$ rpki-client -vvf rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft File: C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft (raw, json) Hash identifier: G6iveEsMY/GEQ1QIqW+VgREJCZgwMXZIWGKIPYc+688= Subject key identifier: 3E:24:29:0B:D2:E0:2B:F7:F4:C5:F2:CF:24:29:4F:94:4A:6A:79:26 Authority key identifier: C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D Certificate issuer: /CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D Certificate serial: 0968BA3F7800CB3F7B14AB30FB8D962604365FF9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:27:12 +0000 Manifest this update: Tue 12 May 2026 17:22:12 +0000 Manifest next update: Wed 13 May 2026 17:59:12 +0000 Files and hashes: 1: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: 8OYioJHXFDxSOXWT6kL63xMJJjG7Wo+wmLm6z+bx6x0=) 2: C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl (hash: X4Wlieveg7tRvBzuFdyucUPKjxaSHDpsnZcGpTW3vko=) 3: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 1gFxJKdThhrkplcpi1An+c+/wNEctIua90b5P0hZdUI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:68:ba:3f:78:00:cb:3f:7b:14:ab:30:fb:8d:96:26:04:36:5f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D Validity Not Before: May 12 17:22:12 2026 GMT Not After : May 13 17:59:12 2026 GMT Subject: CN=3E24290BD2E02BF7F4C5F2CF24294F944A6A7926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1d:86:17:75:14:4e:71:63:26:38:2e:0b:e6: 31:1a:d4:70:ee:51:a2:d0:e4:4b:9a:65:43:fb:dc: 37:cb:cf:d3:33:a7:dc:4e:1d:5a:07:4d:7a:f1:65: 25:d0:4b:19:ad:6d:82:78:64:38:7a:f1:61:91:3f: 16:f7:46:fd:97:45:5d:4c:bf:ab:7c:53:61:32:ca: 6d:af:1e:07:7d:2f:e7:89:f4:37:17:e8:7a:22:7e: 79:62:69:8c:4d:4f:3c:c2:cd:68:4d:26:ef:54:e8: b0:8e:3c:a3:6f:83:27:e5:2f:13:23:a4:07:21:ee: 15:b5:45:22:69:96:c6:31:93:6b:45:1b:e6:6d:16: f4:b0:90:f6:ff:2b:b2:74:c9:d3:e3:7c:57:55:10: 4f:f9:3f:d1:8c:ba:3d:bd:11:cf:e2:1c:8a:a3:d7: b4:17:94:96:6c:5f:5a:39:26:66:a5:4a:8e:d7:d3: 30:c1:a0:c6:97:ab:ca:91:44:16:ad:72:fe:80:ef: 1a:72:b8:3e:4b:d4:eb:fc:76:d8:71:47:40:7f:1f: 52:c9:92:fc:39:af:bf:3c:e5:51:83:0d:10:91:e1: d0:d2:3b:4f:fa:bc:50:ed:80:a0:7b:cd:6f:eb:f3: 60:10:4b:6e:32:23:67:a0:18:84:1b:74:1d:8f:6f: 8c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:24:29:0B:D2:E0:2B:F7:F4:C5:F2:CF:24:29:4F:94:4A:6A:79:26 X509v3 Authority Key Identifier: keyid:C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:96:f9:86:cf:07:3b:a8:79:08:4a:d3:19:99:f9:5e:1c:dc: 98:7e:c9:07:44:b7:32:11:b3:5c:3b:09:4f:ba:3c:5a:1e:c3: db:32:de:4c:43:86:3c:db:76:33:e3:db:cb:1a:bc:96:42:08: ef:67:75:4c:a7:b9:22:20:6b:a3:e2:52:b7:ec:89:6e:bb:b9: c1:98:dc:ad:7c:3f:28:0c:03:15:e6:63:93:87:af:54:37:cb: a5:90:3f:81:59:8e:61:23:c2:89:dc:97:28:60:d0:49:9c:e3: a9:35:6b:6b:7e:3e:5a:c0:bf:e3:69:9e:c2:89:e8:d9:50:4b: 21:25:9e:f8:cc:d2:1e:34:8b:d8:e9:ae:ab:bf:19:ef:b9:08: 90:16:d3:c6:04:84:5d:f9:74:2a:a0:31:e8:fd:66:8e:0a:71: 70:07:c9:d9:d1:7e:a2:6a:54:c9:e0:4b:e4:d9:fc:2b:9a:cd: dc:21:65:d5:27:3c:a9:37:8c:83:5e:8c:7c:c8:75:04:d6:43: 8d:9a:e8:f5:3c:8b:12:1d:a1:8f:f7:da:d1:c3:f8:00:d4:f9: c3:5c:1e:cb:2c:e7:d9:2e:07:e4:38:02:7a:c7:ef:0a:1e:66: 45:58:3c:38:b3:34:28:cd:fc:a7:a1:ef:12:fe:ef:1b:13:41: d3:d6:c8:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCWi6P3gAyz97FKsw+42WJgQ2X/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk1MERDMzUyOEUxNzQ5QzcyMUQ0Mzk4NTIzREExQkFG QjZCQkExRDAeFw0yNjA1MTIxNzIyMTJaFw0yNjA1MTMxNzU5MTJaMDMxMTAvBgNV BAMTKDNFMjQyOTBCRDJFMDJCRjdGNEM1RjJDRjI0Mjk0Rjk0NEE2QTc5MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHYYXdRROcWMmOC4L5jEa1HDu UaLQ5EuaZUP73DfLz9Mzp9xOHVoHTXrxZSXQSxmtbYJ4ZDh68WGRPxb3Rv2XRV1M v6t8U2Eyym2vHgd9L+eJ9DcX6HoifnliaYxNTzzCzWhNJu9U6LCOPKNvgyflLxMj pAch7hW1RSJplsYxk2tFG+ZtFvSwkPb/K7J0ydPjfFdVEE/5P9GMuj29Ec/iHIqj 17QXlJZsX1o5JmalSo7X0zDBoMaXq8qRRBatcv6A7xpyuD5L1Ov8dthxR0B/H1LJ kvw5r7885VGDDRCR4dDSO0/6vFDtgKB7zW/r82AQS24yI2egGIQbdB2Pb4zpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPiQpC9LgK/f0xfLPJClPlEpqeSYwHwYDVR0j BBgwFoAUyVDcNSjhdJxyHUOYUj2huvtruh0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1NjgtMWQ4NjMzNjBlNDIxLzAvQzk1MERDMzUy OEUxNzQ5QzcyMUQ0Mzk4NTIzREExQkFGQjZCQkExRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTUwREMzNTI4RTE3NDlDNzIxRDQzOTg1MjNEQTFCQUZCNkJC QTFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvQzk1MERDMzUyOEUxNzQ5QzcyMUQ0Mzk4NTIzREEx QkFGQjZCQkExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqW+YbPBzuoeQhK0xmZ+V4c3Jh+yQdEtzIR s1w7CU+6PFoew9sy3kxDhjzbdjPj28savJZCCO9ndUynuSIga6PiUrfsiW67ucGY 3K18PygMAxXmY5OHr1Q3y6WQP4FZjmEjwonclyhg0Emc46k1a2t+PlrAv+NpnsKJ 6NlQSyElnvjM0h40i9jprqu/Ge+5CJAW08YEhF35dCqgMej9Zo4KcXAHydnRfqJq VMngS+TZ/CuazdwhZdUnPKk3jINejHzIdQTWQ42a6PU8ixIdoY/32tHD+ADU+cNc Hsss59kuB+Q4AnrH7woeZkVYPDizNCjN/Keh7xL+7xsTQdPWyOg= -----END CERTIFICATE-----Generated at Wed May 13 00:43:59 2026 by rpki-client