$ rpki-client -vvf repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft File: 95966A8DB250307CF9852483F96922EE520F6E2A.mft (raw, json) Hash identifier: hT+X8pLhRl3Xz+kvtNiaFxGjw0G9vNKiAXbFkp+gIWY= Subject key identifier: 2A:D6:22:8C:D6:B7:BF:43:AA:A6:52:8C:64:D7:AF:9B:FE:22:7D:B5 Authority key identifier: 95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A Certificate issuer: /CN=95966A8DB250307CF9852483F96922EE520F6E2A Certificate serial: 0248E6FFB987132EB64C83E52866D8F28B952CF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft Manifest number: 034B Signing time: Wed 25 Mar 2026 15:30:00 +0000 Manifest this update: Wed 25 Mar 2026 15:25:00 +0000 Manifest next update: Sun 29 Mar 2026 01:51:00 +0000 Files and hashes: 1: 3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa (hash: lJA11B888lTAIORO0k9rdft4p7t0vrr4FyWBG++arwA=) 2: 3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa (hash: MitWmX3yxsYyPd+sKi7YcLOVm2fefPu2Qs/7NDCXxb8=) 3: 3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa (hash: xt2DiIsS1Hm+P8ldmkaqq+Mf+LiIX+U17UKLw/Y34Uk=) 4: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (hash: QAndsMLECtqgWCCHyuYe9oOyMMkwnZ8QhtRk2OHf9FQ=) 5: 95966A8DB250307CF9852483F96922EE520F6E2A.crl (hash: vuYj80GjblB4LZdk+RveetIzG/jCiP1DreFPP7e86/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 01:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:48:e6:ff:b9:87:13:2e:b6:4c:83:e5:28:66:d8:f2:8b:95:2c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95966A8DB250307CF9852483F96922EE520F6E2A Validity Not Before: Mar 25 15:25:00 2026 GMT Not After : Mar 29 01:51:00 2026 GMT Subject: CN=2AD6228CD6B7BF43AAA6528C64D7AF9BFE227DB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b7:2d:94:01:26:69:3a:e9:a7:5c:05:b0:47: 0d:c1:27:d8:6d:7c:4e:d0:46:5a:e9:f0:4f:6c:cd: 3c:37:e4:1b:e1:25:3d:80:a2:8b:1e:47:16:17:f7: 3d:a7:3f:a3:2e:d2:6f:cf:7b:d7:1a:65:77:f3:44: 8c:31:7f:49:15:29:ef:e0:33:5d:97:4e:18:03:7f: 87:1e:7c:6c:eb:dd:76:36:ba:bb:39:87:d7:a5:64: 63:9c:31:aa:67:64:b0:25:43:78:44:99:6c:d2:92: 8e:a2:bf:30:41:67:f1:db:41:38:cb:e4:48:ff:7d: 0b:16:5c:ac:48:ba:b2:0e:67:b4:0b:36:10:f4:fd: 91:bc:5c:13:10:63:d7:fb:18:38:fe:d3:fa:6f:e1: 89:3d:9d:b1:29:ec:6b:cb:72:58:26:cc:d5:e6:01: e9:8d:39:4d:73:72:fc:80:ee:3a:d7:08:4a:6e:37: b1:3d:b5:e3:6f:a9:12:1a:1f:9e:2c:d0:01:3e:66: 39:4e:77:fc:d2:92:cf:ca:ad:72:42:4e:0c:24:48: 90:83:f7:1f:58:b4:f2:53:b4:06:5d:35:a0:cb:66: b3:f9:7f:d0:08:d4:f5:14:75:8b:8d:18:c9:48:80: 62:42:a5:e8:d4:5c:c5:17:77:c7:54:ec:34:46:cc: 38:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D6:22:8C:D6:B7:BF:43:AA:A6:52:8C:64:D7:AF:9B:FE:22:7D:B5 X509v3 Authority Key Identifier: keyid:95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:89:18:19:ed:7b:c2:dd:36:73:81:a0:79:fa:ce:05:23:06: 0d:d6:80:96:be:47:b8:b9:3e:72:33:b9:c7:ac:8f:f1:50:89: 50:fa:96:f3:58:6a:bc:4d:a6:f5:2f:0c:4c:16:3d:17:b5:28: 4d:89:d0:ea:07:c7:81:38:01:70:cd:39:fb:20:a4:5c:87:10: 0b:e9:90:cf:60:15:b9:15:d3:8e:c9:a2:55:bb:b4:ac:c8:0a: c1:21:1f:cd:80:41:a3:3b:98:6d:2f:57:51:83:7f:5d:8a:7e: 7c:5e:12:6f:da:c3:cc:75:a3:f6:a3:e3:14:19:2b:da:f6:f7: e6:63:36:39:8d:e4:18:0f:e5:6d:cc:ed:d2:09:2b:c0:77:ef: 22:49:a2:02:24:6f:04:80:10:73:bb:0f:7d:92:52:23:f8:3e: 62:a5:35:f1:3d:87:18:9a:eb:17:23:bd:37:c8:73:d6:c1:5a: 70:17:ec:f5:f4:28:19:49:f6:0b:06:b3:e4:8c:ee:de:8c:86: 6b:b0:fa:40:a8:62:f3:03:22:a9:c9:b2:c5:c9:78:2c:e3:c6: 74:97:df:55:c8:89:9f:37:7f:78:f4:a6:da:95:49:98:75:07: 38:09:a9:ee:e2:e9:b6:de:b2:f0:72:6b:4c:9a:20:0a:6e:a3: 3f:a5:61:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAkjm/7mHEy62TIPlKGbY8ouVLPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1 MjBGNkUyQTAeFw0yNjAzMjUxNTI1MDBaFw0yNjAzMjkwMTUxMDBaMDMxMTAvBgNV BAMTKDJBRDYyMjhDRDZCN0JGNDNBQUE2NTI4QzY0RDdBRjlCRkUyMjdEQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZty2UASZpOumnXAWwRw3BJ9ht fE7QRlrp8E9szTw35BvhJT2AooseRxYX9z2nP6Mu0m/Pe9caZXfzRIwxf0kVKe/g M12XThgDf4cefGzr3XY2urs5h9elZGOcMapnZLAlQ3hEmWzSko6ivzBBZ/HbQTjL 5Ej/fQsWXKxIurIOZ7QLNhD0/ZG8XBMQY9f7GDj+0/pv4Yk9nbEp7GvLclgmzNXm AemNOU1zcvyA7jrXCEpuN7E9teNvqRIaH54s0AE+ZjlOd/zSks/KrXJCTgwkSJCD 9x9YtPJTtAZdNaDLZrP5f9AI1PUUdYuNGMlIgGJCpejUXMUXd8dU7DRGzDhZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKtYijNa3v0OqplKMZNevm/4ifbUwHwYDVR0j BBgwFoAUlZZqjbJQMHz5hSSD+Wki7lIPbiowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmYxNDE3YS01NzE4LTQwNzEtOWYzNS1jMTIyNTU1ZGFjN2EvMC85NTk2NkE4REIy NTAzMDdDRjk4NTI0ODNGOTY5MjJFRTUyMEY2RTJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1MjBG NkUyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJmMTQxN2EtNTcxOC00MDcxLTlm MzUtYzEyMjU1NWRhYzdhLzAvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIy RUU1MjBGNkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+JGBnte8LdNnOBoHn6zgUjBg3WgJa+R7i5 PnIzucesj/FQiVD6lvNYarxNpvUvDEwWPRe1KE2J0OoHx4E4AXDNOfsgpFyHEAvp kM9gFbkV047JolW7tKzICsEhH82AQaM7mG0vV1GDf12KfnxeEm/aw8x1o/aj4xQZ K9r29+ZjNjmN5BgP5W3M7dIJK8B37yJJogIkbwSAEHO7D32SUiP4PmKlNfE9hxia 6xcjvTfIc9bBWnAX7PX0KBlJ9gsGs+SM7t6Mhmuw+kCoYvMDIqnJssXJeCzjxnSX 31XIiZ83f3j0ptqVSZh1BzgJqe7i6bbesvBya0yaIApuoz+lYXo= -----END CERTIFICATE-----Generated at Thu Mar 26 16:27:24 2026 by rpki-client