$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft File: 95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft (raw, json) Hash identifier: qaNFRceTFYXegO9iXkBdtdcGGppZu/mxNBP7r1X1U2Q= Subject key identifier: 02:88:53:07:8D:43:1C:13:E2:B3:96:15:83:93:9F:19:37:AE:02:98 Authority key identifier: 95:E9:D0:33:C4:4A:D5:03:C4:29:A7:82:A6:4C:7B:0A:F8:A9:FF:36 Certificate issuer: /CN=95E9D033C44AD503C429A782A64C7B0AF8A9FF36 Certificate serial: 3189366DC3DB71A3217A8C629E322091AF5386E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 13:27:40 +0000 Manifest this update: Wed 23 Sep 2026 13:22:40 +0000 Manifest next update: Thu 24 Sep 2026 16:40:40 +0000 Files and hashes: 1: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (hash: 0J9oKNbFkC4ek4+yIhYejI4HBbjKDbQ0B3Yfg4Dgqy4=) 2: 95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl (hash: NX8U+r25B6hpZVE2WMzH9BtcYekZY9h4LjpSYlzHOl8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:89:36:6d:c3:db:71:a3:21:7a:8c:62:9e:32:20:91:af:53:86:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95E9D033C44AD503C429A782A64C7B0AF8A9FF36 Validity Not Before: Sep 23 13:22:40 2026 GMT Not After : Sep 24 16:40:40 2026 GMT Subject: CN=028853078D431C13E2B3961583939F1937AE0298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:69:5d:36:9c:5a:d5:25:c9:43:04:80:9f:75: 1d:1d:8a:02:7a:79:de:4d:4f:93:78:a6:c3:ab:37: c9:24:99:58:cd:55:06:10:e8:0c:b0:fd:aa:d9:80: 8c:f3:3e:2c:d0:3e:22:41:ea:2f:1f:61:11:9c:d2: ee:a0:c2:96:20:02:c4:59:b5:6e:8a:21:75:71:73: 64:ba:fd:ce:5e:9b:9a:d9:5f:4b:f1:86:d5:86:05: 56:6f:73:ea:ca:ee:04:37:5b:00:56:11:6b:f9:57: 89:30:0b:23:26:e8:22:ca:82:bc:cd:e5:4a:9f:d5: e5:16:18:ea:a7:1f:2d:da:38:1f:c0:63:0c:24:3a: 25:2c:01:b5:3b:56:b4:ec:0a:85:20:0a:f6:54:cc: b1:a3:77:40:e5:f9:a1:05:8d:24:ef:fe:7a:3b:b4: 0f:2c:3c:34:bc:fa:14:6d:22:e4:0d:21:ff:d4:0c: df:3b:e1:2e:08:1f:5b:0e:36:b3:9b:e4:9a:43:e9: 92:d4:ad:2e:54:17:6b:95:83:3a:26:72:3d:0c:c1: 34:f9:71:65:3d:e5:8f:bc:a8:83:d3:93:85:a3:a7: 02:d8:27:d1:b1:1b:d3:d1:91:53:82:dd:73:26:54: 6b:e0:87:73:e7:8f:d5:37:1a:00:a0:99:2a:db:86: e1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:88:53:07:8D:43:1C:13:E2:B3:96:15:83:93:9F:19:37:AE:02:98 X509v3 Authority Key Identifier: keyid:95:E9:D0:33:C4:4A:D5:03:C4:29:A7:82:A6:4C:7B:0A:F8:A9:FF:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:0e:e5:2b:a8:f0:ed:2c:9c:b3:31:c7:bb:db:96:52:9a:4a: 8c:ae:8a:e5:66:5d:68:2b:22:23:33:a9:3d:55:07:4d:00:93: c9:da:ae:e6:4b:ba:b1:c4:55:14:44:e2:6f:32:b0:36:46:3d: 76:90:9d:71:cb:d7:d0:48:39:48:17:9f:f6:8e:7a:a7:60:93: 63:e6:35:7f:65:6b:c9:b3:6b:72:87:3d:11:06:a1:cd:d8:51: 83:a0:9c:30:66:0f:83:57:6e:7b:21:b1:e6:62:68:af:a7:57: 8d:d1:75:c5:1f:d3:b4:85:2e:16:5a:57:b7:0f:33:3d:8c:4f: 15:12:44:67:e0:a6:29:df:0c:2a:95:16:42:eb:47:3d:64:17: f0:6b:1d:0c:80:1f:5a:65:74:ae:ad:7c:23:b6:90:7f:4c:e9: 04:97:42:18:1d:32:1b:ad:d4:6b:f7:a9:11:a8:8b:22:71:4a: 34:bb:28:9b:97:0f:38:e5:06:4a:e4:bf:3b:01:15:6d:c1:2c: a5:a7:da:19:e2:14:c0:0b:47:89:03:28:ab:75:f6:95:f6:a7: 02:3b:85:ba:7e:be:d4:82:f0:c3:c5:a8:fa:16:17:cb:6c:3d: 6e:6a:2f:f9:9b:40:4a:6d:9c:46:58:c2:ff:eb:61:b3:55:b9: 57:c7:e6:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMYk2bcPbcaMheoxinjIgka9ThuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVFOUQwMzNDNDRBRDUwM0M0MjlBNzgyQTY0QzdCMEFG OEE5RkYzNjAeFw0yNjA5MjMxMzIyNDBaFw0yNjA5MjQxNjQwNDBaMDMxMTAvBgNV BAMTKDAyODg1MzA3OEQ0MzFDMTNFMkIzOTYxNTgzOTM5RjE5MzdBRTAyOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsaV02nFrVJclDBICfdR0digJ6 ed5NT5N4psOrN8kkmVjNVQYQ6Ayw/arZgIzzPizQPiJB6i8fYRGc0u6gwpYgAsRZ tW6KIXVxc2S6/c5em5rZX0vxhtWGBVZvc+rK7gQ3WwBWEWv5V4kwCyMm6CLKgrzN 5Uqf1eUWGOqnHy3aOB/AYwwkOiUsAbU7VrTsCoUgCvZUzLGjd0Dl+aEFjSTv/no7 tA8sPDS8+hRtIuQNIf/UDN874S4IH1sONrOb5JpD6ZLUrS5UF2uVgzomcj0MwTT5 cWU95Y+8qIPTk4WjpwLYJ9GxG9PRkVOC3XMmVGvgh3Pnj9U3GgCgmSrbhuEjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAohTB41DHBPis5YVg5OfGTeuApgwHwYDVR0j BBgwFoAUlenQM8RK1QPEKaeCpkx7Cvip/zYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY3NmI3NzMtNDA1Zi00NThmLTliODgtODUyMDk1MTczZjE2LzAvOTVFOUQwMzND NDRBRDUwM0M0MjlBNzgyQTY0QzdCMEFGOEE5RkYzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NUU5RDAzM0M0NEFENTAzQzQyOUE3ODJBNjRDN0IwQUY4QTlG RjM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY3NmI3NzMtNDA1Zi00NThmLTli ODgtODUyMDk1MTczZjE2LzAvOTVFOUQwMzNDNDRBRDUwM0M0MjlBNzgyQTY0QzdC MEFGOEE5RkYzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0O5Suo8O0snLMxx7vbllKaSoyuiuVmXWgr IiMzqT1VB00Ak8naruZLurHEVRRE4m8ysDZGPXaQnXHL19BIOUgXn/aOeqdgk2Pm NX9la8mza3KHPREGoc3YUYOgnDBmD4NXbnshseZiaK+nV43RdcUf07SFLhZaV7cP Mz2MTxUSRGfgpinfDCqVFkLrRz1kF/BrHQyAH1pldK6tfCO2kH9M6QSXQhgdMhut 1Gv3qRGoiyJxSjS7KJuXDzjlBkrkvzsBFW3BLKWn2hniFMALR4kDKKt19pX2pwI7 hbp+vtSC8MPFqPoWF8tsPW5qL/mbQEptnEZYwv/rYbNVuVfH5lU= -----END CERTIFICATE-----Generated at Wed Sep 23 22:25:40 2026 by rpki-client