$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft File: 94036675301DBECEA598F27C69DCB2391E3C2886.mft (raw, json) Hash identifier: GaFVRSYihTOogqxbBqw95tynTO+foT0wgp1PvVaQAGQ= Subject key identifier: 0C:98:56:8D:47:48:15:F1:59:88:45:FF:D2:39:D4:A2:1D:23:31:81 Authority key identifier: 94:03:66:75:30:1D:BE:CE:A5:98:F2:7C:69:DC:B2:39:1E:3C:28:86 Certificate issuer: /CN=94036675301DBECEA598F27C69DCB2391E3C2886 Certificate serial: 22D8B0CEC8EF94719D97EDEDA423942890E649EA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft Manifest number: EC Signing time: Sun 25 Oct 2026 12:11:50 +0000 Manifest this update: Sun 25 Oct 2026 12:06:50 +0000 Manifest next update: Mon 26 Oct 2026 14:21:50 +0000 Files and hashes: 1: 94036675301DBECEA598F27C69DCB2391E3C2886.crl (hash: zCTjVHf62VK+UE/yVBkDbKI/GFmM78VWIZ8qlDHOr9A=) 2: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: /165UFjNpwWW+EZFcjl+71+ujJPspyfJC04aoRjZsKo=) 3: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: Ll1O0jrLBRiezZCuRZRt8vBzf1LiXokuLQkKXN01bA8=) 4: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: 63RFUP20PHT95cd0UVwx1h2yICgt0oulTqYaR5p2Hfk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.crl rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d8:b0:ce:c8:ef:94:71:9d:97:ed:ed:a4:23:94:28:90:e6:49:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94036675301DBECEA598F27C69DCB2391E3C2886 Validity Not Before: Oct 25 12:06:50 2026 GMT Not After : Oct 26 14:21:50 2026 GMT Subject: CN=0C98568D474815F1598845FFD239D4A21D233181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:23:92:ce:85:d5:e4:e7:75:6e:c9:d4:6e:6b: d4:88:c5:b3:f7:0d:5f:d7:2c:76:a9:ec:46:4e:bb: b6:26:94:25:db:74:ba:fa:c7:65:10:17:b2:20:4a: f9:23:96:9f:26:84:af:75:4a:e4:2a:d3:4a:c1:fb: 40:f5:b9:6c:e1:3b:56:a4:c4:af:d0:3a:50:77:60: 18:ee:3b:87:9d:35:e7:d4:8e:47:4a:40:34:99:fc: 28:e8:e1:5f:88:ea:14:ff:03:68:e1:04:33:2c:3c: f7:a0:50:bc:63:ff:6e:7b:1d:ff:65:a6:1b:5f:34: 35:7e:db:b7:6f:fe:ac:41:65:1c:e0:e6:fe:e9:60: 8a:cc:6a:1a:d9:8a:49:49:8b:52:87:41:ef:b4:41: 06:30:2f:34:e9:30:d6:92:64:dd:63:f5:e0:ed:6e: ec:b2:7b:fc:52:20:4d:32:f1:87:f8:a7:a6:5e:01: 0d:3b:e5:40:64:eb:97:8b:21:e3:79:60:7e:33:72: a7:a7:2f:93:de:ea:6f:73:32:c9:c8:3d:30:bf:1f: 58:c9:ec:fd:26:da:1e:8c:2c:9c:a1:70:30:83:fc: b8:92:6c:86:1b:dd:1e:2a:4d:df:6c:23:12:23:4f: d1:74:87:2c:25:cc:ed:91:1b:97:e3:d4:bb:e2:d9: d1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:98:56:8D:47:48:15:F1:59:88:45:FF:D2:39:D4:A2:1D:23:31:81 X509v3 Authority Key Identifier: keyid:94:03:66:75:30:1D:BE:CE:A5:98:F2:7C:69:DC:B2:39:1E:3C:28:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:68:31:ef:e5:28:c7:20:59:b1:46:cc:e8:ee:34:27:c6:72: 1d:67:72:9d:c2:bf:49:4b:ba:d2:51:d0:58:37:89:e9:63:47: b2:8d:50:a9:5d:3c:d7:95:84:d8:4d:13:af:1b:de:95:8b:24: 7d:1e:01:f6:97:73:bc:77:62:e3:34:f0:e1:55:49:f6:03:a0: 85:4f:35:d2:6b:ac:28:87:6b:be:99:e1:24:5e:90:26:eb:2d: 32:2a:1e:ef:00:29:b1:a0:8a:df:6c:fd:ff:88:66:70:9b:20: e8:17:62:f9:32:5c:ca:5f:e6:0e:bd:ec:34:21:08:83:52:ae: e9:bc:bc:23:70:77:6f:3d:b0:fd:c0:e7:51:96:13:be:06:8d: 7f:98:e3:cd:42:93:ca:f8:2e:ee:0b:bc:24:28:df:d8:34:ac: ae:eb:39:6d:4a:84:9b:81:7e:ed:d1:07:6f:56:02:6d:70:a9: e7:b8:11:87:8e:38:94:05:ce:5d:a6:31:fa:40:0d:d5:dc:05: 32:8d:88:4a:f4:82:5b:8f:c9:82:61:a3:64:5a:1f:38:0d:ed: 87:20:be:fc:8e:f4:06:be:a5:32:6b:06:45:70:b8:dc:36:03: ae:6d:bf:bf:31:37:3f:7c:5f:69:f2:99:72:2b:78:a7:bf:dc: eb:ed:f3:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUItiwzsjvlHGdl+3tpCOUKJDmSeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwMzY2NzUzMDFEQkVDRUE1OThGMjdDNjlEQ0IyMzkx RTNDMjg4NjAeFw0yNjEwMjUxMjA2NTBaFw0yNjEwMjYxNDIxNTBaMDMxMTAvBgNV BAMTKDBDOTg1NjhENDc0ODE1RjE1OTg4NDVGRkQyMzlENEEyMUQyMzMxODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsI5LOhdXk53VuydRua9SIxbP3 DV/XLHap7EZOu7YmlCXbdLr6x2UQF7IgSvkjlp8mhK91SuQq00rB+0D1uWzhO1ak xK/QOlB3YBjuO4edNefUjkdKQDSZ/Cjo4V+I6hT/A2jhBDMsPPegULxj/257Hf9l phtfNDV+27dv/qxBZRzg5v7pYIrMahrZiklJi1KHQe+0QQYwLzTpMNaSZN1j9eDt buyye/xSIE0y8Yf4p6ZeAQ075UBk65eLIeN5YH4zcqenL5Pe6m9zMsnIPTC/H1jJ 7P0m2h6MLJyhcDCD/LiSbIYb3R4qTd9sIxIjT9F0hywlzO2RG5fj1Lvi2dELAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDJhWjUdIFfFZiEX/0jnUoh0jMYEwHwYDVR0j BBgwFoAUlANmdTAdvs6lmPJ8adyyOR48KIYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTE3NTk4ZTQtMjA2NC00ZWNiLTk4ZjYtYjI1OWE3NDk5NmExLzAvOTQwMzY2NzUz MDFEQkVDRUE1OThGMjdDNjlEQ0IyMzkxRTNDMjg4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NDAzNjY3NTMwMURCRUNFQTU5OEYyN0M2OURDQjIzOTFFM0My ODg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTE3NTk4ZTQtMjA2NC00ZWNiLTk4 ZjYtYjI1OWE3NDk5NmExLzAvOTQwMzY2NzUzMDFEQkVDRUE1OThGMjdDNjlEQ0Iy MzkxRTNDMjg4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRoMe/lKMcgWbFGzOjuNCfGch1ncp3Cv0lL utJR0Fg3ieljR7KNUKldPNeVhNhNE68b3pWLJH0eAfaXc7x3YuM08OFVSfYDoIVP NdJrrCiHa76Z4SRekCbrLTIqHu8AKbGgit9s/f+IZnCbIOgXYvkyXMpf5g697DQh CINSrum8vCNwd289sP3A51GWE74GjX+Y481Ck8r4Lu4LvCQo39g0rK7rOW1KhJuB fu3RB29WAm1wqee4EYeOOJQFzl2mMfpADdXcBTKNiEr0gluPyYJho2RaHzgN7Ycg vvyO9Aa+pTJrBkVwuNw2A65tv78xNz98X2nymXIreKe/3Ovt860= -----END CERTIFICATE-----Generated at Sun Oct 25 14:24:27 2026 by rpki-client