$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft File: 95C2241DAF3580597A730032BDD8356019AA8598.mft (raw, json) Hash identifier: xyJEpqUEFQWxBQE5ZSEC8CG5LRhdkh2pK6vhR8bl89M= Subject key identifier: FA:47:63:78:4D:42:21:F7:2B:AD:A5:21:C9:ED:39:33:13:CA:BF:2B Authority key identifier: 95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 Certificate issuer: /CN=95C2241DAF3580597A730032BDD8356019AA8598 Certificate serial: 23670EA8D24240E3EBFC5FE7A8DD98FB447FE107 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft Manifest number: 77 Signing time: Wed 29 Jul 2026 01:53:27 +0000 Manifest this update: Wed 29 Jul 2026 01:48:27 +0000 Manifest next update: Thu 30 Jul 2026 02:48:27 +0000 Files and hashes: 1: 3130332e39362e35322e302f32342d3234203d3e20313534343130.roa (hash: DZZr3wFG43up9aE69tnG8Ls9OH8+Et1zoRrcXN9QSWM=) 2: 3130332e39362e35332e302f32342d3234203d3e20313534343130.roa (hash: lhdzmYQ+4NDivJfAldib42nRBStQ7ZYmo6omhPmOepI=) 3: 323030313a6466323a6634303a3a2f34382d3438203d3e20313530393232.roa (hash: zqwI6m4XrFv8eZM9FUpfWXpZ18MF12p+MPV+FGxatII=) 4: 3130332e39362e35332e302f32342d3234203d3e20323135373237.roa (hash: 0wPUMAsuo5ZHSc/EbFWdWxfuAnUpnc2Dl/9rdO80RmQ=) 5: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (hash: dzNpcw838jqHTmD5WMvONS88+Ve5iK9R+so7TDu1v9o=) 6: 3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (hash: HPli/3Qu6kod/7xjBSFbg6jtPr5ON8VO23CexUu2Djc=) 7: 95C2241DAF3580597A730032BDD8356019AA8598.crl (hash: 44lmS84kBvyaX5sG2N3o/ku9+8WXm/8LbbP04ORtQHo=) 8: 3130332e39362e35322e302f32342d3234203d3e20323135373237.roa (hash: XQXfUBbOhxVs8/s2589fLuZ2gOOuek0QydHFHlibVLk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:67:0e:a8:d2:42:40:e3:eb:fc:5f:e7:a8:dd:98:fb:44:7f:e1:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C2241DAF3580597A730032BDD8356019AA8598 Validity Not Before: Jul 29 01:48:27 2026 GMT Not After : Jul 30 02:48:27 2026 GMT Subject: CN=FA4763784D4221F72BADA521C9ED393313CABF2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4f:19:63:c5:b1:26:27:a2:93:02:a5:8f:3e: d3:76:0d:91:a6:23:64:3f:7d:12:f4:30:ce:96:d5: 0a:c0:e8:6d:6e:dc:92:ff:bc:84:02:c3:eb:12:45: d5:d9:a8:c0:36:cb:e7:80:e6:62:7d:60:a1:50:87: f1:d0:4f:81:88:e4:bf:3b:a8:00:eb:c5:6b:69:9b: 9d:77:4b:36:f3:ab:38:39:11:27:79:6e:e4:3d:8e: f9:5b:10:ad:ae:69:6b:4b:6e:58:44:4d:36:8c:30: 96:43:e1:4a:1e:d3:98:3a:e6:f6:a4:be:47:f3:70: 5b:59:93:b9:33:7e:e3:1e:b3:ec:b3:c0:ca:ff:56: 4c:63:49:f0:ca:da:e4:22:a1:43:b4:2c:7e:71:74: fc:6a:b9:e8:0d:be:31:2e:78:cc:21:94:a3:e5:67: 6a:55:81:93:f2:5b:5f:5a:d9:df:9d:c4:f2:94:30: c4:e2:b3:49:9d:5b:48:3d:f5:92:ad:a5:6f:e7:2f: 23:f7:81:d9:66:3d:5b:20:e1:b1:6a:09:f9:82:f3: 8e:85:db:fb:c8:d3:80:0a:39:66:71:a5:9b:d7:b5: ff:f2:d3:0f:53:7a:9c:44:03:19:b6:a0:bb:6d:79: b3:a5:e8:02:c7:0b:b0:8d:a5:b3:4c:dc:65:a7:30: b2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:47:63:78:4D:42:21:F7:2B:AD:A5:21:C9:ED:39:33:13:CA:BF:2B X509v3 Authority Key Identifier: keyid:95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:e4:ca:5d:7a:47:d1:3c:7a:43:ba:0a:de:87:af:29:fe:91: 74:bb:d2:7e:bc:a7:84:57:38:11:e7:a0:2b:1e:20:62:e9:5a: da:3d:c7:f4:55:c1:24:a5:87:44:cc:3f:93:56:35:e2:2b:71: 86:7b:a9:dd:c8:18:b8:27:0c:d4:b6:27:6c:68:8b:8d:db:da: 01:51:f0:da:90:9f:f2:58:0e:8a:71:08:68:3b:5d:22:d7:f6: 81:7a:14:be:0c:4a:f4:27:f3:c6:89:44:2b:78:46:80:56:72: 9e:59:b1:ae:0f:be:70:a7:bb:11:88:95:16:d1:28:1f:51:03: b9:dd:b1:69:3c:9c:eb:97:71:50:68:db:11:f6:72:4d:61:8f: 41:d9:1c:d9:cf:5c:38:c0:6e:2f:21:1e:92:d1:f2:4a:27:d2: b3:6c:b2:87:ed:86:77:c3:0b:73:35:df:05:d6:e0:b6:57:28: a8:b6:ae:d7:d4:27:8d:13:ec:35:26:94:ab:ba:ef:c6:f7:a5: fa:88:d9:ae:95:c7:41:c9:54:46:5b:6e:19:d1:bb:8f:8c:66: b6:cc:70:94:64:fb:ae:9a:7a:96:89:2d:4d:5c:80:16:98:a8: 98:86:2b:aa:e9:53:f1:b5:fa:c9:a5:88:6c:9f:93:35:82:d6: 15:b2:a1:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI2cOqNJCQOPr/F/nqN2Y+0R/4QcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1NjAx OUFBODU5ODAeFw0yNjA3MjkwMTQ4MjdaFw0yNjA3MzAwMjQ4MjdaMDMxMTAvBgNV BAMTKEZBNDc2Mzc4NEQ0MjIxRjcyQkFEQTUyMUM5RUQzOTMzMTNDQUJGMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmTxljxbEmJ6KTAqWPPtN2DZGm I2Q/fRL0MM6W1QrA6G1u3JL/vIQCw+sSRdXZqMA2y+eA5mJ9YKFQh/HQT4GI5L87 qADrxWtpm513Szbzqzg5ESd5buQ9jvlbEK2uaWtLblhETTaMMJZD4Uoe05g65vak vkfzcFtZk7kzfuMes+yzwMr/VkxjSfDK2uQioUO0LH5xdPxquegNvjEueMwhlKPl Z2pVgZPyW19a2d+dxPKUMMTis0mdW0g99ZKtpW/nLyP3gdlmPVsg4bFqCfmC846F 2/vI04AKOWZxpZvXtf/y0w9TepxEAxm2oLttebOl6ALHC7CNpbNM3GWnMLJtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+kdjeE1CIfcrraUhye05MxPKvyswHwYDVR0j BBgwFoAUlcIkHa81gFl6cwAyvdg1YBmqhZgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ExYzRjMWYtNzE0MS00N2Q2LWE3ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURB RjM1ODA1OTdBNzMwMDMyQkREODM1NjAxOUFBODU5OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NUMyMjQxREFGMzU4MDU5N0E3MzAwMzJCREQ4MzU2MDE5QUE4 NTk4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ExYzRjMWYtNzE0MS00N2Q2LWE3 ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1 NjAxOUFBODU5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLkyl16R9E8ekO6Ct6Hryn+kXS70n68p4RX OBHnoCseIGLpWto9x/RVwSSlh0TMP5NWNeIrcYZ7qd3IGLgnDNS2J2xoi43b2gFR 8NqQn/JYDopxCGg7XSLX9oF6FL4MSvQn88aJRCt4RoBWcp5Zsa4PvnCnuxGIlRbR KB9RA7ndsWk8nOuXcVBo2xH2ck1hj0HZHNnPXDjAbi8hHpLR8kon0rNssofthnfD C3M13wXW4LZXKKi2rtfUJ40T7DUmlKu678b3pfqI2a6Vx0HJVEZbbhnRu4+MZrbM cJRk+66aepaJLU1cgBaYqJiGK6rpU/G1+smliGyfkzWC1hWyoRQ= -----END CERTIFICATE-----Generated at Wed Jul 29 04:42:08 2026 by rpki-client