$ rpki-client -vvf repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft File: 94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft (raw, json) Hash identifier: /QJYxrPZJzHzL5c7SWofmlmRHTup2xi6HBu3C660z4E= Subject key identifier: 5A:B0:68:96:C6:70:F7:A7:C7:30:5F:62:A3:E6:3E:5C:5A:D4:42:15 Authority key identifier: 94:A6:23:5D:B0:3E:F9:CA:77:38:7E:4A:3F:13:88:5A:6F:A1:DD:07 Certificate issuer: /CN=94A6235DB03EF9CA77387E4A3F13885A6FA1DD07 Certificate serial: 729A8729ED5E91CAC5858E809B1AA49AC386DE51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft Manifest number: 4E Signing time: Wed 25 Mar 2026 04:21:18 +0000 Manifest this update: Wed 25 Mar 2026 04:16:18 +0000 Manifest next update: Sat 28 Mar 2026 07:18:18 +0000 Files and hashes: 1: 94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.crl (hash: 0TOzal/gyQZVgVwM49H9F1bx/QnrWHbjbiKgcjGbEsw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.crl rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:9a:87:29:ed:5e:91:ca:c5:85:8e:80:9b:1a:a4:9a:c3:86:de:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94A6235DB03EF9CA77387E4A3F13885A6FA1DD07 Validity Not Before: Mar 25 04:16:18 2026 GMT Not After : Mar 28 07:18:18 2026 GMT Subject: CN=5AB06896C670F7A7C7305F62A3E63E5C5AD44215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b5:f3:26:4d:a6:9a:ff:be:9d:cb:20:6a:d9: de:95:71:9b:29:8f:4e:a5:84:b2:09:73:d3:7d:3b: 95:2a:7c:3d:8c:94:8f:77:d0:a0:c6:b0:a7:d8:0f: e2:49:c6:aa:3f:26:19:40:19:19:71:a8:ea:9f:30: e3:aa:d9:7e:19:47:cc:f7:e1:db:60:d7:ac:e7:3e: e5:6c:2c:1a:68:5b:18:91:c8:6d:4f:18:89:17:91: 13:4a:ca:7e:2e:ee:ca:22:f2:ea:8e:a7:25:1e:cc: 1f:e0:11:a4:d9:ab:f9:60:62:fc:cb:9d:cb:cf:3d: e5:ba:0f:8c:68:01:62:31:64:91:7e:cc:7e:3a:c2: 03:8c:5a:29:7a:31:f5:e4:a2:93:a3:b1:20:b5:4a: 25:43:39:d7:10:37:86:ea:87:c1:6d:cd:61:f3:aa: 6f:b0:56:29:ac:70:be:ab:86:1e:06:0a:b2:18:54: 22:96:d7:96:63:3e:b8:58:1a:b2:27:4e:9d:ad:33: 16:13:11:77:c2:f6:e9:70:4a:ed:61:ae:58:b8:e7: df:ab:27:7f:7f:91:d8:ca:0e:a5:16:6d:5f:54:65: b7:80:04:ea:92:b3:0a:c3:aa:91:a2:23:f8:98:1c: 6d:21:97:8b:93:6f:84:5a:f6:c7:c9:30:3d:b5:a8: 3c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B0:68:96:C6:70:F7:A7:C7:30:5F:62:A3:E6:3E:5C:5A:D4:42:15 X509v3 Authority Key Identifier: keyid:94:A6:23:5D:B0:3E:F9:CA:77:38:7E:4A:3F:13:88:5A:6F:A1:DD:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:64:5b:7a:ee:07:fd:90:5c:50:26:f5:61:4e:49:3d:f0:fd: 44:b6:19:14:f8:01:1d:bd:bd:91:b2:37:58:ef:95:4c:f1:2a: 1c:21:14:1d:34:bd:e5:04:6f:d4:b7:30:0a:85:a7:8f:1b:00: 82:83:1b:93:ed:c6:c7:2f:96:61:f3:da:46:ff:86:a1:e6:3a: 82:17:e4:2e:58:fe:bc:6b:49:09:d3:b0:b8:01:38:62:6b:e0: 0f:b4:53:34:92:cf:cb:cb:59:08:04:78:8d:da:6c:dd:76:8e: 96:da:4b:93:a9:d8:2d:81:91:41:67:55:52:ee:15:c1:9b:2d: 7a:cd:b8:8e:08:c3:5a:d2:05:5a:21:b3:39:49:7e:04:d8:2c: b1:fb:f0:86:4f:c3:af:54:94:ac:2a:0e:b9:1f:96:bc:66:dd: 2a:4e:99:2b:99:b2:a7:0c:a7:f6:6f:b2:af:55:44:00:76:d0: be:16:7a:c3:bf:31:ec:f1:8b:e6:9f:5c:a9:00:0c:c2:e8:cd: 17:ab:c2:7a:d2:e4:72:f3:ec:1b:57:b0:7c:34:d8:3a:c3:78: 98:3b:f6:71:81:f8:ae:45:c1:de:2d:dd:23:2b:53:9c:1b:a1: 6e:0e:d3:8c:f4:ab:e5:f8:49:db:93:ea:20:a3:07:6a:2a:98: a9:f9:e9:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcpqHKe1ekcrFhY6AmxqkmsOG3lEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBNjIzNURCMDNFRjlDQTc3Mzg3RTRBM0YxMzg4NUE2 RkExREQwNzAeFw0yNjAzMjUwNDE2MThaFw0yNjAzMjgwNzE4MThaMDMxMTAvBgNV BAMTKDVBQjA2ODk2QzY3MEY3QTdDNzMwNUY2MkEzRTYzRTVDNUFENDQyMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7tfMmTaaa/76dyyBq2d6VcZsp j06lhLIJc9N9O5UqfD2MlI930KDGsKfYD+JJxqo/JhlAGRlxqOqfMOOq2X4ZR8z3 4dtg16znPuVsLBpoWxiRyG1PGIkXkRNKyn4u7soi8uqOpyUezB/gEaTZq/lgYvzL ncvPPeW6D4xoAWIxZJF+zH46wgOMWil6MfXkopOjsSC1SiVDOdcQN4bqh8FtzWHz qm+wVimscL6rhh4GCrIYVCKW15ZjPrhYGrInTp2tMxYTEXfC9ulwSu1hrli459+r J39/kdjKDqUWbV9UZbeABOqSswrDqpGiI/iYHG0hl4uTb4Ra9sfJMD21qDyjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWrBolsZw96fHMF9io+Y+XFrUQhUwHwYDVR0j BBgwFoAUlKYjXbA++cp3OH5KPxOIWm+h3QcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTM4OTVlMi00MDIwLTRjM2YtOTg3Zi1kYWNkZjhlOGVhMjkvMS85NEE2MjM1REIw M0VGOUNBNzczODdFNEEzRjEzODg1QTZGQTFERDA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTRBNjIzNURCMDNFRjlDQTc3Mzg3RTRBM0YxMzg4NUE2RkEx REQwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzEvOTRBNjIzNURCMDNFRjlDQTc3Mzg3RTRBM0YxMzg4 NUE2RkExREQwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFkW3ruB/2QXFAm9WFOST3w/US2GRT4AR29 vZGyN1jvlUzxKhwhFB00veUEb9S3MAqFp48bAIKDG5PtxscvlmHz2kb/hqHmOoIX 5C5Y/rxrSQnTsLgBOGJr4A+0UzSSz8vLWQgEeI3abN12jpbaS5Op2C2BkUFnVVLu FcGbLXrNuI4Iw1rSBVohszlJfgTYLLH78IZPw69UlKwqDrkflrxm3SpOmSuZsqcM p/Zvsq9VRAB20L4WesO/Mezxi+afXKkADMLozRerwnrS5HLz7BtXsHw02DrDeJg7 9nGB+K5Fwd4t3SMrU5wboW4O04z0q+X4SduT6iCjB2oqmKn56Qo= -----END CERTIFICATE-----Generated at Thu Mar 26 12:24:27 2026 by rpki-client