$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft File: 951C84D9FEAF87E2196BBF71DC0326053CC04478.mft (raw, json) Hash identifier: DcTajaw0Ly9SuvqVv5McxelBrVM6yKI0kcWKfBwgP/A= Subject key identifier: E8:81:FC:31:F5:86:0B:54:A8:0E:9E:07:0D:60:4A:65:23:6E:17:24 Authority key identifier: 95:1C:84:D9:FE:AF:87:E2:19:6B:BF:71:DC:03:26:05:3C:C0:44:78 Certificate issuer: /CN=951C84D9FEAF87E2196BBF71DC0326053CC04478 Certificate serial: 50038C319636DDCB9D370BF85F7E4BD6212110FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft Manifest number: A4 Signing time: Thu 03 Sep 2026 07:26:41 +0000 Manifest this update: Thu 03 Sep 2026 07:21:41 +0000 Manifest next update: Fri 04 Sep 2026 10:42:41 +0000 Files and hashes: 1: 951C84D9FEAF87E2196BBF71DC0326053CC04478.crl (hash: XoOHMSAP61bZN/eHXw9ZZ5+UaYZZOdeXq6gWmCndCLk=) 2: 3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa (hash: /2R+nfFCxhyBUh1PRuVIBZMYLiYNSMPmjUD3SxKwk4w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.crl rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 10:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:03:8c:31:96:36:dd:cb:9d:37:0b:f8:5f:7e:4b:d6:21:21:10:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=951C84D9FEAF87E2196BBF71DC0326053CC04478 Validity Not Before: Sep 3 07:21:41 2026 GMT Not After : Sep 4 10:42:41 2026 GMT Subject: CN=E881FC31F5860B54A80E9E070D604A65236E1724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:26:14:ae:58:e7:ac:28:ea:c1:8b:d9:c8:e0: 46:be:de:46:61:72:95:f9:f6:c6:cb:6b:a9:cb:96: e8:3a:79:58:df:9f:58:38:1b:60:96:b8:48:8e:38: 26:1b:b5:cd:68:d0:39:58:c1:93:64:2e:27:c1:c1: a2:b8:7c:0c:e2:0b:f6:f2:de:87:ec:73:f1:83:18: 29:84:08:6f:ba:e7:8d:5f:ab:75:a8:95:77:51:d5: 90:5b:83:6d:c8:27:03:48:bd:bf:1c:ad:1f:41:e4: d0:e8:8c:b3:cd:5e:56:b6:89:36:71:0d:4f:5a:66: 58:4d:cc:83:cf:f1:26:96:2d:55:c9:56:23:08:02: a8:84:bd:31:db:a0:31:d0:a5:25:a6:b1:09:52:59: ad:77:bd:55:e6:95:64:ae:a9:a3:ea:2e:08:93:eb: f0:7d:27:be:05:03:04:a2:c8:7c:c3:a4:1c:49:e7: 20:a0:c7:c3:27:e9:75:51:be:ea:09:7e:5d:02:06: d1:71:86:2b:17:80:4c:59:ef:24:90:06:a2:80:42: 6d:6a:89:01:25:1d:1b:a3:4e:11:10:c9:63:dd:44: d0:bf:1a:4d:dc:81:3a:2c:36:cb:fc:ab:94:58:22: b9:4e:c9:60:98:a9:59:06:30:68:de:d4:5a:92:c3: 51:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:81:FC:31:F5:86:0B:54:A8:0E:9E:07:0D:60:4A:65:23:6E:17:24 X509v3 Authority Key Identifier: keyid:95:1C:84:D9:FE:AF:87:E2:19:6B:BF:71:DC:03:26:05:3C:C0:44:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f5:ef:9b:15:4a:45:1b:e4:8c:45:a7:e3:a4:bb:a7:74:3b: 15:90:db:07:86:d2:be:dc:8a:7f:d7:c1:cb:03:83:bb:56:9d: 7e:27:a6:16:76:dd:d8:16:fa:17:8b:6c:9c:c8:68:fe:c5:51: 2c:ef:7f:2d:a6:96:41:0b:ea:9c:84:3a:04:0a:bf:fb:6d:da: c5:8c:1e:81:89:48:81:1d:76:e9:35:b6:11:dd:e9:5a:67:66: ee:c7:c1:d8:11:2b:dc:7a:dd:68:19:fe:76:bd:82:f5:56:2e: 22:cf:8f:b1:68:a0:47:ef:0a:db:81:48:7f:39:2f:a3:a7:ec: ca:b3:bc:57:e7:ba:a2:7d:61:02:4a:49:40:d8:bf:2a:3e:33: dc:38:22:2b:fd:cf:a8:51:45:69:53:4d:5e:48:cc:e0:03:d6: 4f:87:c6:69:a0:18:93:0e:a0:78:f6:b0:f3:8e:4f:58:89:27: 75:d8:0e:58:46:4a:24:bb:ea:8a:1a:c2:0d:f5:87:c0:20:0f: 86:43:7e:96:3a:4c:a2:51:bb:44:f6:9a:a8:b1:ec:61:f3:2b: 49:e6:58:b9:fb:84:bd:da:19:62:d2:93:eb:2b:3e:cb:f6:67: e3:dd:f2:dd:ed:6f:72:ef:fa:00:e9:2c:19:ba:0a:5d:0d:df: 23:bc:63:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUAOMMZY23cudNwv4X35L1iEhEP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUxQzg0RDlGRUFGODdFMjE5NkJCRjcxREMwMzI2MDUz Q0MwNDQ3ODAeFw0yNjA5MDMwNzIxNDFaFw0yNjA5MDQxMDQyNDFaMDMxMTAvBgNV BAMTKEU4ODFGQzMxRjU4NjBCNTRBODBFOUUwNzBENjA0QTY1MjM2RTE3MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYJhSuWOesKOrBi9nI4Ea+3kZh cpX59sbLa6nLlug6eVjfn1g4G2CWuEiOOCYbtc1o0DlYwZNkLifBwaK4fAziC/by 3ofsc/GDGCmECG+6541fq3WolXdR1ZBbg23IJwNIvb8crR9B5NDojLPNXla2iTZx DU9aZlhNzIPP8SaWLVXJViMIAqiEvTHboDHQpSWmsQlSWa13vVXmlWSuqaPqLgiT 6/B9J74FAwSiyHzDpBxJ5yCgx8Mn6XVRvuoJfl0CBtFxhisXgExZ7ySQBqKAQm1q iQElHRujThEQyWPdRNC/Gk3cgTosNsv8q5RYIrlOyWCYqVkGMGje1FqSw1EpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6IH8MfWGC1SoDp4HDWBKZSNuFyQwHwYDVR0j BBgwFoAUlRyE2f6vh+IZa79x3AMmBTzARHgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FlZjc4NmItNjIyNi00NGFmLTg1MmQtMWZiMDQ1YzRkZWIzLzAvOTUxQzg0RDlG RUFGODdFMjE5NkJCRjcxREMwMzI2MDUzQ0MwNDQ3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTFDODREOUZFQUY4N0UyMTk2QkJGNzFEQzAzMjYwNTNDQzA0 NDc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FlZjc4NmItNjIyNi00NGFmLTg1 MmQtMWZiMDQ1YzRkZWIzLzAvOTUxQzg0RDlGRUFGODdFMjE5NkJCRjcxREMwMzI2 MDUzQ0MwNDQ3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIH175sVSkUb5IxFp+Oku6d0OxWQ2weG0r7c in/XwcsDg7tWnX4nphZ23dgW+heLbJzIaP7FUSzvfy2mlkEL6pyEOgQKv/tt2sWM HoGJSIEdduk1thHd6VpnZu7HwdgRK9x63WgZ/na9gvVWLiLPj7FooEfvCtuBSH85 L6On7MqzvFfnuqJ9YQJKSUDYvyo+M9w4Iiv9z6hRRWlTTV5IzOAD1k+HxmmgGJMO oHj2sPOOT1iJJ3XYDlhGSiS76ooawg31h8AgD4ZDfpY6TKJRu0T2mqix7GHzK0nm WLn7hL3aGWLSk+srPsv2Z+Pd8t3tb3Lv+gDpLBm6Cl0N3yO8Y/U= -----END CERTIFICATE-----Generated at Thu Sep 3 18:06:17 2026 by rpki-client