$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft File: 95C2241DAF3580597A730032BDD8356019AA8598.mft (raw, json) Hash identifier: M9xLO4zP9HbgyD3AFZ+SHmOTjct2OnUhEJaf//UUBGs= Subject key identifier: 92:D8:4C:7E:87:25:61:38:2F:D8:C8:48:6E:05:8F:DC:04:69:C8:CF Authority key identifier: 95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 Certificate issuer: /CN=95C2241DAF3580597A730032BDD8356019AA8598 Certificate serial: 12A0C778ECC2A2FD60F363F88C9D2E6F6701B1D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 07:55:26 +0000 Manifest this update: Thu 24 Sep 2026 07:50:26 +0000 Manifest next update: Fri 25 Sep 2026 11:04:26 +0000 Files and hashes: 1: 95C2241DAF3580597A730032BDD8356019AA8598.crl (hash: jsHL3nqTe0EBaBNu4Kl+ZLXq7FsEMlFk2rah+fyriL0=) 2: 3130332e39362e35322e302f32342d3234203d3e20313534343130.roa (hash: DZZr3wFG43up9aE69tnG8Ls9OH8+Et1zoRrcXN9QSWM=) 3: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (hash: dzNpcw838jqHTmD5WMvONS88+Ve5iK9R+so7TDu1v9o=) 4: 3130332e39362e35332e302f32342d3234203d3e20323135373237.roa (hash: 0wPUMAsuo5ZHSc/EbFWdWxfuAnUpnc2Dl/9rdO80RmQ=) 5: 323030313a6466323a6634303a3a2f34382d3438203d3e20313530393232.roa (hash: zqwI6m4XrFv8eZM9FUpfWXpZ18MF12p+MPV+FGxatII=) 6: 3130332e39362e35322e302f32342d3234203d3e20323135373237.roa (hash: XQXfUBbOhxVs8/s2589fLuZ2gOOuek0QydHFHlibVLk=) 7: 3130332e39362e35332e302f32342d3234203d3e20313534343130.roa (hash: lhdzmYQ+4NDivJfAldib42nRBStQ7ZYmo6omhPmOepI=) 8: 3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (hash: HPli/3Qu6kod/7xjBSFbg6jtPr5ON8VO23CexUu2Djc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a0:c7:78:ec:c2:a2:fd:60:f3:63:f8:8c:9d:2e:6f:67:01:b1:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C2241DAF3580597A730032BDD8356019AA8598 Validity Not Before: Sep 24 07:50:26 2026 GMT Not After : Sep 25 11:04:26 2026 GMT Subject: CN=92D84C7E872561382FD8C8486E058FDC0469C8CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e7:bb:51:45:c4:57:30:2b:27:c8:d8:fe:db: b0:15:df:a7:c7:bc:67:9e:1a:01:6f:82:85:b8:2b: ce:1f:d4:23:cc:1e:4b:12:5c:83:f9:b6:19:a7:ae: ed:88:db:fb:01:66:78:28:33:8c:2f:08:a4:89:fc: 9f:db:47:f4:fb:8b:fb:4f:c6:4a:d9:d4:59:80:a6: aa:8c:15:c2:5f:2c:73:a6:8a:77:01:ad:50:77:9b: d3:0e:ce:bd:4c:13:ef:c2:a0:ae:e1:f3:7d:90:dc: ee:39:ae:69:71:82:39:97:20:02:05:86:c1:92:7e: 16:a5:0f:71:4e:42:21:39:14:6d:ad:f0:66:7b:6d: d9:12:ea:cb:19:a2:4c:a7:c7:19:05:2a:b9:35:e6: 07:1e:a4:e8:1b:a2:9d:2b:0c:6e:ea:e8:8f:75:6d: 59:59:7a:a1:7e:5b:29:70:ca:99:f6:2f:36:00:f8: 57:a2:16:ec:73:51:7e:6a:6c:64:98:4d:d1:03:8d: dd:9e:c8:24:2a:27:f3:f2:2f:36:f7:f4:a9:d4:29: dd:33:c3:57:3c:a4:26:c3:0f:fa:51:86:30:29:88: e1:1e:c6:36:75:6c:6d:cc:d4:8e:f3:03:4e:06:53: be:95:a3:39:28:bf:84:08:e7:32:c1:d3:c0:f0:b4: 8c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D8:4C:7E:87:25:61:38:2F:D8:C8:48:6E:05:8F:DC:04:69:C8:CF X509v3 Authority Key Identifier: keyid:95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:9f:d6:93:22:f6:fa:1c:a4:f3:cf:66:39:8e:0e:d5:bf:80: 7e:bf:1d:28:07:f8:dc:fd:4b:3b:d8:b9:bb:ab:65:3c:85:ea: 79:45:01:e1:d8:ce:00:bd:6d:c7:82:ab:c7:95:87:dc:08:1c: 35:c4:fd:97:dc:26:8a:04:f9:66:2f:a6:5c:74:7c:df:7b:66: 13:c5:19:4c:3e:fb:bc:d6:76:f2:37:64:4b:bc:41:d7:48:2d: cb:ac:e7:48:be:a0:62:1a:0e:dd:1b:6f:ef:65:cc:22:ab:1a: 45:ee:39:fb:d8:1a:9c:6b:eb:ae:45:d1:cd:de:84:74:1f:83: b0:52:1c:f3:40:74:d6:9a:0b:8e:65:23:82:6e:f7:01:c2:3b: 91:f1:c8:e2:dc:c9:a8:d1:38:f7:5b:aa:7e:3d:98:83:d8:71: f3:75:c2:16:4f:00:45:27:e0:86:b0:0d:08:3d:c4:fe:df:9a: 0b:1c:2e:80:58:bd:d9:1a:23:7d:9e:2d:38:b3:b0:b9:9d:14: 8a:c8:c9:40:b2:8a:0b:45:3f:25:f5:f0:1e:3d:74:98:56:b1: 40:2a:fd:35:5b:96:f2:7b:78:68:6f:be:8c:48:f9:d7:c7:f1: fa:71:6d:c9:20:42:47:e2:a1:6f:fd:19:a3:8b:e2:e6:b7:59: aa:8e:ae:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEqDHeOzCov1g82P4jJ0ub2cBsdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1NjAx OUFBODU5ODAeFw0yNjA5MjQwNzUwMjZaFw0yNjA5MjUxMTA0MjZaMDMxMTAvBgNV BAMTKDkyRDg0QzdFODcyNTYxMzgyRkQ4Qzg0ODZFMDU4RkRDMDQ2OUM4Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi57tRRcRXMCsnyNj+27AV36fH vGeeGgFvgoW4K84f1CPMHksSXIP5thmnru2I2/sBZngoM4wvCKSJ/J/bR/T7i/tP xkrZ1FmApqqMFcJfLHOmincBrVB3m9MOzr1ME+/CoK7h832Q3O45rmlxgjmXIAIF hsGSfhalD3FOQiE5FG2t8GZ7bdkS6ssZokynxxkFKrk15gcepOgbop0rDG7q6I91 bVlZeqF+Wylwypn2LzYA+FeiFuxzUX5qbGSYTdEDjd2eyCQqJ/PyLzb39KnUKd0z w1c8pCbDD/pRhjApiOEexjZ1bG3M1I7zA04GU76Vozkov4QI5zLB08DwtIz9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkthMfoclYTgv2MhIbgWP3ARpyM8wHwYDVR0j BBgwFoAUlcIkHa81gFl6cwAyvdg1YBmqhZgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ExYzRjMWYtNzE0MS00N2Q2LWE3ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURB RjM1ODA1OTdBNzMwMDMyQkREODM1NjAxOUFBODU5OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NUMyMjQxREFGMzU4MDU5N0E3MzAwMzJCREQ4MzU2MDE5QUE4 NTk4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ExYzRjMWYtNzE0MS00N2Q2LWE3 ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1 NjAxOUFBODU5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCf1pMi9vocpPPPZjmODtW/gH6/HSgH+Nz9 SzvYuburZTyF6nlFAeHYzgC9bceCq8eVh9wIHDXE/ZfcJooE+WYvplx0fN97ZhPF GUw++7zWdvI3ZEu8QddILcus50i+oGIaDt0bb+9lzCKrGkXuOfvYGpxr665F0c3e hHQfg7BSHPNAdNaaC45lI4Ju9wHCO5HxyOLcyajROPdbqn49mIPYcfN1whZPAEUn 4IawDQg9xP7fmgscLoBYvdkaI32eLTizsLmdFIrIyUCyigtFPyX18B49dJhWsUAq /TVblvJ7eGhvvoxI+dfH8fpxbckgQkfioW/9GaOL4ua3WaqOrnk= -----END CERTIFICATE-----Generated at Fri Sep 25 01:17:11 2026 by rpki-client