$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft File: 94036675301DBECEA598F27C69DCB2391E3C2886.mft (raw, json) Hash identifier: OmWrA7yB0H1UdOsTn8lLa4/h+YJZjadPCrt0Ltsnmnk= Subject key identifier: 0D:4C:AD:F8:5C:13:86:C6:C5:D3:7E:2C:BB:BC:B8:F6:02:5C:2C:7C Authority key identifier: 94:03:66:75:30:1D:BE:CE:A5:98:F2:7C:69:DC:B2:39:1E:3C:28:86 Certificate issuer: /CN=94036675301DBECEA598F27C69DCB2391E3C2886 Certificate serial: 2460C1023772AE99D9D0F1042FC6BF474418702F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft Manifest number: BF Signing time: Mon 21 Sep 2026 05:02:52 +0000 Manifest this update: Mon 21 Sep 2026 04:57:52 +0000 Manifest next update: Tue 22 Sep 2026 08:37:52 +0000 Files and hashes: 1: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: Ll1O0jrLBRiezZCuRZRt8vBzf1LiXokuLQkKXN01bA8=) 2: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: 63RFUP20PHT95cd0UVwx1h2yICgt0oulTqYaR5p2Hfk=) 3: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: /165UFjNpwWW+EZFcjl+71+ujJPspyfJC04aoRjZsKo=) 4: 94036675301DBECEA598F27C69DCB2391E3C2886.crl (hash: 7ALuCIt7Zb4AC48ha9hETBfYfaMxSYY/x38BF2gi9ow=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.crl rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:60:c1:02:37:72:ae:99:d9:d0:f1:04:2f:c6:bf:47:44:18:70:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94036675301DBECEA598F27C69DCB2391E3C2886 Validity Not Before: Sep 21 04:57:52 2026 GMT Not After : Sep 22 08:37:52 2026 GMT Subject: CN=0D4CADF85C1386C6C5D37E2CBBBCB8F6025C2C7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e7:c3:3e:09:bd:43:38:f1:a0:1d:17:be:97: d4:94:62:3f:ce:f3:2e:a1:b0:fd:7d:f3:87:72:81: 7f:f7:cc:34:33:cd:88:01:9a:ea:d9:5e:58:c2:0e: 03:45:04:c1:bc:2e:6b:b7:56:9e:f2:c4:23:ce:bc: d4:e0:c7:19:32:7d:bf:d1:4d:87:35:f2:b3:f6:a5: ef:1e:26:ac:40:7f:21:58:cd:39:eb:7e:ff:6f:6e: c9:ad:a3:f4:ea:d0:f7:17:67:78:bf:a1:a7:55:3e: cf:15:f3:6a:9b:9d:bf:97:fb:a3:a7:a5:10:7f:1c: 01:3a:98:54:33:93:77:39:ba:45:be:ad:57:9c:2d: 05:de:82:c5:41:8c:c3:bb:b3:88:67:f8:3a:6f:b0: b3:91:b0:01:56:7f:9c:c0:93:f9:89:4d:8a:2f:fc: 8c:c5:97:ad:94:5e:88:92:b6:62:41:4b:f9:31:f4: ae:ad:8a:2c:b8:46:f3:7d:71:55:0f:be:94:5c:08: e2:45:1c:d9:db:86:59:42:b7:36:1d:b9:86:a0:57: e2:2f:4c:fa:9b:10:b2:fa:b3:85:e9:ef:15:75:7a: 99:ca:9a:88:aa:a4:63:88:97:64:c3:92:5c:15:7b: 3f:fc:fb:ba:c4:f8:00:17:05:8b:23:2b:33:c8:77: f2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4C:AD:F8:5C:13:86:C6:C5:D3:7E:2C:BB:BC:B8:F6:02:5C:2C:7C X509v3 Authority Key Identifier: keyid:94:03:66:75:30:1D:BE:CE:A5:98:F2:7C:69:DC:B2:39:1E:3C:28:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:89:bc:64:0a:a2:de:da:4f:c0:55:40:18:94:45:b8:f5:b2: 2b:30:a3:5b:1c:da:6d:e5:48:db:3e:6b:0d:44:8d:37:e2:dc: ea:73:37:93:ba:92:54:d3:e3:22:34:67:9d:95:74:b3:d6:f7: e4:27:27:f1:f1:0d:5c:ce:31:e3:b8:15:a1:44:8d:a1:01:d9: f4:cb:58:7b:28:05:10:dd:60:e6:fe:39:cb:1a:d5:94:08:af: a6:7e:1c:71:d5:00:8e:1c:2b:0d:6e:50:c9:fc:3f:75:cc:61: dc:47:d9:92:53:f5:6a:83:25:00:c1:2d:f5:b0:9e:a0:fb:df: 04:4a:61:63:ca:fd:0c:39:ec:dc:07:1b:eb:31:d3:c8:af:f1: 91:78:80:2b:00:fb:85:7c:86:3e:b6:40:97:f6:13:c2:dc:57: c0:aa:b6:f5:c0:13:56:9b:b0:80:12:9d:38:43:d1:c0:0f:e6: ce:b2:8a:5a:21:d3:c5:3c:d1:b4:3e:de:b0:a1:48:38:9c:73: 8a:9d:43:27:48:ee:fc:87:2c:33:1d:05:fc:31:1f:fb:64:54: 0d:fe:d3:e7:e1:ad:d8:93:e5:d1:2e:61:a8:17:cf:01:ee:e5: e4:61:fc:a8:b6:ec:a8:b3:95:bf:a8:e1:70:14:e2:7e:a6:8f: 4f:91:61:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJGDBAjdyrpnZ0PEEL8a/R0QYcC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwMzY2NzUzMDFEQkVDRUE1OThGMjdDNjlEQ0IyMzkx RTNDMjg4NjAeFw0yNjA5MjEwNDU3NTJaFw0yNjA5MjIwODM3NTJaMDMxMTAvBgNV BAMTKDBENENBREY4NUMxMzg2QzZDNUQzN0UyQ0JCQkNCOEY2MDI1QzJDN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq58M+Cb1DOPGgHRe+l9SUYj/O 8y6hsP1984dygX/3zDQzzYgBmurZXljCDgNFBMG8Lmu3Vp7yxCPOvNTgxxkyfb/R TYc18rP2pe8eJqxAfyFYzTnrfv9vbsmto/Tq0PcXZ3i/oadVPs8V82qbnb+X+6On pRB/HAE6mFQzk3c5ukW+rVecLQXegsVBjMO7s4hn+DpvsLORsAFWf5zAk/mJTYov /IzFl62UXoiStmJBS/kx9K6tiiy4RvN9cVUPvpRcCOJFHNnbhllCtzYduYagV+Iv TPqbELL6s4Xp7xV1epnKmoiqpGOIl2TDklwVez/8+7rE+AAXBYsjKzPId/LhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDUyt+FwThsbF034su7y49gJcLHwwHwYDVR0j BBgwFoAUlANmdTAdvs6lmPJ8adyyOR48KIYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE3NTk4ZTQtMjA2NC00ZWNiLTk4ZjYtYjI1OWE3NDk5NmExLzAvOTQwMzY2NzUz MDFEQkVDRUE1OThGMjdDNjlEQ0IyMzkxRTNDMjg4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NDAzNjY3NTMwMURCRUNFQTU5OEYyN0M2OURDQjIzOTFFM0My ODg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE3NTk4ZTQtMjA2NC00ZWNiLTk4 ZjYtYjI1OWE3NDk5NmExLzAvOTQwMzY2NzUzMDFEQkVDRUE1OThGMjdDNjlEQ0Iy MzkxRTNDMjg4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABSJvGQKot7aT8BVQBiURbj1siswo1sc2m3l SNs+aw1EjTfi3OpzN5O6klTT4yI0Z52VdLPW9+QnJ/HxDVzOMeO4FaFEjaEB2fTL WHsoBRDdYOb+Ocsa1ZQIr6Z+HHHVAI4cKw1uUMn8P3XMYdxH2ZJT9WqDJQDBLfWw nqD73wRKYWPK/Qw57NwHG+sx08iv8ZF4gCsA+4V8hj62QJf2E8LcV8CqtvXAE1ab sIASnThD0cAP5s6yiloh08U80bQ+3rChSDicc4qdQydI7vyHLDMdBfwxH/tkVA3+ 0+fhrdiT5dEuYagXzwHu5eRh/Ki27Kizlb+o4XAU4n6mj0+RYcE= -----END CERTIFICATE-----Generated at Mon Sep 21 22:18:25 2026 by rpki-client