$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft File: 94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft (raw, json) Hash identifier: 10oNxtI/qQpZ/S3A2IpTzyScpzUmkwnLsXRaZ+l1oZY= Subject key identifier: E8:F2:E8:15:27:DA:80:1A:8E:0D:4C:E3:C5:F0:95:35:1C:1D:A3:59 Authority key identifier: 94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55 Certificate issuer: /CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55 Certificate serial: 5C001BDD4FFD05EEA4C9ED904A5E32B9879D35DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:15:30 +0000 Manifest this update: Tue 12 May 2026 22:10:30 +0000 Manifest next update: Thu 14 May 2026 00:44:30 +0000 Files and hashes: 1: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: sPeZ5gB9bmKL5IKYQ+GWjLxvbyJMzi8Se9W99QeygcE=) 2: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: kcN1ilK7E8xnv83HZbdHrG6Tuk+JlcKgZPpsoyK0j7M=) 3: 94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl (hash: Y77CrJc75XbQ+NnLo/Uu5kiK6EcUnXS2lnGuRPMZBts=) 4: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: jeXX5N22FqZkneiGWqodT0kr8qubxNOsLcNDrNQZPLo=) 5: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: xiPYxavw7gs4+EkMNZofWIC6MSS6142dwKEUHc+Dv/s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:00:1b:dd:4f:fd:05:ee:a4:c9:ed:90:4a:5e:32:b9:87:9d:35:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55 Validity Not Before: May 12 22:10:30 2026 GMT Not After : May 14 00:44:30 2026 GMT Subject: CN=E8F2E81527DA801A8E0D4CE3C5F095351C1DA359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:85:a2:2f:cd:5b:3b:75:10:94:15:fc:0b:97: d2:be:db:75:75:2f:90:59:96:ea:fa:3b:f8:9e:e9: 6c:41:c7:89:ce:8d:a7:a4:d0:7d:72:f7:d5:f1:2b: b1:97:98:5e:75:94:a9:f9:11:af:82:c7:a7:95:e1: 45:81:6d:d0:6d:95:8f:98:02:a9:5f:4a:52:a7:b0: 7c:92:94:06:46:66:44:f5:e1:2b:fc:5d:2a:ee:ad: 77:02:99:d2:15:bc:cd:09:66:b0:c4:1d:9c:d0:cc: 08:89:17:d2:00:19:da:b4:1a:f4:45:46:5e:a4:f7: 95:02:c8:d0:34:35:38:0d:b1:ac:5e:2d:7a:5e:1a: f5:a6:26:70:56:b5:64:b7:6e:98:23:a0:d0:21:f1: 4c:4a:43:12:0e:fc:a6:08:95:15:19:07:ae:a3:4e: 5d:97:f3:1a:f8:78:62:0d:25:2d:fe:a3:ee:cc:0a: 61:38:a4:2c:70:a6:17:64:f3:f4:06:f0:de:6d:4e: d1:29:9a:c5:b2:93:0a:d7:9d:6c:c6:84:fa:14:a3: 26:a2:1a:80:f9:96:b1:38:05:8f:e2:ea:95:2f:8e: 0f:fa:2a:e1:6d:6a:0a:78:72:8f:21:21:20:8a:a8: e3:58:be:e1:59:56:86:51:0f:7b:cb:63:62:a9:d6: b9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F2:E8:15:27:DA:80:1A:8E:0D:4C:E3:C5:F0:95:35:1C:1D:A3:59 X509v3 Authority Key Identifier: keyid:94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:d7:93:df:e7:ff:6b:bd:d8:27:69:65:2c:9c:32:eb:ae:91: bd:5c:4c:d1:71:ea:f4:13:05:58:76:4a:0c:a7:c2:4b:e3:35: 37:f6:fe:b9:83:dc:1d:89:27:18:ce:02:7f:17:48:05:9b:ad: 4a:4d:3f:e4:08:13:5b:7b:24:ba:a8:36:a2:77:b8:95:5d:90: bc:9d:7b:ce:db:85:1b:a7:20:6c:4a:76:53:ec:d4:69:a0:72: 6b:70:3f:e5:40:92:f6:f7:ce:6f:90:a2:14:88:98:a9:3a:c5: ad:3d:73:c9:67:aa:0a:94:2a:a5:e0:1b:af:80:f8:7c:d8:0f: 77:8c:c3:30:68:3d:8e:e5:32:85:68:0d:93:2e:bb:b1:47:b6: e7:0f:6f:c0:43:38:21:ca:6d:13:6b:73:f5:71:98:9e:f1:47: 71:f7:fb:dd:fe:ea:92:e8:48:4b:e5:71:44:a0:d0:54:3b:eb: b8:94:37:29:86:6a:20:2e:3d:25:f5:28:92:7e:4d:2d:89:ee: 37:53:64:80:48:81:81:67:42:32:26:b3:7b:79:76:ce:f0:d6: 1c:3e:77:0a:a1:7c:dd:e5:60:4b:b0:fb:a3:fe:d4:9b:3f:f2: 80:a0:5c:bb:35:3c:7e:5f:e6:be:65:2b:2c:23:cb:d7:23:91: 80:f0:22:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXAAb3U/9Be6kye2QSl4yuYedNdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBQTBFRUE0ODBBQzMzMDAzNjVERjRCMzNEQTNGMzE1 MDY5OEQ1NTAeFw0yNjA1MTIyMjEwMzBaFw0yNjA1MTQwMDQ0MzBaMDMxMTAvBgNV BAMTKEU4RjJFODE1MjdEQTgwMUE4RTBENENFM0M1RjA5NTM1MUMxREEzNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9haIvzVs7dRCUFfwLl9K+23V1 L5BZlur6O/ie6WxBx4nOjaek0H1y99XxK7GXmF51lKn5Ea+Cx6eV4UWBbdBtlY+Y AqlfSlKnsHySlAZGZkT14Sv8XSrurXcCmdIVvM0JZrDEHZzQzAiJF9IAGdq0GvRF Rl6k95UCyNA0NTgNsaxeLXpeGvWmJnBWtWS3bpgjoNAh8UxKQxIO/KYIlRUZB66j Tl2X8xr4eGINJS3+o+7MCmE4pCxwphdk8/QG8N5tTtEpmsWykwrXnWzGhPoUoyai GoD5lrE4BY/i6pUvjg/6KuFtagp4co8hISCKqONYvuFZVoZRD3vLY2Kp1rmNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6PLoFSfagBqODUzjxfCVNRwdo1kwHwYDVR0j BBgwFoAUlKoO6kgKwzADZd9LM9o/MVBpjVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJhYjgwNDItMGUxYy00M2IxLWI3MDMtNjM0MzhiZTIzMjViLzAvOTRBQTBFRUE0 ODBBQzMzMDAzNjVERjRCMzNEQTNGMzE1MDY5OEQ1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NEFBMEVFQTQ4MEFDMzMwMDM2NURGNEIzM0RBM0YzMTUwNjk4 RDU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvOTRBQTBFRUE0ODBBQzMzMDAzNjVERjRCMzNEQTNG MzE1MDY5OEQ1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHXk9/n/2u92CdpZSycMuuukb1cTNFx6vQT BVh2SgynwkvjNTf2/rmD3B2JJxjOAn8XSAWbrUpNP+QIE1t7JLqoNqJ3uJVdkLyd e87bhRunIGxKdlPs1GmgcmtwP+VAkvb3zm+QohSImKk6xa09c8lnqgqUKqXgG6+A +HzYD3eMwzBoPY7lMoVoDZMuu7FHtucPb8BDOCHKbRNrc/VxmJ7xR3H3+93+6pLo SEvlcUSg0FQ767iUNymGaiAuPSX1KJJ+TS2J7jdTZIBIgYFnQjIms3t5ds7w1hw+ dwqhfN3lYEuw+6P+1Js/8oCgXLs1PH5f5r5lKywjy9cjkYDwIic= -----END CERTIFICATE-----Generated at Wed May 13 02:15:31 2026 by rpki-client