$ rpki-client -vvf rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft File: C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft (raw, json) Hash identifier: gQbkxgPyBO3TCQxbxM8figvg8Vf93Jsi0VHUoECC4Mo= Subject key identifier: 7E:00:FC:B5:A5:C6:6A:73:A1:0F:55:4B:B4:35:FE:49:6E:C1:D1:D4 Authority key identifier: C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D Certificate issuer: /CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D Certificate serial: 3F1459CE69C52C551D836F071BD4BB06F92E2400 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:51:56 +0000 Manifest this update: Thu 23 Jul 2026 17:46:56 +0000 Manifest next update: Fri 24 Jul 2026 18:05:56 +0000 Files and hashes: 1: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 1gFxJKdThhrkplcpi1An+c+/wNEctIua90b5P0hZdUI=) 2: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: 8OYioJHXFDxSOXWT6kL63xMJJjG7Wo+wmLm6z+bx6x0=) 3: C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl (hash: G7RLu2k8kiMrQMcD96qoe8vTiUE7kymv28UF8zXvhh8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:14:59:ce:69:c5:2c:55:1d:83:6f:07:1b:d4:bb:06:f9:2e:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D Validity Not Before: Jul 23 17:46:56 2026 GMT Not After : Jul 24 18:05:56 2026 GMT Subject: CN=7E00FCB5A5C66A73A10F554BB435FE496EC1D1D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cc:44:92:d9:66:e8:ae:22:9a:b1:a2:2a:61: da:e8:9b:6d:c3:9c:07:97:45:e4:80:15:07:c6:c2: d2:e1:03:26:9b:2c:12:05:46:6b:e8:d1:4b:2e:73: b6:08:64:de:77:39:64:5e:2d:07:cb:d3:e9:da:73: 4b:00:cc:da:bd:44:4b:17:86:d7:7b:69:53:1f:d6: 05:4c:de:91:59:39:36:ca:74:74:30:db:35:11:47: 67:38:0a:be:00:b4:48:f8:42:b7:c5:51:55:e9:b6: cc:45:62:4e:80:56:2a:d3:2b:64:5d:69:7b:b0:94: 73:50:2b:85:34:f8:4c:3f:8f:83:cb:c1:76:47:16: fb:e2:93:8a:4e:a0:5c:b2:1a:00:d4:1f:c8:bc:ae: 41:b1:de:19:25:4b:c1:0a:37:6e:af:11:3f:8c:0f: 9d:e2:c9:27:b5:c9:a5:72:03:3d:d1:1e:ee:53:da: 5b:ed:c6:3a:45:13:16:8f:1a:24:3a:48:0d:b1:02: c5:81:8d:8d:02:84:37:5d:aa:96:1f:29:32:99:de: 51:30:17:b6:9b:37:5b:3a:2d:b7:f6:cf:f0:04:77: 6c:62:88:e8:38:d0:08:bc:b2:25:b4:8e:53:e1:54: 66:58:5a:3a:24:00:6a:2e:2f:0f:6d:bb:3b:91:c0: 14:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:00:FC:B5:A5:C6:6A:73:A1:0F:55:4B:B4:35:FE:49:6E:C1:D1:D4 X509v3 Authority Key Identifier: keyid:C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:b2:d4:e0:c7:01:9d:8c:eb:79:1d:1b:52:be:22:1a:de:32: 51:fb:56:e8:22:b3:b5:2d:ec:07:6c:f3:a9:07:ae:d3:d1:53: 3a:e8:58:48:d0:9c:51:df:38:c3:f5:0a:12:b9:9d:f7:cc:9c: 6f:c2:c7:d5:4f:f1:ce:ce:d8:06:0f:a6:38:dc:89:53:5a:fa: e1:00:bc:df:c0:ad:90:b6:d3:e8:9d:71:b9:e9:96:67:73:3e: fe:e1:a6:d4:e5:95:db:e2:78:d8:02:df:a2:47:31:59:1d:29: 90:52:cc:81:6c:2c:82:f9:53:63:c6:01:e3:80:d3:5a:7f:68: 47:c8:6f:35:88:1f:79:eb:d0:56:c3:7d:40:78:c2:1d:5a:86: d4:33:68:99:d2:54:03:97:8a:92:16:ac:b4:87:25:c6:6c:b6: 18:c7:51:41:6e:04:f9:66:1e:5f:de:b2:4b:99:44:c9:09:5e: 00:23:89:be:b4:1d:07:0e:fa:fa:13:8a:b9:f9:bb:6d:60:52: 2c:87:8f:d6:e8:74:6b:85:68:04:74:f9:51:ab:20:9c:e1:e5: a4:d8:10:85:36:4c:1c:b3:0d:16:c0:85:1f:d0:3f:d1:c7:7e: 08:78:ff:72:8f:79:6b:8a:51:60:50:0b:3d:ad:d3:2a:b6:db: e3:2d:6a:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPxRZzmnFLFUdg28HG9S7BvkuJAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk1MERDMzUyOEUxNzQ5QzcyMUQ0Mzk4NTIzREExQkFG QjZCQkExRDAeFw0yNjA3MjMxNzQ2NTZaFw0yNjA3MjQxODA1NTZaMDMxMTAvBgNV BAMTKDdFMDBGQ0I1QTVDNjZBNzNBMTBGNTU0QkI0MzVGRTQ5NkVDMUQxRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5zESS2WboriKasaIqYdrom23D nAeXReSAFQfGwtLhAyabLBIFRmvo0Usuc7YIZN53OWReLQfL0+nac0sAzNq9REsX htd7aVMf1gVM3pFZOTbKdHQw2zURR2c4Cr4AtEj4QrfFUVXptsxFYk6AVirTK2Rd aXuwlHNQK4U0+Ew/j4PLwXZHFvvik4pOoFyyGgDUH8i8rkGx3hklS8EKN26vET+M D53iySe1yaVyAz3RHu5T2lvtxjpFExaPGiQ6SA2xAsWBjY0ChDddqpYfKTKZ3lEw F7abN1s6Lbf2z/AEd2xiiOg40Ai8siW0jlPhVGZYWjokAGouLw9tuzuRwBR5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfgD8taXGanOhD1VLtDX+SW7B0dQwHwYDVR0j BBgwFoAUyVDcNSjhdJxyHUOYUj2huvtruh0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1NjgtMWQ4NjMzNjBlNDIxLzAvQzk1MERDMzUy OEUxNzQ5QzcyMUQ0Mzk4NTIzREExQkFGQjZCQkExRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTUwREMzNTI4RTE3NDlDNzIxRDQzOTg1MjNEQTFCQUZCNkJC QTFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvQzk1MERDMzUyOEUxNzQ5QzcyMUQ0Mzk4NTIzREEx QkFGQjZCQkExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKey1ODHAZ2M63kdG1K+IhreMlH7Vugis7Ut 7Ads86kHrtPRUzroWEjQnFHfOMP1ChK5nffMnG/Cx9VP8c7O2AYPpjjciVNa+uEA vN/ArZC20+idcbnplmdzPv7hptTlldvieNgC36JHMVkdKZBSzIFsLIL5U2PGAeOA 01p/aEfIbzWIH3nr0FbDfUB4wh1ahtQzaJnSVAOXipIWrLSHJcZsthjHUUFuBPlm Hl/eskuZRMkJXgAjib60HQcO+voTirn5u21gUiyHj9bodGuFaAR0+VGrIJzh5aTY EIU2TByzDRbAhR/QP9HHfgh4/3KPeWuKUWBQCz2t0yq22+Mtaus= -----END CERTIFICATE-----Generated at Fri Jul 24 06:30:59 2026 by rpki-client