$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft File: 95C2241DAF3580597A730032BDD8356019AA8598.mft (raw, json) Hash identifier: 8iT69bzPU8zkrVLy3TRTTgd0nH6sLMUicqZExfbxZSU= Subject key identifier: 23:77:CE:3D:E0:B4:52:BC:A9:13:57:84:01:7C:F6:7B:34:A8:77:EE Authority key identifier: 95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 Certificate issuer: /CN=95C2241DAF3580597A730032BDD8356019AA8598 Certificate serial: 4ABFB2A946A82AF7BD42A9E349788A76DFEE8125 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 12:15:07 +0000 Manifest this update: Thu 23 Jul 2026 12:10:07 +0000 Manifest next update: Fri 24 Jul 2026 14:55:07 +0000 Files and hashes: 1: 3130332e39362e35322e302f32332d3233203d3e20313534343130.roa (hash: 1ThuN5znJDyBHXMDEeUc73QYCJg2P4WsNNUGGs+3coA=) 2: 3130332e39362e35322e302f32342d3234203d3e20313534343130.roa (hash: DZZr3wFG43up9aE69tnG8Ls9OH8+Et1zoRrcXN9QSWM=) 3: 323030313a6466323a6634303a3a2f34382d3438203d3e20313530393232.roa (hash: zqwI6m4XrFv8eZM9FUpfWXpZ18MF12p+MPV+FGxatII=) 4: 95C2241DAF3580597A730032BDD8356019AA8598.crl (hash: WmUFfjoNfvZMj6XihZcdeuGvztCTPucM60p29Mn5g+o=) 5: 3130332e39362e35322e302f32332d3233203d3e20323135373237.roa (hash: Qx+7jCeA4ACEoLOWICApKLjJLJEDMdzGbyJBoCyvwDU=) 6: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (hash: dzNpcw838jqHTmD5WMvONS88+Ve5iK9R+so7TDu1v9o=) 7: 3130332e39362e35332e302f32342d3234203d3e20323135373237.roa (hash: 0wPUMAsuo5ZHSc/EbFWdWxfuAnUpnc2Dl/9rdO80RmQ=) 8: 3130332e39362e35332e302f32342d3234203d3e20313534343130.roa (hash: lhdzmYQ+4NDivJfAldib42nRBStQ7ZYmo6omhPmOepI=) 9: 3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (hash: HPli/3Qu6kod/7xjBSFbg6jtPr5ON8VO23CexUu2Djc=) 10: 3130332e39362e35322e302f32342d3234203d3e20323135373237.roa (hash: XQXfUBbOhxVs8/s2589fLuZ2gOOuek0QydHFHlibVLk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:bf:b2:a9:46:a8:2a:f7:bd:42:a9:e3:49:78:8a:76:df:ee:81:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C2241DAF3580597A730032BDD8356019AA8598 Validity Not Before: Jul 23 12:10:07 2026 GMT Not After : Jul 24 14:55:07 2026 GMT Subject: CN=2377CE3DE0B452BCA9135784017CF67B34A877EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:32:23:0a:1a:a0:3c:5d:09:fc:41:a8:65:48: 66:cf:32:ee:0f:8f:b6:97:7e:de:15:b4:85:45:13: 64:0c:e6:00:70:22:0e:4e:fb:c3:5d:46:d3:9f:f1: 94:fa:67:e0:cf:d4:ab:9a:d2:d4:d0:f9:c7:5d:c7: 63:ac:92:0d:d5:f7:50:c8:81:e3:f1:de:18:4d:93: 71:94:2c:20:99:4c:b5:a6:33:12:37:97:07:f4:e3: 76:9b:f2:f5:5c:cb:4f:67:25:cd:a8:f7:90:ce:69: 16:91:c3:d1:ae:ff:57:70:3a:d1:7f:61:2d:2f:9b: a3:f3:a5:dd:b6:7c:df:d2:f2:de:da:09:6b:82:77: fa:aa:9b:36:fc:3f:34:ff:cf:68:13:0d:b8:78:6b: d8:13:7c:c9:03:fc:26:6a:90:2e:02:88:01:1c:29: 31:43:cc:d3:7f:e2:f7:91:1b:d5:80:82:cd:96:a2: 2c:c2:91:80:e0:55:44:92:f0:71:0b:9b:8d:e2:1b: 5d:3e:49:1d:ce:cc:1e:59:e1:2d:b3:cc:f3:93:50: d2:ac:5a:b5:8e:4b:78:ae:99:31:c0:32:c9:46:8c: 2c:7e:4d:ea:c0:fc:2f:8f:f1:62:bf:4a:04:53:9e: 5c:ea:e9:3a:0b:89:2e:c6:9a:db:42:18:c4:f1:38: d1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:77:CE:3D:E0:B4:52:BC:A9:13:57:84:01:7C:F6:7B:34:A8:77:EE X509v3 Authority Key Identifier: keyid:95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:55:08:b6:b0:56:6f:95:7e:18:a0:2b:ca:5b:ec:83:38:4b: d0:e4:db:7c:4a:d6:97:37:52:65:a3:51:68:01:01:e6:73:10: db:5c:d1:94:4c:a9:ce:93:03:31:cf:1b:ab:19:c7:b8:2c:5d: 73:01:7b:62:8c:08:86:b3:67:a2:85:f8:61:d2:35:de:53:5d: 34:da:c4:b8:d2:5d:42:f4:69:1a:10:17:a8:85:d9:f8:5c:e5: 82:ca:5b:db:a8:4e:2c:34:48:8f:ac:dd:01:ac:ef:e0:0d:c3: 95:49:e7:b6:ef:f0:7e:1f:ec:78:03:c3:3f:90:fa:d9:85:c7: d9:64:7a:6b:9c:d0:49:76:fb:52:8e:df:1d:a4:1f:02:5b:57: 5f:bf:bd:21:39:5e:6a:60:82:1e:ae:a7:65:ec:bf:a7:75:1f: c5:b3:4d:67:5f:43:64:cf:c5:b2:2f:cf:dc:a3:ae:34:c8:4e: 54:ab:08:4b:8a:e1:8a:bd:b6:4c:5d:af:a3:48:da:1b:c8:b7: f4:21:66:4d:4d:34:9d:cf:5c:81:4f:b4:f3:f1:1a:34:81:9f: 39:ae:5a:e9:20:1e:90:19:e2:9a:0f:1d:0b:54:3e:d2:3c:a3: d3:41:7a:15:2b:c8:c6:e5:54:8d:ed:24:e1:cf:c7:21:84:4c: 63:4f:b5:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSr+yqUaoKve9QqnjSXiKdt/ugSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1NjAx OUFBODU5ODAeFw0yNjA3MjMxMjEwMDdaFw0yNjA3MjQxNDU1MDdaMDMxMTAvBgNV BAMTKDIzNzdDRTNERTBCNDUyQkNBOTEzNTc4NDAxN0NGNjdCMzRBODc3RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZMiMKGqA8XQn8QahlSGbPMu4P j7aXft4VtIVFE2QM5gBwIg5O+8NdRtOf8ZT6Z+DP1Kua0tTQ+cddx2Oskg3V91DI gePx3hhNk3GULCCZTLWmMxI3lwf043ab8vVcy09nJc2o95DOaRaRw9Gu/1dwOtF/ YS0vm6Pzpd22fN/S8t7aCWuCd/qqmzb8PzT/z2gTDbh4a9gTfMkD/CZqkC4CiAEc KTFDzNN/4veRG9WAgs2WoizCkYDgVUSS8HELm43iG10+SR3OzB5Z4S2zzPOTUNKs WrWOS3iumTHAMslGjCx+TerA/C+P8WK/SgRTnlzq6ToLiS7GmttCGMTxONHLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI3fOPeC0UrypE1eEAXz2ezSod+4wHwYDVR0j BBgwFoAUlcIkHa81gFl6cwAyvdg1YBmqhZgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ExYzRjMWYtNzE0MS00N2Q2LWE3ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURB RjM1ODA1OTdBNzMwMDMyQkREODM1NjAxOUFBODU5OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NUMyMjQxREFGMzU4MDU5N0E3MzAwMzJCREQ4MzU2MDE5QUE4 NTk4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ExYzRjMWYtNzE0MS00N2Q2LWE3 ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1 NjAxOUFBODU5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIpVCLawVm+VfhigK8pb7IM4S9Dk23xK1pc3 UmWjUWgBAeZzENtc0ZRMqc6TAzHPG6sZx7gsXXMBe2KMCIazZ6KF+GHSNd5TXTTa xLjSXUL0aRoQF6iF2fhc5YLKW9uoTiw0SI+s3QGs7+ANw5VJ57bv8H4f7HgDwz+Q +tmFx9lkemuc0El2+1KO3x2kHwJbV1+/vSE5Xmpggh6up2Xsv6d1H8WzTWdfQ2TP xbIvz9yjrjTITlSrCEuK4Yq9tkxdr6NI2hvIt/QhZk1NNJ3PXIFPtPPxGjSBnzmu WukgHpAZ4poPHQtUPtI8o9NBehUryMblVI3tJOHPxyGETGNPteA= -----END CERTIFICATE-----Generated at Fri Jul 24 03:06:57 2026 by rpki-client