$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft File: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft (raw, json) Hash identifier: 2gZkw5t4dtwJdYBnLHagyCVnWUmYTHBcugSTAInAFCI= Subject key identifier: 5F:9B:6A:3A:6A:79:96:5A:AA:73:8D:A6:94:A8:F5:DA:1D:08:04:45 Authority key identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A Certificate issuer: /CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Certificate serial: 37CFEEDA768E513D008CC25A917D23C557103E19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft Manifest number: 011B Signing time: Thu 26 Mar 2026 03:41:46 +0000 Manifest this update: Thu 26 Mar 2026 03:36:46 +0000 Manifest next update: Sun 29 Mar 2026 09:21:46 +0000 Files and hashes: 1: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl (hash: ZFwlwm2GiyEBDuZ+HyyjHcccfAEQlpnScekEAlOR7BY=) 2: 3130332e33352e3231392e302f32342d3234203d3e20313439393735.roa (hash: +5Txp9rL/wtpyru49a753Z8Sc1QIs/NyTcAJqiOVK6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:cf:ee:da:76:8e:51:3d:00:8c:c2:5a:91:7d:23:c5:57:10:3e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Validity Not Before: Mar 26 03:36:46 2026 GMT Not After : Mar 29 09:21:46 2026 GMT Subject: CN=5F9B6A3A6A79965AAA738DA694A8F5DA1D080445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:16:f6:b6:b1:75:b8:a7:da:94:86:d8:82:0c: 0d:72:05:d2:a0:92:6f:d0:cf:dd:c7:fb:fc:03:d2: 91:4b:53:f5:2e:6d:34:ae:54:1b:51:bb:c1:93:58: 73:65:71:a8:9b:da:bb:c7:3a:81:b9:d7:ea:fc:f4: 7e:cc:4c:66:ad:31:11:a6:d5:8a:e9:02:84:ed:f1: ec:cd:dd:0d:26:d5:61:2f:3e:1e:55:03:23:18:0e: 59:2a:0e:7d:fa:92:be:74:b6:1f:96:ad:ee:d4:d2: ad:42:62:2c:d2:c1:ac:bf:bd:da:cd:d9:ca:fc:4a: f0:f3:9c:73:a4:ca:4d:57:77:bb:89:60:3f:06:be: df:bc:35:e0:be:37:0d:76:0d:19:60:b4:71:66:86: 71:1d:6c:25:10:1d:cb:22:2c:bf:18:f1:58:6d:2d: 36:e7:3c:4c:7c:92:b7:ed:f2:e7:64:86:e9:48:0b: 85:7b:61:cd:56:ff:b6:49:3f:04:37:e6:fa:33:09: 4a:6b:0a:40:e5:3a:0f:03:fa:ad:29:0a:73:4c:59: b1:18:55:9f:75:a1:a7:20:c2:bf:3f:51:9b:ba:46: 84:cb:d7:eb:a9:39:7e:f7:63:bc:f4:9c:04:8b:03: d1:1c:74:6a:39:24:45:04:33:ed:38:17:38:90:42: c8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9B:6A:3A:6A:79:96:5A:AA:73:8D:A6:94:A8:F5:DA:1D:08:04:45 X509v3 Authority Key Identifier: keyid:99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:41:d7:b0:b5:82:0e:75:da:86:50:f2:a3:6c:aa:3c:16:83: 60:e3:bd:de:01:5c:45:97:3e:ae:fe:40:7a:d3:a3:4f:42:be: 54:4c:a9:5a:bc:09:96:a6:61:c0:24:8e:0d:6c:03:6f:6f:42: ae:00:3f:eb:a1:91:6e:76:22:06:ff:bb:e8:60:fc:0d:43:75: 35:5e:38:0d:60:66:4f:cc:0f:da:75:33:04:ba:11:a5:27:d7: 5d:ec:da:f0:8c:05:0e:41:9a:d8:27:a8:c4:21:b7:49:c5:bc: a3:bd:9c:a4:9f:bd:70:90:be:44:62:fd:61:1d:ed:d4:38:49: 78:56:8c:e1:2a:ba:3f:99:42:06:a4:40:af:8b:13:da:5d:83: 7f:6a:72:28:26:1f:bd:5f:89:a5:a7:0b:be:0e:e0:47:d2:ed: 63:f6:6d:ae:5a:68:76:f3:0e:7d:47:36:0c:a6:48:06:cf:6a: ee:cc:ef:e0:ec:ac:54:d8:41:89:8c:b6:ae:e8:a0:05:0e:3d: 55:06:32:a2:d7:72:36:f5:ec:15:3b:af:ab:3d:39:af:26:93: 0b:64:d2:aa:9a:2e:14:0d:cd:05:e7:1e:70:4b:17:8d:5b:3e: e1:e4:ed:dc:33:5a:70:94:35:96:71:d6:6b:17:c7:aa:80:11: 59:23:67:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN8/u2naOUT0AjMJakX0jxVcQPhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0Yy MEY1RTgwQTAeFw0yNjAzMjYwMzM2NDZaFw0yNjAzMjkwOTIxNDZaMDMxMTAvBgNV BAMTKDVGOUI2QTNBNkE3OTk2NUFBQTczOERBNjk0QThGNURBMUQwODA0NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFva2sXW4p9qUhtiCDA1yBdKg km/Qz93H+/wD0pFLU/UubTSuVBtRu8GTWHNlcaib2rvHOoG51+r89H7MTGatMRGm 1YrpAoTt8ezN3Q0m1WEvPh5VAyMYDlkqDn36kr50th+Wre7U0q1CYizSway/vdrN 2cr8SvDznHOkyk1Xd7uJYD8Gvt+8NeC+Nw12DRlgtHFmhnEdbCUQHcsiLL8Y8Vht LTbnPEx8krft8udkhulIC4V7Yc1W/7ZJPwQ35vozCUprCkDlOg8D+q0pCnNMWbEY VZ91oacgwr8/UZu6RoTL1+upOX73Y7z0nASLA9EcdGo5JEUEM+04FziQQshBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX5tqOmp5llqqc42mlKj12h0IBEUwHwYDVR0j BBgwFoAUmU2rhNtAF1w2NfD0MrqrzyD16AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ0MmEyOS1iZDQ4LTRlZjctYWY0OC0wYWEwZDM1ZGIzN2IvMC85OTREQUI4NERC NDAxNzVDMzYzNUYwRjQzMkJBQUJDRjIwRjVFODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFCQ0YyMEY1 RTgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNDJhMjktYmQ0OC00ZWY3LWFm NDgtMGFhMGQzNWRiMzdiLzAvOTk0REFCODREQjQwMTc1QzM2MzVGMEY0MzJCQUFC Q0YyMEY1RTgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxB17C1gg512oZQ8qNsqjwWg2Djvd4BXEWX Pq7+QHrTo09CvlRMqVq8CZamYcAkjg1sA29vQq4AP+uhkW52Igb/u+hg/A1DdTVe OA1gZk/MD9p1MwS6EaUn113s2vCMBQ5BmtgnqMQht0nFvKO9nKSfvXCQvkRi/WEd 7dQ4SXhWjOEquj+ZQgakQK+LE9pdg39qcigmH71fiaWnC74O4EfS7WP2ba5aaHbz Dn1HNgymSAbPau7M7+DsrFTYQYmMtq7ooAUOPVUGMqLXcjb17BU7r6s9Oa8mkwtk 0qqaLhQNzQXnHnBLF41bPuHk7dwzWnCUNZZx1msXx6qAEVkjZ9Y= -----END CERTIFICATE-----Generated at Thu Mar 26 11:27:44 2026 by rpki-client