$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft File: 95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft (raw, json) Hash identifier: FgNkIo8mwqD2c/LXcjspCg4VcKz9moIDeR/kPzB12H0= Subject key identifier: 60:4D:A5:FE:87:82:A8:8C:F8:96:1C:FC:49:58:9C:65:34:8D:FE:14 Authority key identifier: 95:E9:D0:33:C4:4A:D5:03:C4:29:A7:82:A6:4C:7B:0A:F8:A9:FF:36 Certificate issuer: /CN=95E9D033C44AD503C429A782A64C7B0AF8A9FF36 Certificate serial: 54FBE441AD264D08C7ED3037C49256A51AEAC32B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 14:32:11 +0000 Manifest this update: Sun 15 Nov 2026 14:27:11 +0000 Manifest next update: Mon 16 Nov 2026 17:02:11 +0000 Files and hashes: 1: 95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl (hash: +cqMoKH4IOuJPtvNAOO81f5cpPBxxbvsx4CWHO8jukM=) 2: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (hash: 0J9oKNbFkC4ek4+yIhYejI4HBbjKDbQ0B3Yfg4Dgqy4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:fb:e4:41:ad:26:4d:08:c7:ed:30:37:c4:92:56:a5:1a:ea:c3:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95E9D033C44AD503C429A782A64C7B0AF8A9FF36 Validity Not Before: Nov 15 14:27:11 2026 GMT Not After : Nov 16 17:02:11 2026 GMT Subject: CN=604DA5FE8782A88CF8961CFC49589C65348DFE14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:44:bf:fa:30:47:98:8c:7c:50:0a:da:b7:19: d0:15:91:2e:1e:d5:1f:4d:67:e3:60:7d:69:d5:ba: fd:fe:7f:e4:44:e8:4e:6c:0f:92:22:28:9a:a0:97: 9d:c8:f9:b3:ef:bd:e9:4e:27:e5:1f:fd:2f:fc:a7: 68:da:a6:e1:64:1f:92:00:af:07:18:88:ad:11:4c: 76:6d:d4:3e:95:86:5a:dd:3b:15:40:58:ce:e7:9a: cb:65:63:dc:ce:c8:f9:6d:0e:05:a0:9d:51:4b:f0: 99:8e:fb:32:75:a5:f0:95:1e:e1:c3:00:67:24:b5: d4:c4:52:c4:f6:f4:98:62:ef:30:83:1a:2e:cb:83: 78:02:80:17:c1:ab:5b:24:dc:11:26:dc:13:13:b7: ba:7e:d1:0e:0c:80:6f:9e:5b:8b:96:2f:63:13:51: 9d:c3:7b:79:93:b2:e7:86:77:c5:7a:a8:61:48:d6: 49:5e:2d:8f:cb:20:00:94:ff:a6:85:68:51:de:36: fc:b7:2e:1b:bf:f0:76:b9:e7:32:4d:e1:15:5f:d3: e4:81:a9:51:9e:8c:df:2a:93:4d:fc:75:82:0a:8a: 4a:65:48:c5:b1:55:ae:f3:59:87:a2:b2:41:46:8a: 2b:2d:5e:60:fd:9f:42:67:bb:80:84:be:59:42:28: aa:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4D:A5:FE:87:82:A8:8C:F8:96:1C:FC:49:58:9C:65:34:8D:FE:14 X509v3 Authority Key Identifier: keyid:95:E9:D0:33:C4:4A:D5:03:C4:29:A7:82:A6:4C:7B:0A:F8:A9:FF:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:68:1e:0d:b3:26:3f:e6:03:be:d1:af:26:d8:44:cd:af:1c: b0:8f:0b:f1:5a:f0:34:75:57:da:b6:7d:e2:f0:30:51:26:44: 80:4d:a4:8b:89:f3:16:9f:32:9c:6d:de:9b:ee:28:e9:3e:c5: eb:be:de:52:26:7a:96:4c:39:c6:98:d4:07:7a:0f:ec:b5:06: 4d:98:3c:f0:e4:29:e7:6d:21:9d:de:a5:7d:a9:0c:95:a7:be: 03:4e:80:d5:fe:71:02:26:82:f0:85:15:31:27:d3:ac:58:ed: 8e:27:33:41:10:79:d7:f1:f9:c1:e8:6e:db:6a:e2:28:9a:c2: 00:c9:0c:8d:1b:08:cb:78:4c:32:fe:59:82:ca:f0:da:42:77: cd:7c:7a:2e:30:14:e6:83:de:95:9e:95:94:bd:f8:84:1c:4a: 3b:c2:f9:4c:72:7b:78:65:91:7b:28:88:93:d7:fb:d4:42:0a: 02:3f:21:26:1f:57:3c:ba:77:ad:41:37:0b:11:b2:42:c4:54: 9e:35:66:5d:fd:0c:a2:af:81:8b:9e:c0:29:71:49:ab:13:e6: 8f:c9:47:23:62:17:16:b6:ed:dd:cc:a0:d1:69:3e:0e:81:03: 52:20:bb:66:7b:da:06:0d:bc:b4:ae:7f:4d:66:fc:a7:da:45: 3a:d9:01:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVPvkQa0mTQjH7TA3xJJWpRrqwyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVFOUQwMzNDNDRBRDUwM0M0MjlBNzgyQTY0QzdCMEFG OEE5RkYzNjAeFw0yNjExMTUxNDI3MTFaFw0yNjExMTYxNzAyMTFaMDMxMTAvBgNV BAMTKDYwNERBNUZFODc4MkE4OENGODk2MUNGQzQ5NTg5QzY1MzQ4REZFMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSRL/6MEeYjHxQCtq3GdAVkS4e 1R9NZ+NgfWnVuv3+f+RE6E5sD5IiKJqgl53I+bPvvelOJ+Uf/S/8p2japuFkH5IA rwcYiK0RTHZt1D6VhlrdOxVAWM7nmstlY9zOyPltDgWgnVFL8JmO+zJ1pfCVHuHD AGcktdTEUsT29Jhi7zCDGi7Lg3gCgBfBq1sk3BEm3BMTt7p+0Q4MgG+eW4uWL2MT UZ3De3mTsueGd8V6qGFI1kleLY/LIACU/6aFaFHeNvy3Lhu/8Ha55zJN4RVf0+SB qVGejN8qk038dYIKikplSMWxVa7zWYeiskFGiistXmD9n0Jnu4CEvllCKKrPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYE2l/oeCqIz4lhz8SVicZTSN/hQwHwYDVR0j BBgwFoAUlenQM8RK1QPEKaeCpkx7Cvip/zYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY3NmI3NzMtNDA1Zi00NThmLTliODgtODUyMDk1MTczZjE2LzAvOTVFOUQwMzND NDRBRDUwM0M0MjlBNzgyQTY0QzdCMEFGOEE5RkYzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NUU5RDAzM0M0NEFENTAzQzQyOUE3ODJBNjRDN0IwQUY4QTlG RjM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY3NmI3NzMtNDA1Zi00NThmLTli ODgtODUyMDk1MTczZjE2LzAvOTVFOUQwMzNDNDRBRDUwM0M0MjlBNzgyQTY0QzdC MEFGOEE5RkYzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENoHg2zJj/mA77RrybYRM2vHLCPC/Fa8DR1 V9q2feLwMFEmRIBNpIuJ8xafMpxt3pvuKOk+xeu+3lImepZMOcaY1Ad6D+y1Bk2Y PPDkKedtIZ3epX2pDJWnvgNOgNX+cQImgvCFFTEn06xY7Y4nM0EQedfx+cHobttq 4iiawgDJDI0bCMt4TDL+WYLK8NpCd818ei4wFOaD3pWelZS9+IQcSjvC+Uxye3hl kXsoiJPX+9RCCgI/ISYfVzy6d61BNwsRskLEVJ41Zl39DKKvgYuewClxSasT5o/J RyNiFxa27d3MoNFpPg6BA1Igu2Z72gYNvLSuf01m/KfaRTrZAUs= -----END CERTIFICATE-----Generated at Sun Nov 15 16:37:04 2026 by rpki-client