$ rpki-client -vvf repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft File: 94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft (raw, json) Hash identifier: sp6AVPFFfXfRY0YVKgvPSrBOtMvE24d8IHvqA3DIr6E= Subject key identifier: 0D:F5:D7:8C:B6:FD:87:50:7A:8D:F4:24:C9:2A:4E:D6:41:28:D0:A5 Authority key identifier: 94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42 Certificate issuer: /CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42 Certificate serial: 6B668BD1567F3847A6B29FADD6577DA139C461E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft Manifest number: 0551 Signing time: Sun 01 Mar 2026 08:10:56 +0000 Manifest this update: Sun 01 Mar 2026 08:05:56 +0000 Manifest next update: Wed 04 Mar 2026 13:47:56 +0000 Files and hashes: 1: 3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa (hash: JjtMSSCssV5HqQAouXYm4WHr16DMfc7UE3Z2A9weGck=) 2: 94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl (hash: xwT9zyn2CKsP3tEuahGBH5dyQbGIy+iUS8bo0kKfbZE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:66:8b:d1:56:7f:38:47:a6:b2:9f:ad:d6:57:7d:a1:39:c4:61:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42 Validity Not Before: Mar 1 08:05:56 2026 GMT Not After : Mar 4 13:47:56 2026 GMT Subject: CN=0DF5D78CB6FD87507A8DF424C92A4ED64128D0A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:81:81:ed:84:44:ca:9f:c0:66:a9:d9:6c:20: 18:0d:39:a2:64:64:c1:1e:7c:17:fb:c2:13:70:d6: 31:9b:17:28:38:2f:e8:9d:f3:b5:d3:27:a2:94:c7: df:a3:e3:8b:d8:87:b1:53:58:82:e7:b7:68:05:a8: 72:a2:79:b0:b1:c9:a7:34:67:53:67:18:e6:54:a6: 04:b8:8d:2e:cc:76:8c:b1:48:7c:69:31:de:6f:86: fe:b4:4a:55:e1:af:0f:ad:63:2f:bc:b9:85:dd:03: 28:57:8c:8a:3c:83:f1:18:30:fa:4a:73:3d:f7:48: ef:64:06:d7:4e:82:88:d1:c4:3a:34:d0:31:5a:b8: d8:e0:19:9d:df:71:b8:29:48:0f:6f:76:d3:ac:ec: 94:d7:b9:65:04:fd:84:77:01:51:86:70:30:e5:c8: 71:cb:85:9d:d4:0b:e0:8c:25:aa:7e:13:cd:17:90: 33:30:5d:0c:19:9a:55:84:36:86:ee:70:eb:c4:61: 82:81:d0:06:86:0a:12:8f:70:0d:78:6e:ef:23:ef: 2c:3d:16:c7:bb:e0:35:f2:5c:bf:dc:83:98:c9:0e: 9a:5d:90:96:0e:c1:99:fc:c9:36:5d:08:a1:94:15: 71:e3:0c:8c:ec:a5:b6:6f:b7:55:f6:07:13:24:ae: 01:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F5:D7:8C:B6:FD:87:50:7A:8D:F4:24:C9:2A:4E:D6:41:28:D0:A5 X509v3 Authority Key Identifier: keyid:94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:39:d6:c1:f5:2f:b3:17:92:8b:8f:37:b2:6e:74:f1:61:8c: 47:5b:03:e8:e3:da:28:20:e8:57:d9:b1:ce:e7:83:90:42:1c: 0a:db:02:93:5e:14:7b:f6:e6:c6:3c:3a:e8:ae:7b:35:dd:ca: 4d:d6:ea:26:27:de:fe:2a:f3:30:fa:a7:cb:bd:e7:10:8b:22: dc:a3:ec:ba:48:0a:49:13:e4:9c:ef:7f:a5:c1:e4:1a:c5:60: 00:88:00:0d:98:85:ac:b5:ed:8e:63:81:98:de:02:2f:f4:4b: bc:3d:29:07:8f:30:46:be:00:66:99:73:6b:2c:ef:b1:f7:e4: 42:37:af:90:5d:6a:1d:1c:db:f7:ee:98:1b:64:92:3f:3a:67: 63:98:98:95:55:06:81:8e:8c:1d:b5:d0:ee:64:fb:38:49:1a: b5:4e:8a:50:5f:a9:a6:5e:81:f6:89:47:be:0b:ea:7c:33:c4: 06:01:79:ba:2e:18:b6:a5:6f:e1:4f:4d:4c:41:aa:03:a9:41: a3:12:22:ea:84:61:a1:99:40:6c:b6:77:d9:bc:80:eb:6d:31: e5:56:69:bd:0d:d4:c7:2b:00:a9:59:2c:f0:c8:a3:48:dd:ba: 13:52:ea:c4:dc:fb:de:8d:35:6b:b9:29:b4:01:d2:6d:fa:b6: 7d:59:d3:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa2aL0VZ/OEemsp+t1ld9oTnEYeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUzNUI5 OTdGMkE0MjAeFw0yNjAzMDEwODA1NTZaFw0yNjAzMDQxMzQ3NTZaMDMxMTAvBgNV BAMTKDBERjVENzhDQjZGRDg3NTA3QThERjQyNEM5MkE0RUQ2NDEyOEQwQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDgYHthETKn8BmqdlsIBgNOaJk ZMEefBf7whNw1jGbFyg4L+id87XTJ6KUx9+j44vYh7FTWILnt2gFqHKiebCxyac0 Z1NnGOZUpgS4jS7MdoyxSHxpMd5vhv60SlXhrw+tYy+8uYXdAyhXjIo8g/EYMPpK cz33SO9kBtdOgojRxDo00DFauNjgGZ3fcbgpSA9vdtOs7JTXuWUE/YR3AVGGcDDl yHHLhZ3UC+CMJap+E80XkDMwXQwZmlWENobucOvEYYKB0AaGChKPcA14bu8j7yw9 Fse74DXyXL/cg5jJDppdkJYOwZn8yTZdCKGUFXHjDIzspbZvt1X2BxMkrgFRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDfXXjLb9h1B6jfQkySpO1kEo0KUwHwYDVR0j BBgwFoAUlO2ksjYLR9xlOG4+frrjW5l/KkIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJmNzE4ZC05MTFlLTQzZDYtOGUzYy0wZDFiMzY0NmUyNzYvMC85NEVEQTRCMjM2 MEI0N0RDNjUzODZFM0U3RUJBRTM1Qjk5N0YyQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUzNUI5OTdG MkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViZjcxOGQtOTExZS00M2Q2LThl M2MtMGQxYjM2NDZlMjc2LzAvOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUz NUI5OTdGMkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD451sH1L7MXkouPN7JudPFhjEdbA+jj2igg 6FfZsc7ng5BCHArbApNeFHv25sY8OuiuezXdyk3W6iYn3v4q8zD6p8u95xCLItyj 7LpICkkT5Jzvf6XB5BrFYACIAA2Yhay17Y5jgZjeAi/0S7w9KQePMEa+AGaZc2ss 77H35EI3r5Bdah0c2/fumBtkkj86Z2OYmJVVBoGOjB210O5k+zhJGrVOilBfqaZe gfaJR74L6nwzxAYBebouGLalb+FPTUxBqgOpQaMSIuqEYaGZQGy2d9m8gOttMeVW ab0N1McrAKlZLPDIo0jduhNS6sTc+96NNWu5KbQB0m36tn1Z0wI= -----END CERTIFICATE-----Generated at Mon Mar 2 14:37:59 2026 by rpki-client