$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft File: 94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft (raw, json) Hash identifier: 8B+vC7sXdlaP7AjZNuDkx1Dkh+jaM5f/H2zg9LO8PHM= Subject key identifier: 51:17:6C:C2:48:31:87:6E:51:C4:D4:7B:16:C5:07:3D:A3:E4:8D:B1 Authority key identifier: 94:AE:A1:1A:DC:0F:E7:74:09:4C:A4:A6:66:80:C3:EC:F5:09:2E:4C Certificate issuer: /CN=94AEA11ADC0FE774094CA4A66680C3ECF5092E4C Certificate serial: 25B361DF0334364A8B96FDDACEF9174A6A575C44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft Manifest number: 0158 Signing time: Tue 24 Mar 2026 00:40:48 +0000 Manifest this update: Tue 24 Mar 2026 00:35:48 +0000 Manifest next update: Fri 27 Mar 2026 09:25:48 +0000 Files and hashes: 1: 94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl (hash: MQ32bqjllLw7npM3zQzpCV2Uaa7wpZOzO3BXFNIVX6k=) 2: 33362e35302e3232322e302f32332d3233203d3e20313532303636.roa (hash: ozSd1u+8bf2XLEBevvXLin5zOowkUYuQYMS45VH+lyo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 09:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b3:61:df:03:34:36:4a:8b:96:fd:da:ce:f9:17:4a:6a:57:5c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94AEA11ADC0FE774094CA4A66680C3ECF5092E4C Validity Not Before: Mar 24 00:35:48 2026 GMT Not After : Mar 27 09:25:48 2026 GMT Subject: CN=51176CC24831876E51C4D47B16C5073DA3E48DB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d6:c1:89:2c:dd:f6:3b:a7:14:4d:e7:da:e0: 37:1c:5f:fc:50:7b:4a:91:01:81:6b:f3:0b:f8:81: 3a:3b:a1:4e:f0:2a:44:be:36:df:c9:76:05:34:f8: 66:9c:82:3d:ec:ef:24:82:fb:a3:6c:84:c2:ef:e5: 77:80:34:60:4c:ea:9c:dd:d2:98:a3:fb:2c:df:85: 64:6a:89:26:5c:07:4d:d0:99:75:e7:ae:f7:79:dd: 76:07:32:92:38:18:cd:04:4e:cd:0d:9e:f4:00:0a: 73:a4:8d:7a:ed:18:24:2a:de:7b:06:c1:a4:f2:e3: 33:d8:a5:c8:c3:a1:91:89:56:21:67:af:4f:57:d8: 92:51:f7:aa:64:50:b0:61:02:be:59:11:d8:0d:d0: b5:47:ce:cc:40:70:20:78:bc:ae:47:bb:3b:ab:13: 5f:ad:4a:b9:7c:23:ff:94:06:30:d5:d1:da:93:61: 66:bd:32:c7:cd:36:b7:35:48:21:21:91:23:01:66: f9:6a:e3:40:6d:42:71:b6:56:9e:d1:b2:d3:f8:cb: 3b:c5:96:24:6c:30:b8:db:f7:28:f5:5d:f3:89:16: fa:41:d4:63:f7:c8:a6:e3:92:96:78:73:45:70:32: 61:04:0c:56:09:95:7d:b9:c1:fc:b5:51:23:6c:0c: 4e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:17:6C:C2:48:31:87:6E:51:C4:D4:7B:16:C5:07:3D:A3:E4:8D:B1 X509v3 Authority Key Identifier: keyid:94:AE:A1:1A:DC:0F:E7:74:09:4C:A4:A6:66:80:C3:EC:F5:09:2E:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f3:34:1a:0f:fa:ef:20:98:31:cd:3f:67:0b:d6:87:99:7a: 0f:59:59:95:74:24:4e:d4:28:4e:75:8e:13:a7:c6:6d:47:e5: 94:d0:fb:ba:25:26:27:14:8b:dd:f1:4f:f6:5c:a1:90:2d:4a: 87:97:09:d4:9b:8d:6f:c8:79:1b:26:fb:71:86:de:65:40:f6: cc:80:8b:02:b1:8b:bb:3f:51:98:e1:2a:43:65:36:81:3a:d6: 11:84:17:91:1b:f3:4d:f3:81:f6:aa:7a:2e:2a:5f:56:dd:2d: e2:80:d5:2b:5b:a8:62:f7:77:89:89:eb:68:85:5a:6e:d1:d2: 68:c9:e0:02:52:15:9d:60:ef:bd:ca:df:83:81:93:8b:e8:12: 4d:a8:4f:b4:76:2d:f5:4a:ac:ba:3d:21:03:18:17:3c:54:c6: 50:3d:97:52:1e:a1:17:b7:b6:27:84:ab:37:13:9e:ef:80:d8: 7c:7a:35:6f:f0:75:22:7f:85:60:c5:b5:f5:32:fa:db:e2:b5: 7a:fa:50:a8:21:c7:c4:f5:46:52:32:82:e0:a5:a0:be:3a:61: ff:45:9a:5b:df:9b:bb:18:5a:b4:2c:a2:e5:02:4a:7c:37:7f: 48:43:bc:77:78:0b:b6:6a:b4:a1:21:a4:d5:d9:e3:60:1d:e4: 87:f6:c5:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJbNh3wM0NkqLlv3azvkXSmpXXEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBRUExMUFEQzBGRTc3NDA5NENBNEE2NjY4MEMzRUNG NTA5MkU0QzAeFw0yNjAzMjQwMDM1NDhaFw0yNjAzMjcwOTI1NDhaMDMxMTAvBgNV BAMTKDUxMTc2Q0MyNDgzMTg3NkU1MUM0RDQ3QjE2QzUwNzNEQTNFNDhEQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE1sGJLN32O6cUTefa4DccX/xQ e0qRAYFr8wv4gTo7oU7wKkS+Nt/JdgU0+Gacgj3s7ySC+6NshMLv5XeANGBM6pzd 0pij+yzfhWRqiSZcB03QmXXnrvd53XYHMpI4GM0ETs0NnvQACnOkjXrtGCQq3nsG waTy4zPYpcjDoZGJViFnr09X2JJR96pkULBhAr5ZEdgN0LVHzsxAcCB4vK5Huzur E1+tSrl8I/+UBjDV0dqTYWa9MsfNNrc1SCEhkSMBZvlq40BtQnG2Vp7RstP4yzvF liRsMLjb9yj1XfOJFvpB1GP3yKbjkpZ4c0VwMmEEDFYJlX25wfy1USNsDE4/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUURdswkgxh25RxNR7FsUHPaPkjbEwHwYDVR0j BBgwFoAUlK6hGtwP53QJTKSmZoDD7PUJLkwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRmYzM0MC1hZjY5LTRlOGUtYTc3Ny03NDdkZDgyOWRjM2YvMC85NEFFQTExQURD MEZFNzc0MDk0Q0E0QTY2NjgwQzNFQ0Y1MDkyRTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRBRUExMUFEQzBGRTc3NDA5NENBNEE2NjY4MEMzRUNGNTA5 MkU0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0ZmMzNDAtYWY2OS00ZThlLWE3 NzctNzQ3ZGQ4MjlkYzNmLzAvOTRBRUExMUFEQzBGRTc3NDA5NENBNEE2NjY4MEMz RUNGNTA5MkU0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETzNBoP+u8gmDHNP2cL1oeZeg9ZWZV0JE7U KE51jhOnxm1H5ZTQ+7olJicUi93xT/ZcoZAtSoeXCdSbjW/IeRsm+3GG3mVA9syA iwKxi7s/UZjhKkNlNoE61hGEF5Eb803zgfaqei4qX1bdLeKA1StbqGL3d4mJ62iF Wm7R0mjJ4AJSFZ1g773K34OBk4voEk2oT7R2LfVKrLo9IQMYFzxUxlA9l1IeoRe3 tieEqzcTnu+A2Hx6NW/wdSJ/hWDFtfUy+tvitXr6UKghx8T1RlIyguCloL46Yf9F mlvfm7sYWrQsouUCSnw3f0hDvHd4C7ZqtKEhpNXZ42Ad5If2xQo= -----END CERTIFICATE-----Generated at Thu Mar 26 11:30:06 2026 by rpki-client