$ rpki-client -vvvf rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft File: 094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft (raw, json) Hash identifier: 2K8fll0dkrGaLot7ovaOPkxqY30ags5WZgFOpoqzmZc= Subject key identifier: D9:C9:77:99:9E:A1:BE:12:4A:3E:D4:48:29:2C:B0:78:7C:35:15:EE Authority key identifier: 09:4E:51:1C:E5:BE:87:8C:FC:AE:B4:25:6D:66:BE:1A:6D:E6:5B:37 Certificate issuer: /CN=094E511CE5BE878CFCAEB4256D66BE1A6DE65B37 Certificate serial: 5D2B354F2172462E1249F73E1E6A614E707DAD55 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 00:35:51 +0000 Manifest this update: Fri 25 Sep 2026 00:30:51 +0000 Manifest next update: Sat 26 Sep 2026 01:41:51 +0000 Files and hashes: 1: 094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.crl (hash: 57rnzLBLUkrNRrlyrlifez9c5YVASeZa2tqaVIQTgdI=) 2: 3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (hash: nfQjjeUU0bmWsXIN6glyvpvB8OwmrnZCIcDr2PMemtI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.crl rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 01:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:2b:35:4f:21:72:46:2e:12:49:f7:3e:1e:6a:61:4e:70:7d:ad:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094E511CE5BE878CFCAEB4256D66BE1A6DE65B37 Validity Not Before: Sep 25 00:30:51 2026 GMT Not After : Sep 26 01:41:51 2026 GMT Subject: CN=D9C977999EA1BE124A3ED448292CB0787C3515EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:56:cf:d3:fd:5a:e2:09:45:8a:a2:b8:71:47: bb:53:d6:3f:f7:52:30:04:5f:58:ec:45:20:ac:8f: 71:a6:71:5c:99:ea:cf:16:de:5b:b9:35:5f:7a:02: 71:9d:36:93:8c:e2:f0:2d:d2:25:d4:9f:1a:4c:bc: fd:9e:8b:7d:eb:e7:c5:0b:2e:57:f1:30:c6:8e:21: 98:13:1f:6b:82:84:e3:70:b2:ea:a2:86:d7:08:57: 5a:49:ad:ec:5a:0f:68:4d:a7:93:80:9a:d6:3f:ec: e1:92:5b:5a:cc:f9:66:46:0e:99:bc:bc:ce:fd:93: 36:87:d6:08:00:f6:68:ae:7b:fa:fb:b9:de:80:50: ef:42:02:99:33:9f:dd:b3:fc:53:31:08:19:63:19: 4a:25:4d:b5:4a:c4:6a:23:c6:92:8d:6d:9a:c6:5c: be:0a:a6:15:25:7c:5f:46:6d:c5:72:f6:d9:87:aa: 13:b9:bc:89:53:26:b5:78:6c:f2:56:cc:8b:23:c9: 63:ae:3d:58:e6:77:2a:37:e2:61:f6:72:24:ab:a4: fb:79:b5:ca:d1:7c:d0:9a:42:e6:39:6a:af:2c:d2: b8:4c:2e:b9:bc:29:a1:3c:80:1d:f0:34:aa:2d:fa: 32:6c:f9:63:a1:cb:29:87:e4:8a:32:16:93:2e:b4: 91:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C9:77:99:9E:A1:BE:12:4A:3E:D4:48:29:2C:B0:78:7C:35:15:EE X509v3 Authority Key Identifier: keyid:09:4E:51:1C:E5:BE:87:8C:FC:AE:B4:25:6D:66:BE:1A:6D:E6:5B:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:b0:9b:fc:b6:4f:f6:68:ff:09:12:45:94:e9:27:f2:77:21: eb:e7:bf:42:eb:49:fa:9c:5b:92:e3:d6:f2:8b:03:9b:c7:49: 13:52:34:7a:3f:88:ce:0b:86:16:45:1a:9b:e9:56:e3:cd:76: cb:4a:66:a0:d4:05:bb:f1:c2:4b:b5:e8:d0:54:9e:f5:ab:76: 8d:bb:be:c1:bb:a0:fd:08:7b:da:a0:98:72:8d:e6:8f:63:9e: 12:2e:2c:fc:34:91:c4:c4:95:7c:6c:83:e0:69:e7:5f:22:76: 8a:40:a3:88:ca:2e:89:f1:ce:5f:1e:e8:72:df:e3:fb:38:4a: 27:60:4d:f3:3c:fd:b4:3d:ec:65:0c:64:40:da:44:dc:e6:1c: cb:b9:dd:df:bf:2b:86:1d:77:58:32:fe:9b:ef:eb:88:80:0f: 72:b8:7c:c3:09:f1:d4:68:5f:d7:52:df:44:05:06:f1:c7:9a: b3:1c:c3:56:3f:2b:62:b9:0c:1f:d3:31:47:99:8a:8d:3d:b7: 8c:0a:07:f6:34:ab:f8:e0:03:ff:5a:a8:26:ad:74:1a:9d:11: cc:c5:5b:f0:b8:e3:0b:7f:6a:6a:67:5c:71:99:67:39:16:51: 54:55:69:5e:36:2c:9f:b0:ed:39:7b:e7:e4:4b:75:f1:2c:f8: 22:88:cd:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXSs1TyFyRi4SSfc+HmphTnB9rVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0RTUxMUNFNUJFODc4Q0ZDQUVCNDI1NkQ2NkJFMUE2 REU2NUIzNzAeFw0yNjA5MjUwMDMwNTFaFw0yNjA5MjYwMTQxNTFaMDMxMTAvBgNV BAMTKEQ5Qzk3Nzk5OUVBMUJFMTI0QTNFRDQ0ODI5MkNCMDc4N0MzNTE1RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYVs/T/VriCUWKorhxR7tT1j/3 UjAEX1jsRSCsj3GmcVyZ6s8W3lu5NV96AnGdNpOM4vAt0iXUnxpMvP2ei33r58UL LlfxMMaOIZgTH2uChONwsuqihtcIV1pJrexaD2hNp5OAmtY/7OGSW1rM+WZGDpm8 vM79kzaH1ggA9miue/r7ud6AUO9CApkzn92z/FMxCBljGUolTbVKxGojxpKNbZrG XL4KphUlfF9GbcVy9tmHqhO5vIlTJrV4bPJWzIsjyWOuPVjmdyo34mH2ciSrpPt5 tcrRfNCaQuY5aq8s0rhMLrm8KaE8gB3wNKot+jJs+WOhyymH5IoyFpMutJFhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2cl3mZ6hvhJKPtRIKSyweHw1Fe4wHwYDVR0j BBgwFoAUCU5RHOW+h4z8rrQlbWa+Gm3mWzcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDUyNjA2NDEtYmNlMi00NDVjLTlkZTUtMzcwYTc4N2Y5NTMwLzAvMDk0RTUxMUNF NUJFODc4Q0ZDQUVCNDI1NkQ2NkJFMUE2REU2NUIzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTRFNTExQ0U1QkU4NzhDRkNBRUI0MjU2RDY2QkUxQTZERTY1 QjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDUyNjA2NDEtYmNlMi00NDVjLTlk ZTUtMzcwYTc4N2Y5NTMwLzAvMDk0RTUxMUNFNUJFODc4Q0ZDQUVCNDI1NkQ2NkJF MUE2REU2NUIzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESwm/y2T/Zo/wkSRZTpJ/J3Ievnv0LrSfqc W5Lj1vKLA5vHSRNSNHo/iM4LhhZFGpvpVuPNdstKZqDUBbvxwku16NBUnvWrdo27 vsG7oP0Ie9qgmHKN5o9jnhIuLPw0kcTElXxsg+Bp518idopAo4jKLonxzl8e6HLf 4/s4SidgTfM8/bQ97GUMZEDaRNzmHMu53d+/K4Ydd1gy/pvv64iAD3K4fMMJ8dRo X9dS30QFBvHHmrMcw1Y/K2K5DB/TMUeZio09t4wKB/Y0q/jgA/9aqCatdBqdEczF W/C44wt/ampnXHGZZzkWUVRVaV42LJ+w7Tl75+RLdfEs+CKIzZw= -----END CERTIFICATE-----Generated at Fri Sep 25 10:40:38 2026 by rpki-client