$ rpki-client -vvf repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft File: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft (raw, json) Hash identifier: MtKe1GdQFYlPzKVyN2NyetlozIRENmLcx8/LENTUEF8= Subject key identifier: 30:76:17:56:A9:F4:CB:0E:C3:48:04:7C:1C:A8:97:6C:99:99:D4:3D Authority key identifier: 95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 Certificate issuer: /CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Certificate serial: 44BF693E1A4B86BF6A4F39950004490410C935F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft Manifest number: 055F Signing time: Mon 23 Mar 2026 23:21:42 +0000 Manifest this update: Mon 23 Mar 2026 23:16:42 +0000 Manifest next update: Fri 27 Mar 2026 08:57:42 +0000 Files and hashes: 1: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (hash: mAx24Mrm6AI9KeLaD2h/5RLJ5ztWp5mCELhp+sgXhQM=) 2: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl (hash: wC9RKqz0YDqLPh8UBMO+vhcNgWcwtDrpz3jRmecaskU=) 3: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (hash: rC6h62i9FYTYXRJwY0Brz86k4I7okoBa0s60XGjIzcU=) 4: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (hash: 75/DAONeN65KHxljOFhq+chBgFEKtm0A6zWkkY+QXDo=) 5: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (hash: wl5DevhHVxkmwfDCCC4JaJfUTNabYHb/Lh+cHr1YoI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 08:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:bf:69:3e:1a:4b:86:bf:6a:4f:39:95:00:04:49:04:10:c9:35:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Validity Not Before: Mar 23 23:16:42 2026 GMT Not After : Mar 27 08:57:42 2026 GMT Subject: CN=30761756A9F4CB0EC348047C1CA8976C9999D43D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:73:1b:90:6c:6b:45:89:33:e2:96:e5:7b: cd:29:53:f9:a5:b2:28:84:30:d5:b4:ef:3a:7e:23: 13:0e:76:a4:05:ae:f3:a6:7a:fa:23:55:a1:66:81: 64:56:ca:ae:30:a5:1a:cd:50:7e:28:7d:99:ed:40: 98:99:a1:e7:cc:bd:0c:2e:4f:df:f7:26:0e:7a:7d: 10:5e:02:8a:7f:10:5c:6f:a1:62:5f:2d:91:a0:46: 9e:8b:62:9e:ee:b7:bb:8b:5c:60:14:c7:38:cb:70: e0:91:fc:67:4b:d1:2f:d2:6f:fe:f6:3d:01:85:a5: ad:35:6e:49:80:03:3f:48:e5:73:7f:b0:ed:70:6c: 7b:60:f7:6b:09:51:d8:95:dd:dd:30:12:81:b1:92: 8e:c3:5b:17:1a:0f:97:00:0d:d2:b1:fb:1f:b0:77: 82:09:d2:cc:17:68:43:ca:9f:53:18:9c:e9:7b:60: de:8e:38:82:5f:80:50:08:9e:e5:9a:de:2f:81:b3: 7a:ce:ca:57:a4:34:e6:f3:f4:c3:e7:f1:d5:98:3c: b8:03:eb:19:ec:60:fc:cc:9f:b8:36:f1:20:be:73: ac:ca:0d:a1:de:1f:ae:9b:26:6c:30:6d:43:8f:25: 04:9f:c1:a0:89:70:13:38:e0:3f:f6:31:1d:65:ed: 0e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:76:17:56:A9:F4:CB:0E:C3:48:04:7C:1C:A8:97:6C:99:99:D4:3D X509v3 Authority Key Identifier: keyid:95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:5d:0c:a7:cc:5d:39:9e:f3:4f:67:ef:47:97:6c:a8:09:ba: 83:af:c6:73:fd:68:65:a2:81:64:a6:cd:76:d0:27:93:8c:c1: 85:61:30:b0:4b:1b:0b:37:72:60:98:4f:f2:eb:43:29:1b:75: fd:f6:e3:0d:e1:c6:c6:dc:d7:e6:e9:9b:54:ed:86:c6:31:e7: fa:7b:40:1e:3c:63:a2:ae:19:c8:da:6f:1f:ea:06:60:46:0f: 18:13:a8:d0:fd:35:25:75:71:3b:ec:a7:cd:96:e5:7a:14:6f: 85:73:ec:d2:00:96:ee:aa:9c:1b:e6:80:6e:bb:01:04:24:8b: e9:8b:05:f0:02:73:c0:31:70:f6:98:ae:79:31:82:ee:da:55: e7:6a:1f:f2:05:f2:3c:95:e5:f9:5b:b1:11:ff:1b:a5:fa:d9: 86:3f:1c:d6:46:e9:af:51:5d:ed:87:c6:5d:92:5d:cc:ce:54: 53:4b:1c:83:61:18:16:1c:c2:6b:19:73:83:73:01:ea:80:88: f9:45:ab:d8:a0:f1:40:5e:cb:63:3f:0c:29:46:75:46:25:46: a6:af:32:c4:5b:6f:dc:c0:a0:54:87:56:bf:28:39:1f:71:76: 44:3f:cf:2a:20:85:e5:e2:24:52:f9:31:e7:15:a3:a2:a3:f1: 91:96:ec:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURL9pPhpLhr9qTzmVAARJBBDJNfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlE QTQ2QjNDODAeFw0yNjAzMjMyMzE2NDJaFw0yNjAzMjcwODU3NDJaMDMxMTAvBgNV BAMTKDMwNzYxNzU2QTlGNENCMEVDMzQ4MDQ3QzFDQTg5NzZDOTk5OUQ0M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLv3MbkGxrRYkz4pble80pU/ml siiEMNW07zp+IxMOdqQFrvOmevojVaFmgWRWyq4wpRrNUH4ofZntQJiZoefMvQwu T9/3Jg56fRBeAop/EFxvoWJfLZGgRp6LYp7ut7uLXGAUxzjLcOCR/GdL0S/Sb/72 PQGFpa01bkmAAz9I5XN/sO1wbHtg92sJUdiV3d0wEoGxko7DWxcaD5cADdKx+x+w d4IJ0swXaEPKn1MYnOl7YN6OOIJfgFAInuWa3i+Bs3rOylekNObz9MPn8dWYPLgD 6xnsYPzMn7g28SC+c6zKDaHeH66bJmwwbUOPJQSfwaCJcBM44D/2MR1l7Q5/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMHYXVqn0yw7DSAR8HKiXbJmZ1D0wHwYDVR0j BBgwFoAUlcO6fyO2NRch932oAgcx+dpGs8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBlOWM5Zi1kNjA3LTQ0OTctYWYyOC00ZDJiOTA5MmQ1YTYvMC85NUMzQkE3RjIz QjYzNTE3MjFGNzdEQTgwMjA3MzFGOURBNDZCM0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlEQTQ2 QjNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZTljOWYtZDYwNy00NDk3LWFm MjgtNGQyYjkwOTJkNWE2LzAvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMx RjlEQTQ2QjNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEldDKfMXTme809n70eXbKgJuoOvxnP9aGWi gWSmzXbQJ5OMwYVhMLBLGws3cmCYT/LrQykbdf324w3hxsbc1+bpm1TthsYx5/p7 QB48Y6KuGcjabx/qBmBGDxgTqND9NSV1cTvsp82W5XoUb4Vz7NIAlu6qnBvmgG67 AQQki+mLBfACc8AxcPaYrnkxgu7aVedqH/IF8jyV5flbsRH/G6X62YY/HNZG6a9R Xe2Hxl2SXczOVFNLHINhGBYcwmsZc4NzAeqAiPlFq9ig8UBey2M/DClGdUYlRqav MsRbb9zAoFSHVr8oOR9xdkQ/zyogheXiJFL5MecVo6Kj8ZGW7DI= -----END CERTIFICATE-----Generated at Thu Mar 26 07:19:21 2026 by rpki-client