$ rpki-client -vvf repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft File: 94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft (raw, json) Hash identifier: 534ClrGU9KfqzAkU4dHwJiyM9UxVNYPsAIT2gyjvRW0= Subject key identifier: 01:A0:59:53:47:6D:85:DE:34:F0:7A:7A:7E:21:CA:E5:F3:25:1D:02 Authority key identifier: 94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42 Certificate issuer: /CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42 Certificate serial: 0DA3375768F61B26BE96C56C5EF12E6EF8BC6189 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft Manifest number: 0566 Signing time: Fri 17 Apr 2026 18:41:00 +0000 Manifest this update: Fri 17 Apr 2026 18:36:00 +0000 Manifest next update: Tue 21 Apr 2026 05:58:00 +0000 Files and hashes: 1: 94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl (hash: 9PUf7Z3eHuMA9DV9L7+H3+wGRHHPC6+/9tXj2alOuqQ=) 2: 3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa (hash: JjtMSSCssV5HqQAouXYm4WHr16DMfc7UE3Z2A9weGck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 05:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:a3:37:57:68:f6:1b:26:be:96:c5:6c:5e:f1:2e:6e:f8:bc:61:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42 Validity Not Before: Apr 17 18:36:00 2026 GMT Not After : Apr 21 05:58:00 2026 GMT Subject: CN=01A05953476D85DE34F07A7A7E21CAE5F3251D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c4:5c:81:8c:94:56:a2:e6:30:d6:a9:5f:c2: 87:ab:dc:da:a9:a9:39:44:da:c2:8c:6f:8f:30:8c: 6a:b3:41:2c:3c:97:34:7e:46:06:39:54:5e:86:a8: 37:b2:65:8e:c7:66:0a:12:81:d9:cb:fc:7d:27:1f: 28:19:9d:32:f2:9b:a0:c4:3c:51:45:e8:e8:da:5c: 01:01:9a:15:74:ee:17:62:d9:11:6d:c1:3d:03:e4: d8:27:6c:bb:26:c1:65:96:aa:b8:4e:4a:b0:7a:c6: c1:7a:dc:c3:39:ce:8f:e4:d5:a3:50:d1:f5:80:af: 11:b2:76:2a:18:f9:ad:e5:52:1e:65:34:db:69:b3: a0:df:6f:15:ba:57:f1:de:2a:94:65:02:3e:21:c7: 82:73:da:07:6f:aa:d4:a1:9e:1c:a3:77:5c:a9:e7: 33:f9:87:1b:f1:e9:b9:96:89:68:d4:d7:8f:e5:15: 06:fe:da:e5:e9:3b:25:50:6b:31:91:31:be:c5:ff: 6b:01:9a:f7:b7:ec:6c:d6:3e:d1:51:07:9c:d7:22: 88:d6:f4:19:cb:5c:88:fb:97:c8:89:64:ba:f0:08: 1f:02:87:10:85:cc:c2:fb:cb:51:2b:aa:6d:0d:00: b3:33:a6:6f:7f:18:8c:4d:7f:73:e0:8f:2e:29:86: 96:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A0:59:53:47:6D:85:DE:34:F0:7A:7A:7E:21:CA:E5:F3:25:1D:02 X509v3 Authority Key Identifier: keyid:94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:7a:ad:3c:db:3d:fd:2f:ff:a5:52:b0:db:82:e8:62:9e:79: f2:cb:9f:0a:fc:91:d4:26:a3:e4:e3:05:20:42:92:e8:4a:fb: 36:b3:56:02:b9:45:b8:82:a3:1f:75:4d:aa:32:d2:7b:85:1e: 97:5d:25:5a:00:63:be:a6:13:c0:57:2e:06:09:53:86:fb:e8: a4:82:90:76:ab:a6:cb:d0:4e:ba:56:86:4d:cc:3a:64:93:5f: 16:e1:51:23:78:a1:31:eb:2e:bf:d1:95:d7:74:8f:e9:db:36: 8b:61:12:fd:94:d7:16:94:47:6f:16:d1:6b:63:4b:ef:e7:87: ac:8b:e3:32:e3:72:88:bf:6c:c8:7b:43:72:6a:92:3b:5c:49: 65:e0:21:4b:8a:bb:1b:51:d0:fe:1c:e0:fd:59:52:e8:61:b2: 4f:c5:e1:2c:77:d4:90:24:00:84:1e:20:af:c1:41:fb:fb:a9: 65:d8:41:8a:a9:aa:b0:2c:f8:0c:ae:d1:8c:bf:93:3d:91:20: e0:6b:e1:29:a5:7a:98:99:24:f9:08:e6:12:f7:57:8d:f0:34: 59:2f:ca:0c:e3:8d:d9:69:6f:0c:96:c3:03:0f:10:86:c9:3f: 5a:77:2c:83:0a:8f:33:c3:53:c0:cd:b1:65:86:8c:9d:a8:b2: 25:66:34:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDaM3V2j2Gya+lsVsXvEubvi8YYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUzNUI5 OTdGMkE0MjAeFw0yNjA0MTcxODM2MDBaFw0yNjA0MjEwNTU4MDBaMDMxMTAvBgNV BAMTKDAxQTA1OTUzNDc2RDg1REUzNEYwN0E3QTdFMjFDQUU1RjMyNTFEMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3xFyBjJRWouYw1qlfwoer3Nqp qTlE2sKMb48wjGqzQSw8lzR+RgY5VF6GqDeyZY7HZgoSgdnL/H0nHygZnTLym6DE PFFF6OjaXAEBmhV07hdi2RFtwT0D5NgnbLsmwWWWqrhOSrB6xsF63MM5zo/k1aNQ 0fWArxGydioY+a3lUh5lNNtps6DfbxW6V/HeKpRlAj4hx4Jz2gdvqtShnhyjd1yp 5zP5hxvx6bmWiWjU14/lFQb+2uXpOyVQazGRMb7F/2sBmve37GzWPtFRB5zXIojW 9BnLXIj7l8iJZLrwCB8ChxCFzML7y1Erqm0NALMzpm9/GIxNf3Pgjy4phpa5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAaBZU0dthd408Hp6fiHK5fMlHQIwHwYDVR0j BBgwFoAUlO2ksjYLR9xlOG4+frrjW5l/KkIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJmNzE4ZC05MTFlLTQzZDYtOGUzYy0wZDFiMzY0NmUyNzYvMC85NEVEQTRCMjM2 MEI0N0RDNjUzODZFM0U3RUJBRTM1Qjk5N0YyQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUzNUI5OTdG MkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViZjcxOGQtOTExZS00M2Q2LThl M2MtMGQxYjM2NDZlMjc2LzAvOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUz NUI5OTdGMkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEF6rTzbPf0v/6VSsNuC6GKeefLLnwr8kdQm o+TjBSBCkuhK+zazVgK5RbiCox91Taoy0nuFHpddJVoAY76mE8BXLgYJU4b76KSC kHarpsvQTrpWhk3MOmSTXxbhUSN4oTHrLr/Rldd0j+nbNothEv2U1xaUR28W0Wtj S+/nh6yL4zLjcoi/bMh7Q3JqkjtcSWXgIUuKuxtR0P4c4P1ZUuhhsk/F4Sx31JAk AIQeIK/BQfv7qWXYQYqpqrAs+Ayu0Yy/kz2RIOBr4SmlepiZJPkI5hL3V43wNFkv ygzjjdlpbwyWwwMPEIbJP1p3LIMKjzPDU8DNsWWGjJ2osiVmNMw= -----END CERTIFICATE-----Generated at Sun Apr 19 13:03:14 2026 by rpki-client