$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft File: 94036675301DBECEA598F27C69DCB2391E3C2886.mft (raw, json) Hash identifier: yjhTAbFuphA3QilI2JabcghIhxKC0/oZO9O3PNweIMU= Subject key identifier: 6C:4E:42:EE:86:F9:FC:C3:85:E6:24:77:DC:5B:BA:2D:DA:D1:B2:EC Authority key identifier: 94:03:66:75:30:1D:BE:CE:A5:98:F2:7C:69:DC:B2:39:1E:3C:28:86 Certificate issuer: /CN=94036675301DBECEA598F27C69DCB2391E3C2886 Certificate serial: 607FB57AA1FDFA6671BAC5805AEC513B1E9F289C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 07:45:14 +0000 Manifest this update: Thu 24 Sep 2026 07:40:14 +0000 Manifest next update: Fri 25 Sep 2026 11:13:14 +0000 Files and hashes: 1: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: 63RFUP20PHT95cd0UVwx1h2yICgt0oulTqYaR5p2Hfk=) 2: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: /165UFjNpwWW+EZFcjl+71+ujJPspyfJC04aoRjZsKo=) 3: 94036675301DBECEA598F27C69DCB2391E3C2886.crl (hash: RHPDkK/lR9JFuoLuPeeAXDtcGYv/ypa1spOl6w/GZ6Q=) 4: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: Ll1O0jrLBRiezZCuRZRt8vBzf1LiXokuLQkKXN01bA8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.crl rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:7f:b5:7a:a1:fd:fa:66:71:ba:c5:80:5a:ec:51:3b:1e:9f:28:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94036675301DBECEA598F27C69DCB2391E3C2886 Validity Not Before: Sep 24 07:40:14 2026 GMT Not After : Sep 25 11:13:14 2026 GMT Subject: CN=6C4E42EE86F9FCC385E62477DC5BBA2DDAD1B2EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ee:da:26:b4:4e:b8:05:62:86:7d:45:07:3a: 59:8a:38:8c:87:09:38:b9:72:0a:fc:ef:28:c3:a8: c1:5b:c4:36:cf:c1:7e:44:5d:b1:6b:15:f3:6c:cc: 0f:0a:23:fb:06:e5:8e:42:45:25:d8:a3:29:2b:24: cb:94:ca:b6:11:d3:2f:89:ab:43:3b:22:fb:e7:f7: 6c:ab:e0:12:ca:50:8d:7b:32:47:77:14:4c:8f:d9: f7:09:6a:f4:b3:91:c9:5b:80:13:73:8e:75:e1:45: c3:e6:53:83:0c:8c:c4:91:1c:21:cb:e3:e2:75:29: 3f:4a:2a:9c:64:6d:b7:d8:56:a5:c0:99:8c:86:30: f8:79:ff:88:f5:52:10:aa:0e:24:e8:d6:8e:a3:04: 94:a7:b9:fe:92:88:43:11:8e:19:63:28:64:2c:69: 6d:11:52:de:ab:90:b9:24:99:f2:9e:e1:6a:d7:fc: e2:aa:65:6f:8d:6a:3d:3a:43:04:66:cf:48:a8:21: e5:8b:00:04:e7:3b:1a:ad:23:8c:4c:c5:20:08:55: 03:ff:87:c2:68:05:ef:14:fb:c1:81:2b:bf:c2:ab: 27:ee:0b:2a:51:01:f8:ff:e7:af:23:21:d4:6c:c2: 6a:01:31:cd:7a:c0:e7:b4:27:44:3a:9d:80:f5:83: a6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4E:42:EE:86:F9:FC:C3:85:E6:24:77:DC:5B:BA:2D:DA:D1:B2:EC X509v3 Authority Key Identifier: keyid:94:03:66:75:30:1D:BE:CE:A5:98:F2:7C:69:DC:B2:39:1E:3C:28:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:a5:09:81:91:6f:9f:5b:7d:4d:7b:d3:ee:81:ee:5b:d2:fe: ca:ea:35:66:d5:ca:d1:fc:d6:a9:71:1e:fd:8d:f7:cc:6f:f2: ef:f5:47:2a:ba:9a:ea:9e:dc:2e:aa:52:ac:6f:75:88:b7:62: 94:02:9d:98:12:2d:90:33:18:c7:6c:a3:40:db:73:17:b4:5e: 0d:69:79:2d:a2:1a:6c:d7:2a:5c:12:76:82:2d:53:2b:b4:f8: 3a:3e:c6:5e:ad:5b:28:4b:df:b5:0a:ab:e3:19:5d:9b:34:15: a6:33:ba:d6:3b:4a:e5:a8:0a:93:0f:68:12:e7:20:66:e6:09: d2:38:fc:c3:58:d0:3d:dc:ea:b4:bc:37:81:65:55:47:da:ed: 8b:1c:c6:7f:f6:9e:9d:20:fe:49:91:85:8a:4a:b6:f2:0d:1c: 7a:e3:e5:a3:0a:20:6c:d9:c5:7a:e6:2e:1b:1a:d6:1e:8f:30: 0f:0e:c7:04:7f:67:06:62:06:27:21:c5:2f:e0:14:11:6b:d4: 2f:a8:0e:7c:71:a5:25:1c:11:29:8a:47:0e:8e:0c:a5:67:b1: ee:dc:28:a7:02:72:ba:5d:c7:54:2a:85:d8:2f:bc:8d:af:e8: 5a:ba:76:20:43:e0:19:85:68:26:9d:5c:ce:42:be:90:56:ba: 38:ee:4f:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYH+1eqH9+mZxusWAWuxROx6fKJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwMzY2NzUzMDFEQkVDRUE1OThGMjdDNjlEQ0IyMzkx RTNDMjg4NjAeFw0yNjA5MjQwNzQwMTRaFw0yNjA5MjUxMTEzMTRaMDMxMTAvBgNV BAMTKDZDNEU0MkVFODZGOUZDQzM4NUU2MjQ3N0RDNUJCQTJEREFEMUIyRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs7tomtE64BWKGfUUHOlmKOIyH CTi5cgr87yjDqMFbxDbPwX5EXbFrFfNszA8KI/sG5Y5CRSXYoykrJMuUyrYR0y+J q0M7Ivvn92yr4BLKUI17Mkd3FEyP2fcJavSzkclbgBNzjnXhRcPmU4MMjMSRHCHL 4+J1KT9KKpxkbbfYVqXAmYyGMPh5/4j1UhCqDiTo1o6jBJSnuf6SiEMRjhljKGQs aW0RUt6rkLkkmfKe4WrX/OKqZW+Naj06QwRmz0ioIeWLAATnOxqtI4xMxSAIVQP/ h8JoBe8U+8GBK7/CqyfuCypRAfj/568jIdRswmoBMc16wOe0J0Q6nYD1g6bZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbE5C7ob5/MOF5iR33Fu6LdrRsuwwHwYDVR0j BBgwFoAUlANmdTAdvs6lmPJ8adyyOR48KIYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE3NTk4ZTQtMjA2NC00ZWNiLTk4ZjYtYjI1OWE3NDk5NmExLzAvOTQwMzY2NzUz MDFEQkVDRUE1OThGMjdDNjlEQ0IyMzkxRTNDMjg4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NDAzNjY3NTMwMURCRUNFQTU5OEYyN0M2OURDQjIzOTFFM0My ODg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE3NTk4ZTQtMjA2NC00ZWNiLTk4 ZjYtYjI1OWE3NDk5NmExLzAvOTQwMzY2NzUzMDFEQkVDRUE1OThGMjdDNjlEQ0Iy MzkxRTNDMjg4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6lCYGRb59bfU170+6B7lvS/srqNWbVytH8 1qlxHv2N98xv8u/1Ryq6muqe3C6qUqxvdYi3YpQCnZgSLZAzGMdso0Dbcxe0Xg1p eS2iGmzXKlwSdoItUyu0+Do+xl6tWyhL37UKq+MZXZs0FaYzutY7SuWoCpMPaBLn IGbmCdI4/MNY0D3c6rS8N4FlVUfa7Yscxn/2np0g/kmRhYpKtvINHHrj5aMKIGzZ xXrmLhsa1h6PMA8OxwR/ZwZiBichxS/gFBFr1C+oDnxxpSUcESmKRw6ODKVnse7c KKcCcrpdx1QqhdgvvI2v6Fq6diBD4BmFaCadXM5CvpBWujjuT4Q= -----END CERTIFICATE-----Generated at Thu Sep 24 14:43:38 2026 by rpki-client