$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft File: 95C2241DAF3580597A730032BDD8356019AA8598.mft (raw, json) Hash identifier: IjJNj1dsnee0G+xQiteICYaWKgXVn1OagDEE5GNITu0= Subject key identifier: 11:36:FC:DF:12:AB:7B:78:9A:EC:DE:87:E2:43:28:DF:D8:BA:21:E6 Authority key identifier: 95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 Certificate issuer: /CN=95C2241DAF3580597A730032BDD8356019AA8598 Certificate serial: 4E9C329A707529AB26E2A2AE3E17B3D4503A3118 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 07:52:04 +0000 Manifest this update: Tue 28 Jul 2026 07:47:04 +0000 Manifest next update: Wed 29 Jul 2026 09:53:04 +0000 Files and hashes: 1: 3130332e39362e35322e302f32342d3234203d3e20323135373237.roa (hash: XQXfUBbOhxVs8/s2589fLuZ2gOOuek0QydHFHlibVLk=) 2: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (hash: dzNpcw838jqHTmD5WMvONS88+Ve5iK9R+so7TDu1v9o=) 3: 323030313a6466323a6634303a3a2f34382d3438203d3e20313530393232.roa (hash: zqwI6m4XrFv8eZM9FUpfWXpZ18MF12p+MPV+FGxatII=) 4: 3130332e39362e35332e302f32342d3234203d3e20313534343130.roa (hash: lhdzmYQ+4NDivJfAldib42nRBStQ7ZYmo6omhPmOepI=) 5: 3130332e39362e35332e302f32342d3234203d3e20323135373237.roa (hash: 0wPUMAsuo5ZHSc/EbFWdWxfuAnUpnc2Dl/9rdO80RmQ=) 6: 3130332e39362e35322e302f32342d3234203d3e20313534343130.roa (hash: DZZr3wFG43up9aE69tnG8Ls9OH8+Et1zoRrcXN9QSWM=) 7: 3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (hash: HPli/3Qu6kod/7xjBSFbg6jtPr5ON8VO23CexUu2Djc=) 8: 95C2241DAF3580597A730032BDD8356019AA8598.crl (hash: Qy3m7HVZ5Vy8LHd0gp0XIrG1kS5KXQ66Be4MKSte4PY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9c:32:9a:70:75:29:ab:26:e2:a2:ae:3e:17:b3:d4:50:3a:31:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C2241DAF3580597A730032BDD8356019AA8598 Validity Not Before: Jul 28 07:47:04 2026 GMT Not After : Jul 29 09:53:04 2026 GMT Subject: CN=1136FCDF12AB7B789AECDE87E24328DFD8BA21E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dd:e8:a0:5e:02:0e:cf:78:11:0e:fe:bb:b7: 89:97:87:7a:18:64:b6:5a:ad:77:51:a7:88:32:e1: 2b:72:6b:d1:b8:30:60:63:b4:d0:30:c6:6f:21:42: 82:fd:91:86:ce:7f:81:9c:22:64:27:cd:96:0b:f9: 0a:14:9c:0e:a7:fc:8c:d7:99:d0:35:1b:c3:aa:fa: 83:2e:88:64:9e:dd:c7:6b:3f:f8:9c:07:fc:c7:a8: 29:09:85:a7:f2:a3:89:57:aa:8b:f8:27:64:3d:c6: b3:2a:05:23:fe:dc:bb:50:67:a3:23:4d:5f:67:27: f9:e2:71:5b:8c:2e:d7:7b:76:b4:57:c7:35:57:22: aa:24:5e:82:30:d2:dc:28:1b:5a:34:86:1b:b3:5b: 81:01:35:21:97:30:42:87:fc:55:6d:b5:eb:77:88: 5d:43:7b:25:f6:f9:77:67:b2:79:59:a1:b3:54:c1: 72:d0:4e:82:48:5c:6e:55:62:24:88:f4:a1:ef:88: 39:c9:98:5a:91:d7:9d:f6:ee:9c:cc:60:8e:ef:e7: 12:84:37:88:77:c8:96:6d:f2:ad:65:3f:44:2e:41: a4:bb:cd:47:00:a9:09:fe:b1:ef:6c:6e:70:7e:fc: a0:76:1e:e3:0e:4f:f9:87:85:7c:39:4b:cd:0a:fe: e6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:36:FC:DF:12:AB:7B:78:9A:EC:DE:87:E2:43:28:DF:D8:BA:21:E6 X509v3 Authority Key Identifier: keyid:95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:2d:85:b4:77:ee:fa:1f:af:a4:5b:34:b6:a6:17:ff:d6:d8: 29:14:ac:3a:63:59:bf:62:c0:b8:8c:0e:aa:16:11:ac:2d:1c: 8f:10:f0:e7:cc:c5:13:ff:47:18:32:4a:b2:1d:45:50:43:62: aa:10:ad:48:72:0d:f6:a7:d1:93:01:63:29:10:6f:2e:01:15: 49:5a:88:1e:7a:9f:d1:ff:b2:ff:cc:f5:96:dd:f1:cf:5b:72: 7a:49:80:a2:df:6b:67:e2:e0:21:74:76:a3:df:ff:27:9d:54: b4:99:6f:ff:32:30:60:bb:c4:dc:91:ec:55:07:a1:17:07:29: 56:38:5c:9f:7c:ff:7e:57:99:3a:66:49:9e:10:d8:e4:a6:43: 91:d6:03:24:12:5c:22:79:5c:b6:75:b2:d7:be:8c:1e:00:e9: 1f:57:68:b6:0b:42:de:0b:78:00:f6:10:26:6e:1c:85:a4:12: 78:bb:c5:f1:62:fa:22:f7:88:8b:16:9a:9d:8f:a3:43:e7:c6: 57:5c:64:3e:3a:f0:ee:0e:3c:77:0a:36:18:08:c3:be:e3:ed: bd:70:85:c7:72:f5:84:9d:77:ca:64:54:20:b2:7e:69:04:d0: b3:03:a4:37:9c:c2:66:f4:f2:f1:fe:d5:2b:2f:12:2b:4f:55: af:b8:0d:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTpwymnB1Kasm4qKuPhez1FA6MRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1NjAx OUFBODU5ODAeFw0yNjA3MjgwNzQ3MDRaFw0yNjA3MjkwOTUzMDRaMDMxMTAvBgNV BAMTKDExMzZGQ0RGMTJBQjdCNzg5QUVDREU4N0UyNDMyOERGRDhCQTIxRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC93eigXgIOz3gRDv67t4mXh3oY ZLZarXdRp4gy4Stya9G4MGBjtNAwxm8hQoL9kYbOf4GcImQnzZYL+QoUnA6n/IzX mdA1G8Oq+oMuiGSe3cdrP/icB/zHqCkJhafyo4lXqov4J2Q9xrMqBSP+3LtQZ6Mj TV9nJ/nicVuMLtd7drRXxzVXIqokXoIw0twoG1o0hhuzW4EBNSGXMEKH/FVttet3 iF1DeyX2+XdnsnlZobNUwXLQToJIXG5VYiSI9KHviDnJmFqR15327pzMYI7v5xKE N4h3yJZt8q1lP0QuQaS7zUcAqQn+se9sbnB+/KB2HuMOT/mHhXw5S80K/uZFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUETb83xKre3ia7N6H4kMo39i6IeYwHwYDVR0j BBgwFoAUlcIkHa81gFl6cwAyvdg1YBmqhZgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ExYzRjMWYtNzE0MS00N2Q2LWE3ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURB RjM1ODA1OTdBNzMwMDMyQkREODM1NjAxOUFBODU5OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NUMyMjQxREFGMzU4MDU5N0E3MzAwMzJCREQ4MzU2MDE5QUE4 NTk4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ExYzRjMWYtNzE0MS00N2Q2LWE3 ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1 NjAxOUFBODU5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkthbR37vofr6RbNLamF//W2CkUrDpjWb9i wLiMDqoWEawtHI8Q8OfMxRP/RxgySrIdRVBDYqoQrUhyDfan0ZMBYykQby4BFUla iB56n9H/sv/M9Zbd8c9bcnpJgKLfa2fi4CF0dqPf/yedVLSZb/8yMGC7xNyR7FUH oRcHKVY4XJ98/35XmTpmSZ4Q2OSmQ5HWAyQSXCJ5XLZ1ste+jB4A6R9XaLYLQt4L eAD2ECZuHIWkEni7xfFi+iL3iIsWmp2Po0PnxldcZD468O4OPHcKNhgIw77j7b1w hcdy9YSdd8pkVCCyfmkE0LMDpDecwmb08vH+1SsvEitPVa+4DVE= -----END CERTIFICATE-----Generated at Wed Jul 29 00:11:57 2026 by rpki-client