$ rpki-client -vvf repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft File: 94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft (raw, json) Hash identifier: rmTHsaJujxAFx9Ej0uAyx9oLaWVI7jhTw+eGVbz9xjc= Subject key identifier: F1:E2:0E:7F:51:9A:9C:B9:EC:7C:3C:3F:60:32:37:5E:30:A7:33:24 Authority key identifier: 94:A6:23:5D:B0:3E:F9:CA:77:38:7E:4A:3F:13:88:5A:6F:A1:DD:07 Certificate issuer: /CN=94A6235DB03EF9CA77387E4A3F13885A6FA1DD07 Certificate serial: 5631B5EBAD9A565970A592AF6E0F70EF0C5EE4C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft Manifest number: 44 Signing time: Mon 02 Mar 2026 08:11:16 +0000 Manifest this update: Mon 02 Mar 2026 08:06:16 +0000 Manifest next update: Thu 05 Mar 2026 13:27:16 +0000 Files and hashes: 1: 94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.crl (hash: nXGgchKnEQZKRK83bjke2JTd62TliGYHpxbK7byLuXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.crl rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:31:b5:eb:ad:9a:56:59:70:a5:92:af:6e:0f:70:ef:0c:5e:e4:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94A6235DB03EF9CA77387E4A3F13885A6FA1DD07 Validity Not Before: Mar 2 08:06:16 2026 GMT Not After : Mar 5 13:27:16 2026 GMT Subject: CN=F1E20E7F519A9CB9EC7C3C3F6032375E30A73324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:77:d2:71:c5:4f:5b:9c:12:bf:80:1e:eb:f6: 56:09:05:06:05:a5:ad:5c:ee:3d:b6:6f:0b:cf:c3: 2d:de:86:da:c7:e6:a8:cb:bf:4e:2a:d9:5b:7f:4e: 80:e8:2a:16:ce:f2:b5:60:54:0f:2e:b4:32:22:70: 82:ea:5d:78:c7:a5:30:f0:ea:04:5d:8b:0c:47:b4: b9:ff:69:8c:76:cf:2d:51:2a:ff:5a:f0:f1:b7:d4: 72:57:ff:61:39:5c:d7:84:c3:e0:92:21:b1:de:d1: 41:86:1a:ee:0d:76:79:cb:95:0c:34:db:76:50:03: 3c:af:39:36:15:ac:be:1b:b2:32:e3:96:75:d4:c4: 23:ff:44:67:ce:2d:be:b3:8e:bf:b3:b3:96:0d:2a: 2a:1d:5c:68:3f:92:13:38:2b:ca:ca:e7:d9:c8:af: 93:5c:05:6f:fd:e4:07:7d:cf:bf:cb:4d:23:68:03: e7:44:14:28:55:b8:7f:20:8b:b7:c4:21:0f:13:d1: 73:9f:5d:f9:b8:7c:9e:7e:75:65:df:d1:f0:d4:67: 9c:2a:42:ce:19:3f:7f:44:79:1d:a8:10:68:01:02: 81:58:9a:70:62:34:8c:00:bd:44:de:14:e0:48:7b: 67:1c:17:1c:2d:97:1f:2c:da:c3:b5:be:33:a6:60: 19:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E2:0E:7F:51:9A:9C:B9:EC:7C:3C:3F:60:32:37:5E:30:A7:33:24 X509v3 Authority Key Identifier: keyid:94:A6:23:5D:B0:3E:F9:CA:77:38:7E:4A:3F:13:88:5A:6F:A1:DD:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:74:d3:94:8b:5f:bf:9e:5a:66:e5:36:f5:29:11:85:07:be: df:2e:b6:de:d3:24:ef:83:7d:fd:18:8d:5a:61:75:23:73:00: 01:b0:3c:8d:9b:63:83:75:42:cf:5f:1a:f3:54:e7:c5:72:7a: 76:38:f7:4b:c3:c1:85:fa:cd:7c:ea:dc:5f:e2:ff:b4:3c:46: 41:8a:cf:44:25:2d:4e:c7:6e:7b:15:8a:71:3d:6e:32:a6:e3: 3d:73:59:bf:bf:3f:ce:8f:25:b4:b6:7a:2f:77:7d:21:0b:32: 22:fe:cf:c1:0c:6a:51:b8:1d:4c:ee:0c:c0:ce:4c:99:d1:87: e8:80:fd:32:f5:b3:cf:ad:67:56:12:3c:3d:14:b5:6c:18:50: 12:1e:d9:f5:85:c7:91:15:67:25:d1:b7:cd:9b:72:a3:3a:18: 61:1f:3e:cf:2b:28:ad:34:9a:e4:1f:ad:e7:e5:59:20:4d:d4: a1:24:59:74:30:88:eb:c3:15:2b:86:bd:c6:23:a3:22:be:c4: 8d:44:53:19:4d:41:6a:f3:06:3a:82:50:ff:3b:a1:ed:01:71: 15:db:01:b4:be:23:5d:61:7c:a3:5e:b5:e8:a9:22:c2:d8:d2: 96:e2:54:2b:ee:33:f6:23:47:2a:a8:27:e6:c2:4b:8a:1f:40: d8:62:9d:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVjG1662aVllwpZKvbg9w7wxe5McwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBNjIzNURCMDNFRjlDQTc3Mzg3RTRBM0YxMzg4NUE2 RkExREQwNzAeFw0yNjAzMDIwODA2MTZaFw0yNjAzMDUxMzI3MTZaMDMxMTAvBgNV BAMTKEYxRTIwRTdGNTE5QTlDQjlFQzdDM0MzRjYwMzIzNzVFMzBBNzMzMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKd9JxxU9bnBK/gB7r9lYJBQYF pa1c7j22bwvPwy3ehtrH5qjLv04q2Vt/ToDoKhbO8rVgVA8utDIicILqXXjHpTDw 6gRdiwxHtLn/aYx2zy1RKv9a8PG31HJX/2E5XNeEw+CSIbHe0UGGGu4NdnnLlQw0 23ZQAzyvOTYVrL4bsjLjlnXUxCP/RGfOLb6zjr+zs5YNKiodXGg/khM4K8rK59nI r5NcBW/95Ad9z7/LTSNoA+dEFChVuH8gi7fEIQ8T0XOfXfm4fJ5+dWXf0fDUZ5wq Qs4ZP39EeR2oEGgBAoFYmnBiNIwAvUTeFOBIe2ccFxwtlx8s2sO1vjOmYBmNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8eIOf1GanLnsfDw/YDI3XjCnMyQwHwYDVR0j BBgwFoAUlKYjXbA++cp3OH5KPxOIWm+h3QcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTM4OTVlMi00MDIwLTRjM2YtOTg3Zi1kYWNkZjhlOGVhMjkvMS85NEE2MjM1REIw M0VGOUNBNzczODdFNEEzRjEzODg1QTZGQTFERDA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTRBNjIzNURCMDNFRjlDQTc3Mzg3RTRBM0YxMzg4NUE2RkEx REQwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzEvOTRBNjIzNURCMDNFRjlDQTc3Mzg3RTRBM0YxMzg4 NUE2RkExREQwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADV005SLX7+eWmblNvUpEYUHvt8utt7TJO+D ff0YjVphdSNzAAGwPI2bY4N1Qs9fGvNU58VyenY490vDwYX6zXzq3F/i/7Q8RkGK z0QlLU7HbnsVinE9bjKm4z1zWb+/P86PJbS2ei93fSELMiL+z8EMalG4HUzuDMDO TJnRh+iA/TL1s8+tZ1YSPD0UtWwYUBIe2fWFx5EVZyXRt82bcqM6GGEfPs8rKK00 muQfreflWSBN1KEkWXQwiOvDFSuGvcYjoyK+xI1EUxlNQWrzBjqCUP87oe0BcRXb AbS+I11hfKNeteipIsLY0pbiVCvuM/YjRyqoJ+bCS4ofQNhinag= -----END CERTIFICATE-----Generated at Mon Mar 2 17:08:00 2026 by rpki-client