$ rpki-client -vvf rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft File: 094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft (raw, json) Hash identifier: u8pneeTALkqjV/eMpJvj9rMY6gC/31Cc27zmAYWzkkk= Subject key identifier: 5E:6A:DE:3C:AB:F4:EE:FD:6A:8F:BE:B8:77:53:0B:47:95:F7:41:9B Authority key identifier: 09:4E:51:1C:E5:BE:87:8C:FC:AE:B4:25:6D:66:BE:1A:6D:E6:5B:37 Certificate issuer: /CN=094E511CE5BE878CFCAEB4256D66BE1A6DE65B37 Certificate serial: 3FB6CEACE54B3A7BE2A241EFEE06449550C2ECD2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 23:22:23 +0000 Manifest this update: Tue 16 Jun 2026 23:17:23 +0000 Manifest next update: Thu 18 Jun 2026 03:20:23 +0000 Files and hashes: 1: 3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (hash: nfQjjeUU0bmWsXIN6glyvpvB8OwmrnZCIcDr2PMemtI=) 2: 094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.crl (hash: mR4wCTTMBgm0ra5UVdrMvudeiyxFMZE2AKFqY4rkN0I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.crl rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b6:ce:ac:e5:4b:3a:7b:e2:a2:41:ef:ee:06:44:95:50:c2:ec:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094E511CE5BE878CFCAEB4256D66BE1A6DE65B37 Validity Not Before: Jun 16 23:17:23 2026 GMT Not After : Jun 18 03:20:23 2026 GMT Subject: CN=5E6ADE3CABF4EEFD6A8FBEB877530B4795F7419B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cb:1f:3f:83:c3:85:2b:02:31:02:0c:8e:4d: 86:3c:3c:6b:eb:0b:3b:1f:f0:ea:a2:41:2d:9a:d6: 70:95:6d:11:42:d8:cd:69:5a:84:19:e4:1b:27:9a: 8e:d9:eb:9c:82:17:5f:e1:5c:d0:62:4d:76:6a:0b: 6c:40:bc:c6:57:14:0c:c0:86:09:ae:93:6b:7a:ad: 30:83:c6:b7:8c:a7:ee:44:8c:8b:4a:61:d4:16:57: 6b:7e:83:04:53:fa:fe:0f:66:a1:cc:7b:8b:75:1b: 62:20:ba:a6:7d:31:0e:61:0a:23:8f:a6:9e:6e:4e: 79:18:a1:22:58:12:e1:ca:94:66:5f:f9:3f:d2:ec: ba:57:1a:74:ff:9d:55:65:d9:b5:68:28:cf:e2:90: 10:76:46:a5:38:3d:90:2b:62:4b:38:48:e6:ef:f6: 55:7a:d0:a1:a6:ac:a3:74:74:37:e5:72:04:ca:5b: b2:b2:7c:4c:5f:54:6a:43:80:7c:2c:d5:16:cb:5a: 10:55:b7:94:b6:2c:2b:ab:e1:72:aa:c6:44:11:e5: d6:f6:50:8b:30:17:45:8a:5c:89:79:4f:b5:be:47: 12:21:d0:6f:ed:ee:35:b5:71:0e:4d:96:07:3a:04: a0:7a:08:c2:eb:87:44:85:28:3d:23:c8:60:42:25: 27:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:6A:DE:3C:AB:F4:EE:FD:6A:8F:BE:B8:77:53:0B:47:95:F7:41:9B X509v3 Authority Key Identifier: keyid:09:4E:51:1C:E5:BE:87:8C:FC:AE:B4:25:6D:66:BE:1A:6D:E6:5B:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:a2:72:dd:9c:8d:ea:b5:bd:14:e2:cd:f9:fa:87:70:81:b2: 81:cc:58:d9:2a:91:be:1c:e5:9a:ae:6b:f3:e7:5f:48:3c:4a: fc:6e:b1:1c:86:41:02:33:a5:be:f1:3d:42:7f:ae:15:df:62: e0:bf:59:3a:f9:99:b4:0c:d7:87:8c:b2:44:d5:71:e0:fc:9c: 74:b8:58:13:33:b6:62:b8:16:22:fd:97:f7:2c:24:27:f9:6b: 09:7c:2d:b1:8d:d3:c8:7c:3b:81:69:28:05:e5:28:c9:06:04: b4:a7:2c:a8:ca:1c:6c:cd:7e:64:0f:71:db:e7:21:9c:7f:92: 66:4e:13:45:60:fe:46:bb:d6:6e:63:5d:59:b8:75:d8:44:91: c1:35:4b:c1:9e:6a:c3:b3:e2:8e:fc:96:a3:68:ae:1e:20:54: 81:09:3b:ea:d1:5b:fa:b4:72:25:cf:57:46:7b:96:00:90:50: a2:a6:3d:ff:6d:d9:24:fa:86:c0:70:91:22:50:51:9b:57:cc: 45:c4:99:7d:f7:53:a0:16:54:2b:43:a3:85:aa:c1:64:d2:12: 26:b2:e2:a0:fe:a4:bd:eb:93:6a:14:02:f1:86:dd:e2:e6:0e: 49:4f:b6:28:9e:e5:80:75:be:bf:40:0a:c5:ac:e0:8a:6c:4f: 9b:16:b6:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP7bOrOVLOnviokHv7gZElVDC7NIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0RTUxMUNFNUJFODc4Q0ZDQUVCNDI1NkQ2NkJFMUE2 REU2NUIzNzAeFw0yNjA2MTYyMzE3MjNaFw0yNjA2MTgwMzIwMjNaMDMxMTAvBgNV BAMTKDVFNkFERTNDQUJGNEVFRkQ2QThGQkVCODc3NTMwQjQ3OTVGNzQxOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIyx8/g8OFKwIxAgyOTYY8PGvr Czsf8OqiQS2a1nCVbRFC2M1pWoQZ5Bsnmo7Z65yCF1/hXNBiTXZqC2xAvMZXFAzA hgmuk2t6rTCDxreMp+5EjItKYdQWV2t+gwRT+v4PZqHMe4t1G2IguqZ9MQ5hCiOP pp5uTnkYoSJYEuHKlGZf+T/S7LpXGnT/nVVl2bVoKM/ikBB2RqU4PZArYks4SObv 9lV60KGmrKN0dDflcgTKW7KyfExfVGpDgHws1RbLWhBVt5S2LCur4XKqxkQR5db2 UIswF0WKXIl5T7W+RxIh0G/t7jW1cQ5Nlgc6BKB6CMLrh0SFKD0jyGBCJSfDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXmrePKv07v1qj764d1MLR5X3QZswHwYDVR0j BBgwFoAUCU5RHOW+h4z8rrQlbWa+Gm3mWzcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDUyNjA2NDEtYmNlMi00NDVjLTlkZTUtMzcwYTc4N2Y5NTMwLzAvMDk0RTUxMUNF NUJFODc4Q0ZDQUVCNDI1NkQ2NkJFMUE2REU2NUIzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTRFNTExQ0U1QkU4NzhDRkNBRUI0MjU2RDY2QkUxQTZERTY1 QjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDUyNjA2NDEtYmNlMi00NDVjLTlk ZTUtMzcwYTc4N2Y5NTMwLzAvMDk0RTUxMUNFNUJFODc4Q0ZDQUVCNDI1NkQ2NkJF MUE2REU2NUIzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWict2cjeq1vRTizfn6h3CBsoHMWNkqkb4c 5Zqua/PnX0g8SvxusRyGQQIzpb7xPUJ/rhXfYuC/WTr5mbQM14eMskTVceD8nHS4 WBMztmK4FiL9l/csJCf5awl8LbGN08h8O4FpKAXlKMkGBLSnLKjKHGzNfmQPcdvn IZx/kmZOE0Vg/ka71m5jXVm4ddhEkcE1S8GeasOz4o78lqNorh4gVIEJO+rRW/q0 ciXPV0Z7lgCQUKKmPf9t2ST6hsBwkSJQUZtXzEXEmX33U6AWVCtDo4WqwWTSEiay 4qD+pL3rk2oUAvGG3eLmDklPtiie5YB1vr9ACsWs4IpsT5sWtmA= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:55 2026 by rpki-client