$ rpki-client -vvf repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft File: 94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft (raw, json) Hash identifier: 7ssrlK8PMyLSl9jCHbvgsHbX88LUaHbOfM/dQgzK8Ek= Subject key identifier: BC:B2:93:63:08:D7:36:4F:65:12:FA:81:AD:53:B4:1C:D2:35:C5:78 Authority key identifier: 94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42 Certificate issuer: /CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42 Certificate serial: 54D585195B9DFC88066317540B8ABC0C0CF0E3A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft Manifest number: 055C Signing time: Thu 26 Mar 2026 01:10:57 +0000 Manifest this update: Thu 26 Mar 2026 01:05:57 +0000 Manifest next update: Sun 29 Mar 2026 06:41:57 +0000 Files and hashes: 1: 94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl (hash: YXhRo8DTmJy4DMYh9bXyzbuYu59pCd1df37/j+2M22o=) 2: 3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa (hash: JjtMSSCssV5HqQAouXYm4WHr16DMfc7UE3Z2A9weGck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d5:85:19:5b:9d:fc:88:06:63:17:54:0b:8a:bc:0c:0c:f0:e3:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42 Validity Not Before: Mar 26 01:05:57 2026 GMT Not After : Mar 29 06:41:57 2026 GMT Subject: CN=BCB2936308D7364F6512FA81AD53B41CD235C578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:60:15:4c:74:dc:7d:d6:ca:fb:0b:51:f0: d4:47:fc:70:8a:3c:ab:a3:3b:60:cd:67:aa:59:73: 04:23:ca:69:25:22:7f:72:3e:3f:e3:32:43:84:a8: 58:5d:5d:a9:a9:e8:54:c6:ed:c1:d3:a5:04:c1:cf: 49:32:95:eb:32:fd:2e:e5:8b:4f:c2:3f:db:4e:3a: d8:94:07:1c:94:8d:44:0b:f4:27:5b:21:c4:aa:ea: fc:02:fb:70:9f:75:9c:b6:c6:ab:c0:9f:5e:df:dc: 00:ac:19:5a:ff:21:86:bf:3f:d0:11:ed:63:61:4b: 45:f9:ce:88:77:be:41:fa:2f:d0:3f:46:b7:c1:a8: ba:57:ac:4e:41:be:13:2e:b7:31:90:8b:17:28:73: c1:09:1d:7c:14:a2:6d:23:f8:8e:f4:47:e9:ce:8a: 27:5b:b0:08:24:cc:d5:41:6a:8b:74:53:ea:85:ed: c1:08:8f:b4:3e:7b:93:80:ba:41:bb:67:c0:fc:c1: 01:79:18:86:89:fc:d9:96:8b:6c:32:76:2f:09:38: b4:41:88:78:da:1a:c3:99:d1:d6:01:54:f6:df:13: 5e:78:bc:e8:3b:4e:6f:57:3f:f0:e9:75:1f:28:46: 59:f9:b6:c6:29:08:64:ed:d1:b7:38:3f:37:44:b4: 21:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B2:93:63:08:D7:36:4F:65:12:FA:81:AD:53:B4:1C:D2:35:C5:78 X509v3 Authority Key Identifier: keyid:94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:87:f4:51:1e:5f:be:96:33:81:1a:13:8e:2f:de:5f:22:76: c8:ed:8e:6d:d2:66:54:3d:9c:5e:0c:07:7b:19:2d:64:87:80: cf:18:b6:84:13:3d:ff:b7:e5:94:92:fe:45:89:ba:62:14:6d: aa:29:a6:d1:96:02:08:b6:39:f1:0b:9f:ee:ad:a7:9a:c8:5b: 0d:67:75:4b:44:d2:ee:2d:eb:85:38:86:22:ab:3e:3d:54:71: 72:df:78:e4:68:2a:65:bf:88:ae:d9:5c:a4:b3:89:77:a2:8b: fe:3a:b8:9a:df:05:70:18:d1:8f:e5:78:29:6f:52:b0:bf:ce: db:9e:cf:bf:7b:0b:f7:ca:86:9f:56:2c:cf:9b:4d:13:d0:e8: 9d:71:33:57:75:fb:c9:db:fc:1a:4e:af:8d:fd:d4:51:da:f3: 74:82:de:fc:43:f0:d6:b8:9e:b5:e4:80:52:73:a2:ec:e9:90: 66:68:1c:71:7e:02:9b:13:e2:34:08:c2:9b:c6:ec:5b:99:c9: 9e:39:d5:c3:d1:b3:2a:ea:d9:f6:b0:d6:0d:d6:8c:d3:6e:33: 00:55:97:cc:98:c8:01:8f:9a:15:1f:39:6a:30:e9:45:00:4d: 97:77:d3:30:31:ce:16:94:cb:41:6d:50:ba:6b:0b:80:58:bf: 3c:c8:d7:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVNWFGVud/IgGYxdUC4q8DAzw46EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUzNUI5 OTdGMkE0MjAeFw0yNjAzMjYwMTA1NTdaFw0yNjAzMjkwNjQxNTdaMDMxMTAvBgNV BAMTKEJDQjI5MzYzMDhENzM2NEY2NTEyRkE4MUFENTNCNDFDRDIzNUM1NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwSmAVTHTcfdbK+wtR8NRH/HCK PKujO2DNZ6pZcwQjymklIn9yPj/jMkOEqFhdXamp6FTG7cHTpQTBz0kylesy/S7l i0/CP9tOOtiUBxyUjUQL9CdbIcSq6vwC+3CfdZy2xqvAn17f3ACsGVr/IYa/P9AR 7WNhS0X5zoh3vkH6L9A/RrfBqLpXrE5BvhMutzGQixcoc8EJHXwUom0j+I70R+nO iidbsAgkzNVBaot0U+qF7cEIj7Q+e5OAukG7Z8D8wQF5GIaJ/NmWi2wydi8JOLRB iHjaGsOZ0dYBVPbfE154vOg7Tm9XP/DpdR8oRln5tsYpCGTt0bc4PzdEtCG/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvLKTYwjXNk9lEvqBrVO0HNI1xXgwHwYDVR0j BBgwFoAUlO2ksjYLR9xlOG4+frrjW5l/KkIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJmNzE4ZC05MTFlLTQzZDYtOGUzYy0wZDFiMzY0NmUyNzYvMC85NEVEQTRCMjM2 MEI0N0RDNjUzODZFM0U3RUJBRTM1Qjk5N0YyQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUzNUI5OTdG MkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViZjcxOGQtOTExZS00M2Q2LThl M2MtMGQxYjM2NDZlMjc2LzAvOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUz NUI5OTdGMkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyH9FEeX76WM4EaE44v3l8idsjtjm3SZlQ9 nF4MB3sZLWSHgM8YtoQTPf+35ZSS/kWJumIUbaopptGWAgi2OfELn+6tp5rIWw1n dUtE0u4t64U4hiKrPj1UcXLfeORoKmW/iK7ZXKSziXeii/46uJrfBXAY0Y/leClv UrC/ztuez797C/fKhp9WLM+bTRPQ6J1xM1d1+8nb/BpOr4391FHa83SC3vxD8Na4 nrXkgFJzouzpkGZoHHF+ApsT4jQIwpvG7FuZyZ451cPRsyrq2faw1g3WjNNuMwBV l8yYyAGPmhUfOWow6UUATZd30zAxzhaUy0FtULprC4BYvzzI1zU= -----END CERTIFICATE-----Generated at Thu Mar 26 17:38:39 2026 by rpki-client