$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft File: C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft (raw, json) Hash identifier: PeFQWk9z9rYQokiilqU7gLEozr5k4x+gvnoiSmCS1+0= Subject key identifier: 96:18:23:FF:F2:50:D9:8F:02:15:AE:66:2D:CB:44:18:AD:F9:DF:D9 Authority key identifier: C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D Certificate issuer: /CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D Certificate serial: 69974345A6FD2FB6776E9B55EE785000ADA16919 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 17:31:29 +0000 Manifest this update: Sat 14 Nov 2026 17:26:29 +0000 Manifest next update: Sun 15 Nov 2026 20:24:29 +0000 Files and hashes: 1: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: 8OYioJHXFDxSOXWT6kL63xMJJjG7Wo+wmLm6z+bx6x0=) 2: C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl (hash: 4DtcNxf4SDBdhN0RNRTQ8YLDafC802fmpitbssb2D3k=) 3: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 1gFxJKdThhrkplcpi1An+c+/wNEctIua90b5P0hZdUI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 20:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:97:43:45:a6:fd:2f:b6:77:6e:9b:55:ee:78:50:00:ad:a1:69:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D Validity Not Before: Nov 14 17:26:29 2026 GMT Not After : Nov 15 20:24:29 2026 GMT Subject: CN=961823FFF250D98F0215AE662DCB4418ADF9DFD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3e:f9:0d:01:33:56:ae:f6:89:c8:c2:3b:11: 0d:6c:ab:57:af:d5:ca:d1:b1:d4:95:c5:6f:5e:85: 02:e5:71:09:f9:8d:30:1c:97:95:ad:e6:92:c4:47: 7f:f1:eb:5a:fe:56:5c:a8:68:59:33:27:6b:ab:53: 31:e9:eb:e3:af:c1:11:ab:4e:47:2d:5b:e0:28:1c: 60:e2:c0:8c:58:71:28:17:7a:62:1e:30:b1:32:0d: 9e:b8:30:5e:65:ba:db:29:04:c3:c4:b0:b9:34:90: 40:3b:c3:96:89:69:76:8a:8f:2e:a4:09:77:a5:e4: 82:85:07:78:9b:8e:c4:6e:dc:48:64:77:7b:ce:26: e1:fd:c4:7a:0d:94:ec:52:f4:7d:d5:52:2f:ed:85: de:4a:a3:6e:14:0a:2a:61:05:26:77:a7:9a:17:cf: 4f:6b:2d:27:4a:5b:62:b1:ed:08:8e:c3:40:3f:58: bd:c0:2a:65:60:82:a8:54:0f:6e:97:e5:8b:e9:84: 4b:01:49:80:04:97:26:60:7a:66:5e:90:ab:6c:0d: 12:34:70:94:cc:0d:e1:40:94:1b:19:fa:92:11:7e: 25:d4:a0:09:b1:1f:de:b7:69:7f:8d:3b:52:d4:2c: 63:49:d7:e6:da:09:d8:69:1c:62:73:36:38:25:94: 61:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:18:23:FF:F2:50:D9:8F:02:15:AE:66:2D:CB:44:18:AD:F9:DF:D9 X509v3 Authority Key Identifier: keyid:C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:ed:11:aa:50:fa:fc:80:66:4b:58:32:b2:23:9e:4d:d9:f9: ef:11:18:bc:2f:07:d7:e3:7a:40:46:ba:64:d9:f5:a6:b5:a5: 67:39:5e:b0:d3:85:3a:26:c6:1a:1c:cd:41:36:36:d8:ff:34: 14:6a:e1:98:ec:4e:06:2f:87:dd:6d:b1:a7:c1:6f:8c:72:89: e4:f0:68:ee:ea:ca:38:0d:df:e4:e5:eb:b6:e5:74:c0:ab:16: 89:3e:fc:02:59:c9:6e:f6:12:7a:15:ee:c8:d6:d7:57:cf:37: af:d2:8a:cc:1b:37:95:dd:f8:74:75:b8:f4:ed:93:9b:96:93: 1b:09:b5:f0:b7:3c:e4:22:f9:53:20:85:f8:b1:75:23:39:e9: 90:2a:d6:2c:fd:04:22:d5:dd:a3:0e:a3:61:dd:ec:c5:8e:b1: 3f:cd:ad:72:86:27:6f:9b:20:89:ae:bd:84:d6:de:5d:72:93: 96:83:b9:ab:6c:11:81:23:04:e2:80:7b:4b:53:5e:16:4c:de: 19:38:60:d5:0e:b9:22:6a:78:30:ba:68:7b:3e:0a:c8:00:c8: 5b:4b:83:e6:3f:12:12:ca:cd:e3:e8:04:51:30:73:bf:9e:e8: 4b:67:6f:8b:65:b2:5f:16:42:ad:ae:aa:b3:1b:07:35:bb:95: c4:a0:8a:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaZdDRab9L7Z3bptV7nhQAK2haRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk1MERDMzUyOEUxNzQ5QzcyMUQ0Mzk4NTIzREExQkFG QjZCQkExRDAeFw0yNjExMTQxNzI2MjlaFw0yNjExMTUyMDI0MjlaMDMxMTAvBgNV BAMTKDk2MTgyM0ZGRjI1MEQ5OEYwMjE1QUU2NjJEQ0I0NDE4QURGOURGRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIPvkNATNWrvaJyMI7EQ1sq1ev 1crRsdSVxW9ehQLlcQn5jTAcl5Wt5pLER3/x61r+VlyoaFkzJ2urUzHp6+OvwRGr TkctW+AoHGDiwIxYcSgXemIeMLEyDZ64MF5lutspBMPEsLk0kEA7w5aJaXaKjy6k CXel5IKFB3ibjsRu3Ehkd3vOJuH9xHoNlOxS9H3VUi/thd5Ko24UCiphBSZ3p5oX z09rLSdKW2Kx7QiOw0A/WL3AKmVggqhUD26X5YvphEsBSYAElyZgemZekKtsDRI0 cJTMDeFAlBsZ+pIRfiXUoAmxH963aX+NO1LULGNJ1+baCdhpHGJzNjgllGETAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlhgj//JQ2Y8CFa5mLctEGK3539kwHwYDVR0j BBgwFoAUyVDcNSjhdJxyHUOYUj2huvtruh0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1NjgtMWQ4NjMzNjBlNDIxLzAvQzk1MERDMzUy OEUxNzQ5QzcyMUQ0Mzk4NTIzREExQkFGQjZCQkExRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTUwREMzNTI4RTE3NDlDNzIxRDQzOTg1MjNEQTFCQUZCNkJC QTFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvQzk1MERDMzUyOEUxNzQ5QzcyMUQ0Mzk4NTIzREEx QkFGQjZCQkExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPtEapQ+vyAZktYMrIjnk3Z+e8RGLwvB9fj ekBGumTZ9aa1pWc5XrDThTomxhoczUE2Ntj/NBRq4ZjsTgYvh91tsafBb4xyieTw aO7qyjgN3+Tl67bldMCrFok+/AJZyW72EnoV7sjW11fPN6/SiswbN5Xd+HR1uPTt k5uWkxsJtfC3POQi+VMghfixdSM56ZAq1iz9BCLV3aMOo2Hd7MWOsT/NrXKGJ2+b IImuvYTW3l1yk5aDuatsEYEjBOKAe0tTXhZM3hk4YNUOuSJqeDC6aHs+CsgAyFtL g+Y/EhLKzePoBFEwc7+e6Etnb4tlsl8WQq2uqrMbBzW7lcSgipo= -----END CERTIFICATE-----Generated at Sun Nov 15 11:53:00 2026 by rpki-client