$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft File: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft (raw, json) Hash identifier: fsMMNfz9peU0JTft70JSGzt8xnS2wGwTO6Q7reHfeFo= Subject key identifier: 0A:4A:B0:D7:CC:DE:04:B5:AE:D3:A1:2F:1F:C1:20:FD:4F:C3:90:5B Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D Certificate issuer: /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Certificate serial: 605D4263738167CD54EBF25EFD74A679346CAEBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft Manifest number: 0567 Signing time: Sat 18 Apr 2026 14:02:00 +0000 Manifest this update: Sat 18 Apr 2026 13:57:00 +0000 Manifest next update: Tue 21 Apr 2026 15:10:00 +0000 Files and hashes: 1: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: JYyU73FxSsbah75XLPK5+70mS+1BuWT1qs954OCbSn8=) 2: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: fYXLcgnYZQvFF+Sx+nAnnoQPnhu4qBL7MV7MXCijhoM=) 3: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: pnePfPpninK+12GFjtU9XZZuD9qIupgPZ4/SoFot86c=) 4: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: MowxodGXifPkFbwcnbxmYI86u52XQ+RqEsK4tBHU6Kc=) 5: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: 6u0QjcaXuZCe/xDwNoPsOwMyKh9MBkPufQ0B3cPlReE=) 6: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl (hash: oVMLcpAK1E6WoT1Ysur/yDiYsxUA0CsbOrxT0vN3e64=) 7: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: tJ7W+A0ln7oQ2TKBeYCrxZXeI+2+Ch9yjit0aZIq8qs=) 8: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: z8oVsj820WikG58Kg7XuHuFP7zjS3wrrsGJ5kGPWB6k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 15:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:5d:42:63:73:81:67:cd:54:eb:f2:5e:fd:74:a6:79:34:6c:ae:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Validity Not Before: Apr 18 13:57:00 2026 GMT Not After : Apr 21 15:10:00 2026 GMT Subject: CN=0A4AB0D7CCDE04B5AED3A12F1FC120FD4FC3905B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:99:c0:9c:38:50:aa:ef:82:90:f1:06:7d:81: 7c:7b:70:4b:55:23:a2:e5:3e:f8:62:bf:a5:b3:0c: f4:3e:4e:42:8e:83:72:52:64:98:7e:24:14:f8:61: 86:cd:f2:5e:11:bf:3e:54:df:70:c0:4a:81:20:78: 0f:16:28:95:2d:cb:32:75:c3:73:d9:b5:e4:9c:aa: 83:be:25:46:55:91:a8:31:c2:c5:97:31:3f:0d:c5: 8f:48:c7:62:44:4d:b6:3e:e8:f6:34:b4:f2:f7:6b: c2:62:f8:ad:db:02:d7:69:cd:ed:36:a8:24:0e:16: 4a:0c:7a:c1:17:e9:54:a9:9a:97:35:b0:7b:83:96: 1b:76:15:cb:08:ce:eb:e5:48:a3:ff:0d:5a:17:f5: 69:71:0d:ed:dd:10:3a:89:3a:b0:91:55:d3:db:33: 7e:a2:a7:74:a2:c9:73:45:95:1f:f1:32:81:0f:e3: 6b:24:e7:41:11:7d:71:26:d5:f5:d7:ef:32:87:89: f1:a8:3c:8f:87:3b:0e:cc:5b:2d:72:c3:64:a5:35: dd:43:6b:a6:bf:6d:2f:08:b6:30:d1:3d:73:7f:bf: df:44:42:1c:8b:e8:9a:5b:23:a6:9a:75:ca:6e:7e: ba:7e:8c:be:1e:23:38:a5:1e:6e:05:3d:08:09:1b: 54:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4A:B0:D7:CC:DE:04:B5:AE:D3:A1:2F:1F:C1:20:FD:4F:C3:90:5B X509v3 Authority Key Identifier: keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:42:50:3a:76:86:87:81:d5:15:e6:1b:78:ad:ed:82:37:58: a3:7e:ab:c6:b6:ff:cb:01:f7:d9:18:60:5c:7c:b6:db:4c:ee: 94:56:20:ba:e3:0f:3d:87:22:94:81:71:f4:6e:8e:e0:11:3b: 34:e1:de:94:f3:a2:4a:7f:4e:2a:1d:58:63:e7:db:53:44:08: 7b:18:e2:12:da:4a:9a:39:7d:95:3f:e6:5f:2c:4b:11:9b:a7: 78:20:52:e1:b9:5f:80:cb:c5:c2:9e:33:c4:31:4a:f5:7a:be: ba:8d:58:bd:c8:2f:ec:04:31:c5:c7:5c:57:63:89:09:fd:3b: e8:f8:b4:26:d5:af:05:3c:21:dc:cc:9e:93:01:05:cb:0d:10: c4:0f:e7:95:35:50:f3:2e:76:f2:04:59:a7:a2:dc:73:1f:8a: 2c:be:e5:14:57:ee:ed:f8:ec:2e:dc:a8:32:11:67:15:58:f3: 9f:18:14:17:e7:53:72:a5:8e:bc:1e:e5:ed:61:7d:5e:62:ab: bb:e4:13:18:2f:a7:9c:5c:3b:18:0c:95:b8:e7:52:21:88:c3: 0c:46:ae:95:4d:4e:e3:1a:3c:e4:a4:e1:cb:f8:25:9d:8c:d2: eb:08:92:9e:60:a0:da:77:87:5e:1a:74:f9:9b:7b:f7:96:32: 67:a2:84:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYF1CY3OBZ81U6/Je/XSmeTRsrrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVF NzRFMkE2RDAeFw0yNjA0MTgxMzU3MDBaFw0yNjA0MjExNTEwMDBaMDMxMTAvBgNV BAMTKDBBNEFCMEQ3Q0NERTA0QjVBRUQzQTEyRjFGQzEyMEZENEZDMzkwNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRmcCcOFCq74KQ8QZ9gXx7cEtV I6LlPvhiv6WzDPQ+TkKOg3JSZJh+JBT4YYbN8l4Rvz5U33DASoEgeA8WKJUtyzJ1 w3PZteScqoO+JUZVkagxwsWXMT8NxY9Ix2JETbY+6PY0tPL3a8Ji+K3bAtdpze02 qCQOFkoMesEX6VSpmpc1sHuDlht2FcsIzuvlSKP/DVoX9WlxDe3dEDqJOrCRVdPb M36ip3SiyXNFlR/xMoEP42sk50ERfXEm1fXX7zKHifGoPI+HOw7MWy1yw2SlNd1D a6a/bS8ItjDRPXN/v99EQhyL6JpbI6aadcpufrp+jL4eIzilHm4FPQgJG1TtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCkqw18zeBLWu06EvH8Eg/U/DkFswHwYDVR0j BBgwFoAUlegA6/9kcJiSy1dB2e3HXudOKm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmI1YWUxZS1iZTY2LTRhMzAtYTk0OC03ZDQ3OGMyMmVhMmIvMC85NUU4MDBFQkZG NjQ3MDk4OTJDQjU3NDFEOUVEQzc1RUU3NEUyQTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVFNzRF MkE2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZiNWFlMWUtYmU2Ni00YTMwLWE5 NDgtN2Q0NzhjMjJlYTJiLzAvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3 NUVFNzRFMkE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBCUDp2hoeB1RXmG3it7YI3WKN+q8a2/8sB 99kYYFx8tttM7pRWILrjDz2HIpSBcfRujuAROzTh3pTzokp/TiodWGPn21NECHsY 4hLaSpo5fZU/5l8sSxGbp3ggUuG5X4DLxcKeM8QxSvV6vrqNWL3IL+wEMcXHXFdj iQn9O+j4tCbVrwU8IdzMnpMBBcsNEMQP55U1UPMudvIEWaei3HMfiiy+5RRX7u34 7C7cqDIRZxVY858YFBfnU3Kljrwe5e1hfV5iq7vkExgvp5xcOxgMlbjnUiGIwwxG rpVNTuMaPOSk4cv4JZ2M0usIkp5goNp3h14adPmbe/eWMmeihO4= -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:04 2026 by rpki-client