$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft File: 94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft (raw, json) Hash identifier: OqDUPHworG2gza9nvRYvcuGmOyCH7SBpOVq5nTG3qRM= Subject key identifier: 3C:AE:17:12:DD:A2:C6:48:70:D9:BB:A8:54:78:AC:D9:C6:AD:62:D5 Authority key identifier: 94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55 Certificate issuer: /CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55 Certificate serial: 5B48FDD2FDEF16534B92E7CDE241CB9902D51189 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 00:19:28 +0000 Manifest this update: Fri 24 Jul 2026 00:14:28 +0000 Manifest next update: Sat 25 Jul 2026 03:17:28 +0000 Files and hashes: 1: 94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl (hash: Fv9Risf9V5M3ovK5gpT2DG0QxDSKpmsZ8/tOK92g1V8=) 2: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: sPeZ5gB9bmKL5IKYQ+GWjLxvbyJMzi8Se9W99QeygcE=) 3: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: xiPYxavw7gs4+EkMNZofWIC6MSS6142dwKEUHc+Dv/s=) 4: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: kcN1ilK7E8xnv83HZbdHrG6Tuk+JlcKgZPpsoyK0j7M=) 5: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: jeXX5N22FqZkneiGWqodT0kr8qubxNOsLcNDrNQZPLo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:48:fd:d2:fd:ef:16:53:4b:92:e7:cd:e2:41:cb:99:02:d5:11:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55 Validity Not Before: Jul 24 00:14:28 2026 GMT Not After : Jul 25 03:17:28 2026 GMT Subject: CN=3CAE1712DDA2C64870D9BBA85478ACD9C6AD62D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e7:0e:d8:eb:f0:f5:37:b9:05:d1:ba:0a:a9: 64:74:6c:1b:c9:be:0f:12:09:11:61:35:1a:c3:55: 39:7a:22:39:21:2f:ef:49:3d:79:ba:2c:b6:93:a4: fa:ea:4d:9a:a2:5f:4e:1f:0c:48:b4:50:33:ad:41: 9f:5f:0e:70:4e:92:e8:91:c9:10:e2:ce:12:52:55: 2d:9c:2f:5c:2c:bb:4c:46:fb:31:08:26:64:e8:e4: cc:eb:d6:30:cf:ac:29:18:5b:dc:65:61:b6:01:25: 51:d8:b5:6c:ed:19:98:e7:6c:68:62:64:13:78:49: f0:de:6d:fe:f2:d7:ee:3b:9e:39:8b:d8:23:01:65: c4:7f:96:02:9b:6b:d5:d3:67:e2:84:56:98:95:7d: a9:db:87:6b:80:31:1c:4d:5c:42:3b:5b:c8:77:54: df:e2:c4:dd:68:e8:13:bc:60:09:d5:c3:67:ee:c9: d5:f0:d4:d4:38:42:5d:62:bd:02:1c:ed:61:33:ac: ef:80:c4:89:6f:44:10:8c:59:a3:ba:a3:bb:40:8c: a7:50:67:88:e4:8a:60:96:33:b9:d7:a9:e5:ad:d3: 88:43:57:49:bf:90:8d:5f:20:15:0e:00:e0:eb:a1: 37:7d:e3:ea:de:14:19:17:67:01:5b:05:af:3b:9f: 43:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AE:17:12:DD:A2:C6:48:70:D9:BB:A8:54:78:AC:D9:C6:AD:62:D5 X509v3 Authority Key Identifier: keyid:94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:f8:df:26:84:02:c7:86:02:8f:13:86:9b:6a:8a:14:b8:01: cf:75:a9:a0:d0:d0:ec:00:1e:4c:c8:b6:86:bf:d8:5e:32:91: 1c:e0:2d:0b:b6:64:be:f5:3e:6f:0b:76:15:1b:09:3b:e7:0f: 94:8d:dd:30:56:c2:fc:01:9d:64:48:b3:05:0c:01:35:cd:b1: bb:0f:0e:de:9b:db:71:6e:c3:df:da:0a:f6:fe:2e:96:7b:50: b5:2f:5a:99:f2:27:d0:c5:ea:b2:75:22:94:05:bc:cf:03:0a: 5c:c5:18:11:b7:7d:f4:a2:d6:04:2a:9c:61:b0:c1:e0:81:71: d2:da:36:fe:3c:9b:5e:2d:a9:f3:93:0f:ca:ed:de:bd:64:73: 48:a8:5e:83:1f:e7:86:9e:21:17:50:ab:23:4c:7a:7c:eb:3e: 50:c7:8b:f7:39:f7:18:17:93:6c:b3:e0:f2:32:86:03:d0:c8: 33:98:fe:22:20:2e:83:5c:7e:60:eb:1c:90:a5:d7:1d:24:3b: 93:6b:c5:3c:1f:e0:52:c1:fb:f4:ee:4c:04:a7:22:80:70:e5: 02:23:fb:e3:ad:2f:5f:63:db:cb:93:73:8c:3d:c4:9d:dd:e6: 8a:1b:a9:78:a5:e8:33:a0:8e:d9:26:de:72:14:bd:e0:a1:fd: cb:f7:89:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW0j90v3vFlNLkufN4kHLmQLVEYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBQTBFRUE0ODBBQzMzMDAzNjVERjRCMzNEQTNGMzE1 MDY5OEQ1NTAeFw0yNjA3MjQwMDE0MjhaFw0yNjA3MjUwMzE3MjhaMDMxMTAvBgNV BAMTKDNDQUUxNzEyRERBMkM2NDg3MEQ5QkJBODU0NzhBQ0Q5QzZBRDYyRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl5w7Y6/D1N7kF0boKqWR0bBvJ vg8SCRFhNRrDVTl6IjkhL+9JPXm6LLaTpPrqTZqiX04fDEi0UDOtQZ9fDnBOkuiR yRDizhJSVS2cL1wsu0xG+zEIJmTo5Mzr1jDPrCkYW9xlYbYBJVHYtWztGZjnbGhi ZBN4SfDebf7y1+47njmL2CMBZcR/lgKba9XTZ+KEVpiVfanbh2uAMRxNXEI7W8h3 VN/ixN1o6BO8YAnVw2fuydXw1NQ4Ql1ivQIc7WEzrO+AxIlvRBCMWaO6o7tAjKdQ Z4jkimCWM7nXqeWt04hDV0m/kI1fIBUOAODroTd94+reFBkXZwFbBa87n0M3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPK4XEt2ixkhw2buoVHis2catYtUwHwYDVR0j BBgwFoAUlKoO6kgKwzADZd9LM9o/MVBpjVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJhYjgwNDItMGUxYy00M2IxLWI3MDMtNjM0MzhiZTIzMjViLzAvOTRBQTBFRUE0 ODBBQzMzMDAzNjVERjRCMzNEQTNGMzE1MDY5OEQ1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NEFBMEVFQTQ4MEFDMzMwMDM2NURGNEIzM0RBM0YzMTUwNjk4 RDU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvOTRBQTBFRUE0ODBBQzMzMDAzNjVERjRCMzNEQTNG MzE1MDY5OEQ1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIj43yaEAseGAo8ThptqihS4Ac91qaDQ0OwA HkzItoa/2F4ykRzgLQu2ZL71Pm8LdhUbCTvnD5SN3TBWwvwBnWRIswUMATXNsbsP Dt6b23Fuw9/aCvb+LpZ7ULUvWpnyJ9DF6rJ1IpQFvM8DClzFGBG3ffSi1gQqnGGw weCBcdLaNv48m14tqfOTD8rt3r1kc0ioXoMf54aeIRdQqyNMenzrPlDHi/c59xgX k2yz4PIyhgPQyDOY/iIgLoNcfmDrHJCl1x0kO5NrxTwf4FLB+/TuTASnIoBw5QIj ++OtL19j28uTc4w9xJ3d5oobqXil6DOgjtkm3nIUveCh/cv3iRM= -----END CERTIFICATE-----Generated at Fri Jul 24 07:04:44 2026 by rpki-client