$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft File: C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft (raw, json) Hash identifier: 6i/jCL1avukBMUtetkoCxDBrXdbAsVhCZhCfBwFLEfI= Subject key identifier: A7:61:93:D7:6A:04:34:2D:64:42:2D:D6:50:2C:FD:67:36:68:76:23 Authority key identifier: C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D Certificate issuer: /CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D Certificate serial: 1BA46A49184A2611124F3FF1A99973DEA8E3D85F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft Manifest number: BF Signing time: Mon 21 Sep 2026 20:21:39 +0000 Manifest this update: Mon 21 Sep 2026 20:16:39 +0000 Manifest next update: Tue 22 Sep 2026 23:28:39 +0000 Files and hashes: 1: C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl (hash: akU3f15HVVxML8wHuGm5XFhWc7FDpSlGA0RxxCPBN9o=) 2: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 1gFxJKdThhrkplcpi1An+c+/wNEctIua90b5P0hZdUI=) 3: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: 8OYioJHXFDxSOXWT6kL63xMJJjG7Wo+wmLm6z+bx6x0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a4:6a:49:18:4a:26:11:12:4f:3f:f1:a9:99:73:de:a8:e3:d8:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D Validity Not Before: Sep 21 20:16:39 2026 GMT Not After : Sep 22 23:28:39 2026 GMT Subject: CN=A76193D76A04342D64422DD6502CFD6736687623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a3:09:b8:2e:b5:9b:e4:de:6c:5c:5a:e0:bc: 50:9a:71:52:9c:92:86:8b:19:eb:aa:16:a3:1f:e2: 96:49:7d:71:26:56:d0:89:89:02:85:41:23:6f:20: b9:1b:1f:9c:2d:f8:3b:0c:35:0f:6e:7b:79:e9:a7: 27:e0:b8:f4:0e:a6:dc:c3:d8:42:49:ff:6c:ce:55: 02:6d:05:ba:7d:50:3b:37:23:a4:53:82:24:06:6b: a1:4e:21:46:ee:39:47:81:28:18:83:0c:79:b5:f1: 81:6e:20:14:a4:cd:ce:37:c9:88:c0:e9:02:39:e4: a3:79:b2:8d:f0:f1:d7:a3:15:e6:93:e1:a2:23:ac: cc:c5:44:22:5d:4c:57:01:84:b6:d0:0b:4a:8b:0f: f7:09:ab:9a:94:de:d2:3b:58:92:b7:fb:39:b5:03: c3:e9:3d:85:24:47:51:80:6c:4e:f5:25:a1:83:fd: d0:e5:d3:47:46:60:4e:51:9f:82:79:b9:80:4e:9b: b1:82:11:4c:9b:09:05:56:bb:a5:ca:a6:2f:0e:c4: ad:8d:b3:ac:cd:b3:48:e1:9c:21:42:e9:bf:79:81: 6c:0a:f9:0d:44:2e:e2:0f:7a:1a:bb:f3:49:0d:eb: 56:c6:8a:cb:e8:8e:82:80:fe:2e:81:8b:68:9d:77: ad:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:61:93:D7:6A:04:34:2D:64:42:2D:D6:50:2C:FD:67:36:68:76:23 X509v3 Authority Key Identifier: keyid:C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:0c:11:f2:b6:35:26:f6:68:2d:5b:62:9d:ff:0d:b9:a1:83: 1c:04:7a:28:b9:15:d0:43:1a:50:aa:b4:c6:62:52:45:a0:16: 08:95:e9:1d:07:4f:23:26:d5:80:ab:e6:6b:00:ac:d8:13:b6: 0a:2b:c4:74:6d:dd:6b:80:69:85:ef:d7:ea:90:66:31:a1:e6: dc:cc:dc:1d:f2:57:c3:21:bd:b2:ca:54:80:b6:db:8d:ac:12: 97:55:c9:88:15:55:ad:2f:83:c7:bf:7c:4a:d4:9a:ca:de:06: 93:4f:0c:26:43:e7:76:0d:f7:70:e9:3d:f1:1f:96:dc:bf:c3: 96:2f:5c:1f:56:39:41:38:c6:fa:3e:d7:f0:5f:51:27:6c:46: e4:78:09:cf:e9:9b:2c:db:f7:5e:ab:70:8a:1b:59:00:89:13: 7f:19:15:6a:d8:41:94:5d:60:a1:21:d2:d4:28:5d:a8:8b:fe: 83:84:20:3e:99:2b:02:f7:05:72:bd:8a:98:d1:bc:20:ac:24: 85:52:20:ae:70:ce:26:b5:e3:68:21:8f:7e:b7:22:cf:08:40: de:40:f5:64:ff:8c:43:3b:f8:ae:b1:47:25:39:a0:ac:1a:5e: 5a:88:47:c0:b6:38:41:05:04:44:62:c8:07:23:b8:81:af:82: 17:c0:fc:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG6RqSRhKJhESTz/xqZlz3qjj2F8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk1MERDMzUyOEUxNzQ5QzcyMUQ0Mzk4NTIzREExQkFG QjZCQkExRDAeFw0yNjA5MjEyMDE2MzlaFw0yNjA5MjIyMzI4MzlaMDMxMTAvBgNV BAMTKEE3NjE5M0Q3NkEwNDM0MkQ2NDQyMkRENjUwMkNGRDY3MzY2ODc2MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyowm4LrWb5N5sXFrgvFCacVKc koaLGeuqFqMf4pZJfXEmVtCJiQKFQSNvILkbH5wt+DsMNQ9ue3nppyfguPQOptzD 2EJJ/2zOVQJtBbp9UDs3I6RTgiQGa6FOIUbuOUeBKBiDDHm18YFuIBSkzc43yYjA 6QI55KN5so3w8dejFeaT4aIjrMzFRCJdTFcBhLbQC0qLD/cJq5qU3tI7WJK3+zm1 A8PpPYUkR1GAbE71JaGD/dDl00dGYE5Rn4J5uYBOm7GCEUybCQVWu6XKpi8OxK2N s6zNs0jhnCFC6b95gWwK+Q1ELuIPehq780kN61bGisvojoKA/i6Bi2idd63nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp2GT12oENC1kQi3WUCz9ZzZodiMwHwYDVR0j BBgwFoAUyVDcNSjhdJxyHUOYUj2huvtruh0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1NjgtMWQ4NjMzNjBlNDIxLzAvQzk1MERDMzUy OEUxNzQ5QzcyMUQ0Mzk4NTIzREExQkFGQjZCQkExRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTUwREMzNTI4RTE3NDlDNzIxRDQzOTg1MjNEQTFCQUZCNkJC QTFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvQzk1MERDMzUyOEUxNzQ5QzcyMUQ0Mzk4NTIzREEx QkFGQjZCQkExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsMEfK2NSb2aC1bYp3/DbmhgxwEeii5FdBD GlCqtMZiUkWgFgiV6R0HTyMm1YCr5msArNgTtgorxHRt3WuAaYXv1+qQZjGh5tzM 3B3yV8MhvbLKVIC2242sEpdVyYgVVa0vg8e/fErUmsreBpNPDCZD53YN93DpPfEf lty/w5YvXB9WOUE4xvo+1/BfUSdsRuR4Cc/pmyzb916rcIobWQCJE38ZFWrYQZRd YKEh0tQoXaiL/oOEID6ZKwL3BXK9ipjRvCCsJIVSIK5wzia142ghj363Is8IQN5A 9WT/jEM7+K6xRyU5oKwaXlqIR8C2OEEFBERiyAcjuIGvghfA/Is= -----END CERTIFICATE-----Generated at Tue Sep 22 03:05:54 2026 by rpki-client