$ rpki-client -vvf repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft File: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft (raw, json) Hash identifier: U2bUQhzQWwvONqF1G8wBCTt030f/yR+z9EOfKeQCv78= Subject key identifier: C1:AB:3E:D5:43:BD:9A:DA:B6:84:83:65:2E:C7:7E:8F:27:E4:23:69 Authority key identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 Certificate issuer: /CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Certificate serial: 6E41F4823A15403D8BDA449A317058ADC71A9E67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft Manifest number: 04D6 Signing time: Wed 25 Mar 2026 19:00:57 +0000 Manifest this update: Wed 25 Mar 2026 18:55:57 +0000 Manifest next update: Sun 29 Mar 2026 06:23:57 +0000 Files and hashes: 1: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl (hash: BJsgHs29v6jRj2Bd3QhcIOn8nkL/SK9xWGv5izYDnV8=) 2: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (hash: +GDxvCg7W3rpGkqjXTdZOjObKRgXnf9yC9gObIaf91w=) 3: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (hash: R7KLsJOo3soCPav40P+K3pNlUVu9SA4Q96TRuJpOj+E=) 4: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (hash: JK9uWyUnlTBAvV8zViZB2Kcjau/dBn/KG0P7Jc9dFGg=) 5: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (hash: 6h4OUe35cAilH9aTLCHLFwR0jWsvbybacQ9mi2j6ujA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:41:f4:82:3a:15:40:3d:8b:da:44:9a:31:70:58:ad:c7:1a:9e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Validity Not Before: Mar 25 18:55:57 2026 GMT Not After : Mar 29 06:23:57 2026 GMT Subject: CN=C1AB3ED543BD9ADAB68483652EC77E8F27E42369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:24:d1:89:66:23:f2:a2:ab:d1:8a:27:fd:bd: 37:41:dd:ba:05:7e:d0:7d:6a:af:d6:2c:d2:d3:f7: 0a:da:eb:2d:70:e2:a3:1d:f2:9a:8c:ea:de:61:ef: cb:e4:c6:14:6a:dc:30:e1:6c:78:6c:47:e6:21:4f: ea:e4:e5:e4:49:49:3a:7c:4b:a2:d0:20:8a:8d:77: da:07:c7:f2:0a:f1:54:4b:0b:79:5e:76:fc:63:33: fd:30:8a:64:dd:10:1a:ef:3a:3a:20:3d:58:5f:70: e9:88:e6:3c:d1:ce:b3:a2:be:f7:1e:47:db:6f:37: bf:0c:d4:93:f4:32:ed:ef:83:ad:7c:c1:91:4d:37: da:c3:24:05:c6:ae:7d:56:97:8b:63:3b:d7:b2:0a: 3b:f2:5e:cb:b7:59:3f:71:36:94:2b:3a:c4:32:90: ce:ea:ce:42:2d:2e:79:81:48:3e:39:56:eb:5f:a5: 51:70:6f:9d:04:86:3b:7b:7f:22:ff:95:94:e5:f4: 11:b2:26:24:87:3b:22:7b:94:7e:8f:34:52:db:a5: 41:28:32:b8:a9:7a:96:f3:3a:e2:3d:78:80:83:e9: 60:ff:ee:c3:48:b3:fe:c7:71:5d:d2:02:9a:0a:28: 5b:ed:64:70:5e:bf:aa:06:98:88:80:d4:d7:86:8f: 64:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AB:3E:D5:43:BD:9A:DA:B6:84:83:65:2E:C7:7E:8F:27:E4:23:69 X509v3 Authority Key Identifier: keyid:94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f7:47:25:44:11:04:18:ec:a0:ea:70:4c:8e:69:40:3d:2e: 7f:1f:a6:46:fb:55:de:a0:a3:cc:7f:9a:22:a0:16:bc:44:43: 8b:f1:d3:7b:4a:90:ee:d8:b5:e2:ac:3d:08:59:54:70:1d:ff: 1e:90:57:fc:b7:73:e1:08:51:ab:9f:81:a7:ef:23:d4:92:5a: 88:03:42:64:d0:f5:74:43:f0:7c:d7:bf:bb:14:02:6c:d9:ac: 17:08:f9:e5:66:24:d1:8f:39:47:d3:8f:81:71:20:33:c7:90: 7a:9f:f3:1b:66:54:d3:98:56:68:88:95:6e:e7:06:ae:f9:50: 33:3b:16:2f:86:b8:c8:e6:f8:ea:47:2e:0b:1b:63:46:27:38: b1:f3:df:ae:4b:ae:47:de:08:37:78:f3:89:07:ca:77:2f:48: 5c:b5:c3:ac:67:3a:8a:eb:a9:4c:61:03:0f:cf:43:f1:89:ee: ac:f5:09:7a:20:27:45:68:1f:11:cf:73:ca:cf:e2:49:a6:75: 7b:cc:7b:7b:58:b5:2b:71:2f:51:74:79:e5:8b:57:96:08:07: e7:bd:e8:49:bf:4e:38:23:c1:0c:66:c0:9c:b9:05:60:9f:79: f0:5f:5f:0f:cb:a8:77:0f:3e:87:c6:de:73:fe:42:43:0e:30: 55:b4:36:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbkH0gjoVQD2L2kSaMXBYrccanmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMx Mzk5MjM4MzAeFw0yNjAzMjUxODU1NTdaFw0yNjAzMjkwNjIzNTdaMDMxMTAvBgNV BAMTKEMxQUIzRUQ1NDNCRDlBREFCNjg0ODM2NTJFQzc3RThGMjdFNDIzNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXJNGJZiPyoqvRiif9vTdB3boF ftB9aq/WLNLT9wra6y1w4qMd8pqM6t5h78vkxhRq3DDhbHhsR+YhT+rk5eRJSTp8 S6LQIIqNd9oHx/IK8VRLC3ledvxjM/0wimTdEBrvOjogPVhfcOmI5jzRzrOivvce R9tvN78M1JP0Mu3vg618wZFNN9rDJAXGrn1Wl4tjO9eyCjvyXsu3WT9xNpQrOsQy kM7qzkItLnmBSD45VutfpVFwb50Ehjt7fyL/lZTl9BGyJiSHOyJ7lH6PNFLbpUEo MripepbzOuI9eICD6WD/7sNIs/7HcV3SApoKKFvtZHBev6oGmIiA1NeGj2SJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwas+1UO9mtq2hINlLsd+jyfkI2kwHwYDVR0j BBgwFoAUlPdbBM6+DfHQuSTs8a2cnBOZI4MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjEyN2ZlYi05NjE1LTRjNTgtYTNiYi1lZWY3YjdhNjU0N2UvMC85NEY3NUIwNENF QkUwREYxRDBCOTI0RUNGMUFEOUM5QzEzOTkyMzgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMxMzk5 MjM4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTIxMjdmZWItOTYxNS00YzU4LWEz YmItZWVmN2I3YTY1NDdlLzAvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlD OUMxMzk5MjM4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIH3RyVEEQQY7KDqcEyOaUA9Ln8fpkb7Vd6g o8x/miKgFrxEQ4vx03tKkO7YteKsPQhZVHAd/x6QV/y3c+EIUaufgafvI9SSWogD QmTQ9XRD8HzXv7sUAmzZrBcI+eVmJNGPOUfTj4FxIDPHkHqf8xtmVNOYVmiIlW7n Bq75UDM7Fi+GuMjm+OpHLgsbY0YnOLHz365LrkfeCDd484kHyncvSFy1w6xnOorr qUxhAw/PQ/GJ7qz1CXogJ0VoHxHPc8rP4kmmdXvMe3tYtStxL1F0eeWLV5YIB+e9 6Em/TjgjwQxmwJy5BWCfefBfXw/LqHcPPofG3nP+QkMOMFW0NuA= -----END CERTIFICATE-----Generated at Thu Mar 26 08:50:06 2026 by rpki-client