$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft File: 95C0FEDF4348635C616CCD76866299FFF41521C1.mft (raw, json) Hash identifier: 2ZNx+FRrPsmf+g9VrAOl/CA6HbMh9weeuA3pZLq6QYA= Subject key identifier: B5:50:83:71:DC:61:3C:DE:17:C8:48:58:56:8D:50:35:73:49:7B:9E Authority key identifier: 95:C0:FE:DF:43:48:63:5C:61:6C:CD:76:86:62:99:FF:F4:15:21:C1 Certificate issuer: /CN=95C0FEDF4348635C616CCD76866299FFF41521C1 Certificate serial: 5330135E76D614D36A439B5751404805BC320BA7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft Manifest number: BE Signing time: Mon 21 Sep 2026 12:11:24 +0000 Manifest this update: Mon 21 Sep 2026 12:06:24 +0000 Manifest next update: Tue 22 Sep 2026 15:18:24 +0000 Files and hashes: 1: 3130332e3134352e35322e302f32342d3234203d3e20313339343535.roa (hash: h+0fD6qzNLY/87deDA6R1jRhs0ceFeWyvO6Ew7fmyvY=) 2: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (hash: nctWeqdG+C+yzM3us3hfFDeGU29WHbKA/XQo+aeaR/w=) 3: 95C0FEDF4348635C616CCD76866299FFF41521C1.crl (hash: qPjUbREda/YtBdIBXtKntpGP0IHTjCVtWg+iNAJ14EM=) 4: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (hash: O1v/bS1Rz6LYE4uphPLJ6skO/weLSpE9O9uIKbdx440=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.crl rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:30:13:5e:76:d6:14:d3:6a:43:9b:57:51:40:48:05:bc:32:0b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C0FEDF4348635C616CCD76866299FFF41521C1 Validity Not Before: Sep 21 12:06:24 2026 GMT Not After : Sep 22 15:18:24 2026 GMT Subject: CN=B5508371DC613CDE17C84858568D503573497B9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:5a:2c:43:40:c2:9f:09:f5:e8:0a:22:95: b6:45:d8:0c:00:54:42:19:ab:99:d8:f6:2f:4a:37: 32:c6:16:04:89:2f:9f:5b:f2:15:01:5b:82:5d:d2: 8b:e7:8b:4d:f3:8c:7e:b0:4e:f0:6b:06:13:52:c4: 8a:ec:04:b3:2b:ca:02:06:81:79:0c:03:3f:ec:94: ff:82:9d:dd:c6:2c:46:bb:54:08:e2:01:3d:ef:80: bf:28:a4:0d:ec:5d:40:86:f2:05:c3:88:fc:b5:46: f8:91:4d:d1:3a:5c:e2:63:01:57:e9:78:c2:c0:5b: 05:81:79:3e:e7:36:fe:74:b2:3f:83:39:a0:79:84: 1b:2e:41:cc:5f:bd:19:25:5a:e9:22:0a:c4:36:5b: 68:de:21:43:0d:da:8d:4e:25:5d:75:6c:bb:ec:0c: 0b:09:fc:d3:78:77:e3:9a:43:8e:f7:c8:bf:97:95: 2c:40:0d:4b:81:3f:87:85:c5:a8:41:e8:2b:ad:60: e9:bc:de:fe:0f:58:a7:80:9b:aa:a7:4e:8a:5f:36: 30:22:32:33:ea:c3:bb:94:80:68:43:68:78:cd:2b: e0:35:15:77:56:86:85:2b:ff:67:fa:c7:0f:2b:10: 20:4f:66:e8:79:9a:05:72:95:e0:fb:db:9a:73:fd: 79:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:50:83:71:DC:61:3C:DE:17:C8:48:58:56:8D:50:35:73:49:7B:9E X509v3 Authority Key Identifier: keyid:95:C0:FE:DF:43:48:63:5C:61:6C:CD:76:86:62:99:FF:F4:15:21:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:de:87:2b:73:3e:3b:66:5a:b8:3a:2a:62:e4:f1:75:d9:fc: 4f:aa:e7:55:d1:57:30:04:36:b1:a6:92:9d:c9:d6:c8:62:47: b7:fc:18:75:79:ef:a1:f3:49:c9:0b:d7:8e:23:de:19:f6:ea: dd:31:35:64:6b:34:d9:b8:70:7d:e5:99:34:08:23:64:81:d0: 9e:da:fb:12:79:87:a3:76:45:7e:64:28:cc:72:b6:81:4f:19: 37:b6:c1:36:ba:69:1e:84:62:5b:de:71:a9:96:68:85:94:7e: ad:2e:80:e5:90:7e:af:89:c0:87:58:42:cb:9a:61:95:90:fe: ff:b5:e2:e3:42:7e:20:3c:b1:d2:d0:eb:50:f6:36:3d:be:1d: 05:c0:1e:aa:64:fc:8f:f1:27:af:d0:db:ce:49:99:a0:45:38: d8:6f:09:3f:84:02:b5:d4:56:c4:c0:45:e4:e8:c2:31:96:a5: be:0c:92:1d:0f:a7:05:46:83:e1:7a:4e:c3:49:7b:e7:7a:22: cc:20:92:7a:2b:b2:96:e3:b8:7c:1a:11:d2:05:4f:ed:e8:05: 45:b7:5e:45:bc:a8:94:84:03:44:51:69:ee:c6:b2:6b:f9:54: e9:fe:0d:73:d2:17:3e:87:f0:6d:42:a3:4f:cc:62:70:21:6c: 90:9f:86:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUzATXnbWFNNqQ5tXUUBIBbwyC6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDMEZFREY0MzQ4NjM1QzYxNkNDRDc2ODY2Mjk5RkZG NDE1MjFDMTAeFw0yNjA5MjExMjA2MjRaFw0yNjA5MjIxNTE4MjRaMDMxMTAvBgNV BAMTKEI1NTA4MzcxREM2MTNDREUxN0M4NDg1ODU2OEQ1MDM1NzM0OTdCOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBR1osQ0DCnwn16AoilbZF2AwA VEIZq5nY9i9KNzLGFgSJL59b8hUBW4Jd0ovni03zjH6wTvBrBhNSxIrsBLMrygIG gXkMAz/slP+Cnd3GLEa7VAjiAT3vgL8opA3sXUCG8gXDiPy1RviRTdE6XOJjAVfp eMLAWwWBeT7nNv50sj+DOaB5hBsuQcxfvRklWukiCsQ2W2jeIUMN2o1OJV11bLvs DAsJ/NN4d+OaQ473yL+XlSxADUuBP4eFxahB6CutYOm83v4PWKeAm6qnTopfNjAi MjPqw7uUgGhDaHjNK+A1FXdWhoUr/2f6xw8rECBPZuh5mgVyleD725pz/XkpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtVCDcdxhPN4XyEhYVo1QNXNJe54wHwYDVR0j BBgwFoAUlcD+30NIY1xhbM12hmKZ//QVIcEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjc3ZmZlMmEtMzFlNC00ODAwLTk3ZDQtNzg3NGMxMjMxOTExLzAvOTVDMEZFREY0 MzQ4NjM1QzYxNkNDRDc2ODY2Mjk5RkZGNDE1MjFDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NUMwRkVERjQzNDg2MzVDNjE2Q0NENzY4NjYyOTlGRkY0MTUy MUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjc3ZmZlMmEtMzFlNC00ODAwLTk3 ZDQtNzg3NGMxMjMxOTExLzAvOTVDMEZFREY0MzQ4NjM1QzYxNkNDRDc2ODY2Mjk5 RkZGNDE1MjFDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErehytzPjtmWrg6KmLk8XXZ/E+q51XRVzAE NrGmkp3J1shiR7f8GHV576HzSckL144j3hn26t0xNWRrNNm4cH3lmTQII2SB0J7a +xJ5h6N2RX5kKMxytoFPGTe2wTa6aR6EYlvecamWaIWUfq0ugOWQfq+JwIdYQsua YZWQ/v+14uNCfiA8sdLQ61D2Nj2+HQXAHqpk/I/xJ6/Q285JmaBFONhvCT+EArXU VsTAReTowjGWpb4Mkh0PpwVGg+F6TsNJe+d6IswgknorspbjuHwaEdIFT+3oBUW3 XkW8qJSEA0RRae7Gsmv5VOn+DXPSFz6H8G1Co0/MYnAhbJCfhuA= -----END CERTIFICATE-----Generated at Mon Sep 21 20:11:28 2026 by rpki-client