$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft File: 94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft (raw, json) Hash identifier: 6nyqFBRrnpqqQ+gV7h2nbdfUcyzRQ2HTq7LvIwv1Fig= Subject key identifier: E6:CF:6A:36:E3:72:80:B9:D7:9B:3B:68:42:86:61:07:6A:CE:D1:86 Authority key identifier: 94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55 Certificate issuer: /CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55 Certificate serial: 0C17F233C0EB84B60EC660514E3B1545A88739F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft Manifest number: 9A Signing time: Tue 25 Aug 2026 16:22:19 +0000 Manifest this update: Tue 25 Aug 2026 16:17:19 +0000 Manifest next update: Wed 26 Aug 2026 16:49:19 +0000 Files and hashes: 1: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: xiPYxavw7gs4+EkMNZofWIC6MSS6142dwKEUHc+Dv/s=) 2: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: sPeZ5gB9bmKL5IKYQ+GWjLxvbyJMzi8Se9W99QeygcE=) 3: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: kcN1ilK7E8xnv83HZbdHrG6Tuk+JlcKgZPpsoyK0j7M=) 4: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: jeXX5N22FqZkneiGWqodT0kr8qubxNOsLcNDrNQZPLo=) 5: 94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl (hash: EiRUpd3ak0l6XxlkhTeJq7gl9V85zXkuKprC0ujEMyQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 16:49:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:17:f2:33:c0:eb:84:b6:0e:c6:60:51:4e:3b:15:45:a8:87:39:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55 Validity Not Before: Aug 25 16:17:19 2026 GMT Not After : Aug 26 16:49:19 2026 GMT Subject: CN=E6CF6A36E37280B9D79B3B68428661076ACED186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:45:00:2e:e5:ed:9e:59:e0:ff:1f:ac:1f:cd: b0:96:ca:da:2c:3e:ce:cd:b3:f9:f3:3c:87:e7:b1: 97:a0:24:bd:5b:3c:f1:78:2a:84:c0:59:f2:37:e3: f4:a9:51:4d:d9:2d:91:3c:b5:f9:8d:41:5d:f1:c8: 34:eb:e7:23:32:c8:98:42:bb:5b:23:93:63:de:0d: b1:4f:db:fe:de:68:38:66:90:53:ff:01:b3:5e:41: 75:df:a2:68:69:b9:15:74:91:ac:12:fe:eb:03:18: 18:73:53:6f:b0:7c:c5:d6:5d:bb:84:95:e0:21:66: f2:9b:05:74:00:36:3d:1e:0b:4c:07:27:46:cf:15: 43:3c:ef:c4:f7:8f:36:b3:fe:62:ea:bb:f6:d5:a3: ec:4c:3a:fc:8c:0c:55:06:dd:8b:b3:e3:7e:5f:16: ae:a9:c0:f0:bd:2c:cf:a9:1d:be:8c:0f:4f:ff:50: aa:50:1e:8a:86:95:ee:34:e5:b4:6e:5f:35:4c:bc: b2:30:4a:87:74:e2:df:79:cd:12:4f:fe:7c:2e:b6: 54:25:d4:ee:96:18:d7:95:3a:67:02:72:37:13:e8: a5:7e:a3:0a:68:07:4a:78:73:47:ab:aa:d1:25:9b: 35:a4:fc:2f:b5:48:f8:47:6b:76:07:2f:b8:85:01: bb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CF:6A:36:E3:72:80:B9:D7:9B:3B:68:42:86:61:07:6A:CE:D1:86 X509v3 Authority Key Identifier: keyid:94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e1:99:44:53:3e:a2:f6:11:39:57:d0:32:16:b8:85:36:f1: 5f:81:71:f8:0d:7a:c0:8d:06:d9:46:2c:98:94:23:da:30:64: 82:d2:fe:0e:75:d9:d0:a2:48:00:f3:bf:1b:4e:27:a1:5a:81: 1d:dd:ea:ba:dd:7a:39:10:18:97:a7:46:7a:b7:58:33:aa:e5: 81:fa:d0:e2:3d:e7:63:dd:b4:a4:7e:10:f4:45:c9:f9:84:01: 5a:14:32:87:9e:53:31:7f:e5:d6:ea:17:6a:81:d3:f8:2b:33: 9c:80:fe:8a:6e:58:8e:04:2e:09:b2:68:84:24:67:e7:3c:4c: 1a:ff:a0:ae:9f:9c:e2:c2:19:46:15:58:01:2e:84:27:11:fd: 71:c5:8e:10:45:80:c6:e3:f9:60:75:c8:93:4b:ed:e8:fb:0a: 78:f8:57:6f:d5:41:54:67:93:c6:05:c2:b9:51:11:c8:28:f7: 49:e3:d9:e6:df:75:89:1f:81:ef:1a:23:29:8d:b0:24:8f:c8: c7:ab:5c:26:b4:65:fb:38:25:d6:e4:09:ab:d7:51:40:9a:b4: 53:87:09:e1:56:87:2b:d6:82:a7:81:54:e8:7e:b7:f3:ec:60: 10:80:2e:2d:c6:ac:b0:d3:ae:13:4f:d6:79:99:3f:88:a2:14: a2:7a:8f:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDBfyM8DrhLYOxmBRTjsVRaiHOfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBQTBFRUE0ODBBQzMzMDAzNjVERjRCMzNEQTNGMzE1 MDY5OEQ1NTAeFw0yNjA4MjUxNjE3MTlaFw0yNjA4MjYxNjQ5MTlaMDMxMTAvBgNV BAMTKEU2Q0Y2QTM2RTM3MjgwQjlENzlCM0I2ODQyODY2MTA3NkFDRUQxODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIRQAu5e2eWeD/H6wfzbCWytos Ps7Ns/nzPIfnsZegJL1bPPF4KoTAWfI34/SpUU3ZLZE8tfmNQV3xyDTr5yMyyJhC u1sjk2PeDbFP2/7eaDhmkFP/AbNeQXXfomhpuRV0kawS/usDGBhzU2+wfMXWXbuE leAhZvKbBXQANj0eC0wHJ0bPFUM878T3jzaz/mLqu/bVo+xMOvyMDFUG3Yuz435f Fq6pwPC9LM+pHb6MD0//UKpQHoqGle405bRuXzVMvLIwSod04t95zRJP/nwutlQl 1O6WGNeVOmcCcjcT6KV+owpoB0p4c0erqtElmzWk/C+1SPhHa3YHL7iFAbszAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5s9qNuNygLnXmztoQoZhB2rO0YYwHwYDVR0j BBgwFoAUlKoO6kgKwzADZd9LM9o/MVBpjVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJhYjgwNDItMGUxYy00M2IxLWI3MDMtNjM0MzhiZTIzMjViLzAvOTRBQTBFRUE0 ODBBQzMzMDAzNjVERjRCMzNEQTNGMzE1MDY5OEQ1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NEFBMEVFQTQ4MEFDMzMwMDM2NURGNEIzM0RBM0YzMTUwNjk4 RDU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvOTRBQTBFRUE0ODBBQzMzMDAzNjVERjRCMzNEQTNG MzE1MDY5OEQ1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzhmURTPqL2ETlX0DIWuIU28V+BcfgNesCN BtlGLJiUI9owZILS/g512dCiSADzvxtOJ6FagR3d6rrdejkQGJenRnq3WDOq5YH6 0OI952PdtKR+EPRFyfmEAVoUMoeeUzF/5dbqF2qB0/grM5yA/opuWI4ELgmyaIQk Z+c8TBr/oK6fnOLCGUYVWAEuhCcR/XHFjhBFgMbj+WB1yJNL7ej7Cnj4V2/VQVRn k8YFwrlREcgo90nj2ebfdYkfge8aIymNsCSPyMerXCa0Zfs4JdbkCavXUUCatFOH CeFWhyvWgqeBVOh+t/PsYBCALi3GrLDTrhNP1nmZP4iiFKJ6j5Q= -----END CERTIFICATE-----Generated at Wed Aug 26 10:38:57 2026 by rpki-client