$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft File: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft (raw, json) Hash identifier: KCq5sNQ/+bZzLhO4fjP6lQLaZNii0DAgPpFqDMYlsDI= Subject key identifier: CD:53:93:3D:53:95:E5:A8:04:97:77:6B:65:BE:BB:E9:9F:E8:FB:96 Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D Certificate issuer: /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Certificate serial: 349C044910CDAD0CC0F6FEB4EEC6FDAB91B5FC2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft Manifest number: 055C Signing time: Tue 24 Mar 2026 11:51:57 +0000 Manifest this update: Tue 24 Mar 2026 11:46:57 +0000 Manifest next update: Fri 27 Mar 2026 16:13:57 +0000 Files and hashes: 1: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: z8oVsj820WikG58Kg7XuHuFP7zjS3wrrsGJ5kGPWB6k=) 2: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl (hash: Qr9rJ0OIMknFowT0Q4ahzGsqvon+ZCuQmjGcAnpFRZk=) 3: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: fYXLcgnYZQvFF+Sx+nAnnoQPnhu4qBL7MV7MXCijhoM=) 4: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: MowxodGXifPkFbwcnbxmYI86u52XQ+RqEsK4tBHU6Kc=) 5: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: 6u0QjcaXuZCe/xDwNoPsOwMyKh9MBkPufQ0B3cPlReE=) 6: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: pnePfPpninK+12GFjtU9XZZuD9qIupgPZ4/SoFot86c=) 7: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: JYyU73FxSsbah75XLPK5+70mS+1BuWT1qs954OCbSn8=) 8: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: tJ7W+A0ln7oQ2TKBeYCrxZXeI+2+Ch9yjit0aZIq8qs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 16:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:9c:04:49:10:cd:ad:0c:c0:f6:fe:b4:ee:c6:fd:ab:91:b5:fc:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Validity Not Before: Mar 24 11:46:57 2026 GMT Not After : Mar 27 16:13:57 2026 GMT Subject: CN=CD53933D5395E5A80497776B65BEBBE99FE8FB96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:56:d4:68:60:f1:3b:38:4c:fd:92:7a:4a:32: 0f:c6:aa:31:9c:08:a0:24:32:65:07:9d:fb:b0:49: 0d:8e:d0:e0:c6:81:ea:ae:80:28:b0:e1:9c:b8:0d: af:7c:d1:6a:2a:f9:a9:cc:e9:8a:ef:93:b2:53:8d: 7b:c5:34:48:63:24:87:cb:04:d4:09:dc:c3:ed:5b: 9d:48:d9:18:6a:84:c0:7c:ad:01:04:34:5d:2c:53: 6b:db:69:a3:df:14:d3:54:9c:76:df:8d:ba:e2:9b: 37:38:3e:24:56:4d:68:1c:27:5e:03:8e:87:b1:9a: 10:6a:99:09:92:d2:df:06:d6:2c:be:a7:8b:22:1d: d2:ac:2f:48:da:c6:25:15:0e:7a:42:68:4b:1c:1c: 58:48:8c:e6:88:75:b7:ab:5f:c2:07:0c:5e:8b:a6: 64:45:30:1e:c3:bb:d6:ab:02:b2:ce:e4:ac:f7:bc: 7a:85:e5:d2:60:1e:d5:2d:4f:bb:84:81:53:99:14: 75:33:a6:da:3a:44:f6:31:5b:3f:6c:69:10:86:ab: 70:fb:c2:8f:e5:11:9f:9f:d4:a1:49:05:63:6f:ec: 02:a7:ce:90:86:58:83:92:58:b9:7f:1e:8d:3c:4d: 98:64:37:2f:2f:fb:5e:48:60:a1:6b:bd:d6:88:95: 43:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:53:93:3D:53:95:E5:A8:04:97:77:6B:65:BE:BB:E9:9F:E8:FB:96 X509v3 Authority Key Identifier: keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9a:19:18:71:fe:61:67:15:ac:5a:da:ee:20:ef:81:1e:2f: 43:8c:59:d0:83:d6:94:b4:b5:30:c7:3c:08:bc:37:d0:56:57: b7:ac:29:69:0c:41:f8:f1:f1:16:9f:ae:a5:2e:24:7b:61:b2: be:9f:43:f1:a7:0b:8a:85:04:23:91:20:92:17:98:fa:90:9d: f7:8a:42:8b:eb:53:4c:a0:84:d2:e0:68:df:cc:5e:e3:7d:47: 06:5b:e5:ee:10:f4:ee:7a:4e:89:b5:a5:b3:e7:25:c3:cb:ca: 03:d1:82:61:8d:65:32:4b:16:24:38:9f:e4:a5:fe:19:e6:70: a7:9c:17:d7:58:19:7d:f3:45:7a:64:9f:f2:72:c8:50:8f:bb: ac:87:fd:56:21:37:95:ee:3b:8f:d7:88:07:49:cd:ef:11:f2: c9:09:cb:10:52:e6:bd:58:7c:83:02:e9:df:83:5a:57:c0:28: 78:16:91:ad:dc:0d:0d:d8:ff:c4:1f:93:7e:06:4e:b2:be:74: f7:e6:2e:48:c1:f4:ae:08:96:1d:e1:40:9c:54:28:e2:ca:c6: 82:3a:73:56:a2:bf:a7:e2:97:8c:10:0d:6f:67:f4:82:92:5a: ef:df:ff:f5:13:ca:f5:33:70:3d:57:ca:e9:d8:17:48:bc:e8: 6c:56:94:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNJwESRDNrQzA9v607sb9q5G1/C8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVF NzRFMkE2RDAeFw0yNjAzMjQxMTQ2NTdaFw0yNjAzMjcxNjEzNTdaMDMxMTAvBgNV BAMTKENENTM5MzNENTM5NUU1QTgwNDk3Nzc2QjY1QkVCQkU5OUZFOEZCOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/VtRoYPE7OEz9knpKMg/GqjGc CKAkMmUHnfuwSQ2O0ODGgequgCiw4Zy4Da980Woq+anM6Yrvk7JTjXvFNEhjJIfL BNQJ3MPtW51I2RhqhMB8rQEENF0sU2vbaaPfFNNUnHbfjbrimzc4PiRWTWgcJ14D joexmhBqmQmS0t8G1iy+p4siHdKsL0jaxiUVDnpCaEscHFhIjOaIdberX8IHDF6L pmRFMB7Du9arArLO5Kz3vHqF5dJgHtUtT7uEgVOZFHUzpto6RPYxWz9saRCGq3D7 wo/lEZ+f1KFJBWNv7AKnzpCGWIOSWLl/Ho08TZhkNy8v+15IYKFrvdaIlUO7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzVOTPVOV5agEl3drZb676Z/o+5YwHwYDVR0j BBgwFoAUlegA6/9kcJiSy1dB2e3HXudOKm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmI1YWUxZS1iZTY2LTRhMzAtYTk0OC03ZDQ3OGMyMmVhMmIvMC85NUU4MDBFQkZG NjQ3MDk4OTJDQjU3NDFEOUVEQzc1RUU3NEUyQTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVFNzRF MkE2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZiNWFlMWUtYmU2Ni00YTMwLWE5 NDgtN2Q0NzhjMjJlYTJiLzAvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3 NUVFNzRFMkE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqaGRhx/mFnFaxa2u4g74EeL0OMWdCD1pS0 tTDHPAi8N9BWV7esKWkMQfjx8RafrqUuJHthsr6fQ/GnC4qFBCORIJIXmPqQnfeK QovrU0yghNLgaN/MXuN9RwZb5e4Q9O56Tom1pbPnJcPLygPRgmGNZTJLFiQ4n+Sl /hnmcKecF9dYGX3zRXpkn/JyyFCPu6yH/VYhN5XuO4/XiAdJze8R8skJyxBS5r1Y fIMC6d+DWlfAKHgWka3cDQ3Y/8Qfk34GTrK+dPfmLkjB9K4Ilh3hQJxUKOLKxoI6 c1aiv6fil4wQDW9n9IKSWu/f//UTyvUzcD1XyunYF0i86GxWlII= -----END CERTIFICATE-----Generated at Thu Mar 26 07:25:16 2026 by rpki-client