$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft File: 94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft (raw, json) Hash identifier: 1U8W2tgxvQIXqbcI8tQlnv9hvdZDSWwKNvH+Dvsy0Q4= Subject key identifier: 69:58:18:8E:C9:BE:FA:E2:4A:16:AE:92:25:9E:AF:DC:43:37:C1:4F Authority key identifier: 94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55 Certificate issuer: /CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55 Certificate serial: 25EC0B4B6B5CF2FDCC6827E8224B9107918A88A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft Manifest number: 55 Signing time: Sat 04 Jul 2026 04:33:18 +0000 Manifest this update: Sat 04 Jul 2026 04:28:18 +0000 Manifest next update: Sun 05 Jul 2026 06:03:18 +0000 Files and hashes: 1: 94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl (hash: Wd8P7hXWTBSKT77fM6qe/8p4zY1M0WDBQ8TJPXINtzM=) 2: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: kcN1ilK7E8xnv83HZbdHrG6Tuk+JlcKgZPpsoyK0j7M=) 3: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: xiPYxavw7gs4+EkMNZofWIC6MSS6142dwKEUHc+Dv/s=) 4: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: sPeZ5gB9bmKL5IKYQ+GWjLxvbyJMzi8Se9W99QeygcE=) 5: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: jeXX5N22FqZkneiGWqodT0kr8qubxNOsLcNDrNQZPLo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Jul 2026 05:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ec:0b:4b:6b:5c:f2:fd:cc:68:27:e8:22:4b:91:07:91:8a:88:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55 Validity Not Before: Jul 4 04:28:18 2026 GMT Not After : Jul 5 06:03:18 2026 GMT Subject: CN=6958188EC9BEFAE24A16AE92259EAFDC4337C14F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:99:0a:0c:1f:48:2e:15:7a:30:52:d1:cb:fd: f6:d5:e3:5c:49:2a:93:27:db:57:7f:9b:da:7e:ba: ef:2d:a7:62:32:a3:42:c9:54:9c:1e:af:17:15:cf: 00:58:21:97:3e:98:8d:c2:ea:a8:32:1d:97:0a:3f: 8c:60:11:9f:04:55:65:3a:c2:ea:fa:e3:6c:a5:62: 45:a0:75:bf:de:ce:32:c9:aa:72:d4:da:e0:e9:4b: 56:69:da:2a:38:9c:a9:a5:83:97:0c:72:2c:e6:e4: f1:fd:1a:1d:01:bb:5e:0e:64:65:81:4f:48:d7:0c: d2:03:cf:bf:9f:ac:e0:91:d7:72:df:51:62:7a:d8: f8:e8:a2:5d:21:eb:be:b5:84:a7:59:e0:4a:4d:60: f6:09:cf:16:2e:b4:26:70:62:7e:5c:ab:f3:e5:6f: 5f:64:89:04:1a:03:84:4c:22:4e:54:c6:40:cf:1c: 9e:58:c8:41:37:8a:e5:b5:a7:31:73:3f:c1:67:11: 16:c7:ef:0e:bb:60:1a:4a:cf:01:b4:34:b3:c8:c0: ab:72:f1:88:e8:cb:4f:03:10:b3:ff:d7:42:0f:82: 93:c3:4c:4f:e1:70:84:32:f2:4b:c1:b9:e8:0f:36: c5:d5:4b:70:74:d9:87:9e:ee:eb:25:ec:fc:c4:fc: fb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:58:18:8E:C9:BE:FA:E2:4A:16:AE:92:25:9E:AF:DC:43:37:C1:4F X509v3 Authority Key Identifier: keyid:94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:25:e2:04:33:af:2c:cd:61:ff:f2:15:60:1d:2e:8d:3e:cf: c5:12:87:0e:0c:86:87:f5:0e:29:e1:b4:cc:8a:98:66:5e:82: f2:bf:fe:2b:4e:04:90:27:35:90:cb:07:86:d5:c7:d8:53:7e: 88:db:2f:02:cb:4a:54:3e:b5:11:91:8d:66:bd:5c:5d:5f:2c: 12:ae:1f:b4:02:79:ea:79:21:09:9d:d1:8a:86:e6:cd:6b:b7: 9a:04:44:9d:24:29:f1:46:75:4a:d2:00:21:47:50:73:74:3f: d0:45:0d:f5:6e:07:3e:87:b1:88:ba:13:23:d9:47:7e:b5:3b: b7:2b:3c:fa:1f:e1:53:e2:73:bc:fc:59:3f:f5:35:5f:ff:41: 03:51:75:e5:ba:97:45:ae:a3:d0:ee:3e:d6:98:29:bc:be:f2: c3:17:d4:34:30:dc:8d:41:05:3f:54:e6:34:2e:0c:17:5a:bb: b9:d7:1c:1f:17:95:ae:81:d1:9d:69:97:93:ee:6e:f6:55:3b: 05:b0:6e:d4:41:5b:eb:de:e6:a0:73:5d:f9:a6:50:cc:01:70: b9:25:af:8f:dd:e3:dd:2c:c1:34:f4:2b:4e:4d:97:7f:3f:ac: 13:14:69:88:60:b6:c6:3b:d6:c5:59:6e:c4:fb:a1:ef:74:47: 6f:2b:7c:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJewLS2tc8v3MaCfoIkuRB5GKiKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBQTBFRUE0ODBBQzMzMDAzNjVERjRCMzNEQTNGMzE1 MDY5OEQ1NTAeFw0yNjA3MDQwNDI4MThaFw0yNjA3MDUwNjAzMThaMDMxMTAvBgNV BAMTKDY5NTgxODhFQzlCRUZBRTI0QTE2QUU5MjI1OUVBRkRDNDMzN0MxNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkmQoMH0guFXowUtHL/fbV41xJ KpMn21d/m9p+uu8tp2Iyo0LJVJwerxcVzwBYIZc+mI3C6qgyHZcKP4xgEZ8EVWU6 wur642ylYkWgdb/ezjLJqnLU2uDpS1Zp2io4nKmlg5cMcizm5PH9Gh0Bu14OZGWB T0jXDNIDz7+frOCR13LfUWJ62Pjool0h6761hKdZ4EpNYPYJzxYutCZwYn5cq/Pl b19kiQQaA4RMIk5UxkDPHJ5YyEE3iuW1pzFzP8FnERbH7w67YBpKzwG0NLPIwKty 8Yjoy08DELP/10IPgpPDTE/hcIQy8kvBuegPNsXVS3B02Yee7usl7PzE/PsJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaVgYjsm++uJKFq6SJZ6v3EM3wU8wHwYDVR0j BBgwFoAUlKoO6kgKwzADZd9LM9o/MVBpjVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJhYjgwNDItMGUxYy00M2IxLWI3MDMtNjM0MzhiZTIzMjViLzAvOTRBQTBFRUE0 ODBBQzMzMDAzNjVERjRCMzNEQTNGMzE1MDY5OEQ1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NEFBMEVFQTQ4MEFDMzMwMDM2NURGNEIzM0RBM0YzMTUwNjk4 RDU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvOTRBQTBFRUE0ODBBQzMzMDAzNjVERjRCMzNEQTNG MzE1MDY5OEQ1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADol4gQzryzNYf/yFWAdLo0+z8UShw4Mhof1 DinhtMyKmGZegvK//itOBJAnNZDLB4bVx9hTfojbLwLLSlQ+tRGRjWa9XF1fLBKu H7QCeep5IQmd0YqG5s1rt5oERJ0kKfFGdUrSACFHUHN0P9BFDfVuBz6HsYi6EyPZ R361O7crPPof4VPic7z8WT/1NV//QQNRdeW6l0Wuo9DuPtaYKby+8sMX1DQw3I1B BT9U5jQuDBdau7nXHB8Xla6B0Z1pl5PubvZVOwWwbtRBW+ve5qBzXfmmUMwBcLkl r4/d490swTT0K05Nl38/rBMUaYhgtsY71sVZbsT7oe90R28rfO4= -----END CERTIFICATE-----Generated at Sat Jul 4 21:13:41 2026 by rpki-client