$ rpki-client -vvf rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft File: 094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft (raw, json) Hash identifier: nwKalDJS5XzbMeFVctD6p/46McOH/lOG5fkmyXq12BI= Subject key identifier: 43:D4:31:6A:99:96:FC:44:72:D2:3B:C7:75:11:37:44:48:28:0C:2C Authority key identifier: 09:4E:51:1C:E5:BE:87:8C:FC:AE:B4:25:6D:66:BE:1A:6D:E6:5B:37 Certificate issuer: /CN=094E511CE5BE878CFCAEB4256D66BE1A6DE65B37 Certificate serial: 0D0B60E7A0D17EE125A79E676EBD7134744ABB85 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:37:32 +0000 Manifest this update: Tue 12 May 2026 17:32:32 +0000 Manifest next update: Wed 13 May 2026 18:14:32 +0000 Files and hashes: 1: 094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.crl (hash: 8ZIzla8FyLaszAT1A58wzVyJGiRzls701VQEwoWySUc=) 2: 3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (hash: nfQjjeUU0bmWsXIN6glyvpvB8OwmrnZCIcDr2PMemtI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.crl rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:0b:60:e7:a0:d1:7e:e1:25:a7:9e:67:6e:bd:71:34:74:4a:bb:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094E511CE5BE878CFCAEB4256D66BE1A6DE65B37 Validity Not Before: May 12 17:32:32 2026 GMT Not After : May 13 18:14:32 2026 GMT Subject: CN=43D4316A9996FC4472D23BC77511374448280C2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f0:bf:30:aa:3b:a2:e7:25:4b:18:db:30:b3: 97:3d:2e:7a:4d:3a:42:e7:2d:43:ad:3c:d8:c1:ec: 6e:7e:19:6b:b6:25:b5:6b:e6:00:73:77:b7:bd:a3: c8:95:80:9d:e0:b7:8d:49:47:f3:65:4a:d1:f8:36: 90:cd:09:ab:b2:c5:7b:97:03:47:64:b6:04:24:e1: c4:b8:7a:05:62:0f:33:40:ca:40:45:e7:31:1d:e8: 3c:04:67:a9:9a:b1:d3:1c:3c:bc:a1:a2:6a:1b:fe: 05:6c:68:46:ca:ce:b1:41:99:61:ba:54:00:e6:e7: fd:44:93:f4:ac:9b:fa:bd:7b:75:42:fd:6b:89:13: f0:22:49:a2:53:05:a2:76:65:45:97:94:c6:e8:df: 09:92:e7:7c:9d:12:bb:32:e7:51:bd:e7:a4:90:ae: ba:b7:de:67:f0:22:9f:4c:77:20:cb:8f:87:62:75: b8:80:dd:1f:de:de:5a:56:eb:a7:0c:d3:0e:9e:52: 4d:2c:c4:17:1f:6c:bc:de:54:41:b1:34:1c:85:c9: 8a:67:9b:13:0f:6a:58:d6:45:0a:4d:17:44:8e:ad: 02:af:1a:49:89:63:52:99:cd:c3:72:10:c1:fd:02: 8b:38:ea:16:5d:20:29:6e:66:60:e0:2c:c8:80:40: fc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D4:31:6A:99:96:FC:44:72:D2:3B:C7:75:11:37:44:48:28:0C:2C X509v3 Authority Key Identifier: keyid:09:4E:51:1C:E5:BE:87:8C:FC:AE:B4:25:6D:66:BE:1A:6D:E6:5B:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:fc:d0:1b:26:05:bb:e5:ff:ac:09:c3:bc:cb:59:f6:0e:33: 5c:90:a3:6c:54:7d:7b:4c:eb:d7:65:1c:4f:ec:b4:76:a0:6d: ad:e1:d5:3b:b4:9e:90:b7:cd:4f:6c:f0:08:16:03:02:62:bc: 01:b8:d2:e1:55:1f:fd:ee:6c:21:ec:25:9e:9d:a5:02:62:99: a8:70:42:17:2b:18:99:62:cb:1e:8d:68:3e:b2:02:21:d9:2e: db:13:f1:58:92:58:5d:fa:ae:e2:92:6c:65:36:e0:85:c1:9d: df:80:f3:3c:fd:5d:99:5c:a1:08:d8:b1:bf:f5:86:41:40:0b: 18:d9:3f:a3:01:70:b1:95:2b:3f:19:c0:4d:8e:a1:ac:35:88: 9a:05:4a:30:7a:09:20:29:c0:e4:f8:55:5a:84:6d:29:ad:fe: ee:8d:9e:a4:45:3e:14:fe:67:b9:56:4f:9a:1d:a8:d1:ad:e0: 8a:b7:6f:0c:77:38:48:eb:09:86:26:51:8a:95:67:2b:a4:fd: 52:bc:04:c7:63:bd:73:3f:bd:79:ea:af:33:35:65:d6:ce:44: d5:bd:35:48:33:04:fe:14:32:eb:23:9e:29:ee:41:a7:d1:f7: 4d:3c:05:14:c6:c9:f4:d2:19:7f:52:00:f2:89:de:26:84:5f: 58:28:39:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQtg56DRfuElp55nbr1xNHRKu4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0RTUxMUNFNUJFODc4Q0ZDQUVCNDI1NkQ2NkJFMUE2 REU2NUIzNzAeFw0yNjA1MTIxNzMyMzJaFw0yNjA1MTMxODE0MzJaMDMxMTAvBgNV BAMTKDQzRDQzMTZBOTk5NkZDNDQ3MkQyM0JDNzc1MTEzNzQ0NDgyODBDMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA8L8wqjui5yVLGNsws5c9LnpN OkLnLUOtPNjB7G5+GWu2JbVr5gBzd7e9o8iVgJ3gt41JR/NlStH4NpDNCauyxXuX A0dktgQk4cS4egViDzNAykBF5zEd6DwEZ6masdMcPLyhomob/gVsaEbKzrFBmWG6 VADm5/1Ek/Ssm/q9e3VC/WuJE/AiSaJTBaJ2ZUWXlMbo3wmS53ydErsy51G956SQ rrq33mfwIp9MdyDLj4didbiA3R/e3lpW66cM0w6eUk0sxBcfbLzeVEGxNByFyYpn mxMPaljWRQpNF0SOrQKvGkmJY1KZzcNyEMH9Aos46hZdICluZmDgLMiAQPzJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ9QxapmW/ERy0jvHdRE3REgoDCwwHwYDVR0j BBgwFoAUCU5RHOW+h4z8rrQlbWa+Gm3mWzcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDUyNjA2NDEtYmNlMi00NDVjLTlkZTUtMzcwYTc4N2Y5NTMwLzAvMDk0RTUxMUNF NUJFODc4Q0ZDQUVCNDI1NkQ2NkJFMUE2REU2NUIzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTRFNTExQ0U1QkU4NzhDRkNBRUI0MjU2RDY2QkUxQTZERTY1 QjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDUyNjA2NDEtYmNlMi00NDVjLTlk ZTUtMzcwYTc4N2Y5NTMwLzAvMDk0RTUxMUNFNUJFODc4Q0ZDQUVCNDI1NkQ2NkJF MUE2REU2NUIzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB380BsmBbvl/6wJw7zLWfYOM1yQo2xUfXtM 69dlHE/stHagba3h1Tu0npC3zU9s8AgWAwJivAG40uFVH/3ubCHsJZ6dpQJimahw QhcrGJliyx6NaD6yAiHZLtsT8ViSWF36ruKSbGU24IXBnd+A8zz9XZlcoQjYsb/1 hkFACxjZP6MBcLGVKz8ZwE2Ooaw1iJoFSjB6CSApwOT4VVqEbSmt/u6NnqRFPhT+ Z7lWT5odqNGt4Iq3bwx3OEjrCYYmUYqVZyuk/VK8BMdjvXM/vXnqrzM1ZdbORNW9 NUgzBP4UMusjninuQafR9008BRTGyfTSGX9SAPKJ3iaEX1goOaM= -----END CERTIFICATE-----Generated at Wed May 13 04:17:06 2026 by rpki-client