$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft File: C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft (raw, json) Hash identifier: K01ci8vmKM6PI5RrrSzjjhIYVkzGAZYx2pikI2lO+ag= Subject key identifier: EF:34:27:C4:63:D8:1B:1F:E8:33:EA:00:CE:B1:8D:F5:AE:E4:2C:C6 Authority key identifier: C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D Certificate issuer: /CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D Certificate serial: 62B360B6B26D1C2B81743951FDCBEC23C2E57A85 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 08:41:56 +0000 Manifest this update: Wed 23 Sep 2026 08:36:56 +0000 Manifest next update: Thu 24 Sep 2026 10:33:56 +0000 Files and hashes: 1: C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl (hash: xf9RaM7r0DemFzXaP9FRkPMXb4xdCWPd4SwvFHv+9Ic=) 2: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 1gFxJKdThhrkplcpi1An+c+/wNEctIua90b5P0hZdUI=) 3: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: 8OYioJHXFDxSOXWT6kL63xMJJjG7Wo+wmLm6z+bx6x0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b3:60:b6:b2:6d:1c:2b:81:74:39:51:fd:cb:ec:23:c2:e5:7a:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D Validity Not Before: Sep 23 08:36:56 2026 GMT Not After : Sep 24 10:33:56 2026 GMT Subject: CN=EF3427C463D81B1FE833EA00CEB18DF5AEE42CC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1f:e4:63:8c:ef:f5:45:e0:48:78:3d:81:a7: 16:23:fd:75:77:62:23:12:92:af:bd:7d:41:c4:62: de:89:c4:0d:16:2d:1d:db:8b:16:d1:62:ce:0b:f9: d7:27:b3:17:ec:6d:4b:69:62:64:57:92:94:99:aa: 1f:21:a7:5f:93:5c:fe:0f:ca:a5:cb:a6:1f:4a:82: c6:d0:9e:41:fe:e9:0b:3f:41:e4:b1:db:13:b3:44: f7:8a:f9:a2:b3:d0:74:3c:97:71:60:03:ec:d4:c2: 4a:80:ae:51:f1:38:df:33:f5:08:dc:28:94:e9:b4: 72:b3:0c:01:a9:0b:1d:ab:eb:ae:f6:48:8f:fc:5d: ab:a1:b8:ef:b4:ea:a2:be:bb:a0:91:a0:b4:7c:ce: 0a:0c:a8:74:84:80:de:27:55:d3:aa:4c:13:2c:70: 63:89:ee:8c:e1:8a:05:4b:5b:cf:aa:59:3b:de:ea: 59:29:9b:69:70:1a:cd:29:2f:ca:13:49:17:c6:c7: 0f:59:49:a7:21:7d:2d:26:76:86:34:2a:65:a8:4b: a8:66:28:36:e7:30:6c:d2:28:f6:e5:cd:c1:9f:92: bb:25:aa:42:19:af:31:62:f0:51:e9:4d:b3:fb:51: 20:fe:b6:b3:21:e2:a4:ad:d9:ef:c8:9d:d6:f3:8c: 70:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:34:27:C4:63:D8:1B:1F:E8:33:EA:00:CE:B1:8D:F5:AE:E4:2C:C6 X509v3 Authority Key Identifier: keyid:C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d5:5a:f3:fc:65:e5:61:f9:e9:1c:b8:f4:75:73:0a:df:2d: fc:87:d4:68:3f:1f:f8:6d:bd:f2:6e:dd:0c:be:28:57:3c:bb: 62:81:26:fc:da:9e:54:4d:60:36:c7:dd:3f:dc:b6:1f:5e:de: 9c:9e:f4:46:42:ae:1e:81:b7:97:65:86:a5:90:db:8d:29:64: 98:b4:7f:04:51:53:ee:75:82:ba:f5:ad:a1:95:65:79:36:05: 44:b4:a6:78:4e:f6:f1:de:7b:61:31:ee:13:f7:15:79:af:63: 93:95:f2:8c:dc:0f:a7:f7:93:6f:43:cf:5f:c8:62:97:e0:25: 81:62:fc:50:2c:9c:bf:11:d2:7a:7b:79:c1:5d:eb:44:ec:5e: 31:69:75:bf:af:9d:b9:3a:5d:65:5e:7d:ad:5a:f7:e2:15:0d: b6:16:57:ab:23:6d:00:7e:0e:91:45:86:8d:29:01:ce:bd:ee: eb:74:03:66:e7:83:1f:53:41:d7:3c:ab:a1:23:b5:61:47:8e: 4f:53:f0:c7:51:e0:e6:90:41:8a:cf:f3:95:a5:26:a4:d6:45: 6d:7a:0c:b9:09:82:b0:77:68:4c:0a:ee:f3:77:1a:84:37:c7: f0:4d:be:79:fb:17:aa:fd:62:a2:ef:5b:bb:2d:f9:b6:dc:6e: ca:98:0d:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYrNgtrJtHCuBdDlR/cvsI8LleoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk1MERDMzUyOEUxNzQ5QzcyMUQ0Mzk4NTIzREExQkFG QjZCQkExRDAeFw0yNjA5MjMwODM2NTZaFw0yNjA5MjQxMDMzNTZaMDMxMTAvBgNV BAMTKEVGMzQyN0M0NjNEODFCMUZFODMzRUEwMENFQjE4REY1QUVFNDJDQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVH+RjjO/1ReBIeD2BpxYj/XV3 YiMSkq+9fUHEYt6JxA0WLR3bixbRYs4L+dcnsxfsbUtpYmRXkpSZqh8hp1+TXP4P yqXLph9KgsbQnkH+6Qs/QeSx2xOzRPeK+aKz0HQ8l3FgA+zUwkqArlHxON8z9Qjc KJTptHKzDAGpCx2r6672SI/8XauhuO+06qK+u6CRoLR8zgoMqHSEgN4nVdOqTBMs cGOJ7ozhigVLW8+qWTve6lkpm2lwGs0pL8oTSRfGxw9ZSachfS0mdoY0KmWoS6hm KDbnMGzSKPblzcGfkrslqkIZrzFi8FHpTbP7USD+trMh4qSt2e/IndbzjHCnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7zQnxGPYGx/oM+oAzrGN9a7kLMYwHwYDVR0j BBgwFoAUyVDcNSjhdJxyHUOYUj2huvtruh0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1NjgtMWQ4NjMzNjBlNDIxLzAvQzk1MERDMzUy OEUxNzQ5QzcyMUQ0Mzk4NTIzREExQkFGQjZCQkExRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTUwREMzNTI4RTE3NDlDNzIxRDQzOTg1MjNEQTFCQUZCNkJC QTFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvQzk1MERDMzUyOEUxNzQ5QzcyMUQ0Mzk4NTIzREEx QkFGQjZCQkExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrVWvP8ZeVh+ekcuPR1cwrfLfyH1Gg/H/ht vfJu3Qy+KFc8u2KBJvzanlRNYDbH3T/cth9e3pye9EZCrh6Bt5dlhqWQ240pZJi0 fwRRU+51grr1raGVZXk2BUS0pnhO9vHee2Ex7hP3FXmvY5OV8ozcD6f3k29Dz1/I YpfgJYFi/FAsnL8R0np7ecFd60TsXjFpdb+vnbk6XWVefa1a9+IVDbYWV6sjbQB+ DpFFho0pAc697ut0A2bngx9TQdc8q6EjtWFHjk9T8MdR4OaQQYrP85WlJqTWRW16 DLkJgrB3aEwK7vN3GoQ3x/BNvnn7F6r9YqLvW7st+bbcbsqYDYM= -----END CERTIFICATE-----Generated at Wed Sep 23 23:59:57 2026 by rpki-client