$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft File: 950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft (raw, json) Hash identifier: fS1ymKbao15mMvPp9FQGL/ljkKyKzhoMNN6IKFVdqAY= Subject key identifier: 1D:F3:C2:D3:5F:DE:5E:D9:BD:BF:3D:96:C6:FA:E4:5A:8D:7E:A8:83 Authority key identifier: 95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51 Certificate issuer: /CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751 Certificate serial: 06FF9B937ECCEEF001330E05190846134CF05BB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft Manifest number: BF Signing time: Wed 23 Sep 2026 22:49:18 +0000 Manifest this update: Wed 23 Sep 2026 22:44:18 +0000 Manifest next update: Thu 24 Sep 2026 23:58:18 +0000 Files and hashes: 1: 3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa (hash: 2Og4FIysb2wd35eqOCjNVfXf+ZPGg3kEvtQOXJnk+xE=) 2: 950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl (hash: TJFrhLRVkauo1MZRjkZ7vVeweh5//E7vZ8DY4ESL3Po=) 3: 3130332e3136322e3233382e302f32342d3234203d3e20313431363639.roa (hash: viFyM1HFUzcMqtq2FKm6xB7dBBL2CbC6fte+ULEjCo4=) 4: 3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa (hash: Ko0biNHo/OilJd2E0SwGMCh23IyoKfHyT2KDez8VfH4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ff:9b:93:7e:cc:ee:f0:01:33:0e:05:19:08:46:13:4c:f0:5b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751 Validity Not Before: Sep 23 22:44:18 2026 GMT Not After : Sep 24 23:58:18 2026 GMT Subject: CN=1DF3C2D35FDE5ED9BDBF3D96C6FAE45A8D7EA883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f8:ce:75:a0:9d:e0:da:8c:ef:e2:b2:e6:4a: c6:66:66:b2:6d:cf:a2:a2:75:58:03:a2:cd:aa:84: 84:c9:03:76:33:21:98:43:e3:5f:df:fc:72:49:e3: 11:72:d4:b2:b6:26:a8:43:db:9c:17:64:a8:90:4c: c2:20:a4:21:49:ca:78:ad:04:fc:bd:93:8d:82:8b: 60:04:5b:ea:d4:80:7a:6a:63:7b:48:e1:61:6e:13: f2:56:31:c5:a9:15:24:15:04:d9:55:d6:07:c6:65: d9:ec:3c:4f:b6:d8:36:69:e7:3d:36:1a:2a:a1:8d: d5:e9:89:17:5f:fb:86:95:c0:b8:d3:1f:95:78:5c: 25:12:8f:2d:c6:2b:9d:fc:c2:46:3a:b2:12:82:5a: 70:dc:de:dc:b3:87:06:29:b4:b9:8d:e7:a1:cb:31: 9a:32:1f:46:a0:63:81:c4:1e:63:f7:97:69:22:63: ce:b1:35:ec:80:cd:54:95:4e:70:63:a5:fe:0a:67: 2a:b0:21:12:10:17:fa:66:48:1d:56:e2:cb:dd:b8: 6e:d7:c0:4d:35:e1:96:e0:e4:68:48:e1:83:61:2e: c3:fe:89:66:e7:33:b6:09:0c:ca:58:dc:85:65:d8: 5d:36:a0:8a:95:38:52:7c:a0:6b:28:13:b6:52:41: b5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F3:C2:D3:5F:DE:5E:D9:BD:BF:3D:96:C6:FA:E4:5A:8D:7E:A8:83 X509v3 Authority Key Identifier: keyid:95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:58:f9:2e:4b:17:f2:60:82:f5:15:5a:85:94:5a:c8:bf:42: 1f:db:67:5c:1b:be:df:21:41:60:84:bc:89:44:d1:14:9e:d5: 0f:bb:8d:95:ee:05:34:cb:96:54:12:89:8d:36:9c:3c:da:06: 1c:05:4d:02:75:40:e3:34:ea:38:f5:67:d5:8c:05:e3:57:86: fd:0c:fe:1f:31:8c:74:62:92:74:95:55:ca:b7:00:3e:57:89: 9f:c0:6c:19:88:c6:96:3a:9e:57:3a:d3:ec:0d:d7:ca:74:4e: f1:5f:9b:21:3a:6e:25:40:6d:62:28:84:d2:d5:3b:cb:84:4a: 5f:03:71:8c:df:35:cd:1a:14:7a:6e:50:d4:fa:f9:db:14:5f: b8:43:3f:b0:b8:ab:0c:96:a0:76:11:ab:1c:14:1b:83:b4:94: bb:eb:b7:38:f2:d8:b8:96:11:3a:01:03:9a:88:11:c8:69:ce: ba:9c:1e:c7:b6:d9:54:db:64:50:ce:e4:ac:b2:b3:bf:9b:53: d8:9b:4b:9e:31:c8:72:c3:fb:94:ac:e6:d5:59:71:08:bd:8e: f6:09:81:32:05:74:8b:d2:ad:95:ed:19:ce:1f:e1:9e:5b:da: 8d:8f:12:58:ed:0d:90:05:71:94:73:db:c0:67:3e:91:5b:b9: 55:c6:20:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBv+bk37M7vABMw4FGQhGE0zwW7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUwQkNBRUI1MTlFNTFDOTk3NDMyQTNDRDNFNUZCMkJB Q0E4Rjc1MTAeFw0yNjA5MjMyMjQ0MThaFw0yNjA5MjQyMzU4MThaMDMxMTAvBgNV BAMTKDFERjNDMkQzNUZERTVFRDlCREJGM0Q5NkM2RkFFNDVBOEQ3RUE4ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK+M51oJ3g2ozv4rLmSsZmZrJt z6KidVgDos2qhITJA3YzIZhD41/f/HJJ4xFy1LK2JqhD25wXZKiQTMIgpCFJynit BPy9k42Ci2AEW+rUgHpqY3tI4WFuE/JWMcWpFSQVBNlV1gfGZdnsPE+22DZp5z02 GiqhjdXpiRdf+4aVwLjTH5V4XCUSjy3GK538wkY6shKCWnDc3tyzhwYptLmN56HL MZoyH0agY4HEHmP3l2kiY86xNeyAzVSVTnBjpf4KZyqwIRIQF/pmSB1W4svduG7X wE014Zbg5GhI4YNhLsP+iWbnM7YJDMpY3IVl2F02oIqVOFJ8oGsoE7ZSQbWlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHfPC01/eXtm9vz2WxvrkWo1+qIMwHwYDVR0j BBgwFoAUlQvK61GeUcmXQyo80+X7K6yo91EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFmNjk4NGYtY2NmOS00YzQwLWIxMTQtMzgwMzU2YThjZDg4LzAvOTUwQkNBRUI1 MTlFNTFDOTk3NDMyQTNDRDNFNUZCMkJBQ0E4Rjc1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTBCQ0FFQjUxOUU1MUM5OTc0MzJBM0NEM0U1RkIyQkFDQThG NzUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFmNjk4NGYtY2NmOS00YzQwLWIx MTQtMzgwMzU2YThjZDg4LzAvOTUwQkNBRUI1MTlFNTFDOTk3NDMyQTNDRDNFNUZC MkJBQ0E4Rjc1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxY+S5LF/JggvUVWoWUWsi/Qh/bZ1wbvt8h QWCEvIlE0RSe1Q+7jZXuBTTLllQSiY02nDzaBhwFTQJ1QOM06jj1Z9WMBeNXhv0M /h8xjHRiknSVVcq3AD5XiZ/AbBmIxpY6nlc60+wN18p0TvFfmyE6biVAbWIohNLV O8uESl8DcYzfNc0aFHpuUNT6+dsUX7hDP7C4qwyWoHYRqxwUG4O0lLvrtzjy2LiW EToBA5qIEchpzrqcHse22VTbZFDO5Kyys7+bU9ibS54xyHLD+5Ss5tVZcQi9jvYJ gTIFdIvSrZXtGc4f4Z5b2o2PEljtDZAFcZRz28BnPpFbuVXGIBU= -----END CERTIFICATE-----Generated at Thu Sep 24 06:54:09 2026 by rpki-client