$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft File: 94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft (raw, json) Hash identifier: l7G4nGBKsXAFfVu9p3mGTZyOm6rtDQHdIX1HUYubZ1Q= Subject key identifier: 21:A5:3B:A3:77:EF:8D:55:07:67:8F:24:64:DE:22:53:A4:11:D5:53 Authority key identifier: 94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55 Certificate issuer: /CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55 Certificate serial: 11EE0332F9B39865C39BC0D1F6F4C8E0F04B05F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft Manifest number: 10 Signing time: Wed 13 May 2026 16:47:45 +0000 Manifest this update: Wed 13 May 2026 16:42:45 +0000 Manifest next update: Thu 14 May 2026 18:45:45 +0000 Files and hashes: 1: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: sPeZ5gB9bmKL5IKYQ+GWjLxvbyJMzi8Se9W99QeygcE=) 2: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: xiPYxavw7gs4+EkMNZofWIC6MSS6142dwKEUHc+Dv/s=) 3: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: kcN1ilK7E8xnv83HZbdHrG6Tuk+JlcKgZPpsoyK0j7M=) 4: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: jeXX5N22FqZkneiGWqodT0kr8qubxNOsLcNDrNQZPLo=) 5: 94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl (hash: yIcg9ilpRyBZdhbMXy3f2a0j82urbQK3vhYRAM/g+mQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ee:03:32:f9:b3:98:65:c3:9b:c0:d1:f6:f4:c8:e0:f0:4b:05:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55 Validity Not Before: May 13 16:42:45 2026 GMT Not After : May 14 18:45:45 2026 GMT Subject: CN=21A53BA377EF8D5507678F2464DE2253A411D553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a5:63:0b:99:17:20:6c:94:5d:02:0a:aa:74: e7:e6:7e:ae:dd:50:81:cf:b3:5d:de:5b:08:fa:c4: 08:5c:38:bb:86:2b:8f:9c:ab:c4:2e:6f:d9:22:c5: a7:44:20:f3:2a:c0:25:ed:d8:34:43:54:cf:a4:c3: d1:3d:8c:47:24:79:a3:4e:10:b5:3d:ff:70:e8:bf: e1:5e:c2:71:72:76:63:97:f7:06:42:9e:d6:d2:42: 9b:0e:b2:ba:0d:d1:d8:81:e4:eb:05:ff:11:0a:e5: e3:42:e2:95:3d:a1:23:31:25:85:90:1c:20:f0:d3: 99:f8:a2:c0:84:f9:3b:36:50:31:f7:58:72:47:88: 86:c8:71:f7:08:e3:d2:19:3e:36:44:ae:d7:8b:21: 96:18:64:2b:bf:41:b9:2d:03:94:89:68:63:94:39: c1:a7:02:fe:23:c5:77:b7:06:ad:b0:88:c0:10:d2: 46:81:a6:75:e4:4a:9b:8d:e0:8e:23:e9:6c:82:62: 56:bc:95:68:3d:84:0f:bf:dd:ea:13:71:43:39:0b: e2:99:ab:69:4a:3d:a7:51:ff:97:64:45:e5:24:db: 9d:d9:56:dc:a6:65:76:77:38:5d:f7:e3:57:fe:d2: 02:3f:20:f4:b4:13:5c:62:dc:6d:f2:db:9b:a4:6c: a0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A5:3B:A3:77:EF:8D:55:07:67:8F:24:64:DE:22:53:A4:11:D5:53 X509v3 Authority Key Identifier: keyid:94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:d7:46:e4:df:bc:4c:91:75:44:01:67:8e:22:13:86:ad:93: f7:41:7d:f7:b4:79:06:41:79:4b:a9:f0:b1:e7:8f:30:cf:7b: 93:05:57:8f:7b:24:cc:24:a1:ab:08:24:54:78:1d:b1:e7:03: cd:7c:0f:11:97:c4:6a:1a:24:02:7a:93:fa:a0:03:a7:c9:37: 9a:47:1d:56:f9:dd:16:f6:6e:02:61:74:74:10:58:1e:44:57: 52:9a:4b:85:d3:4a:17:59:98:19:fb:fb:f5:30:18:2e:23:91: 57:be:a0:7c:d0:6c:a6:50:96:33:a3:18:f5:58:9b:b4:5a:b5: 8f:79:4a:92:d8:97:bd:fc:49:7f:ea:47:36:bc:b7:15:0b:aa: 76:d6:eb:89:c0:0f:92:32:5a:e7:78:04:b8:d6:fe:3b:a9:6f: 4e:fc:e4:09:54:b6:05:9f:d2:8a:c0:c8:82:27:94:8a:95:d9: 4c:2a:c2:03:19:2f:6c:20:76:60:c7:73:58:99:22:8a:23:d6: 6f:77:27:58:09:6d:51:56:e7:85:55:fc:1f:42:a1:c7:8b:ea: c0:48:2b:8a:7f:b0:32:63:6f:da:7f:5e:ce:14:32:4e:eb:15: ef:98:60:18:16:72:24:b5:70:9f:7e:7e:a5:96:27:d7:19:2d: 21:58:ee:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEe4DMvmzmGXDm8DR9vTI4PBLBfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBQTBFRUE0ODBBQzMzMDAzNjVERjRCMzNEQTNGMzE1 MDY5OEQ1NTAeFw0yNjA1MTMxNjQyNDVaFw0yNjA1MTQxODQ1NDVaMDMxMTAvBgNV BAMTKDIxQTUzQkEzNzdFRjhENTUwNzY3OEYyNDY0REUyMjUzQTQxMUQ1NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4pWMLmRcgbJRdAgqqdOfmfq7d UIHPs13eWwj6xAhcOLuGK4+cq8Qub9kixadEIPMqwCXt2DRDVM+kw9E9jEckeaNO ELU9/3Dov+FewnFydmOX9wZCntbSQpsOsroN0diB5OsF/xEK5eNC4pU9oSMxJYWQ HCDw05n4osCE+Ts2UDH3WHJHiIbIcfcI49IZPjZErteLIZYYZCu/QbktA5SJaGOU OcGnAv4jxXe3Bq2wiMAQ0kaBpnXkSpuN4I4j6WyCYla8lWg9hA+/3eoTcUM5C+KZ q2lKPadR/5dkReUk253ZVtymZXZ3OF3341f+0gI/IPS0E1xi3G3y25ukbKD1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIaU7o3fvjVUHZ48kZN4iU6QR1VMwHwYDVR0j BBgwFoAUlKoO6kgKwzADZd9LM9o/MVBpjVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJhYjgwNDItMGUxYy00M2IxLWI3MDMtNjM0MzhiZTIzMjViLzAvOTRBQTBFRUE0 ODBBQzMzMDAzNjVERjRCMzNEQTNGMzE1MDY5OEQ1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NEFBMEVFQTQ4MEFDMzMwMDM2NURGNEIzM0RBM0YzMTUwNjk4 RDU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvOTRBQTBFRUE0ODBBQzMzMDAzNjVERjRCMzNEQTNG MzE1MDY5OEQ1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrXRuTfvEyRdUQBZ44iE4atk/dBffe0eQZB eUup8LHnjzDPe5MFV497JMwkoasIJFR4HbHnA818DxGXxGoaJAJ6k/qgA6fJN5pH HVb53Rb2bgJhdHQQWB5EV1KaS4XTShdZmBn7+/UwGC4jkVe+oHzQbKZQljOjGPVY m7RatY95SpLYl738SX/qRza8txULqnbW64nAD5IyWud4BLjW/jupb0785AlUtgWf 0orAyIInlIqV2UwqwgMZL2wgdmDHc1iZIooj1m93J1gJbVFW54VV/B9CoceL6sBI K4p/sDJjb9p/Xs4UMk7rFe+YYBgWciS1cJ9+fqWWJ9cZLSFY7nU= -----END CERTIFICATE-----Generated at Thu May 14 02:49:23 2026 by rpki-client