$ rpki-client -vvvf rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft File: 094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft (raw, json) Hash identifier: dgP5qbHahec1MIlmq5yr0BvW4gqgp0vdir8MqjnBC8E= Subject key identifier: EC:BF:D3:11:BB:DD:D1:83:B0:32:B3:B9:E2:8E:02:FC:E8:CB:32:2A Authority key identifier: 09:4E:51:1C:E5:BE:87:8C:FC:AE:B4:25:6D:66:BE:1A:6D:E6:5B:37 Certificate issuer: /CN=094E511CE5BE878CFCAEB4256D66BE1A6DE65B37 Certificate serial: 4009CACBFD7B0CD9BC59D180BE3EF51906E56BE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 12:24:04 +0000 Manifest this update: Thu 17 Sep 2026 12:19:04 +0000 Manifest next update: Fri 18 Sep 2026 12:40:04 +0000 Files and hashes: 1: 094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.crl (hash: ZIg++EBX+K0lH1GPH9D65COnXpqwByIUYZ8uGUpUrIQ=) 2: 3130332e3136392e3139382e302f32342d3234203d3e20313432333531.roa (hash: nfQjjeUU0bmWsXIN6glyvpvB8OwmrnZCIcDr2PMemtI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.crl rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:09:ca:cb:fd:7b:0c:d9:bc:59:d1:80:be:3e:f5:19:06:e5:6b:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094E511CE5BE878CFCAEB4256D66BE1A6DE65B37 Validity Not Before: Sep 17 12:19:04 2026 GMT Not After : Sep 18 12:40:04 2026 GMT Subject: CN=ECBFD311BBDDD183B032B3B9E28E02FCE8CB322A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d4:2e:87:c8:9e:41:6c:2b:a6:cd:61:fe:9c: 8a:df:f5:af:28:22:e5:b0:60:5d:5e:db:df:57:02: 99:81:2c:0e:a9:7f:36:1a:dc:2b:ba:d8:d8:22:0e: 32:ac:17:ff:df:9f:92:00:a6:d7:3c:ca:6d:74:96: 50:1e:da:6e:dd:81:75:d8:5c:52:e4:c1:d6:7e:7a: 55:18:a7:29:e5:8a:b6:42:f4:bf:76:43:99:33:62: fa:41:0c:12:e3:44:86:95:73:7c:21:a5:c8:0c:fc: 2c:3c:04:ad:5b:62:63:80:d6:33:af:84:78:8d:ea: a2:95:fc:2d:c4:14:6c:1e:3a:f1:7f:db:96:dd:e1: 42:a4:9d:ce:01:70:be:17:fa:b7:b2:ac:98:d5:d9: 5f:66:b0:2c:74:1c:e4:1a:44:12:7f:d4:5f:5d:e0: 1a:af:a6:d2:de:5c:f3:76:1b:2f:31:5d:d8:5b:e1: bb:11:3d:e9:e9:86:8a:e9:6c:53:40:23:d8:55:5f: 26:2b:bc:09:9d:3c:61:3c:a7:48:52:15:a9:5a:c7: 85:95:dc:37:59:b7:2b:29:fb:2d:8b:c4:aa:97:a5: 69:e4:9b:67:97:79:8b:1a:52:6f:6c:0c:a8:e5:ce: 89:0d:54:01:d1:43:37:e1:6e:1d:f2:de:df:79:2a: 3d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BF:D3:11:BB:DD:D1:83:B0:32:B3:B9:E2:8E:02:FC:E8:CB:32:2A X509v3 Authority Key Identifier: keyid:09:4E:51:1C:E5:BE:87:8C:FC:AE:B4:25:6D:66:BE:1A:6D:E6:5B:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/45260641-bce2-445c-9de5-370a787f9530/0/094E511CE5BE878CFCAEB4256D66BE1A6DE65B37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:1d:d1:92:ad:73:76:37:22:85:33:bb:f1:13:c9:d9:23:43: 47:83:5d:f2:1b:b9:66:57:57:a1:d3:b4:07:b1:22:a6:c3:08: 9b:67:94:6e:58:1d:95:85:2b:e2:5c:fa:88:5c:bb:1b:a2:0d: f4:8e:52:f9:9c:42:50:67:36:59:e2:9a:8b:9f:94:c5:c9:80: 5c:25:90:e7:96:f1:7b:15:ec:10:1b:e8:2a:ed:35:9c:34:f5: 99:c6:80:04:35:8d:9e:88:b2:2e:64:68:92:5b:14:fd:ad:9b: 4e:36:1d:14:08:5c:44:1f:73:8d:a3:40:5d:6b:ed:8d:1d:8d: fb:fe:35:d1:a5:4d:e7:5e:69:7a:83:dd:6a:c1:43:05:f8:34: 32:a4:0b:0c:15:fa:6a:39:dd:29:1b:cb:80:78:40:80:5f:45: 62:99:6f:3e:0a:75:d5:35:2c:9d:8e:0e:14:0a:bb:dc:a2:01: 13:72:03:cd:64:17:d8:ee:44:26:29:74:96:d5:2d:aa:d7:0e: 11:67:f8:bf:4b:55:52:1b:35:2c:13:67:c7:77:12:31:58:0a: 0b:db:9d:b9:fe:13:07:6b:8e:10:41:1f:57:43:c4:de:4a:58: 80:be:4b:b3:34:72:9a:f3:5a:55:6a:a9:3f:32:69:4a:24:ae: 20:07:13:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQAnKy/17DNm8WdGAvj71GQbla+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0RTUxMUNFNUJFODc4Q0ZDQUVCNDI1NkQ2NkJFMUE2 REU2NUIzNzAeFw0yNjA5MTcxMjE5MDRaFw0yNjA5MTgxMjQwMDRaMDMxMTAvBgNV BAMTKEVDQkZEMzExQkJEREQxODNCMDMyQjNCOUUyOEUwMkZDRThDQjMyMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1C6HyJ5BbCumzWH+nIrf9a8o IuWwYF1e299XApmBLA6pfzYa3Cu62NgiDjKsF//fn5IAptc8ym10llAe2m7dgXXY XFLkwdZ+elUYpynlirZC9L92Q5kzYvpBDBLjRIaVc3whpcgM/Cw8BK1bYmOA1jOv hHiN6qKV/C3EFGweOvF/25bd4UKknc4BcL4X+reyrJjV2V9msCx0HOQaRBJ/1F9d 4BqvptLeXPN2Gy8xXdhb4bsRPenphorpbFNAI9hVXyYrvAmdPGE8p0hSFalax4WV 3DdZtysp+y2LxKqXpWnkm2eXeYsaUm9sDKjlzokNVAHRQzfhbh3y3t95Kj0/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7L/TEbvd0YOwMrO54o4C/OjLMiowHwYDVR0j BBgwFoAUCU5RHOW+h4z8rrQlbWa+Gm3mWzcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDUyNjA2NDEtYmNlMi00NDVjLTlkZTUtMzcwYTc4N2Y5NTMwLzAvMDk0RTUxMUNF NUJFODc4Q0ZDQUVCNDI1NkQ2NkJFMUE2REU2NUIzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTRFNTExQ0U1QkU4NzhDRkNBRUI0MjU2RDY2QkUxQTZERTY1 QjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDUyNjA2NDEtYmNlMi00NDVjLTlk ZTUtMzcwYTc4N2Y5NTMwLzAvMDk0RTUxMUNFNUJFODc4Q0ZDQUVCNDI1NkQ2NkJF MUE2REU2NUIzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALAd0ZKtc3Y3IoUzu/ETydkjQ0eDXfIbuWZX V6HTtAexIqbDCJtnlG5YHZWFK+Jc+ohcuxuiDfSOUvmcQlBnNlnimouflMXJgFwl kOeW8XsV7BAb6CrtNZw09ZnGgAQ1jZ6Isi5kaJJbFP2tm042HRQIXEQfc42jQF1r 7Y0djfv+NdGlTedeaXqD3WrBQwX4NDKkCwwV+mo53Skby4B4QIBfRWKZbz4KddU1 LJ2ODhQKu9yiARNyA81kF9juRCYpdJbVLarXDhFn+L9LVVIbNSwTZ8d3EjFYCgvb nbn+EwdrjhBBH1dDxN5KWIC+S7M0cprzWlVqqT8yaUokriAHE7A= -----END CERTIFICATE-----Generated at Thu Sep 17 15:54:10 2026 by rpki-client