$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft File: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft (raw, json) Hash identifier: slJwE4+R1yMYgojCudXJm2MBKaKN1HpQfbQQIgVkL48= Subject key identifier: BC:D5:AC:8A:AE:A0:DA:B9:82:26:F8:64:9F:89:E1:51:D6:BE:75:1C Authority key identifier: 95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 Certificate issuer: /CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Certificate serial: 35D51948A95424870BE9F18BB60B3B6F85C1CFC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft Manifest number: 011B Signing time: Sun 01 Mar 2026 23:01:34 +0000 Manifest this update: Sun 01 Mar 2026 22:56:34 +0000 Manifest next update: Thu 05 Mar 2026 07:21:34 +0000 Files and hashes: 1: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: +Xk0mxGkc/lCxZDeUptrpwZhCqCSnBV/uCVgeNZ+WpY=) 2: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl (hash: 4P8pX2kbl8HVlM4Ijy0qwhcMruKjq3xcwsCAhcXDN5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d5:19:48:a9:54:24:87:0b:e9:f1:8b:b6:0b:3b:6f:85:c1:cf:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Validity Not Before: Mar 1 22:56:34 2026 GMT Not After : Mar 5 07:21:34 2026 GMT Subject: CN=BCD5AC8AAEA0DAB98226F8649F89E151D6BE751C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a2:01:02:a6:00:de:a1:95:85:bb:14:ed:18: c8:78:1e:3b:a5:c4:4f:fd:5b:05:04:0a:b2:82:82: b5:7c:5e:5f:e5:dd:5c:69:13:ab:bb:93:84:f5:ff: 8e:aa:07:8c:85:2c:18:ed:97:05:d7:4c:15:be:a7: cc:0d:2e:4c:87:18:6e:bd:08:5a:7c:d2:93:17:7d: 69:95:58:64:01:87:7b:89:76:ed:97:f4:26:09:a0: c2:28:07:7b:75:49:b3:68:79:a5:18:50:61:03:d3: d2:32:14:6b:6e:6c:54:0a:a4:5c:86:90:6e:b0:58: d9:d3:77:40:3c:3a:2c:d5:a5:f4:2d:13:d2:52:c1: 88:57:56:21:78:b7:21:d8:45:ab:f0:f4:85:62:d6: d3:f9:ec:13:67:cc:d6:14:9d:65:64:e1:d0:57:1d: cb:b1:ec:c4:d7:28:b4:59:c6:d7:a2:0e:61:4e:dd: 31:1c:90:7d:31:76:14:90:57:92:a3:20:cd:c3:27: de:24:14:11:38:f7:24:e9:f9:57:8f:e5:b9:d5:8a: c2:63:b9:aa:6b:1b:6e:9c:b8:91:93:e1:43:42:55: b4:d3:b8:bc:0a:02:b8:a6:d7:95:a9:34:91:a2:43: 0d:d0:73:49:c2:cc:99:33:0a:15:68:37:26:30:75: a9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D5:AC:8A:AE:A0:DA:B9:82:26:F8:64:9F:89:E1:51:D6:BE:75:1C X509v3 Authority Key Identifier: keyid:95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:bd:6d:45:48:56:a9:b2:9a:c8:c5:2d:b8:24:69:8f:f0:b4: af:6a:4c:e1:6f:a8:f7:38:75:1f:24:dc:11:0a:ad:3d:02:c6: 4f:81:35:57:58:ce:10:60:8c:d4:87:ab:cb:a7:3a:0a:5d:41: 73:ce:2f:ef:67:cd:01:c1:6e:5d:4c:72:42:d3:02:b1:6e:1d: 3e:b8:28:b0:4a:19:7a:a2:7f:54:94:5f:3b:b0:44:b2:98:02: 86:4d:be:35:57:b8:3d:0b:e3:7a:9a:d9:9b:61:4b:af:74:fd: c8:5b:0f:41:3e:1e:f5:8a:13:7e:76:60:6d:b6:9c:d7:fd:de: b8:00:5d:06:2c:42:2f:ff:26:e7:a8:41:0b:8d:16:ab:e8:51: 25:d6:ad:8c:8a:7e:75:31:1f:07:16:b4:7e:28:95:df:52:2d: a9:20:d0:e1:c8:e9:03:f4:9f:73:49:65:80:a9:ca:c7:36:9f: 7c:23:69:c9:61:3a:79:d2:d4:bb:e4:e6:c9:aa:f7:05:d9:fa: 56:27:18:11:9e:45:d2:24:de:79:23:72:0c:ea:b8:0f:c2:44: 53:df:0a:ee:ee:17:9a:f3:72:12:36:2b:56:65:93:6d:ce:89: f5:a0:45:54:08:27:3b:8a:1c:af:1b:0f:22:35:2d:c7:23:7a: f5:71:75:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNdUZSKlUJIcL6fGLtgs7b4XBz8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVB MzI4RDY4OTAeFw0yNjAzMDEyMjU2MzRaFw0yNjAzMDUwNzIxMzRaMDMxMTAvBgNV BAMTKEJDRDVBQzhBQUVBMERBQjk4MjI2Rjg2NDlGODlFMTUxRDZCRTc1MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnogECpgDeoZWFuxTtGMh4Hjul xE/9WwUECrKCgrV8Xl/l3VxpE6u7k4T1/46qB4yFLBjtlwXXTBW+p8wNLkyHGG69 CFp80pMXfWmVWGQBh3uJdu2X9CYJoMIoB3t1SbNoeaUYUGED09IyFGtubFQKpFyG kG6wWNnTd0A8OizVpfQtE9JSwYhXViF4tyHYRavw9IVi1tP57BNnzNYUnWVk4dBX Hcux7MTXKLRZxteiDmFO3TEckH0xdhSQV5KjIM3DJ94kFBE49yTp+VeP5bnVisJj uaprG26cuJGT4UNCVbTTuLwKArim15WpNJGiQw3Qc0nCzJkzChVoNyYwdamTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvNWsiq6g2rmCJvhkn4nhUda+dRwwHwYDVR0j BBgwFoAUlfrDilyyzqPl/+JJVianvqMo1okwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMC85NUZBQzM4QTVD QjJDRUEzRTVGRkUyNDk1NjI2QTdCRUEzMjhENjg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVBMzI4 RDY4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3 QkVBMzI4RDY4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACC9bUVIVqmymsjFLbgkaY/wtK9qTOFvqPc4 dR8k3BEKrT0Cxk+BNVdYzhBgjNSHq8unOgpdQXPOL+9nzQHBbl1MckLTArFuHT64 KLBKGXqif1SUXzuwRLKYAoZNvjVXuD0L43qa2ZthS690/chbD0E+HvWKE352YG22 nNf93rgAXQYsQi//JueoQQuNFqvoUSXWrYyKfnUxHwcWtH4old9SLakg0OHI6QP0 n3NJZYCpysc2n3wjaclhOnnS1Lvk5smq9wXZ+lYnGBGeRdIk3nkjcgzquA/CRFPf Cu7uF5rzchI2K1Zlk23OifWgRVQIJzuKHK8bDyI1LccjevVxdYU= -----END CERTIFICATE-----Generated at Mon Mar 2 09:50:27 2026 by rpki-client