$ rpki-client -vvf repo-rpki.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/94CD0552E50BF48CF5ADF68B11832854E09A7910.mft File: 94CD0552E50BF48CF5ADF68B11832854E09A7910.mft (raw, json) Hash identifier: vtjLzR995TE628d9yFPmrXeWWjDj996bEEXtNthNuP8= Subject key identifier: 1D:8B:81:A1:90:64:F9:65:B7:D8:42:F5:05:61:40:59:B9:E3:3A:7E Authority key identifier: 94:CD:05:52:E5:0B:F4:8C:F5:AD:F6:8B:11:83:28:54:E0:9A:79:10 Certificate issuer: /CN=94CD0552E50BF48CF5ADF68B11832854E09A7910 Certificate serial: 7F426F3C7AD79408E53B9B4DE6E57ED990D355EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94CD0552E50BF48CF5ADF68B11832854E09A7910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/94CD0552E50BF48CF5ADF68B11832854E09A7910.mft Manifest number: 15 Signing time: Thu 16 Apr 2026 00:01:18 +0000 Manifest this update: Wed 15 Apr 2026 23:56:18 +0000 Manifest next update: Sun 19 Apr 2026 05:08:18 +0000 Files and hashes: 1: 94CD0552E50BF48CF5ADF68B11832854E09A7910.crl (hash: DEbQuLMRqHB5UUjU1GVup4hmDfq1PSU2w+Xf60FOnUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/94CD0552E50BF48CF5ADF68B11832854E09A7910.crl rsync://repo-rpki.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/94CD0552E50BF48CF5ADF68B11832854E09A7910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94CD0552E50BF48CF5ADF68B11832854E09A7910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 05:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:42:6f:3c:7a:d7:94:08:e5:3b:9b:4d:e6:e5:7e:d9:90:d3:55:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94CD0552E50BF48CF5ADF68B11832854E09A7910 Validity Not Before: Apr 15 23:56:18 2026 GMT Not After : Apr 19 05:08:18 2026 GMT Subject: CN=1D8B81A19064F965B7D842F505614059B9E33A7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c9:a2:e9:0e:7c:b3:6e:7b:79:52:a0:04:98: 06:2b:1b:a8:58:7f:d8:94:94:8c:37:cd:9d:a1:6f: 70:fe:ed:62:fc:57:a5:2b:90:d0:bc:5a:6a:a4:cc: 88:d4:ca:bc:2f:ae:90:82:1a:4b:23:d6:8e:b3:9a: 6f:f4:34:e9:14:41:64:a1:d4:cb:30:bd:b2:b3:8e: c7:fd:d3:c9:cf:e7:da:10:8e:34:74:40:bb:ea:06: 97:bd:ed:b6:c5:61:79:22:04:85:dc:30:6a:f4:dc: 46:3a:ec:de:d1:9c:4e:a6:84:81:77:e5:73:4f:ae: 30:16:cb:b5:35:70:bc:6f:bc:60:c1:bc:fc:8f:70: 50:6b:5b:fd:e6:55:90:e0:67:88:96:2a:76:6a:53: 89:83:33:72:38:6b:10:4a:d3:34:ee:bb:23:01:e9: 50:29:c7:b9:01:53:73:eb:23:a9:6b:b4:90:34:81: e1:80:0f:0f:20:8c:1d:7f:5b:9f:5e:17:08:0e:82: f9:a9:8e:69:9b:d4:f2:e8:4a:57:de:6a:f7:df:40: c8:d9:ff:cd:2d:ee:1e:bb:1b:21:a4:f4:9f:dd:48: cd:84:25:b3:de:f8:4c:ab:2d:14:c3:af:7b:b6:b8: 5d:d1:57:e5:45:9d:9b:3a:1c:12:0f:c7:88:1a:a3: e8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8B:81:A1:90:64:F9:65:B7:D8:42:F5:05:61:40:59:B9:E3:3A:7E X509v3 Authority Key Identifier: keyid:94:CD:05:52:E5:0B:F4:8C:F5:AD:F6:8B:11:83:28:54:E0:9A:79:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/94CD0552E50BF48CF5ADF68B11832854E09A7910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94CD0552E50BF48CF5ADF68B11832854E09A7910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fd08b38-3f5f-4019-b2a3-23604f942c87/0/94CD0552E50BF48CF5ADF68B11832854E09A7910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:41:9c:56:c3:94:b2:53:6b:9e:a2:d7:3c:56:72:59:85:ab: 07:a0:e0:99:b1:b7:d9:bd:42:ea:49:96:26:29:63:40:0a:e5: 15:6b:db:f8:57:2d:3a:6b:1e:2c:c1:36:67:2a:43:74:ab:83: cb:d6:13:8c:38:d5:2c:60:26:73:2d:f8:93:e6:a6:ee:34:af: 66:cc:32:ee:e5:26:0c:45:94:a4:e5:6e:9a:f0:7c:03:c7:67: d1:7b:8b:8f:8f:ac:5e:e0:b2:83:a9:04:80:51:73:f9:70:73: 54:95:8e:7e:92:e9:21:d0:a9:bb:00:f6:96:bb:af:44:f9:9e: 2b:99:99:bd:b1:eb:ed:e1:4f:a7:da:00:1b:b5:60:6f:e8:0b: 88:01:a0:12:77:71:ff:fa:0d:fc:bf:c0:3e:70:8a:b4:cd:73: f3:3e:86:87:b1:f8:6b:4d:cf:67:a6:2b:90:11:62:22:f3:62: 16:92:0a:64:da:2f:74:c0:2f:9d:7e:81:d0:41:42:25:ad:75: fd:17:a0:59:8a:29:51:6b:60:b0:3d:3d:4a:08:18:70:54:f4: 68:c1:4a:f2:fa:9d:d0:60:9e:d1:86:9f:8d:68:e0:ef:88:43: fc:60:dd:ee:cb:93:25:f9:ab:f8:4a:6b:1d:47:2c:db:3f:6f: c7:de:48:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf0JvPHrXlAjlO5tN5uV+2ZDTVeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRDRDA1NTJFNTBCRjQ4Q0Y1QURGNjhCMTE4MzI4NTRF MDlBNzkxMDAeFw0yNjA0MTUyMzU2MThaFw0yNjA0MTkwNTA4MThaMDMxMTAvBgNV BAMTKDFEOEI4MUExOTA2NEY5NjVCN0Q4NDJGNTA1NjE0MDU5QjlFMzNBN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoyaLpDnyzbnt5UqAEmAYrG6hY f9iUlIw3zZ2hb3D+7WL8V6UrkNC8WmqkzIjUyrwvrpCCGksj1o6zmm/0NOkUQWSh 1MswvbKzjsf908nP59oQjjR0QLvqBpe97bbFYXkiBIXcMGr03EY67N7RnE6mhIF3 5XNPrjAWy7U1cLxvvGDBvPyPcFBrW/3mVZDgZ4iWKnZqU4mDM3I4axBK0zTuuyMB 6VApx7kBU3PrI6lrtJA0geGADw8gjB1/W59eFwgOgvmpjmmb1PLoSlfeavffQMjZ /80t7h67GyGk9J/dSM2EJbPe+EyrLRTDr3u2uF3RV+VFnZs6HBIPx4gao+ipAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHYuBoZBk+WW32EL1BWFAWbnjOn4wHwYDVR0j BBgwFoAUlM0FUuUL9Iz1rfaLEYMoVOCaeRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmQwOGIzOC0zZjVmLTQwMTktYjJhMy0yMzYwNGY5NDJjODcvMC85NENEMDU1MkU1 MEJGNDhDRjVBREY2OEIxMTgzMjg1NEUwOUE3OTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRDRDA1NTJFNTBCRjQ4Q0Y1QURGNjhCMTE4MzI4NTRFMDlB NzkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZkMDhiMzgtM2Y1Zi00MDE5LWIy YTMtMjM2MDRmOTQyYzg3LzAvOTRDRDA1NTJFNTBCRjQ4Q0Y1QURGNjhCMTE4MzI4 NTRFMDlBNzkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxBnFbDlLJTa56i1zxWclmFqweg4Jmxt9m9 QupJliYpY0AK5RVr2/hXLTprHizBNmcqQ3Srg8vWE4w41SxgJnMt+JPmpu40r2bM Mu7lJgxFlKTlbprwfAPHZ9F7i4+PrF7gsoOpBIBRc/lwc1SVjn6S6SHQqbsA9pa7 r0T5niuZmb2x6+3hT6faABu1YG/oC4gBoBJ3cf/6Dfy/wD5wirTNc/M+hoex+GtN z2emK5ARYiLzYhaSCmTaL3TAL51+gdBBQiWtdf0XoFmKKVFrYLA9PUoIGHBU9GjB SvL6ndBgntGGn41o4O+IQ/xg3e7LkyX5q/hKax1HLNs/b8feSGw= -----END CERTIFICATE-----Generated at Fri Apr 17 21:20:05 2026 by rpki-client