$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft File: 94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft (raw, json) Hash identifier: 9giPRxAvEBDX34+ecxHqK+cvaWTqPFaPalYlf8qb9VI= Subject key identifier: B3:7F:13:51:20:90:55:D7:03:69:38:B3:BC:EE:92:59:9C:E5:1D:BD Authority key identifier: 94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55 Certificate issuer: /CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55 Certificate serial: 5BE3042B7BBAC65CC4E6FE66871E6DBF7A0696FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 04:00:33 +0000 Manifest this update: Thu 24 Sep 2026 03:55:33 +0000 Manifest next update: Fri 25 Sep 2026 06:31:33 +0000 Files and hashes: 1: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: sPeZ5gB9bmKL5IKYQ+GWjLxvbyJMzi8Se9W99QeygcE=) 2: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: jeXX5N22FqZkneiGWqodT0kr8qubxNOsLcNDrNQZPLo=) 3: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: xiPYxavw7gs4+EkMNZofWIC6MSS6142dwKEUHc+Dv/s=) 4: 94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl (hash: LcI1uN7Z9NSrN+DtHP5uU43UxZlGcXEFBAvrGEidt2o=) 5: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: kcN1ilK7E8xnv83HZbdHrG6Tuk+JlcKgZPpsoyK0j7M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:e3:04:2b:7b:ba:c6:5c:c4:e6:fe:66:87:1e:6d:bf:7a:06:96:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55 Validity Not Before: Sep 24 03:55:33 2026 GMT Not After : Sep 25 06:31:33 2026 GMT Subject: CN=B37F1351209055D7036938B3BCEE92599CE51DBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5c:6f:20:fe:21:ef:dd:85:4c:f8:fd:15:31: 96:ea:6d:b7:c1:c6:aa:2a:39:c5:e5:93:a6:b2:a5: a1:f8:4b:db:f0:22:6a:7b:40:b5:09:3f:a9:ea:93: 9d:3a:74:b3:87:d1:52:2b:99:8d:a2:7e:c8:4e:c4: 0f:30:86:5e:c4:c4:47:37:ab:22:7d:cf:62:c6:bb: f6:08:0c:96:28:0d:2e:8d:eb:ed:00:28:07:2a:50: ac:dc:1d:35:dd:08:fa:b1:a2:cc:e5:53:c7:88:cf: 47:0f:32:ec:fa:59:7b:4b:ea:cb:f7:98:ce:68:ed: ba:c9:2a:c7:b2:45:0e:df:ca:cd:42:22:95:d8:45: 0d:12:9a:57:35:d3:aa:3f:f4:a2:e3:b9:fd:2b:24: f8:1f:d1:40:9b:ba:64:71:b8:fa:c3:5d:22:c4:a6: 22:c7:6b:06:31:1d:e5:6b:87:b2:9e:54:49:6c:df: 2a:ef:15:5b:07:9d:a4:b7:6e:e9:fe:a9:98:95:14: f6:f8:39:d2:1e:64:37:4c:32:bb:97:75:bd:cc:d2: d2:c1:9b:c2:f4:24:8c:3c:27:c4:9e:30:fa:09:29: 5a:73:2a:06:65:72:23:47:7f:8f:be:22:5f:b5:80: 9e:2f:c9:ee:a7:05:13:7a:b6:31:80:58:64:ef:90: 13:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7F:13:51:20:90:55:D7:03:69:38:B3:BC:EE:92:59:9C:E5:1D:BD X509v3 Authority Key Identifier: keyid:94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d5:b4:36:98:ee:60:31:86:74:7c:a8:51:a9:65:22:df:47: c0:7c:ed:f8:4a:95:90:f2:e0:79:dc:36:5f:83:8c:e3:b7:10: d1:19:c8:9f:11:18:35:2a:81:57:79:b6:9e:13:fd:b2:79:72: 66:aa:7f:7c:06:16:25:3d:d5:b4:cb:13:0f:55:87:56:7e:f0: 6c:af:8c:81:8f:fd:0a:a5:02:bb:fc:77:a9:87:fc:41:f7:4c: 02:e7:19:f0:3e:0a:d3:19:e7:87:48:43:0e:ff:31:fe:5b:1a: 46:09:bb:e4:e2:d8:47:90:7d:c9:d9:38:b7:9f:23:8a:ee:63: f2:e3:96:88:b6:b0:de:bf:68:99:17:aa:9e:8c:9e:27:a1:9d: 26:56:53:a6:a0:43:ba:da:20:99:01:85:5c:08:a8:4d:09:a1: 21:ca:ca:12:d9:d5:d7:b2:db:f4:53:da:b6:14:73:7e:bc:f9: 31:a5:b5:64:bb:dd:1a:f4:66:81:3e:6c:84:7f:db:ed:5f:e2: 0c:5a:2c:2b:75:5a:d2:bf:ac:f0:06:7e:7f:ef:03:b6:f3:08: fa:2f:ab:77:41:cb:1f:ec:ed:85:3f:1d:f3:7d:7e:94:63:db: ad:4d:be:49:85:69:4c:e6:d5:70:59:81:29:ad:02:48:00:a3: 62:79:a1:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW+MEK3u6xlzE5v5mhx5tv3oGlvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBQTBFRUE0ODBBQzMzMDAzNjVERjRCMzNEQTNGMzE1 MDY5OEQ1NTAeFw0yNjA5MjQwMzU1MzNaFw0yNjA5MjUwNjMxMzNaMDMxMTAvBgNV BAMTKEIzN0YxMzUxMjA5MDU1RDcwMzY5MzhCM0JDRUU5MjU5OUNFNTFEQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNXG8g/iHv3YVM+P0VMZbqbbfB xqoqOcXlk6aypaH4S9vwImp7QLUJP6nqk506dLOH0VIrmY2ifshOxA8whl7ExEc3 qyJ9z2LGu/YIDJYoDS6N6+0AKAcqUKzcHTXdCPqxoszlU8eIz0cPMuz6WXtL6sv3 mM5o7brJKseyRQ7fys1CIpXYRQ0Smlc106o/9KLjuf0rJPgf0UCbumRxuPrDXSLE piLHawYxHeVrh7KeVEls3yrvFVsHnaS3bun+qZiVFPb4OdIeZDdMMruXdb3M0tLB m8L0JIw8J8SeMPoJKVpzKgZlciNHf4++Il+1gJ4vye6nBRN6tjGAWGTvkBM1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs38TUSCQVdcDaTizvO6SWZzlHb0wHwYDVR0j BBgwFoAUlKoO6kgKwzADZd9LM9o/MVBpjVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJhYjgwNDItMGUxYy00M2IxLWI3MDMtNjM0MzhiZTIzMjViLzAvOTRBQTBFRUE0 ODBBQzMzMDAzNjVERjRCMzNEQTNGMzE1MDY5OEQ1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NEFBMEVFQTQ4MEFDMzMwMDM2NURGNEIzM0RBM0YzMTUwNjk4 RDU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvOTRBQTBFRUE0ODBBQzMzMDAzNjVERjRCMzNEQTNG MzE1MDY5OEQ1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrVtDaY7mAxhnR8qFGpZSLfR8B87fhKlZDy 4HncNl+DjOO3ENEZyJ8RGDUqgVd5tp4T/bJ5cmaqf3wGFiU91bTLEw9Vh1Z+8Gyv jIGP/QqlArv8d6mH/EH3TALnGfA+CtMZ54dIQw7/Mf5bGkYJu+Ti2EeQfcnZOLef I4ruY/Ljloi2sN6/aJkXqp6MniehnSZWU6agQ7raIJkBhVwIqE0JoSHKyhLZ1dey 2/RT2rYUc368+TGltWS73Rr0ZoE+bIR/2+1f4gxaLCt1WtK/rPAGfn/vA7bzCPov q3dByx/s7YU/HfN9fpRj261NvkmFaUzm1XBZgSmtAkgAo2J5oYs= -----END CERTIFICATE-----Generated at Thu Sep 24 10:42:46 2026 by rpki-client