$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft File: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft (raw, json) Hash identifier: 0afspNA3xas8W6qWJiBqcacsxwGqjle8irJo8sWCldY= Subject key identifier: DA:48:46:1B:3B:32:15:88:5A:DE:F7:BE:2D:B8:A5:84:B4:50:44:54 Authority key identifier: 94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF Certificate issuer: /CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Certificate serial: 0225158D9FE3DFB2C486D514D5A15B3341F690A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft Manifest number: 010A Signing time: Wed 25 Mar 2026 13:50:42 +0000 Manifest this update: Wed 25 Mar 2026 13:45:42 +0000 Manifest next update: Sat 28 Mar 2026 15:26:42 +0000 Files and hashes: 1: 3130332e3135322e3233322e302f32332d3234203d3e20313430343436.roa (hash: D9KGLgVvOF4OngGociwvSWI0QTuFGjkuuGad+CeaKtw=) 2: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl (hash: xNEYHplY/DKBkIcCk3YhLEpjRBWKfS418yypSjmSw4Y=) 3: 323030313a6466343a323038303a3a2f34382d3438203d3e20313430343436.roa (hash: 7Wk7Glz3k1Io+Ag6MjicJycKEDLzM3855KdvnhiHGjw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:25:15:8d:9f:e3:df:b2:c4:86:d5:14:d5:a1:5b:33:41:f6:90:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Validity Not Before: Mar 25 13:45:42 2026 GMT Not After : Mar 28 15:26:42 2026 GMT Subject: CN=DA48461B3B3215885ADEF7BE2DB8A584B4504454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:17:0f:0b:9d:70:4c:ba:47:bf:8f:32:dc:5e: ba:d4:c9:b9:12:28:d5:28:9d:91:0d:78:28:57:18: f6:a3:10:82:ee:f5:9e:70:ce:6b:9e:56:0f:06:24: 95:53:30:e3:a2:7b:71:30:2d:75:02:df:7e:ec:b6: 4c:f6:45:e2:c8:73:d3:9d:1a:43:b4:51:48:ca:24: d0:21:10:6e:d2:2b:be:50:04:f9:87:1a:67:f8:46: 6d:67:c1:33:6c:92:5d:5c:72:74:e6:c0:c6:06:16: 27:9a:be:24:7b:aa:43:fb:97:db:d7:47:c2:53:85: 4d:ea:77:25:92:08:a2:7f:51:f8:69:ae:54:74:44: a1:7f:7c:57:0f:a8:c6:47:fc:d8:8c:50:c7:b3:81: f5:57:84:dc:72:17:e1:05:54:33:89:9a:09:e0:c9: f0:63:e9:34:69:29:25:93:ad:0a:80:92:dc:e5:55: b1:33:03:47:39:a0:97:21:9d:85:31:e8:59:62:55: a5:dd:28:55:d5:c8:b0:d0:4e:15:df:2d:87:3e:59: 65:f6:38:c6:66:c5:db:4d:12:84:7a:b2:c2:1d:05: ea:c6:d3:00:39:27:d6:8a:94:3f:a6:49:de:28:e4: 83:c1:83:cc:6d:21:58:4a:7a:6d:e5:8a:7c:f2:7e: 8e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:48:46:1B:3B:32:15:88:5A:DE:F7:BE:2D:B8:A5:84:B4:50:44:54 X509v3 Authority Key Identifier: keyid:94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ee:83:c5:fd:a6:a9:8e:0c:da:1a:06:0b:83:f1:83:51:39: a7:d8:41:3b:18:de:74:5a:b9:75:73:9a:90:c1:ee:72:2b:33: 83:31:1b:81:75:9e:23:4e:7d:ca:aa:24:f2:8b:33:41:a7:7e: 3b:14:3f:f9:b3:da:5f:0a:92:cc:38:cd:5b:d5:4e:b5:17:10: 74:b9:f3:7c:54:ba:13:06:29:4e:2d:bd:fc:ea:c8:fa:da:f9: 95:ee:c2:14:5f:d2:d8:e8:66:29:c2:35:d2:e1:e7:a8:5b:1e: b4:b7:81:20:d2:26:da:17:a0:3f:ba:20:d8:86:ed:2d:98:86: 51:cd:cf:45:4c:f5:e8:ae:fa:ae:66:1d:aa:53:66:a9:fa:0f: 84:5e:2c:ec:85:e2:8a:d4:58:b8:2b:8d:6d:03:46:d0:56:b2: d2:28:a4:b3:49:45:6a:a6:60:30:03:6e:08:c6:d7:fe:53:00: cb:95:47:11:46:80:a9:5c:1c:35:12:58:83:47:f3:91:b6:77: e5:18:34:db:d0:e2:4e:c5:2e:d4:26:5f:8a:72:13:5d:0e:4b: 4d:a0:a9:8b:9b:9a:b6:2a:56:2e:87:22:f1:e9:27:e2:ba:d8: d3:19:e3:82:1e:ac:15:f6:d8:11:5a:ec:32:8d:f5:2f:de:34: 52:8e:88:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAiUVjZ/j37LEhtUU1aFbM0H2kKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRF Q0RFRURFRjAeFw0yNjAzMjUxMzQ1NDJaFw0yNjAzMjgxNTI2NDJaMDMxMTAvBgNV BAMTKERBNDg0NjFCM0IzMjE1ODg1QURFRjdCRTJEQjhBNTg0QjQ1MDQ0NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxFw8LnXBMuke/jzLcXrrUybkS KNUonZENeChXGPajEILu9Z5wzmueVg8GJJVTMOOie3EwLXUC337stkz2ReLIc9Od GkO0UUjKJNAhEG7SK75QBPmHGmf4Rm1nwTNskl1ccnTmwMYGFieaviR7qkP7l9vX R8JThU3qdyWSCKJ/UfhprlR0RKF/fFcPqMZH/NiMUMezgfVXhNxyF+EFVDOJmgng yfBj6TRpKSWTrQqAktzlVbEzA0c5oJchnYUx6FliVaXdKFXVyLDQThXfLYc+WWX2 OMZmxdtNEoR6ssIdBerG0wA5J9aKlD+mSd4o5IPBg8xtIVhKem3linzyfo7PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2khGGzsyFYha3ve+LbilhLRQRFQwHwYDVR0j BBgwFoAUlBWfrwqXlQLKtsWt3K5M/eze7e8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGYwNzk4Ny1iOGVjLTQ0NGEtOWI0NC0yOTEwMTFmZjQ2YTYvMC85NDE1OUZBRjBB OTc5NTAyQ0FCNkM1QUREQ0FFNENGREVDREVFREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRFQ0RF RURFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmMDc5ODctYjhlYy00NDRhLTli NDQtMjkxMDExZmY0NmE2LzAvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRD RkRFQ0RFRURFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPug8X9pqmODNoaBguD8YNROafYQTsY3nRa uXVzmpDB7nIrM4MxG4F1niNOfcqqJPKLM0GnfjsUP/mz2l8Kksw4zVvVTrUXEHS5 83xUuhMGKU4tvfzqyPra+ZXuwhRf0tjoZinCNdLh56hbHrS3gSDSJtoXoD+6INiG 7S2YhlHNz0VM9eiu+q5mHapTZqn6D4ReLOyF4orUWLgrjW0DRtBWstIopLNJRWqm YDADbgjG1/5TAMuVRxFGgKlcHDUSWINH85G2d+UYNNvQ4k7FLtQmX4pyE10OS02g qYubmrYqVi6HIvHpJ+K62NMZ44IerBX22BFa7DKN9S/eNFKOiC4= -----END CERTIFICATE-----Generated at Thu Mar 26 17:38:36 2026 by rpki-client