$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft File: 94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft (raw, json) Hash identifier: 53hiYZ4S+4b/Hb2795bovnE/QNN6y5u+wI1mTW1LcV4= Subject key identifier: 38:7C:17:32:46:63:9B:E3:13:42:42:06:EF:B5:10:A3:72:13:BC:80 Authority key identifier: 94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55 Certificate issuer: /CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55 Certificate serial: 38EFF8D523BA9A21E585AFAC878A1B4EFECCCF45 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft Manifest number: BE Signing time: Mon 21 Sep 2026 19:45:55 +0000 Manifest this update: Mon 21 Sep 2026 19:40:55 +0000 Manifest next update: Tue 22 Sep 2026 20:31:55 +0000 Files and hashes: 1: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: jeXX5N22FqZkneiGWqodT0kr8qubxNOsLcNDrNQZPLo=) 2: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: xiPYxavw7gs4+EkMNZofWIC6MSS6142dwKEUHc+Dv/s=) 3: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: sPeZ5gB9bmKL5IKYQ+GWjLxvbyJMzi8Se9W99QeygcE=) 4: 94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl (hash: biOfrdUe/WbY3dF1C1ywZbeNqB32EnV519DqHgKITk8=) 5: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: kcN1ilK7E8xnv83HZbdHrG6Tuk+JlcKgZPpsoyK0j7M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ef:f8:d5:23:ba:9a:21:e5:85:af:ac:87:8a:1b:4e:fe:cc:cf:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55 Validity Not Before: Sep 21 19:40:55 2026 GMT Not After : Sep 22 20:31:55 2026 GMT Subject: CN=387C173246639BE313424206EFB510A37213BC80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e6:45:4b:3d:aa:c5:ca:c8:e3:89:fe:98:cc: d8:51:9d:97:6b:f6:76:ad:67:18:93:5c:a4:77:f1: cc:14:6b:7c:5e:f3:54:14:6d:8f:08:9e:a3:80:a4: 70:6d:06:df:e4:fb:64:e5:54:af:01:c2:ac:ab:94: e5:db:af:52:c4:8b:c7:db:dd:a7:a8:2b:e0:e4:fa: 62:ab:22:ed:34:14:a2:37:96:77:50:e2:e0:d2:28: 1d:e7:c5:e6:0c:b0:62:64:52:d5:a4:e8:04:64:2d: 27:e8:c9:c5:4a:2c:fe:8e:d8:1f:e9:47:25:ab:14: e4:bc:64:c7:00:a1:82:75:a4:9e:89:7f:99:ee:f7: 29:52:82:29:35:d9:ee:af:a0:f3:07:3c:99:90:4d: 91:38:79:37:11:2c:22:7b:f7:83:bd:99:1c:e0:d6: 63:1a:38:0d:b3:0f:80:18:d0:fb:5d:55:b2:b6:53: 01:ed:04:bf:86:d8:ca:ae:33:ae:4b:6a:0e:92:6a: 7a:64:a3:60:de:ad:4b:51:04:9e:71:60:58:c1:ff: 7a:d4:11:91:1c:d7:a9:44:d0:65:5c:8e:c8:da:71: 5b:d9:6c:8f:7a:fe:bc:82:f1:3f:34:96:19:d1:56: 2d:7f:32:99:2c:93:5b:e5:be:cc:c1:fc:11:fb:f8: 79:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7C:17:32:46:63:9B:E3:13:42:42:06:EF:B5:10:A3:72:13:BC:80 X509v3 Authority Key Identifier: keyid:94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:07:b1:90:31:19:da:72:2d:39:b5:09:00:68:01:f1:22:a5: 5a:85:66:2d:e3:32:c6:fb:4c:56:6a:88:ba:b8:f7:9e:05:fc: 9f:2e:df:1e:75:bc:42:f6:30:5d:5a:fa:6c:86:bf:3e:92:a2: da:e8:9f:c2:d9:d1:33:fd:4f:2a:89:a8:68:e6:f2:c0:12:ef: cc:44:5e:5a:e2:5d:3b:a1:dd:80:e2:47:6e:3d:b3:25:32:fd: 90:ad:9c:6c:a3:47:fd:28:c0:70:93:44:2c:ad:66:6e:a9:d1: 6a:53:cf:be:13:1a:d2:78:8c:16:fa:a0:4f:4a:62:1e:4c:9a: a3:b6:31:67:47:23:e5:6a:37:12:5e:94:da:15:6e:cc:41:9f: 6c:3c:48:6d:5c:6c:7b:83:92:87:26:65:e4:ef:99:42:05:e5: 0f:57:99:56:dd:aa:1a:b3:e4:77:b7:55:cf:0d:bd:8f:e7:cd: 66:d1:de:a8:d1:a3:ce:78:0c:de:b5:28:42:f9:c3:dc:e1:ce: ea:97:b2:01:6c:48:49:3e:1a:87:d2:a5:05:ec:2a:a9:e0:8f: 08:dd:37:df:f8:61:76:4d:5b:aa:46:12:26:83:f3:fc:d6:0f: a1:bd:38:64:91:f8:86:f8:55:1c:2e:cb:00:cb:6b:6e:ae:7c: ab:6b:1e:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOO/41SO6miHlha+sh4obTv7Mz0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBQTBFRUE0ODBBQzMzMDAzNjVERjRCMzNEQTNGMzE1 MDY5OEQ1NTAeFw0yNjA5MjExOTQwNTVaFw0yNjA5MjIyMDMxNTVaMDMxMTAvBgNV BAMTKDM4N0MxNzMyNDY2MzlCRTMxMzQyNDIwNkVGQjUxMEEzNzIxM0JDODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl5kVLParFysjjif6YzNhRnZdr 9natZxiTXKR38cwUa3xe81QUbY8InqOApHBtBt/k+2TlVK8BwqyrlOXbr1LEi8fb 3aeoK+Dk+mKrIu00FKI3lndQ4uDSKB3nxeYMsGJkUtWk6ARkLSfoycVKLP6O2B/p RyWrFOS8ZMcAoYJ1pJ6Jf5nu9ylSgik12e6voPMHPJmQTZE4eTcRLCJ794O9mRzg 1mMaOA2zD4AY0PtdVbK2UwHtBL+G2MquM65Lag6Sanpko2DerUtRBJ5xYFjB/3rU EZEc16lE0GVcjsjacVvZbI96/ryC8T80lhnRVi1/Mpksk1vlvszB/BH7+HkhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOHwXMkZjm+MTQkIG77UQo3ITvIAwHwYDVR0j BBgwFoAUlKoO6kgKwzADZd9LM9o/MVBpjVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJhYjgwNDItMGUxYy00M2IxLWI3MDMtNjM0MzhiZTIzMjViLzAvOTRBQTBFRUE0 ODBBQzMzMDAzNjVERjRCMzNEQTNGMzE1MDY5OEQ1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NEFBMEVFQTQ4MEFDMzMwMDM2NURGNEIzM0RBM0YzMTUwNjk4 RDU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvOTRBQTBFRUE0ODBBQzMzMDAzNjVERjRCMzNEQTNG MzE1MDY5OEQ1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQHsZAxGdpyLTm1CQBoAfEipVqFZi3jMsb7 TFZqiLq4954F/J8u3x51vEL2MF1a+myGvz6Sotron8LZ0TP9TyqJqGjm8sAS78xE XlriXTuh3YDiR249syUy/ZCtnGyjR/0owHCTRCytZm6p0WpTz74TGtJ4jBb6oE9K Yh5MmqO2MWdHI+VqNxJelNoVbsxBn2w8SG1cbHuDkocmZeTvmUIF5Q9XmVbdqhqz 5He3Vc8NvY/nzWbR3qjRo854DN61KEL5w9zhzuqXsgFsSEk+GofSpQXsKqngjwjd N9/4YXZNW6pGEiaD8/zWD6G9OGSR+Ib4VRwuywDLa26ufKtrHow= -----END CERTIFICATE-----Generated at Tue Sep 22 11:47:27 2026 by rpki-client