$ rpki-client -vvf rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft File: C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft (raw, json) Hash identifier: mUmdEtNzpdGZw+DuzQ31BwmDduAhtVoJVNy6Yho7+gc= Subject key identifier: 66:33:D4:3E:E5:68:B1:D0:15:67:DD:70:8D:DD:95:9F:41:94:86:6F Authority key identifier: C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D Certificate issuer: /CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D Certificate serial: 3BD456A8B3F42C196FF04DBE4B2375939133F1B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 14:11:28 +0000 Manifest this update: Tue 16 Jun 2026 14:06:28 +0000 Manifest next update: Wed 17 Jun 2026 17:39:28 +0000 Files and hashes: 1: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: 8OYioJHXFDxSOXWT6kL63xMJJjG7Wo+wmLm6z+bx6x0=) 2: C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl (hash: 252o0ObHQIrEdfC+b/ebuGiTEbqz4aRg0ndgPWnR36Y=) 3: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 1gFxJKdThhrkplcpi1An+c+/wNEctIua90b5P0hZdUI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d4:56:a8:b3:f4:2c:19:6f:f0:4d:be:4b:23:75:93:91:33:f1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D Validity Not Before: Jun 16 14:06:28 2026 GMT Not After : Jun 17 17:39:28 2026 GMT Subject: CN=6633D43EE568B1D01567DD708DDD959F4194866F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:25:bd:0d:de:5b:03:51:38:07:7b:16:7d:d8: eb:e4:c7:72:40:6b:fe:68:62:d2:ee:e0:30:8d:ed: 7d:90:45:63:07:4f:c5:03:18:9d:e1:14:f6:8d:1a: 94:df:10:b8:1b:af:97:e5:f4:1e:cc:91:60:8e:18: 8a:5a:ce:01:f6:9e:44:0f:62:d9:4f:cd:c9:15:8f: d0:a9:58:b5:9e:0d:78:08:09:cd:46:91:9e:63:cd: a7:65:5c:71:0c:ac:97:83:cd:eb:87:a1:8d:50:3a: 67:e8:7b:15:fc:d8:0d:af:05:25:d1:f1:85:68:71: 87:bc:8f:dc:f1:03:4a:c0:07:65:ae:68:30:1c:07: 05:87:99:e3:8d:08:51:d5:25:e9:b1:05:fe:64:6b: de:07:f3:9c:15:20:96:b1:6f:a8:37:0b:b9:d0:40: 8f:9e:d7:8d:41:86:16:f8:ed:0b:e7:56:99:37:67: eb:1e:b9:4a:d9:d3:22:9e:51:0c:b1:82:6d:7f:90: 6f:bc:f4:e7:8d:99:e9:e9:9e:fb:24:6e:ff:7c:bc: 03:39:66:95:db:dd:3c:0e:7b:60:aa:d1:34:57:5a: 77:8b:e4:b6:0b:29:95:a2:53:9b:c3:73:76:8c:e8: 76:28:dc:6a:b8:5c:10:ff:2a:c0:8d:c2:19:61:94: 6d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:33:D4:3E:E5:68:B1:D0:15:67:DD:70:8D:DD:95:9F:41:94:86:6F X509v3 Authority Key Identifier: keyid:C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:98:90:a4:f3:30:bb:a3:17:18:52:af:99:3f:b5:d9:bf:af: f8:48:a9:68:e4:6e:0e:c8:b2:fd:f7:8d:01:24:de:68:79:aa: c7:8d:5b:ea:8c:41:c1:5e:81:6f:b6:0f:a4:06:5b:02:17:89: a6:b1:1e:cc:c0:44:80:fa:65:97:2f:a2:d9:6a:e8:d9:eb:7c: 14:ef:cb:58:dc:a9:7e:e9:51:b1:32:ae:46:72:64:e4:59:fe: ce:54:c9:c9:88:46:2c:83:07:b2:c6:e5:e6:35:9d:1b:3d:95: 84:c6:a2:19:12:40:32:63:98:92:2a:15:37:c2:7c:2d:4a:eb: cb:ef:99:f2:0c:dc:b4:ce:1e:99:be:a0:d8:cc:70:e3:30:82: 12:89:69:f5:40:e4:07:30:3e:83:a5:3c:c6:3f:2c:46:52:74: 3e:cf:ea:5b:6c:7e:96:15:bf:d0:f7:9b:21:3f:8f:15:f5:1f: 26:d1:bf:72:96:36:d6:ca:50:1a:bc:f0:a9:92:e6:b7:7a:24: 47:16:c9:97:d9:9a:dd:65:c4:94:c7:5f:c3:0d:f1:2f:d7:00: ef:69:c7:49:64:af:26:6f:29:13:33:98:c5:20:78:53:e5:92: 56:2a:f2:a4:20:b1:a3:39:16:e2:7d:32:48:24:b7:37:dd:15: 59:20:29:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO9RWqLP0LBlv8E2+SyN1k5Ez8bkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk1MERDMzUyOEUxNzQ5QzcyMUQ0Mzk4NTIzREExQkFG QjZCQkExRDAeFw0yNjA2MTYxNDA2MjhaFw0yNjA2MTcxNzM5MjhaMDMxMTAvBgNV BAMTKDY2MzNENDNFRTU2OEIxRDAxNTY3REQ3MDhEREQ5NTlGNDE5NDg2NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSJb0N3lsDUTgHexZ92Ovkx3JA a/5oYtLu4DCN7X2QRWMHT8UDGJ3hFPaNGpTfELgbr5fl9B7MkWCOGIpazgH2nkQP YtlPzckVj9CpWLWeDXgICc1GkZ5jzadlXHEMrJeDzeuHoY1QOmfoexX82A2vBSXR 8YVocYe8j9zxA0rAB2WuaDAcBwWHmeONCFHVJemxBf5ka94H85wVIJaxb6g3C7nQ QI+e141Bhhb47QvnVpk3Z+seuUrZ0yKeUQyxgm1/kG+89OeNmenpnvskbv98vAM5 ZpXb3TwOe2Cq0TRXWneL5LYLKZWiU5vDc3aM6HYo3Gq4XBD/KsCNwhlhlG21AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZjPUPuVosdAVZ91wjd2Vn0GUhm8wHwYDVR0j BBgwFoAUyVDcNSjhdJxyHUOYUj2huvtruh0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1NjgtMWQ4NjMzNjBlNDIxLzAvQzk1MERDMzUy OEUxNzQ5QzcyMUQ0Mzk4NTIzREExQkFGQjZCQkExRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTUwREMzNTI4RTE3NDlDNzIxRDQzOTg1MjNEQTFCQUZCNkJC QTFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvQzk1MERDMzUyOEUxNzQ5QzcyMUQ0Mzk4NTIzREEx QkFGQjZCQkExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGeYkKTzMLujFxhSr5k/tdm/r/hIqWjkbg7I sv33jQEk3mh5qseNW+qMQcFegW+2D6QGWwIXiaaxHszARID6ZZcvotlq6NnrfBTv y1jcqX7pUbEyrkZyZORZ/s5UycmIRiyDB7LG5eY1nRs9lYTGohkSQDJjmJIqFTfC fC1K68vvmfIM3LTOHpm+oNjMcOMwghKJafVA5AcwPoOlPMY/LEZSdD7P6ltsfpYV v9D3myE/jxX1HybRv3KWNtbKUBq88KmS5rd6JEcWyZfZmt1lxJTHX8MN8S/XAO9p x0lkryZvKRMzmMUgeFPlklYq8qQgsaM5FuJ9MkgktzfdFVkgKYw= -----END CERTIFICATE-----Generated at Wed Jun 17 10:42:00 2026 by rpki-client