$ rpki-client -vvf repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft File: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft (raw, json) Hash identifier: JbBPA7OAFQiSirLmzp9fIYSXBdcYu42Ol9hm1xyFWVU= Subject key identifier: 14:33:6A:A7:5E:3A:05:19:C2:48:35:AF:2F:80:52:27:3F:92:AF:10 Authority key identifier: 95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 Certificate issuer: /CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Certificate serial: 6A3125B3E17000A552A45C8370B160D73FE73041 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft Manifest number: 0565 Signing time: Fri 17 Apr 2026 06:42:29 +0000 Manifest this update: Fri 17 Apr 2026 06:37:29 +0000 Manifest next update: Mon 20 Apr 2026 11:01:29 +0000 Files and hashes: 1: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: hccolhWeQwMhTE4DUNZtMqz3UE4I8axgnsLj/aGjWu0=) 2: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: LZPQ7rMeaDVcHWLsKLTFoADUeRBC0AnGmqL6VPS4zMA=) 3: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl (hash: u1pUeLsfEikRryMDS185LOCd7oV5yiabnLFC1P08yag=) 4: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: ifCGuusxkGprBC7NulQNufNvo7SVC5amSJ/1S4uaqjQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 11:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:31:25:b3:e1:70:00:a5:52:a4:5c:83:70:b1:60:d7:3f:e7:30:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Validity Not Before: Apr 17 06:37:29 2026 GMT Not After : Apr 20 11:01:29 2026 GMT Subject: CN=14336AA75E3A0519C24835AF2F8052273F92AF10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d8:ff:40:06:d1:a8:99:d3:43:08:6a:33:9f: fc:c1:4a:c5:a2:c4:be:b3:31:6c:ed:51:79:c4:1d: 65:c8:1d:0e:6f:f9:45:e7:a6:c8:dd:73:23:37:52: f4:32:fc:24:b2:84:85:da:76:20:26:37:1b:95:9b: 57:f0:f3:19:6b:c6:de:09:d2:f8:e0:5a:bb:44:af: d2:33:f6:53:e2:7b:df:50:88:a1:1a:cc:60:3d:ed: 35:be:75:27:fe:65:ab:27:ea:a0:7d:0d:31:d6:1a: 2e:3c:24:f9:e6:7c:e0:55:59:06:a7:89:6c:c4:07: 6f:b9:bf:9e:f6:1f:dd:03:14:55:ca:02:8a:80:e1: d1:bb:e3:ba:92:00:30:fb:7f:f4:14:10:18:61:31: 83:e0:2c:c5:f0:96:34:ad:fa:67:09:5c:47:98:ba: d4:63:9a:56:89:fe:de:1b:c1:e8:12:9a:b0:0a:dc: f6:23:84:8e:f5:d7:a4:d2:26:e6:0e:9e:b3:00:3e: 00:a9:13:48:f5:5d:86:d5:31:89:54:91:c9:53:8d: 42:16:d0:97:7e:00:2d:b7:06:23:5e:84:54:67:5e: b5:8c:de:0e:98:fc:3a:67:21:df:62:e9:bc:4e:51: 66:c8:ae:7d:3e:7d:92:03:63:d1:5a:79:a3:c4:37: 8c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:33:6A:A7:5E:3A:05:19:C2:48:35:AF:2F:80:52:27:3F:92:AF:10 X509v3 Authority Key Identifier: keyid:95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:e0:15:28:d2:fd:c5:2d:3e:14:21:1d:94:64:cb:16:88:20: 18:9f:e3:9b:f9:4a:72:93:50:2f:45:8e:fc:32:46:a4:b7:42: fd:18:49:7c:fa:66:d4:54:c8:08:40:3b:b6:20:7d:f4:28:8e: 51:51:3e:8a:2e:84:b0:69:79:02:0e:79:fc:a9:1d:76:ff:60: cd:af:71:c9:95:c0:9a:e2:dd:f4:5d:3d:04:58:85:9c:a6:0c: 4e:03:64:8a:ad:9e:42:a3:01:e2:e1:e0:2d:c5:e1:1b:12:91: 1a:b0:1a:bd:6c:74:b9:40:94:7a:51:62:1d:42:0c:46:8e:72: bc:af:8a:f6:62:06:45:af:f3:83:09:a5:ca:90:ba:52:9f:23: 8e:0b:78:23:1d:cd:8b:62:d6:55:66:9b:07:97:bb:e8:be:94: b3:0d:f7:f6:5e:fb:65:78:06:f7:d4:8b:3f:7a:b7:1f:7b:ca: 43:5c:23:16:8c:22:e3:73:f4:c5:0a:98:56:95:78:4d:c4:ab: ae:b2:b1:6d:3d:d1:ba:87:ed:43:35:d7:fc:10:f6:77:70:39: 6d:ea:3a:31:0b:a3:11:d8:8f:bd:5b:f9:c9:49:42:90:1a:8a: 70:bf:f8:f9:fe:73:54:60:9c:47:1b:15:12:19:52:e5:73:ac: 45:f9:97:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUajEls+FwAKVSpFyDcLFg1z/nMEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0 NjQ2MUFCMzAeFw0yNjA0MTcwNjM3MjlaFw0yNjA0MjAxMTAxMjlaMDMxMTAvBgNV BAMTKDE0MzM2QUE3NUUzQTA1MTlDMjQ4MzVBRjJGODA1MjI3M0Y5MkFGMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV2P9ABtGomdNDCGozn/zBSsWi xL6zMWztUXnEHWXIHQ5v+UXnpsjdcyM3UvQy/CSyhIXadiAmNxuVm1fw8xlrxt4J 0vjgWrtEr9Iz9lPie99QiKEazGA97TW+dSf+Zasn6qB9DTHWGi48JPnmfOBVWQan iWzEB2+5v572H90DFFXKAoqA4dG747qSADD7f/QUEBhhMYPgLMXwljSt+mcJXEeY utRjmlaJ/t4bwegSmrAK3PYjhI7116TSJuYOnrMAPgCpE0j1XYbVMYlUkclTjUIW 0Jd+AC23BiNehFRnXrWM3g6Y/DpnId9i6bxOUWbIrn0+fZIDY9FaeaPEN4yxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFDNqp146BRnCSDWvL4BSJz+SrxAwHwYDVR0j BBgwFoAUldkTaEX6+geVc11Kmw/590ZGGrMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc4NWU2NS01MWUyLTRiMWItODJmOS1lNzUzYWQ0YjI0MGYvMC85NUQ5MTM2ODQ1 RkFGQTA3OTU3MzVENEE5QjBGRjlGNzQ2NDYxQUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0NjQ2 MUFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5 Rjc0NjQ2MUFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHgFSjS/cUtPhQhHZRkyxaIIBif45v5SnKT UC9FjvwyRqS3Qv0YSXz6ZtRUyAhAO7YgffQojlFRPoouhLBpeQIOefypHXb/YM2v ccmVwJri3fRdPQRYhZymDE4DZIqtnkKjAeLh4C3F4RsSkRqwGr1sdLlAlHpRYh1C DEaOcryvivZiBkWv84MJpcqQulKfI44LeCMdzYti1lVmmweXu+i+lLMN9/Ze+2V4 BvfUiz96tx97ykNcIxaMIuNz9MUKmFaVeE3Eq66ysW090bqH7UM11/wQ9ndwOW3q OjELoxHYj71b+clJQpAainC/+Pn+c1RgnEcbFRIZUuVzrEX5lxw= -----END CERTIFICATE-----Generated at Fri Apr 17 23:38:25 2026 by rpki-client