$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft File: 951C84D9FEAF87E2196BBF71DC0326053CC04478.mft (raw, json) Hash identifier: Ndao34UvklrtYd+/eU8yaTY+wn2RufApj1wWtQ8f+ws= Subject key identifier: 82:72:E5:FC:0C:71:E5:C6:1B:4F:DB:8A:C5:0B:F7:40:A3:D3:29:8A Authority key identifier: 95:1C:84:D9:FE:AF:87:E2:19:6B:BF:71:DC:03:26:05:3C:C0:44:78 Certificate issuer: /CN=951C84D9FEAF87E2196BBF71DC0326053CC04478 Certificate serial: 6967A4AC412778E2048FBE414982C3A573506B64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft Manifest number: FE Signing time: Tue 10 Nov 2026 01:58:05 +0000 Manifest this update: Tue 10 Nov 2026 01:53:05 +0000 Manifest next update: Wed 11 Nov 2026 04:39:05 +0000 Files and hashes: 1: 951C84D9FEAF87E2196BBF71DC0326053CC04478.crl (hash: bfqMfCt17ydwnp9YXY4vR0+wRSZvoPkJ4TXEZmAvN6A=) 2: 3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa (hash: /2R+nfFCxhyBUh1PRuVIBZMYLiYNSMPmjUD3SxKwk4w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.crl rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 04:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:67:a4:ac:41:27:78:e2:04:8f:be:41:49:82:c3:a5:73:50:6b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=951C84D9FEAF87E2196BBF71DC0326053CC04478 Validity Not Before: Nov 10 01:53:05 2026 GMT Not After : Nov 11 04:39:05 2026 GMT Subject: CN=8272E5FC0C71E5C61B4FDB8AC50BF740A3D3298A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:89:b7:18:64:15:62:70:44:0a:5e:36:2b:47: 78:bb:b2:e0:41:4c:54:02:93:2c:7c:39:6e:78:1f: e7:76:ee:04:35:21:28:1a:84:75:04:8e:dc:05:e8: ee:66:12:fb:7d:a4:82:c9:c3:2d:c8:ea:30:c3:0c: 3a:e7:7b:9c:14:41:57:1e:ab:fe:a6:d5:aa:ff:cc: d9:40:3f:cf:1e:07:fd:32:4f:26:e0:68:a8:da:5d: 61:61:d7:e0:3d:68:06:f8:74:55:78:e3:be:64:f5: 72:a2:e9:5f:4f:d2:66:29:f0:b1:65:61:7c:66:3a: 54:02:52:5a:35:64:90:0f:5f:c1:a8:e3:63:a1:5c: 98:4b:9f:67:7c:50:d7:14:f9:67:15:c8:ae:37:e6: 49:84:df:65:e0:11:14:c4:71:d3:45:2d:2c:b8:89: a8:fe:f5:31:d7:63:4d:22:87:68:2e:f1:0a:cf:80: 58:f5:f7:34:da:eb:00:d6:53:b1:93:85:99:db:3a: fc:e0:47:3e:25:c9:58:52:26:d5:30:b9:d5:ef:55: d9:bc:c7:59:91:6b:5a:7b:57:14:50:2e:3c:c7:a1: 26:e7:85:ab:c3:4e:0c:ec:80:12:15:45:7c:55:74: aa:ad:67:03:4b:28:24:99:33:16:e0:4d:e2:d6:c5: 39:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:72:E5:FC:0C:71:E5:C6:1B:4F:DB:8A:C5:0B:F7:40:A3:D3:29:8A X509v3 Authority Key Identifier: keyid:95:1C:84:D9:FE:AF:87:E2:19:6B:BF:71:DC:03:26:05:3C:C0:44:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:b7:b7:20:24:1e:e0:a9:d5:aa:a8:e6:70:8d:ec:cc:7c:19: 6b:d7:d8:35:e0:6e:6b:93:9b:d3:b2:82:e5:0b:43:6d:09:43: a3:0d:b6:f2:77:ee:3c:39:41:e2:8f:d4:d7:73:a3:77:9f:a5: 98:b8:42:96:00:a1:d4:98:53:e5:94:e2:0f:8c:8f:80:45:98: 47:c2:98:87:21:8c:90:6b:6f:5b:e9:24:3c:3e:dd:39:98:72: 01:90:68:4b:32:be:a3:60:2b:0a:f0:31:d2:44:f5:71:68:69: 61:b8:85:2b:a6:c2:a7:eb:ce:b9:00:ab:20:72:a7:dd:de:4c: b8:5a:d3:4f:2b:d0:c6:ef:c8:53:ec:65:e0:bd:98:a4:fe:7d: 4a:63:3f:73:7e:f5:db:2b:5c:36:5e:3f:63:ce:64:3f:47:5f: ec:36:dc:8f:ec:91:c3:64:f8:f4:0a:4e:b8:f0:5d:75:46:3c: ba:4d:9f:ff:16:54:a4:21:16:2f:0e:a1:76:15:1b:40:36:63: 7a:15:90:6e:7c:3d:d8:30:23:87:3b:af:64:11:66:79:8c:8d: 7a:05:4b:68:dc:5d:4d:22:d4:67:18:6d:89:dd:00:6c:97:4e: 7e:c5:9c:d4:f1:a0:d7:da:b0:4c:b8:0f:4c:12:2f:20:22:4c: 57:ac:aa:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaWekrEEneOIEj75BSYLDpXNQa2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUxQzg0RDlGRUFGODdFMjE5NkJCRjcxREMwMzI2MDUz Q0MwNDQ3ODAeFw0yNjExMTAwMTUzMDVaFw0yNjExMTEwNDM5MDVaMDMxMTAvBgNV BAMTKDgyNzJFNUZDMEM3MUU1QzYxQjRGREI4QUM1MEJGNzQwQTNEMzI5OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiibcYZBVicEQKXjYrR3i7suBB TFQCkyx8OW54H+d27gQ1ISgahHUEjtwF6O5mEvt9pILJwy3I6jDDDDrne5wUQVce q/6m1ar/zNlAP88eB/0yTybgaKjaXWFh1+A9aAb4dFV4475k9XKi6V9P0mYp8LFl YXxmOlQCUlo1ZJAPX8Go42OhXJhLn2d8UNcU+WcVyK435kmE32XgERTEcdNFLSy4 iaj+9THXY00ih2gu8QrPgFj19zTa6wDWU7GThZnbOvzgRz4lyVhSJtUwudXvVdm8 x1mRa1p7VxRQLjzHoSbnhavDTgzsgBIVRXxVdKqtZwNLKCSZMxbgTeLWxTnnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgnLl/Axx5cYbT9uKxQv3QKPTKYowHwYDVR0j BBgwFoAUlRyE2f6vh+IZa79x3AMmBTzARHgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FlZjc4NmItNjIyNi00NGFmLTg1MmQtMWZiMDQ1YzRkZWIzLzAvOTUxQzg0RDlG RUFGODdFMjE5NkJCRjcxREMwMzI2MDUzQ0MwNDQ3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTFDODREOUZFQUY4N0UyMTk2QkJGNzFEQzAzMjYwNTNDQzA0 NDc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FlZjc4NmItNjIyNi00NGFmLTg1 MmQtMWZiMDQ1YzRkZWIzLzAvOTUxQzg0RDlGRUFGODdFMjE5NkJCRjcxREMwMzI2 MDUzQ0MwNDQ3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAm3tyAkHuCp1aqo5nCN7Mx8GWvX2DXgbmuT m9OyguULQ20JQ6MNtvJ37jw5QeKP1Ndzo3efpZi4QpYAodSYU+WU4g+Mj4BFmEfC mIchjJBrb1vpJDw+3TmYcgGQaEsyvqNgKwrwMdJE9XFoaWG4hSumwqfrzrkAqyBy p93eTLha008r0MbvyFPsZeC9mKT+fUpjP3N+9dsrXDZeP2POZD9HX+w23I/skcNk +PQKTrjwXXVGPLpNn/8WVKQhFi8OoXYVG0A2Y3oVkG58PdgwI4c7r2QRZnmMjXoF S2jcXU0i1GcYbYndAGyXTn7FnNTxoNfasEy4D0wSLyAiTFesqsU= -----END CERTIFICATE-----Generated at Tue Nov 10 14:31:33 2026 by rpki-client