$ rpki-client -vvf repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft File: 94F6C26027B9F72AA8701D1296627FA57809A6F3.mft (raw, json) Hash identifier: nmfaliHx/ORCv62us29xNe94NKMe02yWjBHNiGgjsFo= Subject key identifier: 61:C9:FA:D9:26:D6:35:D9:72:14:B6:63:60:AF:39:D4:15:A1:89:6E Authority key identifier: 94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3 Certificate issuer: /CN=94F6C26027B9F72AA8701D1296627FA57809A6F3 Certificate serial: 288FD9BA7F97FE781E60CB33A375D7AF959E647C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft Manifest number: 015A Signing time: Wed 25 Mar 2026 03:32:43 +0000 Manifest this update: Wed 25 Mar 2026 03:27:43 +0000 Manifest next update: Sat 28 Mar 2026 14:00:43 +0000 Files and hashes: 1: 3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa (hash: ChY3ilufuzDt2M3sKZA8AjK4T57K+5mOlYRLYaVsNtA=) 2: 3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa (hash: H1YJopF0jR3qbbFBf67x3xHiCTJIJCzCPaxyU4NRgn4=) 3: 94F6C26027B9F72AA8701D1296627FA57809A6F3.crl (hash: qqRzUXVSNFajaQrYu4WHL3OeApD1MsCNb8/QfAjxNOE=) 4: 3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa (hash: aaZsaFHRmagSUTCNOmerQAtXa1pDWPPdaWED4yLbNMI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:8f:d9:ba:7f:97:fe:78:1e:60:cb:33:a3:75:d7:af:95:9e:64:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94F6C26027B9F72AA8701D1296627FA57809A6F3 Validity Not Before: Mar 25 03:27:43 2026 GMT Not After : Mar 28 14:00:43 2026 GMT Subject: CN=61C9FAD926D635D97214B66360AF39D415A1896E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:32:ba:1b:f3:93:14:60:67:b7:d2:22:9f:3e: aa:63:d3:d9:b1:73:f2:0d:fc:a9:9b:27:7c:19:34: 01:a3:ca:13:b1:cc:be:9f:60:11:28:f3:5e:33:09: df:bf:85:9a:58:1f:3b:d5:ce:6e:be:e3:6e:52:32: dd:97:64:7c:00:ba:54:84:b3:0d:a7:65:ce:0f:be: d9:2f:21:d4:fc:96:6d:98:0e:40:01:72:58:fc:76: 0f:63:77:b5:69:6a:65:e8:26:cc:1b:7c:c7:3d:30: 9d:a2:36:4f:d3:23:0c:ce:de:4a:84:3d:10:ef:53: 54:75:43:d6:93:ed:02:8d:72:30:a3:76:fc:2a:a6: 21:b4:ca:fb:f6:20:7a:17:19:c9:7c:74:86:40:82: dd:32:39:b0:80:ae:ab:ce:4a:5f:c7:6d:1c:0d:bf: 45:c2:2a:d5:e8:65:54:58:7c:b1:85:83:21:fa:2c: 5e:0d:9d:4c:f9:8b:d4:a1:65:dc:09:e2:64:dd:25: 39:e4:96:43:db:aa:3a:8a:d0:93:81:89:d9:29:09: 0c:3a:5e:67:a5:a3:00:ff:39:f2:d0:84:66:f8:7f: 71:00:00:c8:94:13:96:97:c6:d9:2d:b3:9d:8b:84: c7:fb:b7:dc:34:89:77:cd:c3:54:0c:e0:6c:28:24: 11:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C9:FA:D9:26:D6:35:D9:72:14:B6:63:60:AF:39:D4:15:A1:89:6E X509v3 Authority Key Identifier: keyid:94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:b2:74:55:66:a0:aa:e1:dd:29:00:64:39:cb:16:dc:4c:49: 14:67:47:a7:80:76:48:21:e0:5e:9e:dd:49:55:9f:64:99:ce: a5:bd:86:93:7c:62:f5:48:26:7b:1c:50:b8:27:14:1d:d9:21: de:8a:42:86:f1:8f:2d:0b:fd:ea:64:c4:54:26:0c:8f:9a:70: 3f:32:c4:95:4d:e8:ca:48:03:54:9f:b1:d8:56:1a:69:ba:88: 20:87:2c:e8:85:f4:57:e6:4a:76:7a:36:c1:72:e1:ba:14:d8: b8:02:5c:3d:c3:25:d6:c5:d0:ab:14:c9:55:18:79:9f:5d:03: 41:17:73:5a:00:66:29:2e:d1:0c:19:ea:e0:96:ef:42:a7:1d: 92:88:f2:84:41:db:ae:95:71:b6:ca:5a:7b:c6:c8:10:d8:b5: 3d:4b:ab:e2:e4:df:c9:95:66:f5:d9:5b:4c:1d:9f:40:f1:ac: 64:92:0c:52:ef:d9:28:10:18:ba:a9:f2:b2:cd:21:c6:d3:e6: f0:c8:47:c8:05:f8:b4:57:2f:96:d1:0c:e1:bc:4f:de:34:21: 73:cb:32:fc:26:ba:08:9e:44:87:30:b6:e8:ad:41:79:a2:f3: 0a:3d:d5:7c:1c:19:49:9f:b7:89:3a:26:8f:1a:14:f9:48:5f: 0a:8b:e4:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKI/Zun+X/ngeYMszo3XXr5WeZHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRGNkMyNjAyN0I5RjcyQUE4NzAxRDEyOTY2MjdGQTU3 ODA5QTZGMzAeFw0yNjAzMjUwMzI3NDNaFw0yNjAzMjgxNDAwNDNaMDMxMTAvBgNV BAMTKDYxQzlGQUQ5MjZENjM1RDk3MjE0QjY2MzYwQUYzOUQ0MTVBMTg5NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpMrob85MUYGe30iKfPqpj09mx c/IN/KmbJ3wZNAGjyhOxzL6fYBEo814zCd+/hZpYHzvVzm6+425SMt2XZHwAulSE sw2nZc4PvtkvIdT8lm2YDkABclj8dg9jd7VpamXoJswbfMc9MJ2iNk/TIwzO3kqE PRDvU1R1Q9aT7QKNcjCjdvwqpiG0yvv2IHoXGcl8dIZAgt0yObCArqvOSl/HbRwN v0XCKtXoZVRYfLGFgyH6LF4NnUz5i9ShZdwJ4mTdJTnklkPbqjqK0JOBidkpCQw6 XmelowD/OfLQhGb4f3EAAMiUE5aXxtkts52LhMf7t9w0iXfNw1QM4GwoJBE7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYcn62SbWNdlyFLZjYK851BWhiW4wHwYDVR0j BBgwFoAUlPbCYCe59yqocB0SlmJ/pXgJpvMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGQwMDcxOC01MjEwLTQ0MzgtYjY0ZC02MmVjMWYzZWJjZDAvMC85NEY2QzI2MDI3 QjlGNzJBQTg3MDFEMTI5NjYyN0ZBNTc4MDlBNkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRGNkMyNjAyN0I5RjcyQUE4NzAxRDEyOTY2MjdGQTU3ODA5 QTZGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBkMDA3MTgtNTIxMC00NDM4LWI2 NGQtNjJlYzFmM2ViY2QwLzAvOTRGNkMyNjAyN0I5RjcyQUE4NzAxRDEyOTY2MjdG QTU3ODA5QTZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiydFVmoKrh3SkAZDnLFtxMSRRnR6eAdkgh 4F6e3UlVn2SZzqW9hpN8YvVIJnscULgnFB3ZId6KQobxjy0L/epkxFQmDI+acD8y xJVN6MpIA1SfsdhWGmm6iCCHLOiF9FfmSnZ6NsFy4boU2LgCXD3DJdbF0KsUyVUY eZ9dA0EXc1oAZiku0QwZ6uCW70KnHZKI8oRB266VcbbKWnvGyBDYtT1Lq+Lk38mV ZvXZW0wdn0DxrGSSDFLv2SgQGLqp8rLNIcbT5vDIR8gF+LRXL5bRDOG8T940IXPL MvwmugieRIcwtuitQXmi8wo91XwcGUmft4k6Jo8aFPlIXwqL5PQ= -----END CERTIFICATE-----Generated at Thu Mar 26 17:44:12 2026 by rpki-client