$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft File: 95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft (raw, json) Hash identifier: mdxwdyVRGS398vZX0vhUjFeIWsfePZIqDY8C7QeBOtM= Subject key identifier: 90:D7:37:20:BE:22:26:CB:61:B9:6D:59:F5:62:CE:67:15:5D:95:72 Authority key identifier: 95:E9:D0:33:C4:4A:D5:03:C4:29:A7:82:A6:4C:7B:0A:F8:A9:FF:36 Certificate issuer: /CN=95E9D033C44AD503C429A782A64C7B0AF8A9FF36 Certificate serial: 34D8526CFFA925E690EF2CFD4AADB6EDF5AED4D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft Manifest number: BE Signing time: Mon 21 Sep 2026 07:25:47 +0000 Manifest this update: Mon 21 Sep 2026 07:20:47 +0000 Manifest next update: Tue 22 Sep 2026 09:50:47 +0000 Files and hashes: 1: 95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl (hash: 5Ur0xHBEPywLoHwBGprXn4hO5axp20HDYGCZPmq/0nE=) 2: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (hash: 0J9oKNbFkC4ek4+yIhYejI4HBbjKDbQ0B3Yfg4Dgqy4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d8:52:6c:ff:a9:25:e6:90:ef:2c:fd:4a:ad:b6:ed:f5:ae:d4:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95E9D033C44AD503C429A782A64C7B0AF8A9FF36 Validity Not Before: Sep 21 07:20:47 2026 GMT Not After : Sep 22 09:50:47 2026 GMT Subject: CN=90D73720BE2226CB61B96D59F562CE67155D9572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:20:61:69:62:0b:2f:e4:0b:a5:18:3a:33:75: 33:de:1a:19:b4:de:9f:ba:d9:bb:c8:5a:6a:d6:12: c2:9b:ae:3a:41:8d:98:11:ac:3f:d8:1d:48:8c:c8: 5e:67:9c:e2:30:77:eb:57:c5:aa:b3:2b:06:cf:78: 9c:4b:f3:97:02:ce:19:ba:4f:6e:e4:c1:3d:6f:f1: 31:4f:cc:53:a2:c7:8b:d0:15:2f:87:a8:20:69:56: e7:4c:b2:bc:96:1d:d0:bb:76:07:14:7b:59:6e:c2: 7c:b5:50:f6:a3:47:e4:a9:e9:49:c0:b2:63:d8:60: ae:d9:70:0a:a4:51:9a:bb:95:d0:d8:af:7e:ce:20: 95:6e:8b:af:d7:52:7d:ef:da:cf:bf:42:9d:51:2e: 0b:4d:b8:5a:2b:55:6f:57:a9:ea:14:59:4b:d6:5f: 7a:ef:ce:c5:12:b6:52:eb:b2:f4:e3:b7:8c:0f:1d: 34:c2:c8:6e:ed:58:b8:90:59:e2:41:35:30:8f:ac: dd:ec:da:7d:96:01:f8:22:77:5d:fa:74:e6:07:12: 08:b7:4b:03:89:25:38:3b:b5:af:c5:d3:e0:c6:c6: db:81:7a:0d:92:f9:a3:22:9b:99:f0:bf:20:be:2a: 66:36:9b:88:64:92:1e:db:c8:b7:55:9f:a4:c7:9f: 2e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D7:37:20:BE:22:26:CB:61:B9:6D:59:F5:62:CE:67:15:5D:95:72 X509v3 Authority Key Identifier: keyid:95:E9:D0:33:C4:4A:D5:03:C4:29:A7:82:A6:4C:7B:0A:F8:A9:FF:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:9b:e7:49:95:cd:3f:33:33:e7:71:39:b8:2b:36:86:41:9a: c6:2e:88:36:c9:27:de:b7:10:ce:77:05:77:ca:1d:4c:bd:33: bd:4e:fc:52:cb:d3:68:ac:62:80:ce:05:e5:28:3f:95:c7:95: 6d:7d:17:73:7a:80:23:58:d3:ac:e3:d4:56:e2:a7:b0:5d:d9: d5:b0:28:e3:04:ca:6e:ce:88:69:25:71:b1:87:d8:e3:ae:6d: 4c:24:dd:64:cd:86:84:b9:e7:a8:61:ce:ac:bc:13:48:d4:30: 49:52:d1:ba:3e:4a:dd:54:36:0d:5f:73:f1:41:74:37:ec:68: 74:a8:7b:75:14:57:48:3d:10:52:06:84:c1:93:4b:a4:cb:37: 54:ca:54:70:7e:02:19:85:46:62:db:2a:2a:b7:f4:f5:96:6c: a5:2b:a9:58:12:3b:71:1b:3c:f1:ec:11:77:e1:c5:99:29:63: 6a:d3:30:01:ee:ed:03:27:92:12:46:31:24:c8:9d:df:49:f7: 69:06:d6:05:b3:e3:6b:80:a6:49:c9:4b:66:98:18:5a:bf:8d: cd:b6:72:17:24:dc:b2:75:a4:d6:7e:53:72:4a:95:03:35:f4: 1a:b0:7b:47:16:fb:5c:74:7c:5a:3a:a4:15:0b:17:7f:ee:04: fb:14:52:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNNhSbP+pJeaQ7yz9Sq227fWu1NYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVFOUQwMzNDNDRBRDUwM0M0MjlBNzgyQTY0QzdCMEFG OEE5RkYzNjAeFw0yNjA5MjEwNzIwNDdaFw0yNjA5MjIwOTUwNDdaMDMxMTAvBgNV BAMTKDkwRDczNzIwQkUyMjI2Q0I2MUI5NkQ1OUY1NjJDRTY3MTU1RDk1NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMIGFpYgsv5AulGDozdTPeGhm0 3p+62bvIWmrWEsKbrjpBjZgRrD/YHUiMyF5nnOIwd+tXxaqzKwbPeJxL85cCzhm6 T27kwT1v8TFPzFOix4vQFS+HqCBpVudMsryWHdC7dgcUe1luwny1UPajR+Sp6UnA smPYYK7ZcAqkUZq7ldDYr37OIJVui6/XUn3v2s+/Qp1RLgtNuForVW9XqeoUWUvW X3rvzsUStlLrsvTjt4wPHTTCyG7tWLiQWeJBNTCPrN3s2n2WAfgid136dOYHEgi3 SwOJJTg7ta/F0+DGxtuBeg2S+aMim5nwvyC+KmY2m4hkkh7byLdVn6THny6XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkNc3IL4iJsthuW1Z9WLOZxVdlXIwHwYDVR0j BBgwFoAUlenQM8RK1QPEKaeCpkx7Cvip/zYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY3NmI3NzMtNDA1Zi00NThmLTliODgtODUyMDk1MTczZjE2LzAvOTVFOUQwMzND NDRBRDUwM0M0MjlBNzgyQTY0QzdCMEFGOEE5RkYzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NUU5RDAzM0M0NEFENTAzQzQyOUE3ODJBNjRDN0IwQUY4QTlG RjM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY3NmI3NzMtNDA1Zi00NThmLTli ODgtODUyMDk1MTczZjE2LzAvOTVFOUQwMzNDNDRBRDUwM0M0MjlBNzgyQTY0QzdC MEFGOEE5RkYzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABab50mVzT8zM+dxObgrNoZBmsYuiDbJJ963 EM53BXfKHUy9M71O/FLL02isYoDOBeUoP5XHlW19F3N6gCNY06zj1Fbip7Bd2dWw KOMEym7OiGklcbGH2OOubUwk3WTNhoS556hhzqy8E0jUMElS0bo+St1UNg1fc/FB dDfsaHSoe3UUV0g9EFIGhMGTS6TLN1TKVHB+AhmFRmLbKiq39PWWbKUrqVgSO3Eb PPHsEXfhxZkpY2rTMAHu7QMnkhJGMSTInd9J92kG1gWz42uApknJS2aYGFq/jc22 chck3LJ1pNZ+U3JKlQM19Bqwe0cW+1x0fFo6pBULF3/uBPsUUmo= -----END CERTIFICATE-----Generated at Mon Sep 21 22:02:03 2026 by rpki-client