$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft File: 95C0FEDF4348635C616CCD76866299FFF41521C1.mft (raw, json) Hash identifier: dTx5z8yd09DB3DbT/PVTl/WVDYLch/eJQtE11TTlekw= Subject key identifier: D1:B7:DA:48:A8:4B:CF:96:DB:14:45:25:4B:38:EB:01:F6:2B:DA:88 Authority key identifier: 95:C0:FE:DF:43:48:63:5C:61:6C:CD:76:86:62:99:FF:F4:15:21:C1 Certificate issuer: /CN=95C0FEDF4348635C616CCD76866299FFF41521C1 Certificate serial: 79FCBD13C1FE668C99387C5EF959A6B3F8A6988D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 18:08:27 +0000 Manifest this update: Wed 23 Sep 2026 18:03:27 +0000 Manifest next update: Thu 24 Sep 2026 18:56:27 +0000 Files and hashes: 1: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (hash: nctWeqdG+C+yzM3us3hfFDeGU29WHbKA/XQo+aeaR/w=) 2: 95C0FEDF4348635C616CCD76866299FFF41521C1.crl (hash: vlnCqtxgSMCylymWj+A6qYx0+kK7iyuSMkW4aIJwrXg=) 3: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (hash: O1v/bS1Rz6LYE4uphPLJ6skO/weLSpE9O9uIKbdx440=) 4: 3130332e3134352e35322e302f32342d3234203d3e20313339343535.roa (hash: h+0fD6qzNLY/87deDA6R1jRhs0ceFeWyvO6Ew7fmyvY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.crl rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:fc:bd:13:c1:fe:66:8c:99:38:7c:5e:f9:59:a6:b3:f8:a6:98:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C0FEDF4348635C616CCD76866299FFF41521C1 Validity Not Before: Sep 23 18:03:27 2026 GMT Not After : Sep 24 18:56:27 2026 GMT Subject: CN=D1B7DA48A84BCF96DB1445254B38EB01F62BDA88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:80:ca:24:49:ff:84:7c:9b:0c:83:4a:c4:44: b7:c8:5a:3a:8a:51:5a:c4:65:e9:9c:51:30:0a:14: b6:3d:5b:09:c5:1e:5e:45:b6:9e:4e:40:13:e4:41: e9:e1:3e:c6:0d:c4:a6:99:7b:d6:56:b1:9e:9e:ab: 5a:20:19:d5:31:15:ab:58:8c:eb:ab:37:29:e8:cd: a0:bf:c7:6d:13:50:c1:01:17:b1:d4:74:fa:6b:01: 96:45:9a:d7:a6:65:a2:a6:f5:ec:c8:f8:66:65:09: 79:82:4e:00:95:86:59:d7:cc:12:d5:3f:e7:a9:f7: d3:39:df:65:6e:39:fd:49:b0:c8:d7:97:e4:ae:a2: ed:68:8e:80:3e:8b:58:af:5a:2b:c8:30:ec:c1:af: 3c:2f:e6:3a:59:68:67:7c:19:7a:fd:ba:db:23:55: c1:f1:bd:f0:36:ed:b4:be:87:27:ab:fd:79:cf:1a: 5e:b9:cb:e3:9a:65:8d:cb:0c:2b:54:e1:7a:7a:0d: fd:38:c9:35:00:80:7e:18:52:a0:b4:b5:38:0e:e3: 1d:ef:97:37:7d:44:1f:c9:5c:a1:ad:1e:4c:06:bd: 80:6b:07:6e:48:ba:ee:e0:81:17:94:de:c0:55:52: 09:7b:79:64:a0:e9:49:22:61:6e:39:88:b8:39:3d: 66:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B7:DA:48:A8:4B:CF:96:DB:14:45:25:4B:38:EB:01:F6:2B:DA:88 X509v3 Authority Key Identifier: keyid:95:C0:FE:DF:43:48:63:5C:61:6C:CD:76:86:62:99:FF:F4:15:21:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:20:d1:3b:7c:7d:09:50:66:03:d3:03:c0:4a:df:b2:57:51: 63:2b:d1:f2:74:f5:17:0f:2c:21:b0:d7:9c:5d:d0:bd:d9:05: d3:d0:de:9f:53:f0:c9:2b:22:80:95:a7:7a:c2:44:a6:18:95: b5:8d:b9:9c:9b:39:f4:36:f2:be:a5:86:c1:77:85:06:17:3d: f3:19:67:27:6a:a8:6b:10:46:93:2d:1b:8d:e6:9c:36:28:5a: 10:df:7f:3c:24:37:52:ac:f8:f8:24:3e:9b:ad:30:48:fb:4f: 8a:0e:ff:6e:77:b1:8b:4b:54:af:46:5c:22:aa:1c:08:e8:31: 44:b6:5b:1b:51:12:9b:10:7b:37:39:8c:fb:a8:21:d4:91:e9: 69:1b:76:f6:34:56:9d:e8:b5:43:c2:59:d6:a5:d8:48:d2:b4: 70:13:54:35:de:61:c2:ad:aa:e8:4d:f6:74:a0:41:86:a4:2d: 8a:80:8e:95:c3:c7:05:11:93:96:8f:95:76:58:4c:75:88:16: 40:16:90:d7:c8:5e:a6:76:07:39:85:8b:26:08:3c:88:07:85: 8c:8e:8f:7d:6c:5f:ed:b6:fd:f8:1b:10:54:49:da:b1:24:46: 61:bd:57:83:87:86:30:70:35:a1:6c:17:4c:70:f5:ed:cd:ea: eb:ce:40:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUefy9E8H+ZoyZOHxe+Vmms/immI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDMEZFREY0MzQ4NjM1QzYxNkNDRDc2ODY2Mjk5RkZG NDE1MjFDMTAeFw0yNjA5MjMxODAzMjdaFw0yNjA5MjQxODU2MjdaMDMxMTAvBgNV BAMTKEQxQjdEQTQ4QTg0QkNGOTZEQjE0NDUyNTRCMzhFQjAxRjYyQkRBODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKgMokSf+EfJsMg0rERLfIWjqK UVrEZemcUTAKFLY9WwnFHl5Ftp5OQBPkQenhPsYNxKaZe9ZWsZ6eq1ogGdUxFatY jOurNynozaC/x20TUMEBF7HUdPprAZZFmtemZaKm9ezI+GZlCXmCTgCVhlnXzBLV P+ep99M532VuOf1JsMjXl+Suou1ojoA+i1ivWivIMOzBrzwv5jpZaGd8GXr9utsj VcHxvfA27bS+hyer/XnPGl65y+OaZY3LDCtU4Xp6Df04yTUAgH4YUqC0tTgO4x3v lzd9RB/JXKGtHkwGvYBrB25Iuu7ggReU3sBVUgl7eWSg6UkiYW45iLg5PWZRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0bfaSKhLz5bbFEUlSzjrAfYr2ogwHwYDVR0j BBgwFoAUlcD+30NIY1xhbM12hmKZ//QVIcEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjc3ZmZlMmEtMzFlNC00ODAwLTk3ZDQtNzg3NGMxMjMxOTExLzAvOTVDMEZFREY0 MzQ4NjM1QzYxNkNDRDc2ODY2Mjk5RkZGNDE1MjFDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NUMwRkVERjQzNDg2MzVDNjE2Q0NENzY4NjYyOTlGRkY0MTUy MUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjc3ZmZlMmEtMzFlNC00ODAwLTk3 ZDQtNzg3NGMxMjMxOTExLzAvOTVDMEZFREY0MzQ4NjM1QzYxNkNDRDc2ODY2Mjk5 RkZGNDE1MjFDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsg0Tt8fQlQZgPTA8BK37JXUWMr0fJ09RcP LCGw15xd0L3ZBdPQ3p9T8MkrIoCVp3rCRKYYlbWNuZybOfQ28r6lhsF3hQYXPfMZ ZydqqGsQRpMtG43mnDYoWhDffzwkN1Ks+PgkPputMEj7T4oO/253sYtLVK9GXCKq HAjoMUS2WxtREpsQezc5jPuoIdSR6WkbdvY0Vp3otUPCWdal2EjStHATVDXeYcKt quhN9nSgQYakLYqAjpXDxwURk5aPlXZYTHWIFkAWkNfIXqZ2BzmFiyYIPIgHhYyO j31sX+22/fgbEFRJ2rEkRmG9V4OHhjBwNaFsF0xw9e3N6uvOQAA= -----END CERTIFICATE-----Generated at Thu Sep 24 10:42:50 2026 by rpki-client