$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft File: 951C84D9FEAF87E2196BBF71DC0326053CC04478.mft (raw, json) Hash identifier: EkGkeBitonBKtWoL0Rpr5aBQ7pk1JFDUO4peEo3SGzY= Subject key identifier: CD:BE:DB:D3:10:70:A3:7A:CF:4B:12:E1:26:AA:02:41:71:DC:38:E0 Authority key identifier: 95:1C:84:D9:FE:AF:87:E2:19:6B:BF:71:DC:03:26:05:3C:C0:44:78 Certificate issuer: /CN=951C84D9FEAF87E2196BBF71DC0326053CC04478 Certificate serial: 0A05E973AC810D29C13E92A5DF0CDCECEFEEE92E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 08:00:28 +0000 Manifest this update: Thu 24 Sep 2026 07:55:28 +0000 Manifest next update: Fri 25 Sep 2026 09:10:28 +0000 Files and hashes: 1: 951C84D9FEAF87E2196BBF71DC0326053CC04478.crl (hash: Ap7MyKOwISZXHWFUpJWLTJOMQ7sEcG6RZ4bnFq1UiAI=) 2: 3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa (hash: /2R+nfFCxhyBUh1PRuVIBZMYLiYNSMPmjUD3SxKwk4w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.crl rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:05:e9:73:ac:81:0d:29:c1:3e:92:a5:df:0c:dc:ec:ef:ee:e9:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=951C84D9FEAF87E2196BBF71DC0326053CC04478 Validity Not Before: Sep 24 07:55:28 2026 GMT Not After : Sep 25 09:10:28 2026 GMT Subject: CN=CDBEDBD31070A37ACF4B12E126AA024171DC38E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:44:ab:17:1e:50:bd:ac:fd:b0:47:fe:0f:9f: c5:c9:51:29:cf:98:f3:c6:2d:b9:11:3b:27:a4:2c: 7e:35:4e:ac:45:c8:2b:7a:c8:f1:45:de:34:eb:f0: 95:df:d6:5e:55:a8:57:57:c7:37:03:4d:a2:0c:d7: 92:f8:e4:e8:55:ff:b7:50:95:49:7a:23:23:1b:41: 78:21:8a:e5:71:55:0a:bc:ee:cc:e3:1e:d3:e5:bd: 0a:b5:cc:c3:96:ea:95:17:64:fe:21:ab:2c:1a:3f: d1:08:1d:bf:22:08:5f:4d:3c:a5:fd:46:9a:46:c1: 9c:87:1e:6c:ce:b8:67:b0:1a:c9:ce:3b:21:3f:1e: df:5a:4e:b0:4c:0e:69:9b:6b:af:0c:bf:66:f8:38: 04:c7:b8:7b:4b:82:b8:4c:95:0c:7d:8c:81:39:2c: 21:2c:1a:ee:d1:35:b3:43:06:96:15:f6:7f:dc:fe: 62:31:07:82:d7:6f:6b:75:c3:64:67:fd:a1:71:16: 74:67:33:ec:70:ad:ba:ca:ee:a1:2c:c5:52:73:93: a0:bc:32:03:b1:ee:21:a3:1e:d0:3e:46:10:08:b1: 29:7a:6c:f6:c5:0d:45:a0:6e:1c:af:cd:ce:18:d8: d1:14:da:a8:45:05:ca:54:3d:17:07:73:24:b7:48: 0b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BE:DB:D3:10:70:A3:7A:CF:4B:12:E1:26:AA:02:41:71:DC:38:E0 X509v3 Authority Key Identifier: keyid:95:1C:84:D9:FE:AF:87:E2:19:6B:BF:71:DC:03:26:05:3C:C0:44:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:81:5d:7f:6d:53:53:60:3f:72:c4:12:c5:72:c2:6e:c2:1c: 72:ed:2f:d7:55:bc:31:00:57:96:9c:0e:96:02:f9:8a:0f:f3: 15:e8:b1:6e:58:cd:99:9d:0c:5b:c0:61:22:26:ba:c8:9d:11: 85:8b:dc:a1:7f:75:14:58:7c:d4:6c:dc:58:62:97:57:49:e7: db:88:f9:81:47:ad:6c:cc:fd:ee:19:57:ca:bd:fd:f3:32:5e: 44:22:3b:58:cb:55:57:3e:32:53:58:7f:9b:f2:79:9d:59:0f: f2:05:98:b4:b0:d8:a7:30:52:9a:27:e6:d6:52:d8:4c:9a:d8: b0:18:a1:88:9b:60:ec:ca:fd:70:8d:8f:cd:13:7d:33:57:1c: a0:1a:33:67:8c:3e:a1:da:96:c3:5e:ee:19:50:cb:18:89:1b: 8d:c3:63:98:7c:52:c1:24:11:6d:02:74:4d:97:d4:c5:11:24: 8f:ac:d4:1f:0b:ac:92:d3:f6:e9:07:b4:8d:36:b1:27:c8:f7: cf:b5:e1:c0:c6:f4:8a:b8:85:e2:be:09:28:98:e8:26:ba:f1: 10:31:c6:df:ec:0b:85:53:15:73:94:ef:08:4a:73:28:e4:1b: 5e:d1:c7:1c:af:9e:b7:89:e0:bd:39:3d:14:d3:64:47:99:7f: 95:64:4a:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCgXpc6yBDSnBPpKl3wzc7O/u6S4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUxQzg0RDlGRUFGODdFMjE5NkJCRjcxREMwMzI2MDUz Q0MwNDQ3ODAeFw0yNjA5MjQwNzU1MjhaFw0yNjA5MjUwOTEwMjhaMDMxMTAvBgNV BAMTKENEQkVEQkQzMTA3MEEzN0FDRjRCMTJFMTI2QUEwMjQxNzFEQzM4RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtRKsXHlC9rP2wR/4Pn8XJUSnP mPPGLbkROyekLH41TqxFyCt6yPFF3jTr8JXf1l5VqFdXxzcDTaIM15L45OhV/7dQ lUl6IyMbQXghiuVxVQq87szjHtPlvQq1zMOW6pUXZP4hqywaP9EIHb8iCF9NPKX9 RppGwZyHHmzOuGewGsnOOyE/Ht9aTrBMDmmba68Mv2b4OATHuHtLgrhMlQx9jIE5 LCEsGu7RNbNDBpYV9n/c/mIxB4LXb2t1w2Rn/aFxFnRnM+xwrbrK7qEsxVJzk6C8 MgOx7iGjHtA+RhAIsSl6bPbFDUWgbhyvzc4Y2NEU2qhFBcpUPRcHcyS3SAtfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzb7b0xBwo3rPSxLhJqoCQXHcOOAwHwYDVR0j BBgwFoAUlRyE2f6vh+IZa79x3AMmBTzARHgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FlZjc4NmItNjIyNi00NGFmLTg1MmQtMWZiMDQ1YzRkZWIzLzAvOTUxQzg0RDlG RUFGODdFMjE5NkJCRjcxREMwMzI2MDUzQ0MwNDQ3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTFDODREOUZFQUY4N0UyMTk2QkJGNzFEQzAzMjYwNTNDQzA0 NDc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FlZjc4NmItNjIyNi00NGFmLTg1 MmQtMWZiMDQ1YzRkZWIzLzAvOTUxQzg0RDlGRUFGODdFMjE5NkJCRjcxREMwMzI2 MDUzQ0MwNDQ3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqBXX9tU1NgP3LEEsVywm7CHHLtL9dVvDEA V5acDpYC+YoP8xXosW5YzZmdDFvAYSImusidEYWL3KF/dRRYfNRs3Fhil1dJ59uI +YFHrWzM/e4ZV8q9/fMyXkQiO1jLVVc+MlNYf5vyeZ1ZD/IFmLSw2KcwUpon5tZS 2Eya2LAYoYibYOzK/XCNj80TfTNXHKAaM2eMPqHalsNe7hlQyxiJG43DY5h8UsEk EW0CdE2X1MURJI+s1B8LrJLT9ukHtI02sSfI98+14cDG9Iq4heK+CSiY6Ca68RAx xt/sC4VTFXOU7whKcyjkG17RxxyvnreJ4L05PRTTZEeZf5VkSs0= -----END CERTIFICATE-----Generated at Fri Sep 25 01:48:23 2026 by rpki-client