$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft File: 95C2241DAF3580597A730032BDD8356019AA8598.mft (raw, json) Hash identifier: TBDgdE3Rrl55l8jLgz4YccqI0QYnRmzxi/CP6+2lCyY= Subject key identifier: DA:34:9A:5A:34:F6:EB:92:5A:4B:2A:CE:0D:63:6F:98:56:E7:60:6C Authority key identifier: 95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 Certificate issuer: /CN=95C2241DAF3580597A730032BDD8356019AA8598 Certificate serial: 38AF0C0335F0273D5D90B947636965B188494434 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 01:18:05 +0000 Manifest this update: Tue 22 Sep 2026 01:13:05 +0000 Manifest next update: Wed 23 Sep 2026 04:40:05 +0000 Files and hashes: 1: 323030313a6466323a6634303a3a2f34382d3438203d3e20313530393232.roa (hash: zqwI6m4XrFv8eZM9FUpfWXpZ18MF12p+MPV+FGxatII=) 2: 3130332e39362e35322e302f32342d3234203d3e20313534343130.roa (hash: DZZr3wFG43up9aE69tnG8Ls9OH8+Et1zoRrcXN9QSWM=) 3: 3130332e39362e35322e302f32342d3234203d3e20323135373237.roa (hash: XQXfUBbOhxVs8/s2589fLuZ2gOOuek0QydHFHlibVLk=) 4: 3130332e39362e35332e302f32342d3234203d3e20313534343130.roa (hash: lhdzmYQ+4NDivJfAldib42nRBStQ7ZYmo6omhPmOepI=) 5: 3130332e39362e35332e302f32342d3234203d3e20323135373237.roa (hash: 0wPUMAsuo5ZHSc/EbFWdWxfuAnUpnc2Dl/9rdO80RmQ=) 6: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (hash: dzNpcw838jqHTmD5WMvONS88+Ve5iK9R+so7TDu1v9o=) 7: 3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (hash: HPli/3Qu6kod/7xjBSFbg6jtPr5ON8VO23CexUu2Djc=) 8: 95C2241DAF3580597A730032BDD8356019AA8598.crl (hash: pJGxnZm3kbyHx+30HmTxaKQm+V/8/pFTJh/dtvdWSF0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 04:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:af:0c:03:35:f0:27:3d:5d:90:b9:47:63:69:65:b1:88:49:44:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C2241DAF3580597A730032BDD8356019AA8598 Validity Not Before: Sep 22 01:13:05 2026 GMT Not After : Sep 23 04:40:05 2026 GMT Subject: CN=DA349A5A34F6EB925A4B2ACE0D636F9856E7606C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:54:22:3b:a1:26:b0:68:7e:ab:77:bc:e4:69: ac:fc:0f:6f:32:be:9e:6a:b6:ea:55:dc:dc:68:2c: 35:55:2d:67:6c:e5:0b:36:11:cb:7a:d1:26:eb:57: 3d:52:62:20:82:11:03:e5:c8:c1:e1:31:f6:c4:af: fd:34:5f:d4:12:a0:19:78:cb:70:5f:6c:35:02:2d: ac:7a:fa:f8:30:74:cb:9f:c3:83:06:53:23:83:c7: 76:30:37:8a:44:f4:3d:7b:2f:de:6b:5f:56:dd:6c: e8:e7:80:05:19:47:1a:ad:17:a9:59:37:45:80:45: f1:e2:99:59:47:5e:c9:42:72:56:85:03:69:ba:17: 47:07:be:ce:5d:e2:6d:6b:4c:58:3d:94:18:31:f4: 70:55:79:f9:82:3f:48:dd:72:c7:6a:bf:83:57:eb: 8f:15:bb:2e:cf:4a:08:a6:96:1e:6b:51:d7:34:cb: 7e:08:06:24:71:e9:e4:e6:71:35:f4:94:93:fc:60: e0:6a:6e:d5:47:73:b0:75:19:d5:d8:f5:83:d7:66: 5c:df:5c:6a:c3:a3:84:3f:e9:89:b9:00:b6:f4:86: 9e:46:85:3d:b8:d6:10:c8:36:e4:76:c8:3b:4f:6b: 7c:2c:8f:7b:de:a6:6f:a5:0a:d3:27:27:c4:97:ec: 7b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:34:9A:5A:34:F6:EB:92:5A:4B:2A:CE:0D:63:6F:98:56:E7:60:6C X509v3 Authority Key Identifier: keyid:95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:39:16:5b:20:46:f1:75:24:20:c1:89:1f:6f:f0:05:46:94: 85:1b:c7:1c:2b:bb:f7:6c:95:b1:b3:68:66:87:18:04:ca:8d: 62:32:07:00:49:f7:ec:a5:25:7a:cc:3b:94:3e:b2:b0:42:1d: ea:6e:e8:2d:63:08:de:c9:1c:ee:e7:83:71:61:80:5a:a4:75: 2f:37:88:3d:0d:b1:8e:be:c9:6d:be:bc:c8:09:6f:04:c0:5a: d4:ef:4e:4b:54:44:e7:43:e4:d4:3a:fc:df:c5:45:60:23:a4: 59:50:f2:36:20:78:1c:69:dc:f2:21:cc:07:cb:27:3f:1e:b4: 0c:25:14:8f:d6:93:be:0d:ed:b4:f4:26:c5:f1:ea:49:8d:ae: eb:8e:dc:8e:ab:d4:9d:19:ed:77:01:5f:7c:a7:34:27:d2:5f: dc:14:bb:97:6c:5c:fb:84:08:e7:64:ce:2d:a7:0a:d9:f2:7b: b8:b5:1a:f7:ed:0b:70:65:7c:e3:e2:85:a2:41:14:2a:35:72: 9d:a6:e0:a4:be:01:e6:cb:c2:55:88:fe:1c:6d:61:9f:95:bf: 19:ed:94:d2:ee:31:b7:b0:eb:db:90:28:1b:bc:fd:8a:e6:4c: 81:cd:af:e8:a8:e1:31:df:8a:f1:e3:b4:80:70:81:11:a4:71: 3f:f5:2c:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOK8MAzXwJz1dkLlHY2llsYhJRDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1NjAx OUFBODU5ODAeFw0yNjA5MjIwMTEzMDVaFw0yNjA5MjMwNDQwMDVaMDMxMTAvBgNV BAMTKERBMzQ5QTVBMzRGNkVCOTI1QTRCMkFDRTBENjM2Rjk4NTZFNzYwNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkVCI7oSawaH6rd7zkaaz8D28y vp5qtupV3NxoLDVVLWds5Qs2Ect60SbrVz1SYiCCEQPlyMHhMfbEr/00X9QSoBl4 y3BfbDUCLax6+vgwdMufw4MGUyODx3YwN4pE9D17L95rX1bdbOjngAUZRxqtF6lZ N0WARfHimVlHXslCclaFA2m6F0cHvs5d4m1rTFg9lBgx9HBVefmCP0jdcsdqv4NX 648Vuy7PSgimlh5rUdc0y34IBiRx6eTmcTX0lJP8YOBqbtVHc7B1GdXY9YPXZlzf XGrDo4Q/6Ym5ALb0hp5GhT241hDINuR2yDtPa3wsj3vepm+lCtMnJ8SX7HvdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2jSaWjT265JaSyrODWNvmFbnYGwwHwYDVR0j BBgwFoAUlcIkHa81gFl6cwAyvdg1YBmqhZgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ExYzRjMWYtNzE0MS00N2Q2LWE3ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURB RjM1ODA1OTdBNzMwMDMyQkREODM1NjAxOUFBODU5OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NUMyMjQxREFGMzU4MDU5N0E3MzAwMzJCREQ4MzU2MDE5QUE4 NTk4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ExYzRjMWYtNzE0MS00N2Q2LWE3 ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1 NjAxOUFBODU5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABs5FlsgRvF1JCDBiR9v8AVGlIUbxxwru/ds lbGzaGaHGATKjWIyBwBJ9+ylJXrMO5Q+srBCHepu6C1jCN7JHO7ng3FhgFqkdS83 iD0NsY6+yW2+vMgJbwTAWtTvTktUROdD5NQ6/N/FRWAjpFlQ8jYgeBxp3PIhzAfL Jz8etAwlFI/Wk74N7bT0JsXx6kmNruuO3I6r1J0Z7XcBX3ynNCfSX9wUu5dsXPuE COdkzi2nCtnye7i1GvftC3BlfOPihaJBFCo1cp2m4KS+AebLwlWI/hxtYZ+Vvxnt lNLuMbew69uQKBu8/YrmTIHNr+io4THfivHjtIBwgRGkcT/1LEw= -----END CERTIFICATE-----Generated at Tue Sep 22 13:35:38 2026 by rpki-client