$ rpki-client -vvf rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft File: 951C84D9FEAF87E2196BBF71DC0326053CC04478.mft (raw, json) Hash identifier: uaEkZ1Eh43hw3mpgEzq/mjin2mL851G4LCFgPTIJIzo= Subject key identifier: 28:6E:2C:81:4E:03:F6:B0:ED:D5:BE:3A:C2:C2:0D:1E:00:76:3F:7F Authority key identifier: 95:1C:84:D9:FE:AF:87:E2:19:6B:BF:71:DC:03:26:05:3C:C0:44:78 Certificate issuer: /CN=951C84D9FEAF87E2196BBF71DC0326053CC04478 Certificate serial: 565D410C9363D31AAB1728A7D3B1B7D6ECE29B42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:07:10 +0000 Manifest this update: Tue 16 Jun 2026 19:02:10 +0000 Manifest next update: Wed 17 Jun 2026 19:47:10 +0000 Files and hashes: 1: 3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa (hash: /2R+nfFCxhyBUh1PRuVIBZMYLiYNSMPmjUD3SxKwk4w=) 2: 951C84D9FEAF87E2196BBF71DC0326053CC04478.crl (hash: uifDWOGgYAi6JuMFyRScH6isPCnc2xUm1xvX4s1KgcE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.crl rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:5d:41:0c:93:63:d3:1a:ab:17:28:a7:d3:b1:b7:d6:ec:e2:9b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=951C84D9FEAF87E2196BBF71DC0326053CC04478 Validity Not Before: Jun 16 19:02:10 2026 GMT Not After : Jun 17 19:47:10 2026 GMT Subject: CN=286E2C814E03F6B0EDD5BE3AC2C20D1E00763F7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:74:8f:49:06:b7:41:ce:76:e5:dd:4c:5c:14: 06:06:98:7e:0a:44:ed:07:98:1c:04:3d:03:a3:df: 1c:90:c1:e0:1d:a4:8d:92:f9:bf:8e:e4:4c:16:fb: 11:9c:5b:4b:f8:d9:1a:59:1a:5c:11:f1:5e:00:51: 06:b6:b2:dd:d2:c2:6b:4b:13:16:bd:00:37:18:98: b2:09:33:84:a4:79:71:30:9d:f3:67:87:cf:7b:3f: d4:76:82:1c:de:40:79:68:ad:79:ff:6a:11:4a:a7: 8f:b0:a4:9e:02:27:94:3d:fd:39:54:c5:58:e9:20: fc:a4:16:8d:f9:01:5d:b0:1f:97:0f:0e:8c:7a:39: ae:90:ef:a7:49:96:fe:07:a2:99:f1:a9:de:33:11: d2:ea:86:1a:dc:84:35:3d:23:df:3c:50:db:2d:fd: f4:75:34:e3:fb:7c:7e:19:9d:82:6c:eb:c4:a6:ab: 92:f9:17:ec:a4:cb:17:9f:c8:75:ce:14:7a:1e:e3: 81:c4:fd:2f:dc:29:c6:5b:00:f0:a2:8a:13:d0:19: 15:dd:a6:30:60:aa:15:cd:6b:ee:17:7d:1a:1f:94: 13:54:76:18:8a:6c:7b:15:04:21:be:5d:3a:ef:db: b4:8b:a5:44:10:e5:29:2e:e4:08:6e:c9:80:b6:58: 71:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6E:2C:81:4E:03:F6:B0:ED:D5:BE:3A:C2:C2:0D:1E:00:76:3F:7F X509v3 Authority Key Identifier: keyid:95:1C:84:D9:FE:AF:87:E2:19:6B:BF:71:DC:03:26:05:3C:C0:44:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:fd:79:88:30:03:d2:3b:03:bf:d8:91:2d:c3:14:7c:84:20: fa:a9:53:d7:95:5d:b8:25:32:d3:d4:51:d8:61:c8:4b:81:97: 82:e5:40:5e:e1:14:aa:7e:fb:a5:0f:d9:67:26:62:5c:31:e9: 88:88:d8:79:c0:39:c9:59:03:cc:89:17:09:f0:3d:a9:0f:c7: cd:62:28:66:b7:b9:7d:ab:4d:a5:3b:59:21:f3:c2:84:ec:18: 96:e5:cf:3b:f4:68:55:97:f2:63:3f:0c:e8:c1:ee:d4:2c:2d: 6c:40:a8:b5:c9:cb:0d:83:d4:f9:61:5f:a5:c1:3d:f5:4e:07: 8a:45:6c:59:00:1a:9f:a0:64:4f:25:0a:51:5a:59:1c:4f:7a: 9f:5f:36:4a:e9:f0:cf:11:38:37:b7:46:0f:57:5c:f0:38:b5: 3b:c5:45:99:37:19:38:4f:0f:10:11:93:b6:6e:25:7e:c7:af: 06:3c:73:69:2f:d0:21:6b:24:d4:3e:2e:fd:b2:cb:f2:86:b6: dd:b5:99:0b:3f:86:6d:5a:f4:21:8b:ad:0d:e0:a2:9f:4c:72: fe:4b:21:f3:b3:38:e3:da:76:28:be:72:b7:83:ac:d6:63:db: dc:4f:d3:7e:89:a0:6f:8d:c0:28:25:ed:d2:b0:82:ce:ae:bf: 38:12:18:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVl1BDJNj0xqrFyin07G31uzim0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUxQzg0RDlGRUFGODdFMjE5NkJCRjcxREMwMzI2MDUz Q0MwNDQ3ODAeFw0yNjA2MTYxOTAyMTBaFw0yNjA2MTcxOTQ3MTBaMDMxMTAvBgNV BAMTKDI4NkUyQzgxNEUwM0Y2QjBFREQ1QkUzQUMyQzIwRDFFMDA3NjNGN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpdI9JBrdBznbl3UxcFAYGmH4K RO0HmBwEPQOj3xyQweAdpI2S+b+O5EwW+xGcW0v42RpZGlwR8V4AUQa2st3SwmtL Exa9ADcYmLIJM4SkeXEwnfNnh897P9R2ghzeQHlorXn/ahFKp4+wpJ4CJ5Q9/TlU xVjpIPykFo35AV2wH5cPDox6Oa6Q76dJlv4Hopnxqd4zEdLqhhrchDU9I988UNst /fR1NOP7fH4ZnYJs68Smq5L5F+ykyxefyHXOFHoe44HE/S/cKcZbAPCiihPQGRXd pjBgqhXNa+4XfRoflBNUdhiKbHsVBCG+XTrv27SLpUQQ5Sku5AhuyYC2WHE7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKG4sgU4D9rDt1b46wsINHgB2P38wHwYDVR0j BBgwFoAUlRyE2f6vh+IZa79x3AMmBTzARHgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FlZjc4NmItNjIyNi00NGFmLTg1MmQtMWZiMDQ1YzRkZWIzLzAvOTUxQzg0RDlG RUFGODdFMjE5NkJCRjcxREMwMzI2MDUzQ0MwNDQ3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTFDODREOUZFQUY4N0UyMTk2QkJGNzFEQzAzMjYwNTNDQzA0 NDc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FlZjc4NmItNjIyNi00NGFmLTg1 MmQtMWZiMDQ1YzRkZWIzLzAvOTUxQzg0RDlGRUFGODdFMjE5NkJCRjcxREMwMzI2 MDUzQ0MwNDQ3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIb9eYgwA9I7A7/YkS3DFHyEIPqpU9eVXbgl MtPUUdhhyEuBl4LlQF7hFKp++6UP2WcmYlwx6YiI2HnAOclZA8yJFwnwPakPx81i KGa3uX2rTaU7WSHzwoTsGJblzzv0aFWX8mM/DOjB7tQsLWxAqLXJyw2D1PlhX6XB PfVOB4pFbFkAGp+gZE8lClFaWRxPep9fNkrp8M8RODe3Rg9XXPA4tTvFRZk3GThP DxARk7ZuJX7HrwY8c2kv0CFrJNQ+Lv2yy/KGtt21mQs/hm1a9CGLrQ3gop9Mcv5L IfOzOOPadii+creDrNZj29xP036JoG+NwCgl7dKwgs6uvzgSGD0= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:05 2026 by rpki-client