$ rpki-client -vvf repo-rpki.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/94CD0552E50BF48CF5ADF68B11832854E09A7910.mft File: 94CD0552E50BF48CF5ADF68B11832854E09A7910.mft (raw, json) Hash identifier: uHbjmH3uEiKqxVKBcK1IKmw/MTpGfQ8E3tKBjXQm49A= Subject key identifier: B8:8B:D7:22:6A:D3:4F:D3:AA:A8:1A:3C:0F:02:6D:B5:EA:D1:81:BF Authority key identifier: 94:CD:05:52:E5:0B:F4:8C:F5:AD:F6:8B:11:83:28:54:E0:9A:79:10 Certificate issuer: /CN=94CD0552E50BF48CF5ADF68B11832854E09A7910 Certificate serial: 1BEF20A62A182115668EF6CB3FEF07DD3BE50412 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94CD0552E50BF48CF5ADF68B11832854E09A7910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/94CD0552E50BF48CF5ADF68B11832854E09A7910.mft Manifest number: 08 Signing time: Tue 17 Mar 2026 18:21:20 +0000 Manifest this update: Tue 17 Mar 2026 18:16:20 +0000 Manifest next update: Sat 21 Mar 2026 05:44:20 +0000 Files and hashes: 1: 94CD0552E50BF48CF5ADF68B11832854E09A7910.crl (hash: tHmxVDhYuuAJ/6pbiJXbpr/DHu0CdLyLhRCKuTxYCMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/94CD0552E50BF48CF5ADF68B11832854E09A7910.crl rsync://repo-rpki.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/94CD0552E50BF48CF5ADF68B11832854E09A7910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94CD0552E50BF48CF5ADF68B11832854E09A7910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 05:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ef:20:a6:2a:18:21:15:66:8e:f6:cb:3f:ef:07:dd:3b:e5:04:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94CD0552E50BF48CF5ADF68B11832854E09A7910 Validity Not Before: Mar 17 18:16:20 2026 GMT Not After : Mar 21 05:44:20 2026 GMT Subject: CN=B88BD7226AD34FD3AAA81A3C0F026DB5EAD181BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6c:ea:4e:2c:c1:20:d9:97:52:16:a2:0f:e8: 59:ff:29:81:74:86:a9:46:eb:67:20:8f:82:10:00: 73:dc:bb:c4:60:49:79:5f:e0:84:57:9f:40:7a:04: 44:20:5c:29:0b:76:d0:71:bd:57:2f:60:68:1f:fe: 66:ae:55:b5:66:33:c5:5e:33:c3:7b:ee:82:5d:d6: 73:6b:6f:01:6b:60:e8:c6:3a:6f:76:eb:b6:e4:b1: ce:64:74:2d:17:c0:e7:69:4d:aa:ab:8c:ec:03:62: b5:b0:76:ac:2b:d6:8f:4b:fd:8f:79:17:5a:66:1a: ab:17:af:c7:53:ac:65:19:98:be:b7:cc:57:c0:8a: 6a:56:a5:9e:90:1c:b2:d4:17:7a:22:ac:54:ce:04: f3:63:aa:b9:0c:d3:db:93:b3:a6:a2:c9:ea:dc:d0: a1:ea:9f:8e:a5:8e:2a:b1:3f:66:29:fe:c4:e3:a1: b0:13:7f:4e:d8:f0:d5:86:0d:e3:f3:53:41:f1:c3: e2:b9:a5:da:38:0f:2b:2a:d8:19:31:dd:3a:0e:fd: 5d:0f:8a:24:f8:e6:d9:e7:a8:2c:b7:e6:6a:ef:10: ec:40:42:c3:e2:1f:56:0e:6b:91:27:2c:aa:fd:65: 37:3c:b0:ac:bd:29:37:e2:a7:24:44:4b:a9:b5:7a: a3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8B:D7:22:6A:D3:4F:D3:AA:A8:1A:3C:0F:02:6D:B5:EA:D1:81:BF X509v3 Authority Key Identifier: keyid:94:CD:05:52:E5:0B:F4:8C:F5:AD:F6:8B:11:83:28:54:E0:9A:79:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/94CD0552E50BF48CF5ADF68B11832854E09A7910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94CD0552E50BF48CF5ADF68B11832854E09A7910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/94CD0552E50BF48CF5ADF68B11832854E09A7910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:00:31:d9:d6:00:c5:ca:b4:71:2f:df:78:88:24:21:de:aa: 89:dc:3b:19:7f:37:ad:2c:87:a9:ef:2c:aa:e7:06:b9:ed:45: 31:f5:de:f4:42:a5:5d:69:7f:9a:78:5f:79:2f:76:0c:dd:8b: 15:75:53:62:f2:e5:29:31:ba:8a:9a:6f:93:8b:88:8e:63:a2: 51:7b:eb:15:38:cb:99:77:81:65:38:a4:bf:98:ae:07:41:18: db:09:77:41:ac:30:0a:5a:ad:be:fc:41:fd:e1:5e:2d:9d:a3: 3c:17:6d:ed:db:be:ed:66:3f:e2:00:4a:4c:3d:96:87:26:8c: 1a:84:68:2b:fe:b2:fb:ac:23:e6:5a:51:aa:dc:29:e6:80:52: 6f:26:7f:f9:73:c2:f0:47:35:df:ef:a9:2f:24:c6:6b:13:3e: f1:18:84:37:34:2a:59:78:98:1f:47:ec:84:19:b7:cc:d9:09: 31:ae:aa:ba:d9:31:77:49:49:ff:6d:f4:e6:cf:99:c7:6a:84: c2:86:48:02:de:c8:3b:77:cb:d5:c3:bf:35:93:f6:aa:af:1f: 6f:a5:e0:b6:ec:f7:f5:a6:4d:46:bd:bb:cc:06:90:c1:b4:c4: e5:f9:92:8c:88:6f:80:fe:e1:b8:79:8f:73:ec:8e:06:56:fc: f5:f0:7e:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG+8gpioYIRVmjvbLP+8H3TvlBBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRDRDA1NTJFNTBCRjQ4Q0Y1QURGNjhCMTE4MzI4NTRF MDlBNzkxMDAeFw0yNjAzMTcxODE2MjBaFw0yNjAzMjEwNTQ0MjBaMDMxMTAvBgNV BAMTKEI4OEJENzIyNkFEMzRGRDNBQUE4MUEzQzBGMDI2REI1RUFEMTgxQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjbOpOLMEg2ZdSFqIP6Fn/KYF0 hqlG62cgj4IQAHPcu8RgSXlf4IRXn0B6BEQgXCkLdtBxvVcvYGgf/mauVbVmM8Ve M8N77oJd1nNrbwFrYOjGOm9267bksc5kdC0XwOdpTaqrjOwDYrWwdqwr1o9L/Y95 F1pmGqsXr8dTrGUZmL63zFfAimpWpZ6QHLLUF3oirFTOBPNjqrkM09uTs6aiyerc 0KHqn46ljiqxP2Yp/sTjobATf07Y8NWGDePzU0Hxw+K5pdo4Dysq2Bkx3ToO/V0P iiT45tnnqCy35mrvEOxAQsPiH1YOa5EnLKr9ZTc8sKy9KTfipyRES6m1eqPHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuIvXImrTT9OqqBo8DwJtterRgb8wHwYDVR0j BBgwFoAUlM0FUuUL9Iz1rfaLEYMoVOCaeRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmQwOGIzOC0zZjVmLTQwMTktYjJhMy0yMzYwNGY5NDJjODcvMC85NENEMDU1MkU1 MEJGNDhDRjVBREY2OEIxMTgzMjg1NEUwOUE3OTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRDRDA1NTJFNTBCRjQ4Q0Y1QURGNjhCMTE4MzI4NTRFMDlB NzkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZkMDhiMzgtM2Y1Zi00MDE5LWIy YTMtMjM2MDRmOTQyYzg3LzAvOTRDRDA1NTJFNTBCRjQ4Q0Y1QURGNjhCMTE4MzI4 NTRFMDlBNzkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMsAMdnWAMXKtHEv33iIJCHeqoncOxl/N60s h6nvLKrnBrntRTH13vRCpV1pf5p4X3kvdgzdixV1U2Ly5Skxuoqab5OLiI5jolF7 6xU4y5l3gWU4pL+YrgdBGNsJd0GsMAparb78Qf3hXi2dozwXbe3bvu1mP+IASkw9 locmjBqEaCv+svusI+ZaUarcKeaAUm8mf/lzwvBHNd/vqS8kxmsTPvEYhDc0Kll4 mB9H7IQZt8zZCTGuqrrZMXdJSf9t9ObPmcdqhMKGSALeyDt3y9XDvzWT9qqvH2+l 4Lbs9/WmTUa9u8wGkMG0xOX5koyIb4D+4bh5j3PsjgZW/PXwftg= -----END CERTIFICATE-----Generated at Thu Mar 19 09:36:13 2026 by rpki-client