$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft File: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft (raw, json) Hash identifier: +ek5KEkPGWi9CQi39+nLUZGMEwB7EWxNDARchVaRtCo= Subject key identifier: A7:FC:40:92:38:16:69:14:AF:06:63:56:9D:CF:C6:21:87:33:D8:6E Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D Certificate issuer: /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Certificate serial: 21D17D43A75824EBBD6C4AB7A39D9511A1D74876 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft Manifest number: 0551 Signing time: Sat 28 Feb 2026 13:31:55 +0000 Manifest this update: Sat 28 Feb 2026 13:26:55 +0000 Manifest next update: Tue 03 Mar 2026 17:24:55 +0000 Files and hashes: 1: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: 6u0QjcaXuZCe/xDwNoPsOwMyKh9MBkPufQ0B3cPlReE=) 2: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl (hash: 3bSjYfkIOYJJMJYCEnhv1RFpydr7oW8T9acpWZiRYHQ=) 3: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: JYyU73FxSsbah75XLPK5+70mS+1BuWT1qs954OCbSn8=) 4: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: pnePfPpninK+12GFjtU9XZZuD9qIupgPZ4/SoFot86c=) 5: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: z8oVsj820WikG58Kg7XuHuFP7zjS3wrrsGJ5kGPWB6k=) 6: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: MowxodGXifPkFbwcnbxmYI86u52XQ+RqEsK4tBHU6Kc=) 7: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: tJ7W+A0ln7oQ2TKBeYCrxZXeI+2+Ch9yjit0aZIq8qs=) 8: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: fYXLcgnYZQvFF+Sx+nAnnoQPnhu4qBL7MV7MXCijhoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d1:7d:43:a7:58:24:eb:bd:6c:4a:b7:a3:9d:95:11:a1:d7:48:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Validity Not Before: Feb 28 13:26:55 2026 GMT Not After : Mar 3 17:24:55 2026 GMT Subject: CN=A7FC409238166914AF0663569DCFC6218733D86E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:46:78:51:75:cb:74:c1:80:68:90:4a:46:1d: 3c:24:13:18:5d:bc:63:2d:ef:9f:a7:c9:50:29:90: a1:3b:ce:3a:1b:9c:29:af:bc:78:ef:97:80:b1:46: 5e:98:92:0d:9e:7a:41:c3:c0:8c:6c:7a:ad:d9:a9: b0:e1:22:40:3f:04:d9:da:75:dc:78:0e:7f:19:69: ec:b9:ac:5c:6c:4c:8b:29:4b:67:74:06:fa:ce:61: 51:6d:46:11:02:d4:07:9c:a0:2a:8d:7a:7e:e3:13: 4c:be:d1:d7:f8:c1:17:c3:a0:2b:c9:ed:1c:34:0d: 16:cb:a4:c7:8d:fb:2b:75:00:c7:08:c6:65:d2:9c: 9f:ea:c6:49:36:09:56:b1:20:05:8e:56:06:f6:55: aa:4c:6d:2f:9f:47:b7:77:07:f4:a1:6c:20:33:f1: b5:e9:1b:5a:cb:92:96:ab:ca:56:13:b6:be:e5:86: 57:0f:ed:ba:42:a6:ca:de:e0:7d:43:25:0d:0b:05: 5b:b8:df:02:a2:12:2c:6e:3a:cc:81:14:29:23:d1: 09:fa:c2:d2:d5:10:8b:2a:0a:28:3c:cf:e0:17:a7: 13:f6:2f:a8:71:06:b7:44:f2:77:c9:07:8f:97:76: e3:f4:c0:36:8f:cc:2f:40:87:4a:0c:2c:19:dc:a2: 21:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FC:40:92:38:16:69:14:AF:06:63:56:9D:CF:C6:21:87:33:D8:6E X509v3 Authority Key Identifier: keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:22:94:19:be:c3:59:ed:be:d0:52:f5:33:76:f7:22:39:e6: 11:86:25:c7:89:48:5d:f4:f1:b1:da:84:a0:75:1d:b2:8a:11: 36:c5:0f:a9:ae:d0:55:39:3b:46:6f:ee:46:26:db:13:2e:fa: ca:04:fb:f1:8b:dd:e9:3a:65:6c:40:5d:85:73:50:38:50:4b: a1:b1:da:4f:2e:53:20:b2:79:6a:94:f4:9e:4b:d3:b4:34:60: 34:b2:46:61:23:3a:67:e1:8d:fe:4d:1d:1c:3b:b5:49:b0:9a: 62:e7:a3:87:0a:f7:1e:07:c9:24:e8:75:65:bb:c9:c9:ec:39: de:05:bf:3e:54:1c:62:4b:59:ce:a9:71:07:bb:31:65:1a:2a: 6f:df:53:7f:c0:16:35:f3:58:a0:0e:bd:f0:ce:fd:0a:27:45: c9:0a:bf:8c:5c:ba:ce:28:9d:dc:ec:7f:b4:90:a9:02:f6:be: 98:4c:73:ad:92:00:11:99:bd:c9:2c:d6:71:be:95:94:2a:80: e3:eb:31:75:36:7f:ab:64:f2:5c:c0:ca:ee:5b:29:77:2e:6a: c8:31:07:8f:34:a0:ed:24:aa:52:15:bc:55:d4:e5:32:45:04: 61:8b:d3:44:da:e0:65:ba:ee:b3:1d:3f:a2:39:65:f6:e8:87: 5a:20:64:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIdF9Q6dYJOu9bEq3o52VEaHXSHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVF NzRFMkE2RDAeFw0yNjAyMjgxMzI2NTVaFw0yNjAzMDMxNzI0NTVaMDMxMTAvBgNV BAMTKEE3RkM0MDkyMzgxNjY5MTRBRjA2NjM1NjlEQ0ZDNjIxODczM0Q4NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RnhRdct0wYBokEpGHTwkExhd vGMt75+nyVApkKE7zjobnCmvvHjvl4CxRl6Ykg2eekHDwIxseq3ZqbDhIkA/BNna ddx4Dn8Zaey5rFxsTIspS2d0BvrOYVFtRhEC1AecoCqNen7jE0y+0df4wRfDoCvJ 7Rw0DRbLpMeN+yt1AMcIxmXSnJ/qxkk2CVaxIAWOVgb2VapMbS+fR7d3B/ShbCAz 8bXpG1rLkparylYTtr7lhlcP7bpCpsre4H1DJQ0LBVu43wKiEixuOsyBFCkj0Qn6 wtLVEIsqCig8z+AXpxP2L6hxBrdE8nfJB4+XduP0wDaPzC9Ah0oMLBncoiEBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp/xAkjgWaRSvBmNWnc/GIYcz2G4wHwYDVR0j BBgwFoAUlegA6/9kcJiSy1dB2e3HXudOKm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmI1YWUxZS1iZTY2LTRhMzAtYTk0OC03ZDQ3OGMyMmVhMmIvMC85NUU4MDBFQkZG NjQ3MDk4OTJDQjU3NDFEOUVEQzc1RUU3NEUyQTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVFNzRF MkE2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZiNWFlMWUtYmU2Ni00YTMwLWE5 NDgtN2Q0NzhjMjJlYTJiLzAvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3 NUVFNzRFMkE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcilBm+w1ntvtBS9TN29yI55hGGJceJSF30 8bHahKB1HbKKETbFD6mu0FU5O0Zv7kYm2xMu+soE+/GL3ek6ZWxAXYVzUDhQS6Gx 2k8uUyCyeWqU9J5L07Q0YDSyRmEjOmfhjf5NHRw7tUmwmmLno4cK9x4HySTodWW7 ycnsOd4Fvz5UHGJLWc6pcQe7MWUaKm/fU3/AFjXzWKAOvfDO/QonRckKv4xcus4o ndzsf7SQqQL2vphMc62SABGZvcks1nG+lZQqgOPrMXU2f6tk8lzAyu5bKXcuasgx B480oO0kqlIVvFXU5TJFBGGL00Ta4GW67rMdP6I5Zfboh1ogZGw= -----END CERTIFICATE-----Generated at Mon Mar 2 04:16:26 2026 by rpki-client