$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft File: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft (raw, json) Hash identifier: f8cgsC16KKxksYZGuq9lEMsJiPFP1/vW2MEBQUoxwaM= Subject key identifier: 2B:80:27:4B:42:D9:93:71:84:D7:ED:2E:76:2C:11:15:D2:E2:7B:42 Authority key identifier: 95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 Certificate issuer: /CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Certificate serial: 08DC60D0837A8731C4815DA5F4B06958691DF8A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft Manifest number: 0130 Signing time: Thu 16 Apr 2026 13:21:34 +0000 Manifest this update: Thu 16 Apr 2026 13:16:34 +0000 Manifest next update: Sun 19 Apr 2026 14:32:34 +0000 Files and hashes: 1: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: b50sIU9yQxaEkBk9RbWIC1daty/+h8HIunUUQS3fj8c=) 2: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl (hash: 1RHIaCYLbZ9R367OXigbkcu78nBbChqpCN+fnrfVmac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 14:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:dc:60:d0:83:7a:87:31:c4:81:5d:a5:f4:b0:69:58:69:1d:f8:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Validity Not Before: Apr 16 13:16:34 2026 GMT Not After : Apr 19 14:32:34 2026 GMT Subject: CN=2B80274B42D9937184D7ED2E762C1115D2E27B42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0f:06:ab:83:74:24:a8:0f:06:2a:82:f8:65: 1c:33:af:7f:db:16:da:38:55:15:3e:06:71:80:b6: df:bf:93:11:45:b6:99:c0:2e:3c:ce:a0:11:54:8a: 96:06:f1:7e:d3:b5:88:eb:2d:fa:33:c4:20:1e:6b: b4:4c:3a:77:3a:4f:02:d7:db:8b:c4:67:29:00:23: 95:a0:4b:30:87:92:07:b4:d7:28:82:eb:e0:35:6c: 5c:10:0d:3b:3e:0e:5d:15:08:ee:84:35:61:ac:7a: 34:bb:82:8a:89:6a:59:e6:18:1b:d0:52:23:b5:21: bc:77:66:03:3a:36:41:ce:7b:f8:70:6f:c2:12:3b: 57:07:2f:9d:8c:32:c4:e8:17:23:e8:ea:21:40:10: 7f:13:6f:31:a7:df:d9:17:7a:1f:2b:27:f2:91:7b: f7:98:4f:5c:b7:b8:8d:40:a1:6f:37:86:85:1e:29: a2:0b:20:b2:0b:6f:cd:8b:4f:59:ae:35:41:87:11: 22:48:06:86:9d:12:c7:30:55:a6:0d:40:21:d1:2e: 80:6f:3a:de:7f:6f:53:a0:20:f5:9e:5a:8a:39:17: 20:7b:4d:e0:50:f6:a8:c2:fe:9b:55:c1:f4:c8:f0: de:2e:c3:e7:5b:a5:bb:e0:b0:fc:79:e3:c3:24:80: ef:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:80:27:4B:42:D9:93:71:84:D7:ED:2E:76:2C:11:15:D2:E2:7B:42 X509v3 Authority Key Identifier: keyid:95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:dc:46:e8:9f:0d:66:62:f5:b0:ca:7e:02:02:5d:97:3c:ab: f0:81:00:48:7f:f6:06:01:54:c1:7b:cc:3a:43:eb:e0:5e:86: b2:30:59:a4:42:22:4d:c5:70:04:d8:9c:6d:d0:e7:55:32:9c: fa:c5:1d:0c:2c:f3:be:aa:39:e8:c1:13:f5:c9:41:7f:47:99: 7c:2e:a4:24:1b:df:84:cc:97:2e:23:dd:82:bf:ed:5d:7b:b0: a6:50:c3:3a:51:12:a5:81:d6:4c:97:e5:79:c9:9d:29:a0:e9: 71:fc:29:01:62:5b:c0:71:70:ee:26:8a:42:09:c2:2c:dd:51: ab:b2:65:44:c0:f2:e9:6b:04:81:69:2e:a3:98:f0:cc:ed:f8: ad:aa:c7:96:59:d4:3b:6f:37:02:43:69:a2:db:7f:1b:83:cf: 9e:50:2f:21:08:7b:d8:d4:1f:77:42:64:66:18:8c:92:c2:7a: 90:6e:bb:b1:de:5b:95:ab:b6:a2:11:26:4f:01:38:83:fa:23: be:ea:45:d4:d0:a8:9f:94:1c:66:fb:53:5d:2a:ad:b3:90:ce: 4f:d8:19:e1:92:93:b8:16:d9:f3:50:c4:5f:1f:c1:a7:d5:0e: c4:4e:3f:29:ec:b0:bc:ba:c1:46:ea:8c:c2:be:e0:36:4d:46: 20:9f:9d:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCNxg0IN6hzHEgV2l9LBpWGkd+KQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVB MzI4RDY4OTAeFw0yNjA0MTYxMzE2MzRaFw0yNjA0MTkxNDMyMzRaMDMxMTAvBgNV BAMTKDJCODAyNzRCNDJEOTkzNzE4NEQ3RUQyRTc2MkMxMTE1RDJFMjdCNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmDwarg3QkqA8GKoL4ZRwzr3/b Fto4VRU+BnGAtt+/kxFFtpnALjzOoBFUipYG8X7TtYjrLfozxCAea7RMOnc6TwLX 24vEZykAI5WgSzCHkge01yiC6+A1bFwQDTs+Dl0VCO6ENWGsejS7goqJalnmGBvQ UiO1Ibx3ZgM6NkHOe/hwb8ISO1cHL52MMsToFyPo6iFAEH8TbzGn39kXeh8rJ/KR e/eYT1y3uI1AoW83hoUeKaILILILb82LT1muNUGHESJIBoadEscwVaYNQCHRLoBv Ot5/b1OgIPWeWoo5FyB7TeBQ9qjC/ptVwfTI8N4uw+dbpbvgsPx548MkgO+hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK4AnS0LZk3GE1+0udiwRFdLie0IwHwYDVR0j BBgwFoAUlfrDilyyzqPl/+JJVianvqMo1okwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMC85NUZBQzM4QTVD QjJDRUEzRTVGRkUyNDk1NjI2QTdCRUEzMjhENjg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVBMzI4 RDY4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3 QkVBMzI4RDY4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfcRuifDWZi9bDKfgICXZc8q/CBAEh/9gYB VMF7zDpD6+BehrIwWaRCIk3FcATYnG3Q51UynPrFHQws876qOejBE/XJQX9HmXwu pCQb34TMly4j3YK/7V17sKZQwzpREqWB1kyX5XnJnSmg6XH8KQFiW8BxcO4mikIJ wizdUauyZUTA8ulrBIFpLqOY8Mzt+K2qx5ZZ1DtvNwJDaaLbfxuDz55QLyEIe9jU H3dCZGYYjJLCepBuu7HeW5WrtqIRJk8BOIP6I77qRdTQqJ+UHGb7U10qrbOQzk/Y GeGSk7gW2fNQxF8fwafVDsROPynssLy6wUbqjMK+4DZNRiCfnZM= -----END CERTIFICATE-----Generated at Fri Apr 17 14:46:11 2026 by rpki-client