$ rpki-client -vvf repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft File: 94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft (raw, json) Hash identifier: 6jlq77PMpVjmqkKZo9g6wwNvfd9Od7QiVmk0MNE5kY0= Subject key identifier: 37:F4:70:51:58:D9:CC:9D:2C:E5:B8:86:C3:3F:B1:32:4A:95:35:68 Authority key identifier: 94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42 Certificate issuer: /CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42 Certificate serial: 012E3814C281944335BC4E7F059F967DAFB80EF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft Manifest number: 0559 Signing time: Thu 19 Mar 2026 01:40:57 +0000 Manifest this update: Thu 19 Mar 2026 01:35:57 +0000 Manifest next update: Sun 22 Mar 2026 03:28:57 +0000 Files and hashes: 1: 94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl (hash: BbPvaZuV+E6BkP8W5+UpnBFDSF2tQBqbHF0yFX3Ww3Q=) 2: 3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa (hash: JjtMSSCssV5HqQAouXYm4WHr16DMfc7UE3Z2A9weGck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 03:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:2e:38:14:c2:81:94:43:35:bc:4e:7f:05:9f:96:7d:af:b8:0e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42 Validity Not Before: Mar 19 01:35:57 2026 GMT Not After : Mar 22 03:28:57 2026 GMT Subject: CN=37F4705158D9CC9D2CE5B886C33FB1324A953568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b0:e9:b6:d6:b7:6c:0d:49:5d:3e:83:61:a9: 79:8c:3d:21:f9:4f:62:af:63:8e:7a:fe:80:d2:be: 6c:53:67:3f:ee:8a:db:42:b5:17:9c:a7:f4:36:e0: 47:70:9f:1e:d5:1c:9d:a4:19:19:ea:a4:52:a6:96: b1:d1:fa:99:a9:7d:b9:61:f6:9e:55:e4:97:00:49: 16:f2:a1:ca:ee:17:8c:1d:b9:c7:ad:c7:5a:1f:70: 80:5d:27:da:34:9f:a4:f0:bf:59:1e:17:bb:cd:37: 44:cb:12:1e:01:c6:42:8b:da:92:41:57:d5:d3:4c: 04:10:06:ce:ff:a1:7c:c4:a6:89:e8:7a:4d:dc:dc: cf:d2:e3:a9:65:6d:02:e6:f2:93:2e:81:02:ed:f8: 65:74:3c:f0:44:6b:e1:6a:f7:a6:d6:cd:66:2b:b7: a1:45:98:6d:da:9a:7a:d9:29:81:3b:ce:ec:9f:ab: 95:dc:c1:34:c8:3e:38:b2:19:46:01:61:e7:02:e4: 8e:9f:59:5b:5c:ea:18:4a:87:7b:cd:b6:34:ee:9a: ca:5f:1a:0e:a7:6a:42:8e:7b:57:fe:e0:69:8f:2f: 21:97:f5:35:dd:22:96:cc:c7:b5:91:e4:ae:1d:c5: 9b:2c:0e:bb:3e:42:f9:a6:29:e5:38:21:b1:65:68: 46:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F4:70:51:58:D9:CC:9D:2C:E5:B8:86:C3:3F:B1:32:4A:95:35:68 X509v3 Authority Key Identifier: keyid:94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:ce:2a:a3:b6:54:f0:86:be:e9:45:e4:42:9a:1c:83:64:94: 17:bd:6b:49:76:fd:1e:ee:42:fc:a3:bb:bc:ee:86:67:a8:c1: b7:66:e3:f7:28:34:eb:bd:a3:f2:27:9e:19:ff:ac:ca:fc:49: c2:8f:0c:6d:5f:f9:7f:1c:54:03:fc:c5:da:0d:9c:68:52:34: ff:56:e6:7b:16:77:7a:4e:39:00:c4:54:5b:c3:33:e0:d5:89: 10:da:02:c5:1f:ac:62:64:14:4a:6b:af:6b:2d:49:d4:12:64: 93:02:74:85:f4:ee:7c:ad:dd:4c:51:62:58:79:83:14:98:7b: 86:e5:15:ed:59:8c:98:a5:90:d2:fd:fc:b6:b2:27:31:9f:bf: dc:ea:a4:6e:8f:c0:20:b6:4e:e5:6b:ba:54:9b:4a:dd:51:67: 40:22:be:c0:c2:e6:f2:b7:e9:fb:a4:89:0e:78:5d:eb:ec:c5: 16:58:03:49:9f:ce:3a:ae:a9:23:e0:7b:6d:c7:bd:6c:8a:8f: 36:cc:f0:73:c7:d9:df:e6:d3:b3:78:c4:19:55:ab:3b:e1:44: 62:0c:17:e4:37:eb:fc:e1:ff:6d:67:01:c0:86:55:ca:97:c6: cb:be:7c:17:8b:2b:ed:4a:19:0e:66:6a:c6:e5:54:bf:d5:7c: 8f:ca:16:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAS44FMKBlEM1vE5/BZ+Wfa+4DvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUzNUI5 OTdGMkE0MjAeFw0yNjAzMTkwMTM1NTdaFw0yNjAzMjIwMzI4NTdaMDMxMTAvBgNV BAMTKDM3RjQ3MDUxNThEOUNDOUQyQ0U1Qjg4NkMzM0ZCMTMyNEE5NTM1NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRsOm21rdsDUldPoNhqXmMPSH5 T2KvY456/oDSvmxTZz/uittCtRecp/Q24Edwnx7VHJ2kGRnqpFKmlrHR+pmpfblh 9p5V5JcASRbyocruF4wducetx1ofcIBdJ9o0n6Twv1keF7vNN0TLEh4BxkKL2pJB V9XTTAQQBs7/oXzEponoek3c3M/S46llbQLm8pMugQLt+GV0PPBEa+Fq96bWzWYr t6FFmG3amnrZKYE7zuyfq5XcwTTIPjiyGUYBYecC5I6fWVtc6hhKh3vNtjTumspf Gg6nakKOe1f+4GmPLyGX9TXdIpbMx7WR5K4dxZssDrs+QvmmKeU4IbFlaEaZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN/RwUVjZzJ0s5biGwz+xMkqVNWgwHwYDVR0j BBgwFoAUlO2ksjYLR9xlOG4+frrjW5l/KkIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJmNzE4ZC05MTFlLTQzZDYtOGUzYy0wZDFiMzY0NmUyNzYvMC85NEVEQTRCMjM2 MEI0N0RDNjUzODZFM0U3RUJBRTM1Qjk5N0YyQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUzNUI5OTdG MkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViZjcxOGQtOTExZS00M2Q2LThl M2MtMGQxYjM2NDZlMjc2LzAvOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUz NUI5OTdGMkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALbOKqO2VPCGvulF5EKaHINklBe9a0l2/R7u Qvyju7zuhmeowbdm4/coNOu9o/Innhn/rMr8ScKPDG1f+X8cVAP8xdoNnGhSNP9W 5nsWd3pOOQDEVFvDM+DViRDaAsUfrGJkFEprr2stSdQSZJMCdIX07nyt3UxRYlh5 gxSYe4blFe1ZjJilkNL9/LayJzGfv9zqpG6PwCC2TuVrulSbSt1RZ0AivsDC5vK3 6fukiQ54XevsxRZYA0mfzjquqSPge23HvWyKjzbM8HPH2d/m07N4xBlVqzvhRGIM F+Q36/zh/21nAcCGVcqXxsu+fBeLK+1KGQ5masblVL/VfI/KFnM= -----END CERTIFICATE-----Generated at Thu Mar 19 10:01:16 2026 by rpki-client