$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft File: 950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft (raw, json) Hash identifier: Hf04mU9+vcHFcfjJ/QTvtx8Unm9LkMepk2gCza//a/c= Subject key identifier: D3:F7:D1:B8:B5:CC:7E:E5:FC:0C:08:36:32:5D:3B:D6:3B:9C:BB:54 Authority key identifier: 95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51 Certificate issuer: /CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751 Certificate serial: 2B5134E23DC5C95CAA08E53933DA66DB1B9DA420 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 02:27:20 +0000 Manifest this update: Fri 24 Jul 2026 02:22:20 +0000 Manifest next update: Sat 25 Jul 2026 04:32:20 +0000 Files and hashes: 1: 3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa (hash: Ko0biNHo/OilJd2E0SwGMCh23IyoKfHyT2KDez8VfH4=) 2: 950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl (hash: g77mb8yO+Q2GGOV7+XKIai1o0F4CgOIXk2u03iW7zes=) 3: 3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa (hash: 2Og4FIysb2wd35eqOCjNVfXf+ZPGg3kEvtQOXJnk+xE=) 4: 3130332e3136322e3233382e302f32342d3234203d3e20313431363639.roa (hash: viFyM1HFUzcMqtq2FKm6xB7dBBL2CbC6fte+ULEjCo4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:51:34:e2:3d:c5:c9:5c:aa:08:e5:39:33:da:66:db:1b:9d:a4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751 Validity Not Before: Jul 24 02:22:20 2026 GMT Not After : Jul 25 04:32:20 2026 GMT Subject: CN=D3F7D1B8B5CC7EE5FC0C0836325D3BD63B9CBB54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:96:6e:9f:5a:a8:61:6a:38:64:bd:c7:dd:85: 94:63:8a:b2:5e:8b:24:1e:97:02:67:d1:c3:f1:69: ea:82:a9:d6:8b:e6:4f:b3:d6:cd:59:f0:2a:d8:75: 36:23:39:3e:60:47:c3:45:a0:5f:e7:76:6f:75:58: ca:df:26:3f:0b:13:8c:ec:55:a6:f5:e1:d4:e3:35: 63:41:a4:4b:aa:bc:19:0d:df:58:4f:b3:f1:ef:04: d0:bc:82:43:25:c1:4c:ab:b4:77:37:66:de:28:21: aa:6c:3a:22:90:2b:42:17:26:14:7d:06:f7:b6:ca: 87:a2:b2:7e:b3:0e:fc:5e:6f:d7:6a:9a:ef:13:9c: fe:0b:24:89:ef:74:ac:8a:33:67:ff:1e:06:74:75: 45:a5:73:e9:3d:e8:f5:97:ee:39:3e:20:fe:c3:8b: a9:e9:f4:fd:1a:cc:bb:13:63:95:96:4c:3e:eb:2a: 46:3a:dc:52:89:7b:46:bb:ef:77:a9:ba:db:28:03: 28:48:6d:3a:3d:72:5e:38:7a:71:66:fc:44:38:35: be:c4:3a:d9:f6:d1:6b:d2:02:1d:41:d0:00:b3:53: c2:b4:7d:ea:e2:37:d7:41:e7:e2:86:62:a9:7f:5a: 86:eb:19:d8:0b:62:1d:9a:84:ec:53:63:95:77:b7: 9a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F7:D1:B8:B5:CC:7E:E5:FC:0C:08:36:32:5D:3B:D6:3B:9C:BB:54 X509v3 Authority Key Identifier: keyid:95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:cc:e4:e6:43:c2:8d:08:dd:a5:57:cb:d4:2e:e6:25:c3:b6: 3f:82:5e:f7:8d:63:f1:8c:a4:af:7e:ea:e0:37:22:37:a5:a6: f0:1f:63:5b:62:de:43:c2:02:49:1b:ba:79:a8:dc:80:0c:2b: 91:46:da:72:64:60:7c:49:5b:a9:6d:61:45:58:5a:99:68:89: 6b:28:53:c1:3f:60:0a:8b:50:80:e2:ff:84:14:93:30:33:9a: 80:08:ef:cf:14:77:40:13:75:05:32:c7:da:a1:e2:7c:57:0c: 24:ac:ed:db:04:48:4b:8f:d2:c2:bf:e7:03:5f:33:67:2d:66: 36:44:b8:de:56:44:58:11:d1:87:cd:69:c4:a3:65:38:6f:0f: 78:4a:9f:30:40:95:52:6f:bb:e0:4b:04:6b:06:65:34:c4:f4: 78:00:47:66:4c:c6:77:fc:a9:65:c3:62:cb:5a:b4:4f:cc:23: 7e:50:7d:dd:b0:3a:53:ae:fb:5f:e9:d6:a9:b4:28:a3:be:7c: 52:c7:4d:ff:d3:23:28:8a:e9:ac:ef:3c:2a:e8:93:bd:52:1c: 12:f4:be:86:b9:b3:2d:04:3b:d4:e1:55:42:39:80:12:52:df: 71:80:c0:0e:da:83:52:8d:29:1c:64:f7:e7:a6:7b:d0:03:cb: 90:b9:bc:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK1E04j3FyVyqCOU5M9pm2xudpCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUwQkNBRUI1MTlFNTFDOTk3NDMyQTNDRDNFNUZCMkJB Q0E4Rjc1MTAeFw0yNjA3MjQwMjIyMjBaFw0yNjA3MjUwNDMyMjBaMDMxMTAvBgNV BAMTKEQzRjdEMUI4QjVDQzdFRTVGQzBDMDgzNjMyNUQzQkQ2M0I5Q0JCNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrlm6fWqhhajhkvcfdhZRjirJe iyQelwJn0cPxaeqCqdaL5k+z1s1Z8CrYdTYjOT5gR8NFoF/ndm91WMrfJj8LE4zs Vab14dTjNWNBpEuqvBkN31hPs/HvBNC8gkMlwUyrtHc3Zt4oIapsOiKQK0IXJhR9 Bve2yoeisn6zDvxeb9dqmu8TnP4LJInvdKyKM2f/HgZ0dUWlc+k96PWX7jk+IP7D i6np9P0azLsTY5WWTD7rKkY63FKJe0a773eputsoAyhIbTo9cl44enFm/EQ4Nb7E Otn20WvSAh1B0ACzU8K0feriN9dB5+KGYql/WobrGdgLYh2ahOxTY5V3t5pTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0/fRuLXMfuX8DAg2Ml071jucu1QwHwYDVR0j BBgwFoAUlQvK61GeUcmXQyo80+X7K6yo91EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFmNjk4NGYtY2NmOS00YzQwLWIxMTQtMzgwMzU2YThjZDg4LzAvOTUwQkNBRUI1 MTlFNTFDOTk3NDMyQTNDRDNFNUZCMkJBQ0E4Rjc1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTBCQ0FFQjUxOUU1MUM5OTc0MzJBM0NEM0U1RkIyQkFDQThG NzUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFmNjk4NGYtY2NmOS00YzQwLWIx MTQtMzgwMzU2YThjZDg4LzAvOTUwQkNBRUI1MTlFNTFDOTk3NDMyQTNDRDNFNUZC MkJBQ0E4Rjc1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHM5OZDwo0I3aVXy9Qu5iXDtj+CXveNY/GM pK9+6uA3IjelpvAfY1ti3kPCAkkbunmo3IAMK5FG2nJkYHxJW6ltYUVYWploiWso U8E/YAqLUIDi/4QUkzAzmoAI788Ud0ATdQUyx9qh4nxXDCSs7dsESEuP0sK/5wNf M2ctZjZEuN5WRFgR0YfNacSjZThvD3hKnzBAlVJvu+BLBGsGZTTE9HgAR2ZMxnf8 qWXDYstatE/MI35Qfd2wOlOu+1/p1qm0KKO+fFLHTf/TIyiK6azvPCrok71SHBL0 voa5sy0EO9ThVUI5gBJS33GAwA7ag1KNKRxk9+eme9ADy5C5vIc= -----END CERTIFICATE-----Generated at Fri Jul 24 04:02:39 2026 by rpki-client