$ rpki-client -vvf repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft File: 94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft (raw, json) Hash identifier: LVHttlEm8cRfBS3Jr/dxgGCg/XCHPq66h9xijb2IznM= Subject key identifier: 54:83:6C:FA:DA:E6:DD:59:4D:97:63:73:D9:B3:8A:4C:C2:34:7E:4F Authority key identifier: 94:A6:23:5D:B0:3E:F9:CA:77:38:7E:4A:3F:13:88:5A:6F:A1:DD:07 Certificate issuer: /CN=94A6235DB03EF9CA77387E4A3F13885A6FA1DD07 Certificate serial: 65C95DA697AC3E05CED176B044E32FD615303641 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft Manifest number: 5A Signing time: Tue 21 Apr 2026 11:31:26 +0000 Manifest this update: Tue 21 Apr 2026 11:26:26 +0000 Manifest next update: Fri 24 Apr 2026 23:11:26 +0000 Files and hashes: 1: 94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.crl (hash: 0tB+BjO7WEosIQUQTjlBdlagrrpD7S00682mFyBD610=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.crl rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c9:5d:a6:97:ac:3e:05:ce:d1:76:b0:44:e3:2f:d6:15:30:36:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94A6235DB03EF9CA77387E4A3F13885A6FA1DD07 Validity Not Before: Apr 21 11:26:26 2026 GMT Not After : Apr 24 23:11:26 2026 GMT Subject: CN=54836CFADAE6DD594D976373D9B38A4CC2347E4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:24:e9:ac:8f:29:f8:84:a7:be:bc:4d:c9: 8d:43:b4:e7:59:bb:f6:ad:e1:0e:2d:84:ec:29:82: 49:52:9f:8a:a8:da:39:04:cd:5e:31:98:2a:94:8b: 91:8d:ca:5c:97:03:72:4f:d9:17:dd:31:52:fc:cb: a8:f4:4c:86:77:87:6c:a0:24:d5:16:25:f7:21:a0: fb:fe:05:18:55:52:38:dc:b2:26:20:de:ef:7b:f5: 10:cd:0c:57:4d:4c:db:79:e3:1a:01:dc:d2:54:57: 07:3c:7e:46:2a:8a:8c:dd:cb:90:fd:55:04:3d:a7: ab:35:3f:9d:c9:f0:27:76:c0:08:be:32:42:43:2b: 57:92:77:d5:b3:c8:4b:84:95:e8:0d:c3:0c:4c:05: de:24:d9:2a:5e:dd:20:70:23:96:bd:41:a1:20:63: ee:a2:22:7e:46:e5:39:a4:24:4d:c9:30:32:21:b7: ae:4a:a9:14:4d:6a:a3:3d:2f:14:ae:17:5c:bb:5f: 6e:13:e7:ec:7f:88:5c:b3:0c:49:0f:6c:b5:69:8e: a5:de:5c:e1:97:e8:22:d7:6d:b8:1d:d1:36:9d:d8: e2:98:16:75:e3:3c:1f:53:6d:7b:c9:30:59:b6:46: dc:db:7a:7c:3b:ac:91:56:fd:71:63:ef:4a:77:ef: 37:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:83:6C:FA:DA:E6:DD:59:4D:97:63:73:D9:B3:8A:4C:C2:34:7E:4F X509v3 Authority Key Identifier: keyid:94:A6:23:5D:B0:3E:F9:CA:77:38:7E:4A:3F:13:88:5A:6F:A1:DD:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2e:60:d5:6b:a3:8b:81:c0:0b:94:7e:5d:63:05:b1:9e:14: 30:be:dc:2b:cc:c0:26:43:a2:35:4d:aa:c8:27:10:67:55:a0: 30:b7:e4:c2:14:6d:7f:e3:74:75:cc:d2:3a:63:f4:99:9d:08: a9:82:82:9f:51:b6:73:e2:7b:c6:9a:79:dc:eb:9e:84:4f:d3: 5d:29:46:88:ad:b8:2e:34:b7:38:3e:98:b7:53:12:e4:02:88: 27:c8:bf:1b:92:cf:f0:9e:b6:f3:a2:00:6b:5c:34:0f:95:de: 59:d5:88:5e:c4:a8:5a:60:f5:d7:f9:32:d9:b1:d9:91:45:28: fe:29:94:7e:77:ed:96:b1:f9:ca:df:d0:07:02:84:67:2d:7c: ff:1c:a4:a9:95:6c:93:5b:07:82:fd:75:5b:4b:af:c4:a5:ba: e2:a7:5e:aa:58:0a:89:9b:d1:ce:98:c6:53:24:aa:78:6c:94: 0b:2d:3a:9d:1c:b9:b8:41:f4:87:ff:cb:4c:c0:82:70:37:7f: ee:89:15:7a:48:79:ce:f8:b6:e0:04:54:d2:63:fc:83:35:ec: d6:ec:0c:e5:49:33:8d:17:02:2c:8b:36:84:86:de:f8:ee:08: 35:7b:ae:b0:31:56:81:8f:93:e8:7c:ff:34:40:f7:3e:d7:ae: 3c:cb:24:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZcldppesPgXO0XawROMv1hUwNkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBNjIzNURCMDNFRjlDQTc3Mzg3RTRBM0YxMzg4NUE2 RkExREQwNzAeFw0yNjA0MjExMTI2MjZaFw0yNjA0MjQyMzExMjZaMDMxMTAvBgNV BAMTKDU0ODM2Q0ZBREFFNkRENTk0RDk3NjM3M0Q5QjM4QTRDQzIzNDdFNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDEiTprI8p+ISnvrxNyY1DtOdZ u/at4Q4thOwpgklSn4qo2jkEzV4xmCqUi5GNylyXA3JP2RfdMVL8y6j0TIZ3h2yg JNUWJfchoPv+BRhVUjjcsiYg3u979RDNDFdNTNt54xoB3NJUVwc8fkYqiozdy5D9 VQQ9p6s1P53J8Cd2wAi+MkJDK1eSd9WzyEuElegNwwxMBd4k2Spe3SBwI5a9QaEg Y+6iIn5G5TmkJE3JMDIht65KqRRNaqM9LxSuF1y7X24T5+x/iFyzDEkPbLVpjqXe XOGX6CLXbbgd0Tad2OKYFnXjPB9TbXvJMFm2Rtzbenw7rJFW/XFj70p37zfPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVINs+trm3VlNl2Nz2bOKTMI0fk8wHwYDVR0j BBgwFoAUlKYjXbA++cp3OH5KPxOIWm+h3QcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTM4OTVlMi00MDIwLTRjM2YtOTg3Zi1kYWNkZjhlOGVhMjkvMS85NEE2MjM1REIw M0VGOUNBNzczODdFNEEzRjEzODg1QTZGQTFERDA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTRBNjIzNURCMDNFRjlDQTc3Mzg3RTRBM0YxMzg4NUE2RkEx REQwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzEvOTRBNjIzNURCMDNFRjlDQTc3Mzg3RTRBM0YxMzg4 NUE2RkExREQwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4uYNVro4uBwAuUfl1jBbGeFDC+3CvMwCZD ojVNqsgnEGdVoDC35MIUbX/jdHXM0jpj9JmdCKmCgp9RtnPie8aaedzrnoRP010p RoituC40tzg+mLdTEuQCiCfIvxuSz/CetvOiAGtcNA+V3lnViF7EqFpg9df5Mtmx 2ZFFKP4plH537Zax+crf0AcChGctfP8cpKmVbJNbB4L9dVtLr8SluuKnXqpYComb 0c6YxlMkqnhslAstOp0cubhB9If/y0zAgnA3f+6JFXpIec74tuAEVNJj/IM17Nbs DOVJM40XAiyLNoSG3vjuCDV7rrAxVoGPk+h8/zRA9z7XrjzLJJA= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:34 2026 by rpki-client