$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft File: 95C2241DAF3580597A730032BDD8356019AA8598.mft (raw, json) Hash identifier: mJ6bpoAb7+QslBmT58982hrc39Dej0/3OIeMAn4/qO0= Subject key identifier: D7:09:09:DA:02:40:9D:CC:C9:81:7E:C3:BD:EC:08:0D:4B:2D:70:B9 Authority key identifier: 95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 Certificate issuer: /CN=95C2241DAF3580597A730032BDD8356019AA8598 Certificate serial: 2C6F79BB7BA7FEFB611D91DB2F937C8BC7F3F377 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft Manifest number: BE Signing time: Sun 20 Sep 2026 10:45:27 +0000 Manifest this update: Sun 20 Sep 2026 10:40:27 +0000 Manifest next update: Mon 21 Sep 2026 14:11:27 +0000 Files and hashes: 1: 3130332e39362e35332e302f32342d3234203d3e20313534343130.roa (hash: lhdzmYQ+4NDivJfAldib42nRBStQ7ZYmo6omhPmOepI=) 2: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (hash: dzNpcw838jqHTmD5WMvONS88+Ve5iK9R+so7TDu1v9o=) 3: 3130332e39362e35322e302f32342d3234203d3e20323135373237.roa (hash: XQXfUBbOhxVs8/s2589fLuZ2gOOuek0QydHFHlibVLk=) 4: 3130332e39362e35332e302f32342d3234203d3e20323135373237.roa (hash: 0wPUMAsuo5ZHSc/EbFWdWxfuAnUpnc2Dl/9rdO80RmQ=) 5: 3130332e39362e35322e302f32342d3234203d3e20313534343130.roa (hash: DZZr3wFG43up9aE69tnG8Ls9OH8+Et1zoRrcXN9QSWM=) 6: 3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (hash: HPli/3Qu6kod/7xjBSFbg6jtPr5ON8VO23CexUu2Djc=) 7: 95C2241DAF3580597A730032BDD8356019AA8598.crl (hash: cC+T5v2j5VzvBbhlDcQiKcZp8mmV4Q7UUxfiyM+W0fo=) 8: 323030313a6466323a6634303a3a2f34382d3438203d3e20313530393232.roa (hash: zqwI6m4XrFv8eZM9FUpfWXpZ18MF12p+MPV+FGxatII=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:6f:79:bb:7b:a7:fe:fb:61:1d:91:db:2f:93:7c:8b:c7:f3:f3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C2241DAF3580597A730032BDD8356019AA8598 Validity Not Before: Sep 20 10:40:27 2026 GMT Not After : Sep 21 14:11:27 2026 GMT Subject: CN=D70909DA02409DCCC9817EC3BDEC080D4B2D70B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d7:b7:04:0d:00:b1:bb:0f:d8:bb:1c:de:d4: ce:81:c0:2d:b4:f3:4a:ca:77:14:5c:b5:7f:9a:36: 52:af:ce:22:4a:fc:15:20:d9:b9:5b:12:d0:a5:57: 40:11:56:57:ca:30:8e:61:61:26:9b:7c:e7:77:d7: 33:2c:b9:44:ad:08:53:25:aa:96:62:45:01:98:47: 84:6b:0e:34:89:83:35:d7:04:ef:9c:62:a8:8a:7c: 2b:f2:f3:30:83:9d:e6:88:f8:22:be:24:47:5e:59: 92:12:57:cc:4c:e8:56:f3:f3:1a:52:dd:e4:a4:63: 25:4f:fa:ce:db:4e:11:82:f5:ef:2c:6d:83:3b:00: 5c:9a:1e:ba:c6:0a:23:93:69:42:85:11:fe:b8:c8: 24:da:98:ed:11:92:65:32:d0:e6:4d:58:cd:46:2d: cf:3a:92:97:10:62:bb:94:be:f2:ad:a8:54:73:b8: 80:dc:fa:5a:11:68:0e:7d:94:2c:eb:3e:ff:94:c3: 23:7a:4f:4d:08:85:26:fd:12:5f:15:ce:37:72:18: 2b:ea:9c:75:b1:a9:d4:98:28:8c:13:97:75:06:9a: 83:11:f6:d7:90:ec:38:25:98:6c:55:95:1e:78:4f: 5f:f9:9d:84:6a:5b:b2:43:5c:83:00:95:d8:c7:d7: c0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:09:09:DA:02:40:9D:CC:C9:81:7E:C3:BD:EC:08:0D:4B:2D:70:B9 X509v3 Authority Key Identifier: keyid:95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e0:90:4a:69:24:e4:97:62:93:e9:01:70:e1:01:1a:e5:12: 34:4c:82:9f:95:29:79:ca:03:f6:b2:d5:00:96:a0:26:76:78: c6:59:c3:48:bb:4c:34:75:49:81:58:90:62:e3:8a:63:39:e3: e3:54:f6:6e:46:24:82:03:46:31:d0:25:62:5b:78:7e:d5:fc: c0:36:b8:e9:29:0f:0d:7d:7e:7c:5b:fc:6b:6b:35:c9:8b:b5: bf:33:72:45:fc:0d:97:6a:89:56:3d:35:b6:8f:75:44:15:5a: 21:44:23:83:e4:a5:83:57:b4:be:fd:c7:6f:5a:01:87:7b:0c: 90:f2:b4:e7:d8:bc:bb:22:c7:5b:c2:a1:7f:85:c4:1f:9d:7e: 1b:1a:fd:d1:a9:c8:aa:53:80:10:07:91:a9:98:40:32:b0:96: 09:d1:bf:44:fc:07:77:2d:a7:84:aa:f8:63:81:c2:2a:d2:47: cb:95:bf:4f:70:f8:d8:51:fc:92:b8:b2:51:65:d7:0e:6c:64: 1f:0d:c2:68:f6:44:c3:d9:31:06:fa:1e:6e:d9:c5:53:3d:d8: 60:8d:3c:18:45:8b:25:e7:45:c7:76:3c:3d:6e:1d:ba:48:17: 85:c6:c5:26:9d:43:b8:d0:29:26:0c:e2:9d:2e:cf:8c:2e:0a: ca:ca:44:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULG95u3un/vthHZHbL5N8i8fz83cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1NjAx OUFBODU5ODAeFw0yNjA5MjAxMDQwMjdaFw0yNjA5MjExNDExMjdaMDMxMTAvBgNV BAMTKEQ3MDkwOURBMDI0MDlEQ0NDOTgxN0VDM0JERUMwODBENEIyRDcwQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD017cEDQCxuw/Yuxze1M6BwC20 80rKdxRctX+aNlKvziJK/BUg2blbEtClV0ARVlfKMI5hYSabfOd31zMsuUStCFMl qpZiRQGYR4RrDjSJgzXXBO+cYqiKfCvy8zCDneaI+CK+JEdeWZISV8xM6Fbz8xpS 3eSkYyVP+s7bThGC9e8sbYM7AFyaHrrGCiOTaUKFEf64yCTamO0RkmUy0OZNWM1G Lc86kpcQYruUvvKtqFRzuIDc+loRaA59lCzrPv+UwyN6T00IhSb9El8VzjdyGCvq nHWxqdSYKIwTl3UGmoMR9teQ7DglmGxVlR54T1/5nYRqW7JDXIMAldjH18DxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1wkJ2gJAnczJgX7DvewIDUstcLkwHwYDVR0j BBgwFoAUlcIkHa81gFl6cwAyvdg1YBmqhZgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ExYzRjMWYtNzE0MS00N2Q2LWE3ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURB RjM1ODA1OTdBNzMwMDMyQkREODM1NjAxOUFBODU5OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NUMyMjQxREFGMzU4MDU5N0E3MzAwMzJCREQ4MzU2MDE5QUE4 NTk4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ExYzRjMWYtNzE0MS00N2Q2LWE3 ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1 NjAxOUFBODU5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7gkEppJOSXYpPpAXDhARrlEjRMgp+VKXnK A/ay1QCWoCZ2eMZZw0i7TDR1SYFYkGLjimM54+NU9m5GJIIDRjHQJWJbeH7V/MA2 uOkpDw19fnxb/GtrNcmLtb8zckX8DZdqiVY9NbaPdUQVWiFEI4PkpYNXtL79x29a AYd7DJDytOfYvLsix1vCoX+FxB+dfhsa/dGpyKpTgBAHkamYQDKwlgnRv0T8B3ct p4Sq+GOBwirSR8uVv09w+NhR/JK4slFl1w5sZB8Nwmj2RMPZMQb6Hm7ZxVM92GCN PBhFiyXnRcd2PD1uHbpIF4XGxSadQ7jQKSYM4p0uz4wuCsrKRCc= -----END CERTIFICATE-----Generated at Sun Sep 20 20:34:58 2026 by rpki-client