$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft File: 94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft (raw, json) Hash identifier: Y1uU46bEds+e5XqF0uUPEmhIvunjOPlPz3jKjXvBFnI= Subject key identifier: AC:5E:B0:F4:2F:5C:79:8A:E4:1A:AF:F0:38:48:BD:00:C0:D2:81:F1 Authority key identifier: 94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55 Certificate issuer: /CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55 Certificate serial: 150809A8C12E8703E0C5D26D36B47B230FCBECA6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft Manifest number: 3A Signing time: Sun 14 Jun 2026 01:04:09 +0000 Manifest this update: Sun 14 Jun 2026 00:59:09 +0000 Manifest next update: Mon 15 Jun 2026 01:26:09 +0000 Files and hashes: 1: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: jeXX5N22FqZkneiGWqodT0kr8qubxNOsLcNDrNQZPLo=) 2: 94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl (hash: 8TUd2XW41ZaihRfobgXWH9qXnBUbAFxoliCvPvyov5s=) 3: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: kcN1ilK7E8xnv83HZbdHrG6Tuk+JlcKgZPpsoyK0j7M=) 4: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: sPeZ5gB9bmKL5IKYQ+GWjLxvbyJMzi8Se9W99QeygcE=) 5: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: xiPYxavw7gs4+EkMNZofWIC6MSS6142dwKEUHc+Dv/s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 01:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:08:09:a8:c1:2e:87:03:e0:c5:d2:6d:36:b4:7b:23:0f:cb:ec:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55 Validity Not Before: Jun 14 00:59:09 2026 GMT Not After : Jun 15 01:26:09 2026 GMT Subject: CN=AC5EB0F42F5C798AE41AAFF03848BD00C0D281F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:86:bc:47:97:1f:ef:4f:90:1b:5a:2b:16:ed: a3:22:51:7b:01:48:96:a4:c5:77:78:15:73:3b:fd: 87:53:23:77:bc:22:ca:6c:1a:bf:3f:c1:e2:73:2a: e8:47:2e:c1:54:ae:03:65:92:fd:81:ae:66:35:be: 0c:62:f6:c9:15:10:5a:1d:09:75:42:d1:a7:97:87: 6a:9a:cf:bf:ac:bf:38:bb:0b:c8:28:e3:cc:d9:9c: 17:e5:62:50:0f:9b:ad:64:d3:97:6e:fd:2b:13:49: bc:ed:65:3a:d7:3c:38:41:e9:cf:7c:b9:bc:78:f6: 66:2a:43:ba:a7:4d:7c:13:44:b1:f3:fd:4f:82:75: 19:4c:d5:8d:d0:17:91:65:19:66:fd:60:2d:02:b6: 3d:68:78:13:eb:e2:f9:66:c0:26:4b:5e:87:6b:06: 60:6a:10:2f:5e:1e:23:ab:cc:12:41:4e:9d:b4:8a: 05:c2:cf:81:d4:ea:24:e8:9f:a2:5f:c0:b1:3c:b2: 9d:54:1c:98:e6:bf:8e:a9:29:e8:9a:af:3a:a2:23: fb:74:80:4d:93:00:75:6e:cd:38:4e:98:7b:e6:23: 2d:a3:aa:d6:9c:b5:ee:47:6b:4a:3f:87:d3:9e:96: e4:b4:7b:49:7c:3c:7c:7b:f4:90:a7:98:c5:36:e0: ba:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5E:B0:F4:2F:5C:79:8A:E4:1A:AF:F0:38:48:BD:00:C0:D2:81:F1 X509v3 Authority Key Identifier: keyid:94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:6e:f6:52:78:d8:c6:85:6b:d1:05:58:45:14:55:73:1d:1f: ab:f6:b2:32:55:e2:81:3d:fa:f4:78:32:3e:17:de:5b:85:b8: 13:1a:f5:cb:9e:37:d7:dd:60:46:8a:d4:c6:e4:c8:ea:78:23: b8:1d:8c:ff:31:41:b7:53:9b:e7:1d:6b:be:88:f4:45:f3:ef: f7:3d:6b:22:23:c5:44:af:7f:b3:2a:a2:72:db:e8:dc:7a:29: 90:bd:fe:da:1b:54:38:66:be:51:05:99:1b:73:b0:32:6d:67: 80:bd:dc:55:a4:f7:e9:e2:7c:68:43:20:2c:46:b7:7c:99:e1: 40:82:77:16:4b:35:91:a7:77:41:8e:ca:ca:6c:8b:23:cb:31: e9:79:cd:4a:31:de:8b:21:5f:c8:d1:a1:59:e1:06:3d:57:c3: 54:19:7e:ba:38:3c:e6:20:4e:1e:fe:6f:0e:f9:a9:74:4a:49: 9d:a8:6b:77:6f:57:d4:06:fc:e5:43:f6:c8:96:8d:4e:b1:94: 59:be:39:ca:b9:0b:b0:71:54:d0:6b:18:c4:f9:57:03:b2:a3: e3:f5:8d:ca:91:5e:32:6a:83:d9:8c:d9:3a:d4:dc:5a:16:83: 3e:e6:47:46:83:0b:05:ff:3d:e8:07:66:69:36:78:7c:b8:76: 37:95:d3:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFQgJqMEuhwPgxdJtNrR7Iw/L7KYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBQTBFRUE0ODBBQzMzMDAzNjVERjRCMzNEQTNGMzE1 MDY5OEQ1NTAeFw0yNjA2MTQwMDU5MDlaFw0yNjA2MTUwMTI2MDlaMDMxMTAvBgNV BAMTKEFDNUVCMEY0MkY1Qzc5OEFFNDFBQUZGMDM4NDhCRDAwQzBEMjgxRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCohrxHlx/vT5AbWisW7aMiUXsB SJakxXd4FXM7/YdTI3e8IspsGr8/weJzKuhHLsFUrgNlkv2BrmY1vgxi9skVEFod CXVC0aeXh2qaz7+svzi7C8go48zZnBflYlAPm61k05du/SsTSbztZTrXPDhB6c98 ubx49mYqQ7qnTXwTRLHz/U+CdRlM1Y3QF5FlGWb9YC0Ctj1oeBPr4vlmwCZLXodr BmBqEC9eHiOrzBJBTp20igXCz4HU6iTon6JfwLE8sp1UHJjmv46pKeiarzqiI/t0 gE2TAHVuzThOmHvmIy2jqtacte5Ha0o/h9OeluS0e0l8PHx79JCnmMU24LpbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrF6w9C9ceYrkGq/wOEi9AMDSgfEwHwYDVR0j BBgwFoAUlKoO6kgKwzADZd9LM9o/MVBpjVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJhYjgwNDItMGUxYy00M2IxLWI3MDMtNjM0MzhiZTIzMjViLzAvOTRBQTBFRUE0 ODBBQzMzMDAzNjVERjRCMzNEQTNGMzE1MDY5OEQ1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NEFBMEVFQTQ4MEFDMzMwMDM2NURGNEIzM0RBM0YzMTUwNjk4 RDU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvOTRBQTBFRUE0ODBBQzMzMDAzNjVERjRCMzNEQTNG MzE1MDY5OEQ1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVu9lJ42MaFa9EFWEUUVXMdH6v2sjJV4oE9 +vR4Mj4X3luFuBMa9cueN9fdYEaK1MbkyOp4I7gdjP8xQbdTm+cda76I9EXz7/c9 ayIjxUSvf7MqonLb6Nx6KZC9/tobVDhmvlEFmRtzsDJtZ4C93FWk9+nifGhDICxG t3yZ4UCCdxZLNZGnd0GOyspsiyPLMel5zUox3oshX8jRoVnhBj1Xw1QZfro4POYg Th7+bw75qXRKSZ2oa3dvV9QG/OVD9siWjU6xlFm+Ocq5C7BxVNBrGMT5VwOyo+P1 jcqRXjJqg9mM2TrU3FoWgz7mR0aDCwX/PegHZmk2eHy4djeV0+8= -----END CERTIFICATE-----Generated at Sun Jun 14 08:17:28 2026 by rpki-client