$ rpki-client -vvf repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft File: B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft (raw, json) Hash identifier: nPDqhQHkBLe0sNzsSv17Da8YZIg+SGrqQpk8Gl4aPQo= Subject key identifier: D3:08:86:D5:3A:84:8F:7F:49:70:FA:B2:B2:D8:12:EB:4F:79:EC:8E Authority key identifier: B9:4F:48:BC:AB:6D:8B:0A:28:B3:95:55:04:97:5C:15:9F:AC:07:6A Certificate issuer: /CN=B94F48BCAB6D8B0A28B3955504975C159FAC076A Certificate serial: 7B6FAEF23EF542D6861CAE16E651A89A6691A7E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft Manifest number: 055C Signing time: Thu 26 Mar 2026 06:01:25 +0000 Manifest this update: Thu 26 Mar 2026 05:56:25 +0000 Manifest next update: Sun 29 Mar 2026 07:41:25 +0000 Files and hashes: 1: B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl (hash: sYxxV36OAT6sarkkgSpY653zrDxrHb92OeJtvjBjGgU=) 2: 3130332e3131392e3133392e302f32342d3234203d3e20313337333831.roa (hash: NXiX7VHYL2V/PG5eFGBukXkPCYGw4lMLoRT1ir2CDOE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:6f:ae:f2:3e:f5:42:d6:86:1c:ae:16:e6:51:a8:9a:66:91:a7:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B94F48BCAB6D8B0A28B3955504975C159FAC076A Validity Not Before: Mar 26 05:56:25 2026 GMT Not After : Mar 29 07:41:25 2026 GMT Subject: CN=D30886D53A848F7F4970FAB2B2D812EB4F79EC8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3e:e6:8f:f0:e5:84:ee:7e:3b:05:61:a6:e2: db:ae:5c:bf:01:57:b0:59:e5:54:da:b1:93:63:a0: bc:6a:b6:d2:ca:85:d6:55:b6:03:df:d4:1e:f3:6e: 3c:b9:31:e5:8b:1b:eb:1a:35:f8:a3:0a:fd:23:ae: 45:af:ad:e2:2b:98:39:4f:7a:2a:2f:af:fa:a3:c0: e2:8b:58:01:f6:64:79:0d:14:76:f4:79:39:3c:88: 1a:fa:d2:4b:5d:01:c2:06:4c:22:8c:d2:1a:4d:d9: d9:20:87:06:c1:43:98:10:4b:06:0e:d1:3c:03:d3: 6b:7a:87:d6:c5:a2:16:d7:35:42:cc:c1:f4:5f:56: 19:87:63:32:e8:57:6e:89:a3:6b:34:90:a8:78:83: 9f:71:df:5c:32:6c:30:d9:8f:47:db:1d:05:2a:fe: a7:b8:9b:4d:f6:5f:78:53:88:ec:ff:94:8f:a3:b8: bf:dd:11:26:80:90:7f:36:60:7d:d5:21:0f:30:46: d5:db:04:72:71:88:03:62:1c:e1:08:45:a6:e9:f7: 54:92:ba:13:cd:b9:3c:c2:f6:1d:4d:9c:d5:3d:41: 76:0f:ec:84:22:67:3d:a9:66:5f:a7:d5:2e:23:b6: c8:ec:4c:42:b8:b1:4d:ca:04:e9:bc:bf:83:25:22: 4b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:08:86:D5:3A:84:8F:7F:49:70:FA:B2:B2:D8:12:EB:4F:79:EC:8E X509v3 Authority Key Identifier: keyid:B9:4F:48:BC:AB:6D:8B:0A:28:B3:95:55:04:97:5C:15:9F:AC:07:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:7c:b8:ff:d3:a5:3c:0b:ff:fb:01:64:3b:8c:bd:d0:d7:ed: 7a:b3:69:66:a8:84:b8:68:8c:92:0e:01:94:97:e9:0a:da:fc: e0:a7:c7:a0:6d:77:22:15:66:5d:02:04:41:e2:c7:55:ed:1e: e9:a2:5c:6a:c3:9e:a0:37:1b:a9:44:62:6c:8c:cd:67:f5:70: 6d:00:83:31:ef:7d:d5:81:7e:73:a0:f2:74:53:3c:0c:50:09: 26:f0:f3:af:a6:db:84:02:04:a4:bc:d5:15:22:ce:10:44:71: 82:3f:d5:b1:a7:cf:44:54:2e:e6:94:0d:c4:c1:f7:44:d7:61: 7c:60:62:f4:98:71:ee:79:e3:b6:d8:32:30:44:83:dd:67:4a: 7e:38:23:a9:c4:f7:9e:49:da:3a:12:f8:4a:e8:ab:f3:a3:74: 00:a4:4c:11:a6:10:38:ee:56:97:7f:03:1f:e6:23:b5:16:b3: 7c:25:18:31:c2:80:07:30:2b:57:47:e6:de:b3:8d:01:ce:e6: 63:62:30:ee:1d:48:1f:e2:a2:20:12:24:09:46:2c:8c:39:07: d9:96:ef:d4:64:60:b1:ad:3a:09:f1:a4:ad:1d:c1:a8:cb:d9: 68:31:be:78:98:e7:1a:90:3e:43:7d:05:da:19:8f:1b:36:7e: a0:94:46:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe2+u8j71QtaGHK4W5lGommaRp+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk0RjQ4QkNBQjZEOEIwQTI4QjM5NTU1MDQ5NzVDMTU5 RkFDMDc2QTAeFw0yNjAzMjYwNTU2MjVaFw0yNjAzMjkwNzQxMjVaMDMxMTAvBgNV BAMTKEQzMDg4NkQ1M0E4NDhGN0Y0OTcwRkFCMkIyRDgxMkVCNEY3OUVDOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUPuaP8OWE7n47BWGm4tuuXL8B V7BZ5VTasZNjoLxqttLKhdZVtgPf1B7zbjy5MeWLG+saNfijCv0jrkWvreIrmDlP eiovr/qjwOKLWAH2ZHkNFHb0eTk8iBr60ktdAcIGTCKM0hpN2dkghwbBQ5gQSwYO 0TwD02t6h9bFohbXNULMwfRfVhmHYzLoV26Jo2s0kKh4g59x31wybDDZj0fbHQUq /qe4m032X3hTiOz/lI+juL/dESaAkH82YH3VIQ8wRtXbBHJxiANiHOEIRabp91SS uhPNuTzC9h1NnNU9QXYP7IQiZz2pZl+n1S4jtsjsTEK4sU3KBOm8v4MlIkvRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0wiG1TqEj39JcPqystgS60957I4wHwYDVR0j BBgwFoAUuU9IvKttiwoos5VVBJdcFZ+sB2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjRjMzE1NS1jOGZmLTQyMDctYTJkYy01MWUwMDU1MzBiNTIvMC9COTRGNDhCQ0FC NkQ4QjBBMjhCMzk1NTUwNDk3NUMxNTlGQUMwNzZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk0RjQ4QkNBQjZEOEIwQTI4QjM5NTU1MDQ5NzVDMTU5RkFD MDc2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY0YzMxNTUtYzhmZi00MjA3LWEy ZGMtNTFlMDA1NTMwYjUyLzAvQjk0RjQ4QkNBQjZEOEIwQTI4QjM5NTU1MDQ5NzVD MTU5RkFDMDc2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKp8uP/TpTwL//sBZDuMvdDX7XqzaWaohLho jJIOAZSX6Qra/OCnx6BtdyIVZl0CBEHix1XtHumiXGrDnqA3G6lEYmyMzWf1cG0A gzHvfdWBfnOg8nRTPAxQCSbw86+m24QCBKS81RUizhBEcYI/1bGnz0RULuaUDcTB 90TXYXxgYvSYce5547bYMjBEg91nSn44I6nE955J2joS+Eroq/OjdACkTBGmEDju Vpd/Ax/mI7UWs3wlGDHCgAcwK1dH5t6zjQHO5mNiMO4dSB/ioiASJAlGLIw5B9mW 79RkYLGtOgnxpK0dwajL2WgxvniY5xqQPkN9BdoZjxs2fqCURkc= -----END CERTIFICATE-----Generated at Thu Mar 26 14:29:07 2026 by rpki-client