$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft File: 94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft (raw, json) Hash identifier: 6S9d5dS/HHr0/lKsVf6ediEHLChLo+4mqaEAuOrE+X0= Subject key identifier: E9:13:7E:23:DE:61:B3:EA:EC:90:55:A3:A9:3C:BC:9D:AC:4B:17:A0 Authority key identifier: 94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55 Certificate issuer: /CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55 Certificate serial: 63B76226DF0C58CD1FEFDD96CD3B87EE0535A558 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft Manifest number: EA Signing time: Sat 24 Oct 2026 22:57:47 +0000 Manifest this update: Sat 24 Oct 2026 22:52:47 +0000 Manifest next update: Sun 25 Oct 2026 23:38:47 +0000 Files and hashes: 1: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: kcN1ilK7E8xnv83HZbdHrG6Tuk+JlcKgZPpsoyK0j7M=) 2: 94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl (hash: AbjvNwRqhi+Nn84Zgdpr2PiULbnDzq/zZK0uKnhifjg=) 3: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: sPeZ5gB9bmKL5IKYQ+GWjLxvbyJMzi8Se9W99QeygcE=) 4: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: jeXX5N22FqZkneiGWqodT0kr8qubxNOsLcNDrNQZPLo=) 5: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: xiPYxavw7gs4+EkMNZofWIC6MSS6142dwKEUHc+Dv/s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b7:62:26:df:0c:58:cd:1f:ef:dd:96:cd:3b:87:ee:05:35:a5:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55 Validity Not Before: Oct 24 22:52:47 2026 GMT Not After : Oct 25 23:38:47 2026 GMT Subject: CN=E9137E23DE61B3EAEC9055A3A93CBC9DAC4B17A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6f:10:d8:ed:d3:4e:b1:da:a9:a3:60:55:b2: 2d:2d:fb:a2:50:c1:ae:87:00:1c:aa:ef:61:91:96: cd:bd:18:67:1d:c4:3b:a5:53:99:c1:02:ea:bf:b7: 38:e2:ea:07:8d:69:98:02:c2:50:71:a1:1b:1d:1e: ff:d4:d7:0b:63:bf:c6:49:af:bf:28:10:3a:41:d0: 63:37:8d:5a:2c:1e:a4:2c:6f:b2:c2:31:c2:ad:13: 85:05:76:4f:89:73:a7:5e:cb:4c:14:47:05:b5:15: f1:76:ac:9c:fb:47:4f:ab:93:f6:f2:c6:f9:9f:14: 1d:44:4f:5d:38:08:87:53:42:f1:cc:92:3a:f5:d6: b8:51:99:69:0c:04:ca:2f:46:45:be:63:59:f5:08: 8f:19:fb:db:f1:ab:f3:69:66:9b:ef:3b:38:58:5e: 11:77:89:6e:a0:5a:6f:8a:56:e5:b7:b5:c5:05:15: 03:c7:0c:f8:14:68:97:35:4f:58:7e:7a:6f:20:ad: 00:6d:17:83:0d:94:d7:e3:5b:54:f8:e3:aa:59:65: db:2b:b5:f4:e8:bb:15:57:1e:d9:ec:6f:3f:b5:d4: 31:ea:f2:80:bc:5c:7f:fd:b2:8d:33:88:b3:06:37: a1:48:ea:12:37:4c:5c:c9:db:63:bd:b0:d7:cf:61: c9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:13:7E:23:DE:61:B3:EA:EC:90:55:A3:A9:3C:BC:9D:AC:4B:17:A0 X509v3 Authority Key Identifier: keyid:94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:3d:a1:4b:f6:a1:3f:8b:fb:ef:8a:1b:af:04:28:f7:26:d0: b8:bc:55:90:31:a5:2b:75:b8:c1:6c:3b:22:6d:8a:83:73:c2: b0:bb:6c:9d:cc:0a:2f:d7:a8:39:cd:77:c7:04:b8:e0:d9:a8: 53:28:c0:57:3e:57:c7:c1:af:40:3e:4a:f2:5d:7a:f3:5b:16: 53:97:ef:05:18:cb:52:88:be:80:1c:cb:2b:9a:eb:cd:3d:c6: 23:7e:90:0d:97:7d:24:15:23:1d:44:ce:13:90:5e:9d:ab:7c: b8:0d:18:44:2d:ef:7a:9c:fe:57:cb:fc:13:c0:7e:b3:90:a4: 57:25:fa:43:89:5f:28:b8:f0:a1:69:82:3c:e5:d9:51:e8:bb: e4:7b:55:67:80:e1:83:34:9b:b3:d9:20:a6:4c:a6:0d:db:d9: 07:27:51:84:1e:f0:3f:7f:69:5d:5c:42:e6:a4:64:4f:39:5a: 98:13:8b:50:f7:23:16:18:64:49:9b:57:02:b9:bb:df:70:e6: 22:af:77:37:b4:34:9b:62:8d:34:fd:20:5d:7e:fd:92:c9:96: 39:46:25:30:70:7b:a7:8a:82:90:1a:80:54:7c:d8:bf:6b:60: 76:39:68:7a:fb:46:a9:ed:54:71:11:ed:85:6b:44:6e:d5:f4: 59:47:e0:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY7diJt8MWM0f792WzTuH7gU1pVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBQTBFRUE0ODBBQzMzMDAzNjVERjRCMzNEQTNGMzE1 MDY5OEQ1NTAeFw0yNjEwMjQyMjUyNDdaFw0yNjEwMjUyMzM4NDdaMDMxMTAvBgNV BAMTKEU5MTM3RTIzREU2MUIzRUFFQzkwNTVBM0E5M0NCQzlEQUM0QjE3QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnbxDY7dNOsdqpo2BVsi0t+6JQ wa6HAByq72GRls29GGcdxDulU5nBAuq/tzji6geNaZgCwlBxoRsdHv/U1wtjv8ZJ r78oEDpB0GM3jVosHqQsb7LCMcKtE4UFdk+Jc6dey0wURwW1FfF2rJz7R0+rk/by xvmfFB1ET104CIdTQvHMkjr11rhRmWkMBMovRkW+Y1n1CI8Z+9vxq/NpZpvvOzhY XhF3iW6gWm+KVuW3tcUFFQPHDPgUaJc1T1h+em8grQBtF4MNlNfjW1T446pZZdsr tfTouxVXHtnsbz+11DHq8oC8XH/9so0ziLMGN6FI6hI3TFzJ22O9sNfPYclXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6RN+I95hs+rskFWjqTy8naxLF6AwHwYDVR0j BBgwFoAUlKoO6kgKwzADZd9LM9o/MVBpjVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJhYjgwNDItMGUxYy00M2IxLWI3MDMtNjM0MzhiZTIzMjViLzAvOTRBQTBFRUE0 ODBBQzMzMDAzNjVERjRCMzNEQTNGMzE1MDY5OEQ1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NEFBMEVFQTQ4MEFDMzMwMDM2NURGNEIzM0RBM0YzMTUwNjk4 RDU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvOTRBQTBFRUE0ODBBQzMzMDAzNjVERjRCMzNEQTNG MzE1MDY5OEQ1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQ9oUv2oT+L+++KG68EKPcm0Li8VZAxpSt1 uMFsOyJtioNzwrC7bJ3MCi/XqDnNd8cEuODZqFMowFc+V8fBr0A+SvJdevNbFlOX 7wUYy1KIvoAcyyua6809xiN+kA2XfSQVIx1EzhOQXp2rfLgNGEQt73qc/lfL/BPA frOQpFcl+kOJXyi48KFpgjzl2VHou+R7VWeA4YM0m7PZIKZMpg3b2QcnUYQe8D9/ aV1cQuakZE85WpgTi1D3IxYYZEmbVwK5u99w5iKvdze0NJtijTT9IF1+/ZLJljlG JTBwe6eKgpAagFR82L9rYHY5aHr7RqntVHER7YVrRG7V9FlH4Ho= -----END CERTIFICATE-----Generated at Sun Oct 25 01:44:43 2026 by rpki-client