$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft File: 950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft (raw, json) Hash identifier: GKqlLgvKQiZvgT7P7FHJaKeRzZZQ3lniHsH3yoJ8V78= Subject key identifier: 6B:8D:BC:DB:51:F8:06:0A:B2:74:3B:37:A8:E1:10:A0:01:AA:03:30 Authority key identifier: 95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51 Certificate issuer: /CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751 Certificate serial: 3DA4CB9D9AF9A5D5BD746DDD63EC9FF2472863BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft Manifest number: BC Signing time: Mon 21 Sep 2026 18:54:57 +0000 Manifest this update: Mon 21 Sep 2026 18:49:57 +0000 Manifest next update: Tue 22 Sep 2026 21:33:57 +0000 Files and hashes: 1: 950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl (hash: ZVqBIs8hbVnOKXKcjNtZmm3NvCjt7TkniJRl9TBvLw0=) 2: 3130332e3136322e3233382e302f32342d3234203d3e20313431363639.roa (hash: viFyM1HFUzcMqtq2FKm6xB7dBBL2CbC6fte+ULEjCo4=) 3: 3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa (hash: Ko0biNHo/OilJd2E0SwGMCh23IyoKfHyT2KDez8VfH4=) 4: 3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa (hash: 2Og4FIysb2wd35eqOCjNVfXf+ZPGg3kEvtQOXJnk+xE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 21:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a4:cb:9d:9a:f9:a5:d5:bd:74:6d:dd:63:ec:9f:f2:47:28:63:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751 Validity Not Before: Sep 21 18:49:57 2026 GMT Not After : Sep 22 21:33:57 2026 GMT Subject: CN=6B8DBCDB51F8060AB2743B37A8E110A001AA0330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a5:dc:29:ef:1a:ac:41:48:39:ab:dd:87:63: 29:c8:9b:59:6d:29:c7:33:28:a1:5a:41:6b:3c:39: 86:de:d9:5d:6e:fb:a2:7b:37:c7:6b:ea:62:a8:04: 2b:b2:a8:12:5f:25:45:93:4b:73:3b:61:bb:84:91: 08:b6:79:f0:8b:a7:01:e1:45:62:40:e0:b7:48:b2: 95:5c:59:91:f4:b2:08:65:de:ec:95:43:1a:04:5f: 53:2e:0c:63:88:63:0f:c1:3e:bc:43:a9:9b:fd:53: 49:e7:55:2f:24:d3:c2:f5:39:f1:4b:42:ad:9c:74: 70:aa:80:5e:df:e4:81:99:8a:6e:e8:d0:76:84:fe: 32:3d:93:2b:03:e4:aa:f8:b9:20:4b:35:2f:47:32: f3:49:02:e5:74:66:c1:d1:7d:ad:ea:85:63:f8:b6: 24:4f:b4:e2:f5:fe:9d:24:21:7c:bf:ca:da:8d:b4: f7:92:e2:a6:7e:f8:69:a6:6e:c8:9f:c7:de:59:e4: 63:45:46:0b:17:4f:87:38:f1:97:c0:11:4b:55:41: fd:45:63:1f:2b:1f:49:3a:60:48:86:4b:96:54:53: 08:bc:2f:2d:c5:77:11:de:e6:e0:67:00:81:a7:fc: bb:92:de:d9:38:e0:9a:98:4f:b5:b2:06:8f:ce:e3: e8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8D:BC:DB:51:F8:06:0A:B2:74:3B:37:A8:E1:10:A0:01:AA:03:30 X509v3 Authority Key Identifier: keyid:95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:1b:8d:00:3b:58:a6:45:2c:e9:cb:24:94:2b:01:2e:e5:e6: b7:a9:8d:bb:bb:c9:44:2d:e2:ce:33:11:ef:d2:76:ee:d9:56: 30:61:ec:e2:20:6c:5b:c1:b9:31:b5:a7:f5:f3:f6:eb:54:54: 5c:07:cf:39:09:6a:cf:c1:32:2d:3d:f5:62:a9:3f:a4:bd:c1: 3c:9a:30:d6:0a:43:40:aa:42:4e:b1:e8:55:f3:89:66:b1:bc: 72:ee:0c:63:1c:89:bb:ea:44:29:0d:91:45:a4:bd:0d:d4:d8: 9a:c7:ae:7b:33:bb:0d:5a:e8:09:ad:af:c7:c2:f7:f7:7f:00: b3:29:32:5b:1d:f5:49:36:4f:6b:e0:6b:ff:57:58:c2:29:09: 86:3c:b4:95:6b:47:48:40:4a:81:85:9e:60:10:25:25:56:4d: 8a:05:98:fb:56:2a:6d:15:ca:6f:63:c9:c2:f5:34:8c:c1:37: dc:a9:de:87:1d:bc:50:83:19:78:3f:08:e2:51:32:32:6d:ed: 00:44:2f:a0:4d:4f:b8:26:9a:29:fd:66:d1:d8:12:34:ef:31: 9f:1f:df:7e:2a:67:a1:16:b3:77:58:e2:31:c5:7a:8a:57:82: 11:bb:40:0c:fd:7a:8b:91:0b:ea:83:25:31:20:a8:dd:e1:70: 4f:52:fe:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPaTLnZr5pdW9dG3dY+yf8kcoY7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUwQkNBRUI1MTlFNTFDOTk3NDMyQTNDRDNFNUZCMkJB Q0E4Rjc1MTAeFw0yNjA5MjExODQ5NTdaFw0yNjA5MjIyMTMzNTdaMDMxMTAvBgNV BAMTKDZCOERCQ0RCNTFGODA2MEFCMjc0M0IzN0E4RTExMEEwMDFBQTAzMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCepdwp7xqsQUg5q92HYynIm1lt KcczKKFaQWs8OYbe2V1u+6J7N8dr6mKoBCuyqBJfJUWTS3M7YbuEkQi2efCLpwHh RWJA4LdIspVcWZH0sghl3uyVQxoEX1MuDGOIYw/BPrxDqZv9U0nnVS8k08L1OfFL Qq2cdHCqgF7f5IGZim7o0HaE/jI9kysD5Kr4uSBLNS9HMvNJAuV0ZsHRfa3qhWP4 tiRPtOL1/p0kIXy/ytqNtPeS4qZ++Gmmbsifx95Z5GNFRgsXT4c48ZfAEUtVQf1F Yx8rH0k6YEiGS5ZUUwi8Ly3FdxHe5uBnAIGn/LuS3tk44JqYT7WyBo/O4+iFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa42821H4BgqydDs3qOEQoAGqAzAwHwYDVR0j BBgwFoAUlQvK61GeUcmXQyo80+X7K6yo91EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFmNjk4NGYtY2NmOS00YzQwLWIxMTQtMzgwMzU2YThjZDg4LzAvOTUwQkNBRUI1 MTlFNTFDOTk3NDMyQTNDRDNFNUZCMkJBQ0E4Rjc1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTBCQ0FFQjUxOUU1MUM5OTc0MzJBM0NEM0U1RkIyQkFDQThG NzUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFmNjk4NGYtY2NmOS00YzQwLWIx MTQtMzgwMzU2YThjZDg4LzAvOTUwQkNBRUI1MTlFNTFDOTk3NDMyQTNDRDNFNUZC MkJBQ0E4Rjc1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIbjQA7WKZFLOnLJJQrAS7l5repjbu7yUQt 4s4zEe/Sdu7ZVjBh7OIgbFvBuTG1p/Xz9utUVFwHzzkJas/BMi099WKpP6S9wTya MNYKQ0CqQk6x6FXziWaxvHLuDGMcibvqRCkNkUWkvQ3U2JrHrnszuw1a6Amtr8fC 9/d/ALMpMlsd9Uk2T2vga/9XWMIpCYY8tJVrR0hASoGFnmAQJSVWTYoFmPtWKm0V ym9jycL1NIzBN9yp3ocdvFCDGXg/COJRMjJt7QBEL6BNT7gmmin9ZtHYEjTvMZ8f 334qZ6EWs3dY4jHFeopXghG7QAz9eouRC+qDJTEgqN3hcE9S/qk= -----END CERTIFICATE-----Generated at Mon Sep 21 23:32:03 2026 by rpki-client