$ rpki-client -vvvf rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft File: 094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft (raw, json) Hash identifier: gidq+5CWybObb0Rc5Qvgh09Iw/oGAcUmMFasVCC753E= Subject key identifier: C7:0B:C0:2F:22:D7:A9:DC:B6:1F:57:EE:FD:07:F6:A2:0E:D0:EC:90 Authority key identifier: 09:4E:51:1C:E5:BE:87:8C:FC:AE:B4:25:6D:66:BE:1A:6D:E6:5B:37 Certificate issuer: /CN=094E511CE5BE878CFCAEB4256D66BE1A6DE65B37 Certificate serial: 1AB79D8B4D8ECA3F190BC98FA222339F7572D504 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 17:33:18 +0000 Manifest this update: Tue 22 Sep 2026 17:28:18 +0000 Manifest next update: Wed 23 Sep 2026 19:35:18 +0000 Files and hashes: 1: 094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.crl (hash: zHmS3ekseFo5BlmHNEaQ0LnvE7WEYwkZw4GIhnoQv5k=) 2: 3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (hash: nfQjjeUU0bmWsXIN6glyvpvB8OwmrnZCIcDr2PMemtI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.crl rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 19:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b7:9d:8b:4d:8e:ca:3f:19:0b:c9:8f:a2:22:33:9f:75:72:d5:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094E511CE5BE878CFCAEB4256D66BE1A6DE65B37 Validity Not Before: Sep 22 17:28:18 2026 GMT Not After : Sep 23 19:35:18 2026 GMT Subject: CN=C70BC02F22D7A9DCB61F57EEFD07F6A20ED0EC90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:84:36:db:b2:8a:82:54:a1:c4:67:8b:0a:42: 68:d3:b8:68:df:3a:50:3d:13:90:47:81:d5:8d:dc: 42:6d:e6:2e:b6:ed:fb:19:cf:33:dc:4a:e4:58:07: be:db:19:68:1f:e0:8d:a1:a2:c2:aa:41:c2:94:df: 5f:eb:81:6d:64:d9:d0:44:c9:b4:ce:de:68:0b:c9: 7f:b2:4f:b8:0f:57:77:25:5e:3f:0e:8e:41:9e:b6: 81:ce:51:6c:ff:6b:92:4c:a7:4e:70:68:9e:92:44: 1f:a5:32:8b:fc:34:ae:b4:ce:12:ab:2e:e6:56:a1: 9a:96:9b:31:33:e9:7e:48:8f:b9:cc:5e:d1:6e:69: 60:97:25:94:6e:1b:df:a4:7e:40:5a:36:be:c2:86: 8f:cc:f7:31:47:2e:bb:ea:0c:ae:bb:c1:c9:0b:73: 45:69:33:11:ee:3b:20:7b:7e:a2:02:24:a5:b5:3f: 6a:08:8d:6a:a3:f4:ff:5c:4e:27:b6:ac:48:41:d8: f3:c4:f5:e7:ce:af:a4:d7:71:8a:44:70:d4:7e:00: 94:5f:b6:b5:42:32:55:d6:8d:7c:1a:6d:dd:45:f5: 84:03:47:09:65:13:ba:46:17:f2:b3:b1:99:e8:90: 79:b7:c9:1c:d7:17:e6:d1:63:4e:d3:93:27:2d:5b: be:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0B:C0:2F:22:D7:A9:DC:B6:1F:57:EE:FD:07:F6:A2:0E:D0:EC:90 X509v3 Authority Key Identifier: keyid:09:4E:51:1C:E5:BE:87:8C:FC:AE:B4:25:6D:66:BE:1A:6D:E6:5B:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b6:6f:04:01:15:1b:61:cd:43:9e:ac:58:30:9b:96:0b:52: c9:cd:73:d6:63:76:4e:09:cd:b6:ac:1b:c2:8b:ad:58:70:36: 90:7a:d0:88:50:b5:da:92:eb:e0:b8:c6:c2:77:21:7b:52:b3: 08:5d:fa:68:ab:e2:f2:56:fb:ca:eb:2f:b3:56:15:a2:78:b0: 11:bd:0e:c3:ab:df:b5:63:2b:d9:67:87:5e:bd:57:db:25:5d: 7a:ac:61:7c:06:9b:44:f2:75:48:3b:38:6f:9d:62:1e:f8:0f: de:93:b5:ba:24:55:8b:91:6f:14:84:62:75:0b:a4:eb:c7:c6: 2f:ee:5f:62:01:e5:b9:2f:02:f9:e8:f2:26:1f:53:62:16:c5: 34:e8:97:5c:7f:2f:ac:4c:3c:12:8a:96:31:76:d8:72:6e:3a: 75:0c:77:24:56:48:ec:63:28:94:9c:b5:ef:52:91:82:4c:3b: 87:e9:4f:de:bd:2f:54:72:39:8e:4c:d7:08:81:92:69:5e:5a: 14:d6:38:08:79:da:74:77:40:b6:29:46:e9:75:d9:00:2c:9e: d4:d4:29:11:8c:d1:aa:99:94:14:d7:3e:bc:c8:c9:f3:c1:97: d0:ca:48:8b:ae:25:f2:7e:b7:86:b8:f2:f3:02:74:a0:0d:f7: a6:e6:43:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGredi02Oyj8ZC8mPoiIzn3Vy1QQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0RTUxMUNFNUJFODc4Q0ZDQUVCNDI1NkQ2NkJFMUE2 REU2NUIzNzAeFw0yNjA5MjIxNzI4MThaFw0yNjA5MjMxOTM1MThaMDMxMTAvBgNV BAMTKEM3MEJDMDJGMjJEN0E5RENCNjFGNTdFRUZEMDdGNkEyMEVEMEVDOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQhDbbsoqCVKHEZ4sKQmjTuGjf OlA9E5BHgdWN3EJt5i627fsZzzPcSuRYB77bGWgf4I2hosKqQcKU31/rgW1k2dBE ybTO3mgLyX+yT7gPV3clXj8OjkGetoHOUWz/a5JMp05waJ6SRB+lMov8NK60zhKr LuZWoZqWmzEz6X5Ij7nMXtFuaWCXJZRuG9+kfkBaNr7Cho/M9zFHLrvqDK67wckL c0VpMxHuOyB7fqICJKW1P2oIjWqj9P9cTie2rEhB2PPE9efOr6TXcYpEcNR+AJRf trVCMlXWjXwabd1F9YQDRwllE7pGF/KzsZnokHm3yRzXF+bRY07TkyctW77dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxwvALyLXqdy2H1fu/Qf2og7Q7JAwHwYDVR0j BBgwFoAUCU5RHOW+h4z8rrQlbWa+Gm3mWzcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDUyNjA2NDEtYmNlMi00NDVjLTlkZTUtMzcwYTc4N2Y5NTMwLzAvMDk0RTUxMUNF NUJFODc4Q0ZDQUVCNDI1NkQ2NkJFMUE2REU2NUIzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTRFNTExQ0U1QkU4NzhDRkNBRUI0MjU2RDY2QkUxQTZERTY1 QjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDUyNjA2NDEtYmNlMi00NDVjLTlk ZTUtMzcwYTc4N2Y5NTMwLzAvMDk0RTUxMUNFNUJFODc4Q0ZDQUVCNDI1NkQ2NkJF MUE2REU2NUIzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE22bwQBFRthzUOerFgwm5YLUsnNc9Zjdk4J zbasG8KLrVhwNpB60IhQtdqS6+C4xsJ3IXtSswhd+mir4vJW+8rrL7NWFaJ4sBG9 DsOr37VjK9lnh169V9slXXqsYXwGm0TydUg7OG+dYh74D96TtbokVYuRbxSEYnUL pOvHxi/uX2IB5bkvAvno8iYfU2IWxTTol1x/L6xMPBKKljF22HJuOnUMdyRWSOxj KJScte9SkYJMO4fpT969L1RyOY5M1wiBkmleWhTWOAh52nR3QLYpRul12QAsntTU KRGM0aqZlBTXPrzIyfPBl9DKSIuuJfJ+t4a48vMCdKAN96bmQzM= -----END CERTIFICATE-----Generated at Wed Sep 23 12:05:35 2026 by rpki-client