$ rpki-client -vvvf rpki-rsync.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/94D293E7CB8D73306142803A86C1806360A0C9BA.mft File: 94D293E7CB8D73306142803A86C1806360A0C9BA.mft (raw, json) Hash identifier: qaBLQtqYg59lQoXI2AM+gGiD4DVJS1B6x9qMe/HSp+g= Subject key identifier: B3:7E:CD:7B:69:6F:62:A8:37:E4:B6:5C:09:A8:02:B3:8D:B6:2A:5D Authority key identifier: 94:D2:93:E7:CB:8D:73:30:61:42:80:3A:86:C1:80:63:60:A0:C9:BA Certificate issuer: /CN=94D293E7CB8D73306142803A86C1806360A0C9BA Certificate serial: 60E79C64E0AA00E23BDD51216F020DC69A567014 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94D293E7CB8D73306142803A86C1806360A0C9BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/94D293E7CB8D73306142803A86C1806360A0C9BA.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 18:39:31 +0000 Manifest this update: Tue 22 Sep 2026 18:34:31 +0000 Manifest next update: Wed 23 Sep 2026 21:40:31 +0000 Files and hashes: 1: 94D293E7CB8D73306142803A86C1806360A0C9BA.crl (hash: mGQO0nIowrf+CtxIwqXLml9q4byg9tGUl3IzabBYNx0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/94D293E7CB8D73306142803A86C1806360A0C9BA.crl rsync://rpki-rsync.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/94D293E7CB8D73306142803A86C1806360A0C9BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94D293E7CB8D73306142803A86C1806360A0C9BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 21:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e7:9c:64:e0:aa:00:e2:3b:dd:51:21:6f:02:0d:c6:9a:56:70:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94D293E7CB8D73306142803A86C1806360A0C9BA Validity Not Before: Sep 22 18:34:31 2026 GMT Not After : Sep 23 21:40:31 2026 GMT Subject: CN=B37ECD7B696F62A837E4B65C09A802B38DB62A5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1f:7b:ff:8b:58:0d:b8:81:e9:95:38:24:6b: b5:ab:86:ef:60:3e:3c:62:ea:0e:cd:2d:b1:e4:d8: 9b:a6:69:e5:fa:0b:7a:cb:66:78:17:ae:5c:ce:82: c0:4d:e9:9d:d5:bf:89:e6:a7:4f:5d:47:b8:b9:b8: 35:bf:71:eb:31:6c:ce:e5:de:ba:47:bc:f2:d1:97: a7:3b:ef:e5:35:ca:20:50:f3:b4:8e:3a:41:d6:92: 8b:d9:9d:a8:4c:b9:36:f9:ee:12:77:20:38:40:41: 54:5b:0a:36:d0:1b:92:2b:e0:bf:41:1b:80:9d:a6: 5f:95:2b:1c:ef:84:03:6d:70:3f:ba:20:68:95:85: 47:79:70:77:32:9f:0a:b7:99:0f:05:23:ef:3d:32: 37:75:18:e8:f2:80:dc:38:eb:48:1a:99:d7:3e:d2: 09:69:1a:aa:1e:55:2e:54:65:30:bc:f5:85:40:df: 7b:9c:06:b1:93:89:69:f2:70:59:3f:50:78:7d:a1: 3f:3f:5f:9b:37:a7:ca:e4:d6:b5:f6:a0:7a:24:f1: a3:dc:76:0a:ad:42:49:3e:da:b7:27:54:9e:ab:85: 3b:9d:4b:58:de:90:de:0a:e7:2b:c3:f2:f8:06:0f: 95:c2:e9:d7:d1:53:e3:ef:0b:d8:6d:5c:05:20:2e: cf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7E:CD:7B:69:6F:62:A8:37:E4:B6:5C:09:A8:02:B3:8D:B6:2A:5D X509v3 Authority Key Identifier: keyid:94:D2:93:E7:CB:8D:73:30:61:42:80:3A:86:C1:80:63:60:A0:C9:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/94D293E7CB8D73306142803A86C1806360A0C9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94D293E7CB8D73306142803A86C1806360A0C9BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/94D293E7CB8D73306142803A86C1806360A0C9BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:88:fc:9d:05:42:bc:19:89:b4:3a:74:4e:ce:c3:de:f7:f4: ea:64:7f:e7:a6:96:90:86:a3:c8:e9:d4:c0:57:45:18:ef:b9: 72:20:9f:d9:5b:54:24:69:5a:42:55:48:5e:f8:3b:61:49:ec: 33:fe:8d:fd:59:c9:b0:43:e4:22:60:d5:34:5b:53:8c:da:7c: b3:c9:21:72:5d:53:e7:8b:35:96:3c:36:eb:54:03:bc:6b:29: b3:9e:95:30:d7:2b:15:1d:8b:a4:e6:6a:bb:4d:69:01:62:3b: a6:e1:81:13:2a:81:45:c2:af:72:41:20:e8:a9:cd:3e:5d:bf: 22:cc:2d:d3:1b:33:00:87:d1:5b:19:60:0f:69:92:4d:c8:a2: 65:ce:f1:c3:2a:ff:9b:a4:d9:39:f5:f0:b9:91:89:4d:f8:22: 46:18:16:00:dd:db:6c:ea:dd:c3:d3:1f:02:87:f9:c6:0d:ac: 7a:e2:69:ec:4f:38:11:0a:cd:35:92:44:84:db:f3:2f:e6:b9: 01:97:32:97:ec:02:f9:fb:30:db:eb:b8:8e:41:e1:e4:07:20: 07:85:5a:fc:99:72:39:08:96:cb:8d:c6:7a:1a:fb:9c:d5:c3: 22:98:b5:ea:a2:78:fe:f9:53:14:0c:08:6a:57:6c:8a:3e:92: 3a:2d:5a:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYOecZOCqAOI73VEhbwINxppWcBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTREMjkzRTdDQjhENzMzMDYxNDI4MDNBODZDMTgwNjM2 MEEwQzlCQTAeFw0yNjA5MjIxODM0MzFaFw0yNjA5MjMyMTQwMzFaMDMxMTAvBgNV BAMTKEIzN0VDRDdCNjk2RjYyQTgzN0U0QjY1QzA5QTgwMkIzOERCNjJBNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFH3v/i1gNuIHplTgka7Wrhu9g Pjxi6g7NLbHk2JumaeX6C3rLZngXrlzOgsBN6Z3Vv4nmp09dR7i5uDW/cesxbM7l 3rpHvPLRl6c77+U1yiBQ87SOOkHWkovZnahMuTb57hJ3IDhAQVRbCjbQG5Ir4L9B G4Cdpl+VKxzvhANtcD+6IGiVhUd5cHcynwq3mQ8FI+89Mjd1GOjygNw460gamdc+ 0glpGqoeVS5UZTC89YVA33ucBrGTiWnycFk/UHh9oT8/X5s3p8rk1rX2oHok8aPc dgqtQkk+2rcnVJ6rhTudS1jekN4K5yvD8vgGD5XC6dfRU+PvC9htXAUgLs9lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs37Ne2lvYqg35LZcCagCs422Kl0wHwYDVR0j BBgwFoAUlNKT58uNczBhQoA6hsGAY2CgybowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWViNzhmNjgtYzdjYi00NTJmLTk2YjUtYzQxZDY1MzcyMDIxLzAvOTREMjkzRTdD QjhENzMzMDYxNDI4MDNBODZDMTgwNjM2MEEwQzlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NEQyOTNFN0NCOEQ3MzMwNjE0MjgwM0E4NkMxODA2MzYwQTBD OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWViNzhmNjgtYzdjYi00NTJmLTk2 YjUtYzQxZDY1MzcyMDIxLzAvOTREMjkzRTdDQjhENzMzMDYxNDI4MDNBODZDMTgw NjM2MEEwQzlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuI/J0FQrwZibQ6dE7Ow9739Opkf+emlpCG o8jp1MBXRRjvuXIgn9lbVCRpWkJVSF74O2FJ7DP+jf1ZybBD5CJg1TRbU4zafLPJ IXJdU+eLNZY8NutUA7xrKbOelTDXKxUdi6TmartNaQFiO6bhgRMqgUXCr3JBIOip zT5dvyLMLdMbMwCH0VsZYA9pkk3IomXO8cMq/5uk2Tn18LmRiU34IkYYFgDd22zq 3cPTHwKH+cYNrHriaexPOBEKzTWSRITb8y/muQGXMpfsAvn7MNvruI5B4eQHIAeF WvyZcjkIlsuNxnoa+5zVwyKYteqieP75UxQMCGpXbIo+kjotWj8= -----END CERTIFICATE-----Generated at Wed Sep 23 10:17:38 2026 by rpki-client