$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft File: 951C84D9FEAF87E2196BBF71DC0326053CC04478.mft (raw, json) Hash identifier: xN7I/Yjp00RSdCRGqcnm3q/g7sh0jfP+sMMqYJOTbIc= Subject key identifier: 2B:50:C9:2D:45:5D:AB:45:17:E2:68:9F:17:A4:DC:02:BF:75:C5:27 Authority key identifier: 95:1C:84:D9:FE:AF:87:E2:19:6B:BF:71:DC:03:26:05:3C:C0:44:78 Certificate issuer: /CN=951C84D9FEAF87E2196BBF71DC0326053CC04478 Certificate serial: 0BFBD0F7A6401758DFE5D8D492476AEF74105173 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft Manifest number: BB Signing time: Sun 20 Sep 2026 11:05:46 +0000 Manifest this update: Sun 20 Sep 2026 11:00:46 +0000 Manifest next update: Mon 21 Sep 2026 13:22:46 +0000 Files and hashes: 1: 951C84D9FEAF87E2196BBF71DC0326053CC04478.crl (hash: hUt+5kogFWraInUcN0yqLJRHuLTHC0fvukmuH7+/5+I=) 2: 3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa (hash: /2R+nfFCxhyBUh1PRuVIBZMYLiYNSMPmjUD3SxKwk4w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.crl rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 13:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:fb:d0:f7:a6:40:17:58:df:e5:d8:d4:92:47:6a:ef:74:10:51:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=951C84D9FEAF87E2196BBF71DC0326053CC04478 Validity Not Before: Sep 20 11:00:46 2026 GMT Not After : Sep 21 13:22:46 2026 GMT Subject: CN=2B50C92D455DAB4517E2689F17A4DC02BF75C527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b5:d3:1a:2f:7f:20:51:3b:b5:6c:35:9f:76: bf:0f:65:48:00:b8:88:8f:1c:ca:88:fb:78:ff:39: 3f:53:55:57:9f:6f:d4:81:fe:0e:ba:7e:8b:39:60: a5:a1:49:00:ee:dc:bc:c0:d0:b4:fe:e4:da:be:c3: 64:dc:63:49:8c:65:f2:7c:b2:eb:65:b7:a7:75:23: f3:90:70:f8:1a:96:b2:46:be:dd:26:fd:4f:61:fe: 75:d3:20:ae:8a:89:81:0d:36:b6:e3:17:67:33:c3: aa:52:34:54:28:97:f3:95:95:14:b6:a2:c6:19:fb: fa:17:3d:ef:43:a8:20:6c:7c:eb:a1:dc:ed:0a:8b: b0:3c:04:c3:ed:7d:df:14:e2:12:9c:23:06:e4:25: bb:06:82:f3:41:46:38:04:b6:9b:b7:d9:25:f2:75: a5:e8:31:80:3c:5d:0c:a7:c9:98:fa:17:c8:70:37: 1e:d7:54:d5:b5:a2:9b:be:a7:ae:9c:8a:90:4e:d3: 48:94:fd:3e:22:1c:74:3d:ac:7a:55:37:2d:cb:8a: cd:7e:47:be:5f:cf:53:69:11:0f:17:20:93:cf:3f: 29:f3:f4:f4:a4:4e:12:82:3e:a0:d1:05:b9:bd:99: 44:5f:29:24:7c:9d:f4:80:a2:b1:51:7d:86:7d:3f: 1d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:50:C9:2D:45:5D:AB:45:17:E2:68:9F:17:A4:DC:02:BF:75:C5:27 X509v3 Authority Key Identifier: keyid:95:1C:84:D9:FE:AF:87:E2:19:6B:BF:71:DC:03:26:05:3C:C0:44:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:b3:74:5e:6b:f4:a7:00:c5:44:f3:26:3c:e3:bb:89:4b:5d: 7b:8b:64:d3:b5:fd:eb:31:81:93:01:37:f3:e3:05:ce:20:38: c0:0a:37:0b:13:53:5b:89:25:ef:51:a0:ae:5d:0b:14:a5:2c: 21:f4:ea:8a:cd:37:0b:48:a2:62:4e:97:8c:85:4e:99:42:93: 74:ce:25:b2:cc:e3:12:fc:68:70:ad:ea:97:0b:fa:aa:a3:e1: 50:65:f0:c7:31:9f:60:9c:65:71:b9:2b:bb:e1:d1:fc:8d:da: c5:45:80:00:5a:a7:d6:c6:77:00:98:aa:58:9a:ec:d9:c3:60: fb:34:c7:32:61:a5:73:58:53:d2:25:b1:0f:6a:cb:3d:43:7f: ca:b8:07:c8:ec:41:96:c3:c0:3b:0b:9e:4c:b9:eb:90:d2:b5: 3b:bd:82:89:ce:db:ec:16:da:94:6f:8c:67:8b:39:6e:35:7b: e7:2e:4a:32:d3:7e:ed:65:09:2a:f6:6e:00:ba:53:26:41:dd: 6f:8a:96:28:de:c2:f8:8e:4f:f2:9c:6c:4b:5b:a1:d7:31:23: 52:a5:15:a6:c2:51:69:8b:e6:7a:d3:36:e3:63:b2:b2:ee:26: cf:a7:22:c9:87:d8:7a:d9:89:91:24:39:98:70:3e:c8:e4:d2: 19:bf:7c:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC/vQ96ZAF1jf5djUkkdq73QQUXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUxQzg0RDlGRUFGODdFMjE5NkJCRjcxREMwMzI2MDUz Q0MwNDQ3ODAeFw0yNjA5MjAxMTAwNDZaFw0yNjA5MjExMzIyNDZaMDMxMTAvBgNV BAMTKDJCNTBDOTJENDU1REFCNDUxN0UyNjg5RjE3QTREQzAyQkY3NUM1MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1tdMaL38gUTu1bDWfdr8PZUgA uIiPHMqI+3j/OT9TVVefb9SB/g66fos5YKWhSQDu3LzA0LT+5Nq+w2TcY0mMZfJ8 sutlt6d1I/OQcPgalrJGvt0m/U9h/nXTIK6KiYENNrbjF2czw6pSNFQol/OVlRS2 osYZ+/oXPe9DqCBsfOuh3O0Ki7A8BMPtfd8U4hKcIwbkJbsGgvNBRjgEtpu32SXy daXoMYA8XQynyZj6F8hwNx7XVNW1opu+p66cipBO00iU/T4iHHQ9rHpVNy3Lis1+ R75fz1NpEQ8XIJPPPynz9PSkThKCPqDRBbm9mURfKSR8nfSAorFRfYZ9Px2XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK1DJLUVdq0UX4mifF6TcAr91xScwHwYDVR0j BBgwFoAUlRyE2f6vh+IZa79x3AMmBTzARHgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FlZjc4NmItNjIyNi00NGFmLTg1MmQtMWZiMDQ1YzRkZWIzLzAvOTUxQzg0RDlG RUFGODdFMjE5NkJCRjcxREMwMzI2MDUzQ0MwNDQ3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTFDODREOUZFQUY4N0UyMTk2QkJGNzFEQzAzMjYwNTNDQzA0 NDc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FlZjc4NmItNjIyNi00NGFmLTg1 MmQtMWZiMDQ1YzRkZWIzLzAvOTUxQzg0RDlGRUFGODdFMjE5NkJCRjcxREMwMzI2 MDUzQ0MwNDQ3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmzdF5r9KcAxUTzJjzju4lLXXuLZNO1/esx gZMBN/PjBc4gOMAKNwsTU1uJJe9RoK5dCxSlLCH06orNNwtIomJOl4yFTplCk3TO JbLM4xL8aHCt6pcL+qqj4VBl8Mcxn2CcZXG5K7vh0fyN2sVFgABap9bGdwCYqlia 7NnDYPs0xzJhpXNYU9IlsQ9qyz1Df8q4B8jsQZbDwDsLnky565DStTu9gonO2+wW 2pRvjGeLOW41e+cuSjLTfu1lCSr2bgC6UyZB3W+KlijewviOT/KcbEtbodcxI1Kl FabCUWmL5nrTNuNjsrLuJs+nIsmH2HrZiZEkOZhwPsjk0hm/fJA= -----END CERTIFICATE-----Generated at Mon Sep 21 03:23:14 2026 by rpki-client