$ rpki-client -vvf repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft File: 94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft (raw, json) Hash identifier: J6z+buuRS2KvIpNkrSiFa2MWwdxy0x6GsBa3tio7M1U= Subject key identifier: 0F:87:BF:A5:8A:32:E4:74:DD:C8:58:36:41:A1:9A:6C:44:94:3C:61 Authority key identifier: 94:A6:23:5D:B0:3E:F9:CA:77:38:7E:4A:3F:13:88:5A:6F:A1:DD:07 Certificate issuer: /CN=94A6235DB03EF9CA77387E4A3F13885A6FA1DD07 Certificate serial: 07F9FC12FA58FDFAC596B29080DB58518C12794D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft Manifest number: 58 Signing time: Fri 17 Apr 2026 02:11:18 +0000 Manifest this update: Fri 17 Apr 2026 02:06:18 +0000 Manifest next update: Mon 20 Apr 2026 02:21:18 +0000 Files and hashes: 1: 94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.crl (hash: Rd+84C/J4fg5WipObvJLC+DAO8wOei+AT0Zs3aCM0UU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.crl rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 02:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:f9:fc:12:fa:58:fd:fa:c5:96:b2:90:80:db:58:51:8c:12:79:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94A6235DB03EF9CA77387E4A3F13885A6FA1DD07 Validity Not Before: Apr 17 02:06:18 2026 GMT Not After : Apr 20 02:21:18 2026 GMT Subject: CN=0F87BFA58A32E474DDC8583641A19A6C44943C61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:eb:b7:d0:f8:c6:f6:e5:54:43:fa:e5:38: c9:45:2c:a6:f4:20:70:8c:3f:8f:1f:8f:78:78:14: 23:d8:68:c1:a5:13:85:e4:4b:09:e1:64:f5:0c:d9: 03:6e:d4:fa:c5:2c:8c:d7:87:00:42:c2:a0:b5:b4: 5e:9a:ab:33:e0:16:6f:76:06:7c:12:0c:a7:2f:60: 0b:3b:3f:3b:28:aa:9d:8c:93:7c:5b:4e:7e:0e:be: f8:3c:4b:ac:45:02:01:f3:6e:e7:4c:f1:a9:5f:f9: 49:43:6c:c6:44:55:15:94:b0:66:3f:2e:ec:ff:27: d4:91:e2:70:1d:1b:f0:6c:0b:27:3a:37:ed:e6:10: 72:d2:37:90:de:65:fa:0b:17:52:4f:4a:4a:5d:3c: 7f:82:18:0d:de:30:91:7f:fa:78:11:b9:cd:f3:ef: 9b:38:4d:fd:4c:83:be:d6:3b:b9:bc:2a:bf:67:9c: 56:96:52:5a:8f:97:c7:39:c4:92:b4:a8:40:48:88: 15:a5:69:a8:db:37:80:0f:62:0d:de:1b:9b:30:fc: ad:e5:84:66:c9:5f:dc:f2:5e:91:ba:76:36:1a:7f: 7f:46:4f:19:23:38:65:d7:e7:50:9c:c7:a5:c9:c3: bf:49:11:36:f5:5e:d1:cb:69:1d:69:3b:fe:6f:48: e7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:87:BF:A5:8A:32:E4:74:DD:C8:58:36:41:A1:9A:6C:44:94:3C:61 X509v3 Authority Key Identifier: keyid:94:A6:23:5D:B0:3E:F9:CA:77:38:7E:4A:3F:13:88:5A:6F:A1:DD:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993895e2-4020-4c3f-987f-dacdf8e8ea29/1/94A6235DB03EF9CA77387E4A3F13885A6FA1DD07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ef:67:13:38:04:2a:ea:e6:cb:78:50:40:ab:0b:d6:c3:0f: 42:57:5d:b9:2a:f6:67:4a:94:41:18:44:2e:50:db:42:89:36: e0:69:14:aa:18:5b:ad:74:c3:c4:1b:d7:39:3e:d1:5f:e5:90: 3d:2e:b2:41:b6:ca:c6:5b:ac:6d:c2:18:6d:44:f8:16:e7:5c: b8:60:40:dc:fb:d9:c7:de:e4:38:55:8b:3b:80:52:4e:d0:a2: ae:a6:e3:c9:de:d8:27:01:75:a2:ad:06:64:da:ba:e1:5c:9b: ee:12:5a:c9:dd:00:be:72:77:d5:a7:da:9e:70:79:de:2a:c4: 42:8e:b1:b8:51:88:ec:2b:70:1f:8a:e4:3e:3e:87:3c:6c:94: d6:19:11:d5:f3:93:0b:e1:de:da:52:b7:9d:b9:ad:2c:e0:a0: e6:32:be:43:a1:a3:95:57:fc:50:26:e0:eb:19:2a:52:f6:9c: 6f:dd:6b:04:39:eb:bd:7a:54:0c:86:bf:af:5f:aa:c0:9e:d1: cb:f3:50:2b:87:42:d6:b6:f9:98:5e:01:fa:12:72:88:b5:b4: 18:f3:22:30:6a:81:46:7c:39:15:af:53:d1:24:06:e1:b5:a0: 42:4f:07:22:5e:e2:42:a5:cf:a3:49:58:2a:cb:9d:78:bc:1d: d2:50:4a:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB/n8EvpY/frFlrKQgNtYUYwSeU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBNjIzNURCMDNFRjlDQTc3Mzg3RTRBM0YxMzg4NUE2 RkExREQwNzAeFw0yNjA0MTcwMjA2MThaFw0yNjA0MjAwMjIxMThaMDMxMTAvBgNV BAMTKDBGODdCRkE1OEEzMkU0NzREREM4NTgzNjQxQTE5QTZDNDQ5NDNDNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2I+u30PjG9uVUQ/rlOMlFLKb0 IHCMP48fj3h4FCPYaMGlE4XkSwnhZPUM2QNu1PrFLIzXhwBCwqC1tF6aqzPgFm92 BnwSDKcvYAs7Pzsoqp2Mk3xbTn4Ovvg8S6xFAgHzbudM8alf+UlDbMZEVRWUsGY/ Luz/J9SR4nAdG/BsCyc6N+3mEHLSN5DeZfoLF1JPSkpdPH+CGA3eMJF/+ngRuc3z 75s4Tf1Mg77WO7m8Kr9nnFaWUlqPl8c5xJK0qEBIiBWlaajbN4APYg3eG5sw/K3l hGbJX9zyXpG6djYaf39GTxkjOGXX51Ccx6XJw79JETb1XtHLaR1pO/5vSOdlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD4e/pYoy5HTdyFg2QaGabESUPGEwHwYDVR0j BBgwFoAUlKYjXbA++cp3OH5KPxOIWm+h3QcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTM4OTVlMi00MDIwLTRjM2YtOTg3Zi1kYWNkZjhlOGVhMjkvMS85NEE2MjM1REIw M0VGOUNBNzczODdFNEEzRjEzODg1QTZGQTFERDA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTRBNjIzNURCMDNFRjlDQTc3Mzg3RTRBM0YxMzg4NUE2RkEx REQwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzODk1ZTItNDAyMC00YzNmLTk4 N2YtZGFjZGY4ZThlYTI5LzEvOTRBNjIzNURCMDNFRjlDQTc3Mzg3RTRBM0YxMzg4 NUE2RkExREQwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3vZxM4BCrq5st4UECrC9bDD0JXXbkq9mdK lEEYRC5Q20KJNuBpFKoYW610w8Qb1zk+0V/lkD0uskG2ysZbrG3CGG1E+BbnXLhg QNz72cfe5DhVizuAUk7Qoq6m48ne2CcBdaKtBmTauuFcm+4SWsndAL5yd9Wn2p5w ed4qxEKOsbhRiOwrcB+K5D4+hzxslNYZEdXzkwvh3tpSt525rSzgoOYyvkOho5VX /FAm4OsZKlL2nG/dawQ56716VAyGv69fqsCe0cvzUCuHQta2+ZheAfoScoi1tBjz IjBqgUZ8ORWvU9EkBuG1oEJPByJe4kKlz6NJWCrLnXi8HdJQSsU= -----END CERTIFICATE-----Generated at Fri Apr 17 13:09:05 2026 by rpki-client