28:54:E0:9A:79:10 Certificate issuer: /CN=94CD0552E50BF48CF5ADF68B11832854E09A7910 Certificate serial: 7A115B25BCF569B584D041B4B6E3C11D2CD5BD78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94CD0552E50BF48CF5ADF68B11832854E09A7910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/94CD0552E50BF48CF5ADF68B11832854E09A7910.mft Manifest number: 0C Signing time: Thu 26 Mar 2026 12:01:18 +0000 Manifest this update: Thu 26 Mar 2026 11:56:18 +0000 Manifest next update: Sun 29 Mar 2026 23:33:18 +0000 Files and hashes: 1: 94CD0552E50BF48CF5ADF68B11832854E09A7910.crl (hash: 8j/YP79zNBAIFE+XMeyh2pgVQv3RjvWrGEV6Vbpz0vM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/94CD0552E50BF48CF5ADF68B11832854E09A7910.crl rsync://repo-rpki.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/94CD0552E50BF48CF5ADF68B11832854E09A7910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94CD0552E50BF48CF5ADF68B11832854E09A7910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 23:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:11:5b:25:bc:f5:69:b5:84:d0:41:b4:b6:e3:c1:1d:2c:d5:bd:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94CD0552E50BF48CF5ADF68B11832854E09A7910 Validity Not Before: Mar 26 11:56:18 2026 GMT Not After : Mar 29 23:33:18 2026 GMT Subject: CN=52CBC8A1F1F9FD36B0E418782077B999E2C6BDF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:fe:63:6c:fd:b7:84:2b:a0:82:e2:86:bf:f1: 6b:76:e6:3b:94:32:d3:83:9e:5b:0a:98:2e:4f:25: f0:f7:fa:c4:fe:06:43:10:00:61:19:7d:75:2b:fe: 2e:2d:ef:a2:0e:cd:c1:55:f9:7e:f1:5a:7b:7b:38: af:42:f3:2b:76:a4:f6:f8:17:f4:05:68:38:ba:b3: 0f:79:0d:e9:cc:d7:ac:ab:90:0d:ed:b2:72:13:15: f7:c3:78:9f:d6:6d:00:65:5b:f1:63:da:37:ad:52: ef:93:da:01:87:7c:e5:7c:d7:8f:e5:6d:ff:35:67: a5:b0:c5:df:39:98:4f:7f:63:b1:fe:b4:57:6c:d8: ae:4e:13:48:77:e1:3c:15:80:7e:f9:f1:96:16:f4: 4f:dd:07:aa:66:a6:23:ee:7f:ae:89:f3:ee:c5:da: 01:0a:99:5e:1a:f8:80:1e:4d:75:3c:2c:b4:df:f0: 8a:ef:ca:85:3f:e7:f7:56:24:cd:93:4b:2c:90:6b: 53:71:9b:46:6c:a5:8c:a9:81:c2:7e:73:88:df:ac: ee:2d:36:78:dc:6d:5d:28:74:cc:69:45:e8:9f:23: b7:2a:9a:92:e4:62:db:2e:f8:d2:18:1e:a3:74:c9: d7:ec:68:ab:4c:30:41:50:ee:65:43:56:26:7c:0e: 8a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CB:C8:A1:F1:F9:FD:36:B0:E4:18:78:20:77:B9:99:E2:C6:BD:F6 X509v3 Authority Key Identifier: keyid:94:CD:05:52:E5:0B:F4:8C:F5:AD:F6:8B:11:83:28:54:E0:9A:79:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/94CD0552E50BF48CF5ADF68B11832854E09A7910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94CD0552E50BF48CF5ADF68B11832854E09A7910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/94CD0552E50BF48CF5ADF68B11832854E09A7910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:b4:bc:3e:1a:aa:df:e9:aa:a4:4b:40:79:b3:5e:d8:ac:7a: 93:70:3a:7c:4c:a5:c8:12:5b:5f:ad:fe:23:74:70:0f:37:9c: c8:a0:c6:13:35:05:9a:4b:cd:a3:a7:1e:0d:4a:d0:c0:b9:15: da:21:8d:77:c6:9f:55:88:c9:55:4b:f0:52:e6:fd:11:ce:1d: 09:5a:87:50:0d:f5:69:bb:4c:66:e2:f7:5d:cf:e6:d3:fa:55: 16:dd:0e:18:d1:a2:b0:cc:9c:f6:27:d0:45:85:cd:02:77:d0: f4:d0:70:18:5e:3c:f8:b7:73:81:5b:3b:62:13:1c:2d:2e:39: 26:9e:cd:d8:ec:03:e9:f4:cb:f2:6e:14:0c:7f:30:91:c0:74: f7:16:79:ad:47:44:a5:df:d5:74:50:fd:f6:4f:68:de:9d:8e: 61:89:d9:7b:50:7d:86:bd:e6:5c:d8:b0:4a:7c:5d:82:88:b5: 10:c7:3d:a3:ad:2d:50:8e:e6:e6:d1:9d:2f:af:9f:c8:9f:73: ce:9b:07:e0:c1:25:b9:a8:e1:0b:68:55:02:78:b8:56:0d:53: 9d:ca:a9:1d:c2:4a:f3:c3:39:02:d7:56:9b:fa:c2:32:c4:19: 9a:30:25:93:d0:ba:32:04:f9:ca:d0:46:b2:aa:c3:5e:bb:26: c2:9b:d8:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUehFbJbz1abWE0EG0tuPBHSzVvXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRDRDA1NTJFNTBCRjQ4Q0Y1QURGNjhCMTE4MzI4NTRF MDlBNzkxMDAeFw0yNjAzMjYxMTU2MThaFw0yNjAzMjkyMzMzMThaMDMxMTAvBgNV BAMTKDUyQ0JDOEExRjFGOUZEMzZCMEU0MTg3ODIwNzdCOTk5RTJDNkJERjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz/mNs/beEK6CC4oa/8Wt25juU MtODnlsKmC5PJfD3+sT+BkMQAGEZfXUr/i4t76IOzcFV+X7xWnt7OK9C8yt2pPb4 F/QFaDi6sw95DenM16yrkA3tsnITFffDeJ/WbQBlW/Fj2jetUu+T2gGHfOV814/l bf81Z6Wwxd85mE9/Y7H+tFds2K5OE0h34TwVgH758ZYW9E/dB6pmpiPuf66J8+7F 2gEKmV4a+IAeTXU8LLTf8IrvyoU/5/dWJM2TSyyQa1Nxm0ZspYypgcJ+c4jfrO4t NnjcbV0odMxpReifI7cqmpLkYtsu+NIYHqN0ydfsaKtMMEFQ7mVDViZ8DoobAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUsvIofH5/Taw5Bh4IHe5meLGvfYwHwYDVR0j BBgwFoAUlM0FUuUL9Iz1rfaLEYMoVOCaeRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmQwOGIzOC0zZjVmLTQwMTktYjJhMy0yMzYwNGY5NDJjODcvMC85NENEMDU1MkU1 MEJGNDhDRjVBREY2OEIxMTgzMjg1NEUwOUE3OTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRDRDA1NTJFNTBCRjQ4Q0Y1QURGNjhCMTE4MzI4NTRFMDlB NzkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZkMDhiMzgtM2Y1Zi00MDE5LWIy YTMtMjM2MDRmOTQyYzg3LzAvOTRDRDA1NTJFNTBCRjQ4Q0Y1QURGNjhCMTE4MzI4 NTRFMDlBNzkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFm0vD4aqt/pqqRLQHmzXtisepNwOnxMpcgS W1+t/iN0cA83nMigxhM1BZpLzaOnHg1K0MC5FdohjXfGn1WIyVVL8FLm/RHOHQla h1AN9Wm7TGbi913P5tP6VRbdDhjRorDMnPYn0EWFzQJ30PTQcBhePPi3c4FbO2IT HC0uOSaezdjsA+n0y/JuFAx/MJHAdPcWea1HRKXf1XRQ/fZPaN6djmGJ2XtQfYa9 5lzYsEp8XYKItRDHPaOtLVCO5ubRnS+vn8ifc86bB+DBJbmo4QtoVQJ4uFYNU53K qR3CSvPDOQLXVpv6wjLEGZowJZPQujIE+crQRrKqw167JsKb2L4= -----END CERTIFICATE-----Generated at Thu Mar 26 18:42:41 2026 by rpki-client