$ rpki-client -vvf rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft File: 951C84D9FEAF87E2196BBF71DC0326053CC04478.mft (raw, json) Hash identifier: WFU/zBD7gXdjgSTm0gryurQLP1XPiOegV6Eh6wACu1w= Subject key identifier: 8E:04:F1:9C:AB:EA:5F:45:97:6F:A7:EA:DE:9D:D9:FC:39:74:09:CD Authority key identifier: 95:1C:84:D9:FE:AF:87:E2:19:6B:BF:71:DC:03:26:05:3C:C0:44:78 Certificate issuer: /CN=951C84D9FEAF87E2196BBF71DC0326053CC04478 Certificate serial: 629E169C07FA1D7A82012180CCAD61C10FC36EEE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:22:09 +0000 Manifest this update: Tue 12 May 2026 06:17:09 +0000 Manifest next update: Wed 13 May 2026 07:51:09 +0000 Files and hashes: 1: 951C84D9FEAF87E2196BBF71DC0326053CC04478.crl (hash: IO3vQIQkIqOJ9TvZuI5fW4Ed/t+Rqk0kSkZcTyBRTVY=) 2: 3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa (hash: /2R+nfFCxhyBUh1PRuVIBZMYLiYNSMPmjUD3SxKwk4w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.crl rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:9e:16:9c:07:fa:1d:7a:82:01:21:80:cc:ad:61:c1:0f:c3:6e:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=951C84D9FEAF87E2196BBF71DC0326053CC04478 Validity Not Before: May 12 06:17:09 2026 GMT Not After : May 13 07:51:09 2026 GMT Subject: CN=8E04F19CABEA5F45976FA7EADE9DD9FC397409CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:11:8e:3c:0a:f2:f0:9e:ab:55:56:3f:0b:07: fa:6e:4e:ee:dd:90:e2:d7:8d:37:42:5d:f4:74:07: 5c:3b:20:1c:c4:5b:fc:9d:97:71:e5:96:b6:3c:d6: c6:51:61:82:5d:9f:26:ec:8c:26:90:f2:99:80:bb: 1c:30:c4:bf:bd:1f:38:26:aa:38:57:88:eb:a7:27: b7:0e:f6:98:9b:ca:df:e1:b8:ff:f1:f3:62:98:15: f7:54:50:4a:4c:21:45:ab:db:f3:e5:29:30:ba:ff: 9e:dc:d7:98:f0:e3:c8:14:81:6b:ba:e6:56:da:97: ce:f3:04:90:13:37:84:01:7b:1b:57:58:23:b7:81: 10:c8:64:ef:34:62:69:d4:27:87:29:ca:0c:30:ad: 5b:d1:ad:02:3b:ac:cd:9d:46:61:c7:be:65:e5:86: 24:b2:8b:f8:34:5e:fe:2e:65:cc:a4:0f:22:3a:76: 95:34:a4:f4:5c:93:d7:b4:64:fe:c6:42:71:ce:fe: a3:3c:a0:00:bf:4c:23:5c:62:7b:89:0b:5b:8b:99: 2e:c6:6b:ff:ef:d6:e4:a3:77:00:40:69:3b:5a:2c: 09:fa:35:00:a8:81:c5:07:cc:04:70:41:25:7f:bc: 49:66:57:37:c4:f0:95:98:74:03:03:82:bf:50:c5: 9a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:04:F1:9C:AB:EA:5F:45:97:6F:A7:EA:DE:9D:D9:FC:39:74:09:CD X509v3 Authority Key Identifier: keyid:95:1C:84:D9:FE:AF:87:E2:19:6B:BF:71:DC:03:26:05:3C:C0:44:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:6e:c5:34:55:e3:bf:fc:65:87:d3:21:82:dc:d5:8c:a1:b7: 12:b4:bd:cc:4a:34:ed:a6:d8:d0:a7:cf:69:af:d4:26:43:3d: 1b:2a:3a:9b:00:33:97:dd:f4:c9:63:ba:60:fc:5f:7c:0d:b0: 4a:2a:0e:d7:db:8d:88:96:a6:90:ff:1e:af:c9:e2:a3:03:a1: 8f:44:5c:11:15:eb:16:78:aa:77:89:e3:8b:1b:d5:0c:56:7e: 5f:21:29:50:3e:14:17:15:06:f3:28:94:ff:86:83:cb:6a:cb: 24:2d:5b:31:be:e4:92:e3:a2:aa:6c:50:7b:68:a6:82:cb:90: 73:76:00:ff:e4:2d:3f:91:73:e5:92:13:85:51:ef:d7:54:a4: 20:26:32:4e:9e:ff:71:ce:b4:80:59:ef:b1:f4:44:48:07:56: 70:b7:58:0b:fa:e6:7e:6e:0f:70:de:de:52:ed:78:47:b7:20: ec:a8:87:87:7c:b8:c5:22:93:f2:0b:76:16:49:ab:c9:4e:08: e7:c9:22:c6:18:ce:2a:b3:fd:03:ab:c2:ee:8f:5d:7f:a3:a0: 01:0d:d7:48:b7:1a:b9:97:c6:dd:89:48:15:c3:8e:1a:a1:4c: b2:90:61:d7:d7:0d:aa:31:eb:91:d7:c6:01:6f:97:51:e8:10: 32:71:5a:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYp4WnAf6HXqCASGAzK1hwQ/Dbu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUxQzg0RDlGRUFGODdFMjE5NkJCRjcxREMwMzI2MDUz Q0MwNDQ3ODAeFw0yNjA1MTIwNjE3MDlaFw0yNjA1MTMwNzUxMDlaMDMxMTAvBgNV BAMTKDhFMDRGMTlDQUJFQTVGNDU5NzZGQTdFQURFOUREOUZDMzk3NDA5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwEY48CvLwnqtVVj8LB/puTu7d kOLXjTdCXfR0B1w7IBzEW/ydl3HllrY81sZRYYJdnybsjCaQ8pmAuxwwxL+9Hzgm qjhXiOunJ7cO9pibyt/huP/x82KYFfdUUEpMIUWr2/PlKTC6/57c15jw48gUgWu6 5lbal87zBJATN4QBextXWCO3gRDIZO80YmnUJ4cpygwwrVvRrQI7rM2dRmHHvmXl hiSyi/g0Xv4uZcykDyI6dpU0pPRck9e0ZP7GQnHO/qM8oAC/TCNcYnuJC1uLmS7G a//v1uSjdwBAaTtaLAn6NQCogcUHzARwQSV/vElmVzfE8JWYdAMDgr9QxZqJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjgTxnKvqX0WXb6fq3p3Z/Dl0Cc0wHwYDVR0j BBgwFoAUlRyE2f6vh+IZa79x3AMmBTzARHgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FlZjc4NmItNjIyNi00NGFmLTg1MmQtMWZiMDQ1YzRkZWIzLzAvOTUxQzg0RDlG RUFGODdFMjE5NkJCRjcxREMwMzI2MDUzQ0MwNDQ3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTFDODREOUZFQUY4N0UyMTk2QkJGNzFEQzAzMjYwNTNDQzA0 NDc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FlZjc4NmItNjIyNi00NGFmLTg1 MmQtMWZiMDQ1YzRkZWIzLzAvOTUxQzg0RDlGRUFGODdFMjE5NkJCRjcxREMwMzI2 MDUzQ0MwNDQ3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVuxTRV47/8ZYfTIYLc1YyhtxK0vcxKNO2m 2NCnz2mv1CZDPRsqOpsAM5fd9MljumD8X3wNsEoqDtfbjYiWppD/Hq/J4qMDoY9E XBEV6xZ4qneJ44sb1QxWfl8hKVA+FBcVBvMolP+Gg8tqyyQtWzG+5JLjoqpsUHto poLLkHN2AP/kLT+Rc+WSE4VR79dUpCAmMk6e/3HOtIBZ77H0REgHVnC3WAv65n5u D3De3lLteEe3IOyoh4d8uMUik/ILdhZJq8lOCOfJIsYYziqz/QOrwu6PXX+joAEN 10i3GrmXxt2JSBXDjhqhTLKQYdfXDaox65HXxgFvl1HoEDJxWnU= -----END CERTIFICATE-----Generated at Tue May 12 22:47:08 2026 by rpki-client