$ rpki-client -vvf repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft File: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft (raw, json) Hash identifier: sELFg4fZgzASewKw6Otv7XQIVm+obRSMEzJ9LvbL/wQ= Subject key identifier: 25:58:6E:31:8A:2F:1B:72:7A:E0:CA:E4:59:5E:13:EB:AD:C6:E8:41 Authority key identifier: 95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 Certificate issuer: /CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Certificate serial: 2A7598106C8599AC15BF0B56E2358620B1265EFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft Manifest number: 0569 Signing time: Wed 15 Apr 2026 11:31:42 +0000 Manifest this update: Wed 15 Apr 2026 11:26:42 +0000 Manifest next update: Sat 18 Apr 2026 21:48:42 +0000 Files and hashes: 1: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl (hash: 4MYyJQUqVUiAQI133dsyEPazPCARc1EAkAZ242VzaeQ=) 2: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (hash: rC6h62i9FYTYXRJwY0Brz86k4I7okoBa0s60XGjIzcU=) 3: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (hash: wl5DevhHVxkmwfDCCC4JaJfUTNabYHb/Lh+cHr1YoI8=) 4: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (hash: 75/DAONeN65KHxljOFhq+chBgFEKtm0A6zWkkY+QXDo=) 5: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (hash: mAx24Mrm6AI9KeLaD2h/5RLJ5ztWp5mCELhp+sgXhQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 21:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:75:98:10:6c:85:99:ac:15:bf:0b:56:e2:35:86:20:b1:26:5e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Validity Not Before: Apr 15 11:26:42 2026 GMT Not After : Apr 18 21:48:42 2026 GMT Subject: CN=25586E318A2F1B727AE0CAE4595E13EBADC6E841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9a:11:93:1d:49:1c:22:46:40:19:e3:49:ab: aa:50:d2:44:03:9d:24:1b:7c:ed:0f:92:c9:52:0b: 25:ac:4b:a3:e3:d7:6c:d6:6e:dd:54:a3:88:a5:e0: 0a:b3:1c:e2:94:ae:74:d3:ff:71:16:93:2d:1f:b0: 1a:b1:44:de:ad:14:7f:f2:af:5f:df:d0:df:0e:a0: b7:f0:75:d9:fc:c3:85:e5:a1:95:56:28:78:b4:4a: 51:3b:5e:19:6a:de:1f:c8:92:4e:8c:66:09:2d:89: 8e:a1:83:40:b1:66:e1:3a:cd:bc:f9:20:61:0d:62: 7f:c4:ca:ce:29:95:2b:42:d6:d9:f9:3e:7f:42:5e: 7d:2d:0b:5c:ab:9c:e8:3e:38:aa:95:9d:f3:8e:ce: 97:48:2c:80:87:cd:cd:07:b2:f8:0a:ac:33:ac:96: c6:65:b2:33:56:f0:e1:22:f8:22:70:4e:60:57:d3: 71:a7:8a:a2:90:1d:6f:48:3d:f9:4c:f0:3d:17:cb: e4:64:27:44:bd:36:92:27:65:e3:90:ca:f5:b2:61: 79:e1:ab:e5:9f:1e:0f:a3:3c:ea:a7:4b:00:3b:95: 75:57:61:5e:29:07:95:bc:23:73:74:7a:f9:04:75: ed:d2:de:62:e2:75:a5:31:9d:7f:88:1f:35:47:9c: 00:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:58:6E:31:8A:2F:1B:72:7A:E0:CA:E4:59:5E:13:EB:AD:C6:E8:41 X509v3 Authority Key Identifier: keyid:95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:04:5e:bc:c2:27:94:b5:b1:19:60:53:4b:47:e4:3f:56:05: d3:f1:2d:6b:f5:66:0f:12:9c:52:45:be:30:e3:5a:10:d8:8b: 59:7a:f1:5e:ec:c3:b6:c5:dc:01:9e:04:de:2b:5d:53:bd:78: e3:6e:a3:7a:61:fe:9b:bc:17:42:2c:98:0f:bf:46:02:e2:64: b8:ca:88:db:f1:d9:15:83:cb:53:cd:55:5f:59:15:d2:c8:a5: e9:de:e9:6e:09:30:25:2c:0f:7a:95:15:ca:fd:ab:80:2a:85: b1:47:7d:6a:20:8d:e9:eb:c7:c3:3a:23:6e:98:75:c3:30:da: c4:b1:f8:b1:2e:f0:b7:6c:c0:24:d9:e9:75:50:14:43:69:15: 61:d1:36:03:d5:aa:6a:fc:c2:5a:f1:bf:9e:91:bd:c9:45:a5: 40:cc:19:25:24:e4:3e:24:d6:07:07:ea:20:da:65:c2:aa:11: c2:32:25:95:ed:b3:d8:68:07:41:3b:18:d4:0b:d6:65:a3:69: b1:15:f3:d2:b6:71:a4:e0:ef:8d:9f:80:18:78:10:8b:b0:5c: cd:60:9a:7c:97:c7:bc:3b:87:51:35:bc:97:cf:6e:41:10:ad: dc:79:b5:e7:96:e5:19:0a:5a:cd:19:98:96:e3:29:32:22:4a: 85:ee:a7:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKnWYEGyFmawVvwtW4jWGILEmXv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlE QTQ2QjNDODAeFw0yNjA0MTUxMTI2NDJaFw0yNjA0MTgyMTQ4NDJaMDMxMTAvBgNV BAMTKDI1NTg2RTMxOEEyRjFCNzI3QUUwQ0FFNDU5NUUxM0VCQURDNkU4NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZmhGTHUkcIkZAGeNJq6pQ0kQD nSQbfO0PkslSCyWsS6Pj12zWbt1Uo4il4AqzHOKUrnTT/3EWky0fsBqxRN6tFH/y r1/f0N8OoLfwddn8w4XloZVWKHi0SlE7Xhlq3h/Ikk6MZgktiY6hg0CxZuE6zbz5 IGENYn/Eys4plStC1tn5Pn9CXn0tC1yrnOg+OKqVnfOOzpdILICHzc0HsvgKrDOs lsZlsjNW8OEi+CJwTmBX03GniqKQHW9IPflM8D0Xy+RkJ0S9NpInZeOQyvWyYXnh q+WfHg+jPOqnSwA7lXVXYV4pB5W8I3N0evkEde3S3mLidaUxnX+IHzVHnABbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJVhuMYovG3J64MrkWV4T663G6EEwHwYDVR0j BBgwFoAUlcO6fyO2NRch932oAgcx+dpGs8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBlOWM5Zi1kNjA3LTQ0OTctYWYyOC00ZDJiOTA5MmQ1YTYvMC85NUMzQkE3RjIz QjYzNTE3MjFGNzdEQTgwMjA3MzFGOURBNDZCM0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlEQTQ2 QjNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZTljOWYtZDYwNy00NDk3LWFm MjgtNGQyYjkwOTJkNWE2LzAvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMx RjlEQTQ2QjNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgEXrzCJ5S1sRlgU0tH5D9WBdPxLWv1Zg8S nFJFvjDjWhDYi1l68V7sw7bF3AGeBN4rXVO9eONuo3ph/pu8F0IsmA+/RgLiZLjK iNvx2RWDy1PNVV9ZFdLIpene6W4JMCUsD3qVFcr9q4AqhbFHfWogjenrx8M6I26Y dcMw2sSx+LEu8LdswCTZ6XVQFENpFWHRNgPVqmr8wlrxv56RvclFpUDMGSUk5D4k 1gcH6iDaZcKqEcIyJZXts9hoB0E7GNQL1mWjabEV89K2caTg742fgBh4EIuwXM1g mnyXx7w7h1E1vJfPbkEQrdx5teeW5RkKWs0ZmJbjKTIiSoXupyY= -----END CERTIFICATE-----Generated at Fri Apr 17 09:39:47 2026 by rpki-client