$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft File: 94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft (raw, json) Hash identifier: q6iWqgDrCIJS2N5GzsZZyFIJatADXOqn1ro6uOrS1m0= Subject key identifier: 67:1A:3B:A3:0A:91:DC:8C:AD:6B:10:26:17:A7:45:EC:A7:DD:6C:63 Authority key identifier: 94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55 Certificate issuer: /CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55 Certificate serial: 38B9AA424CE532D6FE430F7B83764EED297AEF30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 11:14:27 +0000 Manifest this update: Wed 29 Jul 2026 11:09:27 +0000 Manifest next update: Thu 30 Jul 2026 12:56:27 +0000 Files and hashes: 1: 94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl (hash: 4DEEM6caL5KHl97AEFgdU3R35GDmZIoHXNIEjMgC3c4=) 2: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: sPeZ5gB9bmKL5IKYQ+GWjLxvbyJMzi8Se9W99QeygcE=) 3: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: jeXX5N22FqZkneiGWqodT0kr8qubxNOsLcNDrNQZPLo=) 4: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: kcN1ilK7E8xnv83HZbdHrG6Tuk+JlcKgZPpsoyK0j7M=) 5: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: xiPYxavw7gs4+EkMNZofWIC6MSS6142dwKEUHc+Dv/s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 12:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b9:aa:42:4c:e5:32:d6:fe:43:0f:7b:83:76:4e:ed:29:7a:ef:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55 Validity Not Before: Jul 29 11:09:27 2026 GMT Not After : Jul 30 12:56:27 2026 GMT Subject: CN=671A3BA30A91DC8CAD6B102617A745ECA7DD6C63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:87:83:1e:f2:44:90:a4:b3:51:bd:92:64:4c: d8:b9:c7:56:72:d7:4a:eb:d8:0c:be:f1:62:34:85: 5c:08:0d:ab:77:b0:90:b6:ab:e4:d5:10:59:55:9f: 89:3a:6f:e7:d2:0b:03:f6:67:5a:cb:80:fe:ac:e2: b6:e4:f8:83:37:86:54:53:65:4d:f5:6d:21:91:0b: e5:92:16:9b:16:52:0d:ae:d7:ad:3d:84:bc:22:52: 16:96:ca:aa:44:3a:d1:47:d7:a4:2b:d9:66:c3:62: 03:19:92:d0:eb:d6:0c:77:cc:9a:f2:3e:79:24:54: 6b:04:77:b6:75:0a:56:33:bf:70:ed:0a:99:44:91: d9:e2:81:53:8d:db:ee:3d:22:ab:11:52:53:1d:bd: ce:7d:6d:e5:ef:21:a4:1a:82:a9:cd:da:64:26:19: d6:33:16:14:28:a7:7b:ea:61:90:b9:c3:80:96:79: c5:6f:66:d5:0c:e0:c3:fc:d6:a0:c1:68:07:db:a6: 02:5a:54:4f:11:48:6e:de:b1:da:1e:3d:d3:26:e8: de:37:d8:45:bb:e3:cc:f6:63:4a:03:8e:df:a2:f3: c8:5e:22:aa:1f:41:32:6c:e1:44:83:16:fd:3a:3f: 45:3d:53:b7:cc:2e:35:57:d7:86:8c:a7:4b:87:d9: 84:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1A:3B:A3:0A:91:DC:8C:AD:6B:10:26:17:A7:45:EC:A7:DD:6C:63 X509v3 Authority Key Identifier: keyid:94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1d:3a:1f:53:dd:be:fd:22:8b:f3:13:f6:af:52:b2:c4:4e: 77:a7:95:7f:63:ff:b2:06:7d:4f:47:cc:35:ce:96:c0:68:e9: 56:d2:25:1f:ba:80:7f:bf:c6:79:bf:96:bb:18:1c:18:95:4c: b1:9a:fc:69:85:e6:d3:df:2d:e0:86:a0:72:d5:67:b3:8a:0e: 67:a0:10:e1:1a:c7:7e:9c:0a:c1:2d:70:78:72:b2:1f:9e:b1: 3a:a9:a9:3d:d3:70:f5:a1:71:97:ba:95:da:e0:79:18:54:3f: 85:5f:11:af:1e:54:1b:2d:ef:81:be:c9:d8:ab:c6:38:1b:a7: b7:ea:48:82:a2:cf:9c:3b:5f:bb:d4:2b:c6:b5:24:5e:e9:da: fb:f7:ae:ef:10:2b:8d:22:e0:e6:b5:48:3f:c5:1c:a8:46:31: ec:22:b1:6a:ec:45:a2:2f:59:69:64:f1:5c:db:cf:4d:52:30: 5a:0d:7a:ee:f5:43:0f:18:53:58:d4:cb:24:1a:85:93:f9:1b: 8d:d9:5e:5d:b4:77:bd:e6:c5:79:2f:a0:1e:0a:79:fb:a0:47: ea:aa:ab:6a:f4:50:0f:83:47:d2:e7:35:d2:c9:72:f6:03:0c: 06:4d:1e:de:61:d9:1f:bd:95:78:0a:4c:41:82:44:a1:46:06: 1f:2a:29:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOLmqQkzlMtb+Qw97g3ZO7Sl67zAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBQTBFRUE0ODBBQzMzMDAzNjVERjRCMzNEQTNGMzE1 MDY5OEQ1NTAeFw0yNjA3MjkxMTA5MjdaFw0yNjA3MzAxMjU2MjdaMDMxMTAvBgNV BAMTKDY3MUEzQkEzMEE5MURDOENBRDZCMTAyNjE3QTc0NUVDQTdERDZDNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZh4Me8kSQpLNRvZJkTNi5x1Zy 10rr2Ay+8WI0hVwIDat3sJC2q+TVEFlVn4k6b+fSCwP2Z1rLgP6s4rbk+IM3hlRT ZU31bSGRC+WSFpsWUg2u1609hLwiUhaWyqpEOtFH16Qr2WbDYgMZktDr1gx3zJry PnkkVGsEd7Z1ClYzv3DtCplEkdnigVON2+49IqsRUlMdvc59beXvIaQagqnN2mQm GdYzFhQop3vqYZC5w4CWecVvZtUM4MP81qDBaAfbpgJaVE8RSG7esdoePdMm6N43 2EW748z2Y0oDjt+i88heIqofQTJs4USDFv06P0U9U7fMLjVX14aMp0uH2YTNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZxo7owqR3IytaxAmF6dF7KfdbGMwHwYDVR0j BBgwFoAUlKoO6kgKwzADZd9LM9o/MVBpjVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJhYjgwNDItMGUxYy00M2IxLWI3MDMtNjM0MzhiZTIzMjViLzAvOTRBQTBFRUE0 ODBBQzMzMDAzNjVERjRCMzNEQTNGMzE1MDY5OEQ1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NEFBMEVFQTQ4MEFDMzMwMDM2NURGNEIzM0RBM0YzMTUwNjk4 RDU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvOTRBQTBFRUE0ODBBQzMzMDAzNjVERjRCMzNEQTNG MzE1MDY5OEQ1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8dOh9T3b79IovzE/avUrLETnenlX9j/7IG fU9HzDXOlsBo6VbSJR+6gH+/xnm/lrsYHBiVTLGa/GmF5tPfLeCGoHLVZ7OKDmeg EOEax36cCsEtcHhysh+esTqpqT3TcPWhcZe6ldrgeRhUP4VfEa8eVBst74G+ydir xjgbp7fqSIKiz5w7X7vUK8a1JF7p2vv3ru8QK40i4Oa1SD/FHKhGMewisWrsRaIv WWlk8Vzbz01SMFoNeu71Qw8YU1jUyyQahZP5G43ZXl20d73mxXkvoB4KefugR+qq q2r0UA+DR9LnNdLJcvYDDAZNHt5h2R+9lXgKTEGCRKFGBh8qKcU= -----END CERTIFICATE-----Generated at Wed Jul 29 13:57:58 2026 by rpki-client