$ rpki-client -vvvf rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft File: F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft (raw, json) Hash identifier: rlPB3K3KxSF786GK5ATxqMjKAv+Wgn5xaMs+DoHrZKA= Subject key identifier: D3:99:49:BB:F3:6F:47:DA:4C:D0:80:CE:60:7E:66:7D:E5:BB:A0:06 Authority key identifier: F9:51:81:B9:50:98:15:9C:25:87:D2:AE:64:AA:15:EC:F6:F7:BA:45 Certificate issuer: /CN=F95181B95098159C2587D2AE64AA15ECF6F7BA45 Certificate serial: 42CB3CD8084176658B842892D2FDE27D0B161A8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F95181B95098159C2587D2AE64AA15ECF6F7BA45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 12:10:50 +0000 Manifest this update: Thu 24 Sep 2026 12:05:50 +0000 Manifest next update: Fri 25 Sep 2026 14:58:50 +0000 Files and hashes: 1: F95181B95098159C2587D2AE64AA15ECF6F7BA45.crl (hash: u5+ciq9D/YYCvy1dLajlSA3M9JM4/Fd4Bv3WDbqxnEY=) 2: 3130332e3230332e3233322e302f32342d3234203d3e20313531363030.roa (hash: IGQZppCH5Ww/fn6QSsHdhxefkfkyI2QhhtmZkcnBVVk=) 3: 3130332e3230332e3233322e302f32332d3233203d3e20313531363030.roa (hash: QrZG0rd0H2oMRYUrnP7wml3+LX+uV/9SDTxjs0PrJoU=) 4: 323030313a6466333a643663303a3a2f34382d3438203d3e20313531363030.roa (hash: pgEEArXd9XP8zXa/DdMQKaPdRhF2qiIImHSr7qGevFs=) 5: 3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa (hash: z7iqZjlXVRMDIQEXZKf98grHsnfTgjJWLqwQCjq3co8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.crl rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F95181B95098159C2587D2AE64AA15ECF6F7BA45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:cb:3c:d8:08:41:76:65:8b:84:28:92:d2:fd:e2:7d:0b:16:1a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F95181B95098159C2587D2AE64AA15ECF6F7BA45 Validity Not Before: Sep 24 12:05:50 2026 GMT Not After : Sep 25 14:58:50 2026 GMT Subject: CN=D39949BBF36F47DA4CD080CE607E667DE5BBA006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a9:58:c8:7d:65:b0:20:2d:82:c2:cc:5f:3f: 6f:e6:7e:13:9f:46:fa:b5:a7:12:57:78:da:58:84: ae:aa:5f:c6:d1:f1:a7:79:b0:ec:22:7a:10:6d:c4: 0a:8d:54:f9:56:b7:08:d2:31:c8:f5:f5:b1:7c:29: 63:43:18:d5:dc:05:e9:a7:ad:f3:20:22:2b:48:1b: 7b:12:7b:91:f2:0f:e2:43:10:cf:94:d9:ae:cb:d4: bb:68:10:3f:b7:53:f6:4e:71:a4:59:12:00:a1:fb: 20:61:af:cf:1e:17:14:0f:de:b5:e7:2e:ea:c3:03: 20:1d:2e:ce:f4:11:e8:27:6e:ee:9f:4f:66:f6:7a: ce:8f:b2:1d:34:e9:00:10:f2:7c:46:cb:02:f1:12: de:93:ad:02:a2:71:25:00:1f:07:c2:b2:8f:49:81: 6a:42:cc:44:31:2e:b2:30:60:5d:73:62:78:f7:a6: 95:47:4e:d5:a1:3d:b3:c3:95:d3:ef:6f:2a:11:20: fd:57:cc:6f:3a:97:0a:0b:2f:0d:29:d3:2f:10:c1: 75:27:a4:97:78:63:b6:89:f9:fd:c3:2c:d7:f9:6a: 85:75:ce:8a:bd:e9:c7:24:a0:57:e1:3c:77:05:37: f2:86:44:3d:72:b3:bc:fd:8d:bd:27:51:e5:c5:f6: 86:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:99:49:BB:F3:6F:47:DA:4C:D0:80:CE:60:7E:66:7D:E5:BB:A0:06 X509v3 Authority Key Identifier: keyid:F9:51:81:B9:50:98:15:9C:25:87:D2:AE:64:AA:15:EC:F6:F7:BA:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F95181B95098159C2587D2AE64AA15ECF6F7BA45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:6e:16:57:c1:fc:a1:25:6b:0d:79:ff:b4:24:9b:8b:89:10: a8:97:af:a7:3b:40:ae:bc:fa:70:00:14:a1:31:c4:33:70:55: 54:56:2a:83:b7:05:c4:2e:6a:21:fc:8c:15:a1:a6:19:2f:dc: 09:25:f0:9e:04:ca:4f:67:c8:68:1f:fb:13:55:e0:70:04:0d: 4a:ac:c5:67:8e:2c:1c:61:e9:a1:46:a5:63:99:ae:22:34:01: d5:11:34:70:d4:8f:ed:0d:a1:8a:69:f3:84:be:d1:a4:10:8e: 06:75:80:c0:47:e5:f8:85:e3:06:56:b1:8d:f5:20:2b:60:9b: 1b:d3:b7:1b:e3:e0:79:a0:85:49:92:d4:ab:89:4c:35:5b:44: 62:78:37:02:80:7d:65:8e:9f:d8:fa:4a:70:06:1b:f9:42:8c: 12:0d:73:7a:38:e1:69:ba:3e:08:93:f2:01:3c:0a:30:e5:54: d0:db:dc:71:20:f6:31:08:65:90:11:c6:6b:45:d6:64:ad:cc: e2:76:77:58:55:62:20:9d:22:db:db:73:e2:e0:4c:24:1e:24: 70:b7:9b:93:a5:b9:a5:6b:2d:84:00:7f:e5:63:90:92:b0:1e: 5e:65:26:bc:bf:2b:61:d3:30:6f:59:88:39:d9:8b:d1:69:80: 94:89:e1:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQss82AhBdmWLhCiS0v3ifQsWGoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1MTgxQjk1MDk4MTU5QzI1ODdEMkFFNjRBQTE1RUNG NkY3QkE0NTAeFw0yNjA5MjQxMjA1NTBaFw0yNjA5MjUxNDU4NTBaMDMxMTAvBgNV BAMTKEQzOTk0OUJCRjM2RjQ3REE0Q0QwODBDRTYwN0U2NjdERTVCQkEwMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKqVjIfWWwIC2CwsxfP2/mfhOf Rvq1pxJXeNpYhK6qX8bR8ad5sOwiehBtxAqNVPlWtwjSMcj19bF8KWNDGNXcBemn rfMgIitIG3sSe5HyD+JDEM+U2a7L1LtoED+3U/ZOcaRZEgCh+yBhr88eFxQP3rXn LurDAyAdLs70Eegnbu6fT2b2es6Psh006QAQ8nxGywLxEt6TrQKicSUAHwfCso9J gWpCzEQxLrIwYF1zYnj3ppVHTtWhPbPDldPvbyoRIP1XzG86lwoLLw0p0y8QwXUn pJd4Y7aJ+f3DLNf5aoV1zoq96cckoFfhPHcFN/KGRD1ys7z9jb0nUeXF9obrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU05lJu/NvR9pM0IDOYH5mfeW7oAYwHwYDVR0j BBgwFoAU+VGBuVCYFZwlh9KuZKoV7Pb3ukUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTc2NjA3ZWEtYWRkNy00Y2E1LThmMmQtZGE4Yjc5MWEzYjQyLzAvRjk1MTgxQjk1 MDk4MTU5QzI1ODdEMkFFNjRBQTE1RUNGNkY3QkE0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOTUxODFCOTUwOTgxNTlDMjU4N0QyQUU2NEFBMTVFQ0Y2RjdC QTQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTc2NjA3ZWEtYWRkNy00Y2E1LThm MmQtZGE4Yjc5MWEzYjQyLzAvRjk1MTgxQjk1MDk4MTU5QzI1ODdEMkFFNjRBQTE1 RUNGNkY3QkE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJuFlfB/KElaw15/7Qkm4uJEKiXr6c7QK68 +nAAFKExxDNwVVRWKoO3BcQuaiH8jBWhphkv3Akl8J4Eyk9nyGgf+xNV4HAEDUqs xWeOLBxh6aFGpWOZriI0AdURNHDUj+0NoYpp84S+0aQQjgZ1gMBH5fiF4wZWsY31 ICtgmxvTtxvj4HmghUmS1KuJTDVbRGJ4NwKAfWWOn9j6SnAGG/lCjBINc3o44Wm6 PgiT8gE8CjDlVNDb3HEg9jEIZZARxmtF1mStzOJ2d1hVYiCdItvbc+LgTCQeJHC3 m5OluaVrLYQAf+VjkJKwHl5lJry/K2HTMG9ZiDnZi9FpgJSJ4bE= -----END CERTIFICATE-----Generated at Thu Sep 24 15:24:54 2026 by rpki-client