$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft File: 95C2241DAF3580597A730032BDD8356019AA8598.mft (raw, json) Hash identifier: CpUWF4zn1eXq3z1XuxcxCYWCAjBMT7q9bxPwFC92Q+A= Subject key identifier: 3C:C3:86:DE:83:A1:FD:2B:B9:8E:1B:B0:64:34:FA:29:39:67:8F:CC Authority key identifier: 95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 Certificate issuer: /CN=95C2241DAF3580597A730032BDD8356019AA8598 Certificate serial: 57D788348F83631FD48CD8161E2BEB44401FEB47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft Manifest number: E5 Signing time: Mon 19 Oct 2026 19:03:09 +0000 Manifest this update: Mon 19 Oct 2026 18:58:09 +0000 Manifest next update: Tue 20 Oct 2026 20:23:09 +0000 Files and hashes: 1: 3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (hash: HPli/3Qu6kod/7xjBSFbg6jtPr5ON8VO23CexUu2Djc=) 2: 95C2241DAF3580597A730032BDD8356019AA8598.crl (hash: NiCN/GOeju1OzBQHh9UlfoQsny1uprR25TGjQOq4WgM=) 3: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (hash: dzNpcw838jqHTmD5WMvONS88+Ve5iK9R+so7TDu1v9o=) 4: 323030313a6466323a6634303a3a2f34382d3438203d3e20313530393232.roa (hash: zqwI6m4XrFv8eZM9FUpfWXpZ18MF12p+MPV+FGxatII=) 5: 3130332e39362e35332e302f32342d3234203d3e20323135373237.roa (hash: 0wPUMAsuo5ZHSc/EbFWdWxfuAnUpnc2Dl/9rdO80RmQ=) 6: 3130332e39362e35322e302f32342d3234203d3e20313534343130.roa (hash: DZZr3wFG43up9aE69tnG8Ls9OH8+Et1zoRrcXN9QSWM=) 7: 3130332e39362e35332e302f32342d3234203d3e20313534343130.roa (hash: lhdzmYQ+4NDivJfAldib42nRBStQ7ZYmo6omhPmOepI=) 8: 3130332e39362e35322e302f32342d3234203d3e20323135373237.roa (hash: XQXfUBbOhxVs8/s2589fLuZ2gOOuek0QydHFHlibVLk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 12:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d7:88:34:8f:83:63:1f:d4:8c:d8:16:1e:2b:eb:44:40:1f:eb:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C2241DAF3580597A730032BDD8356019AA8598 Validity Not Before: Oct 19 18:58:09 2026 GMT Not After : Oct 20 20:23:09 2026 GMT Subject: CN=3CC386DE83A1FD2BB98E1BB06434FA2939678FCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:41:bf:e0:c6:4a:06:53:fe:fc:90:e4:44:85: 60:b4:80:40:af:57:7e:f8:47:41:8d:be:9b:52:31: a0:da:aa:57:b1:6f:d2:62:63:49:f8:64:8a:57:a2: 38:b4:35:2f:05:8e:41:86:77:97:6e:f8:35:f6:ea: 6e:c0:d3:fd:e6:a7:e1:e8:08:49:0f:72:92:76:ed: f2:53:b0:44:ad:ae:69:bb:09:56:c1:50:47:3f:b8: ef:60:f3:4f:e5:89:ce:d4:d0:79:05:dc:5c:9a:96: 13:6b:bd:c7:91:cc:e5:be:c6:93:4f:83:00:b8:ac: 5f:ec:b5:dc:3f:51:07:33:86:74:71:91:5a:52:53: 46:bb:60:cd:cf:11:12:3c:9b:c6:b6:e6:e4:4b:0e: 38:1d:3b:1c:5d:c4:d1:39:15:d6:95:0e:71:27:24: 96:36:91:80:e4:c7:9f:c9:95:95:9c:86:0a:68:0a: d2:65:bf:3b:7e:aa:54:3b:52:fe:85:8f:87:6a:89: 27:c0:11:02:84:89:61:32:c1:75:59:02:18:e0:7b: 14:4b:2d:1a:b8:8a:fa:82:12:bb:a0:0b:26:79:0b: b8:fa:21:28:c7:72:02:14:29:bf:8a:56:01:1e:02: 97:2f:c4:ed:a6:fb:f0:bb:53:74:b8:f6:26:24:f1: 72:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C3:86:DE:83:A1:FD:2B:B9:8E:1B:B0:64:34:FA:29:39:67:8F:CC X509v3 Authority Key Identifier: keyid:95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:1d:ac:91:19:32:bc:96:d9:fd:32:b5:8c:20:62:e2:16:c0: f2:47:37:f7:f0:16:10:51:6d:9c:96:3e:68:f0:fb:c7:35:39: b7:29:d5:99:40:81:c9:1e:5f:ce:dc:aa:16:2d:a9:cf:b9:1e: df:ff:70:be:00:c5:8b:bf:4c:23:52:24:17:af:73:7e:29:41: 15:7e:8a:d4:39:5f:2b:57:b9:7b:b7:ff:cd:48:90:02:98:03: 0f:6e:da:da:e5:3e:fb:a0:86:69:b4:b9:31:52:9a:98:76:6f: 29:92:5d:03:4a:f8:e8:df:f1:f1:d3:f0:21:8f:2f:e8:d2:18: ad:ce:e8:fb:33:5e:ef:ce:4f:81:d9:73:43:8d:d4:80:fe:f1: d1:be:74:2d:45:26:02:b7:f6:bb:65:1a:23:99:3b:6f:6b:f9: 4c:d6:41:6d:ee:9d:e6:1b:91:ef:c3:c6:49:c2:f2:0b:8c:0a: 3e:2b:78:66:eb:04:6a:12:c3:83:64:fc:aa:47:c1:f4:96:c4: 7c:d4:88:02:e6:5a:1e:b6:3a:06:c9:ec:fd:9a:38:75:9f:9b: b0:9c:5a:db:f8:cf:1e:73:05:92:a1:47:4f:83:8e:e3:9c:04: a9:d3:19:87:15:5d:39:4c:56:3c:93:c4:46:40:05:3b:1c:60: a1:6c:26:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV9eINI+DYx/UjNgWHivrREAf60cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1NjAx OUFBODU5ODAeFw0yNjEwMTkxODU4MDlaFw0yNjEwMjAyMDIzMDlaMDMxMTAvBgNV BAMTKDNDQzM4NkRFODNBMUZEMkJCOThFMUJCMDY0MzRGQTI5Mzk2NzhGQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXQb/gxkoGU/78kOREhWC0gECv V374R0GNvptSMaDaqlexb9JiY0n4ZIpXoji0NS8FjkGGd5du+DX26m7A0/3mp+Ho CEkPcpJ27fJTsEStrmm7CVbBUEc/uO9g80/lic7U0HkF3FyalhNrvceRzOW+xpNP gwC4rF/stdw/UQczhnRxkVpSU0a7YM3PERI8m8a25uRLDjgdOxxdxNE5FdaVDnEn JJY2kYDkx5/JlZWchgpoCtJlvzt+qlQ7Uv6Fj4dqiSfAEQKEiWEywXVZAhjgexRL LRq4ivqCErugCyZ5C7j6ISjHcgIUKb+KVgEeApcvxO2m+/C7U3S49iYk8XJDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPMOG3oOh/Su5jhuwZDT6KTlnj8wwHwYDVR0j BBgwFoAUlcIkHa81gFl6cwAyvdg1YBmqhZgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ExYzRjMWYtNzE0MS00N2Q2LWE3ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURB RjM1ODA1OTdBNzMwMDMyQkREODM1NjAxOUFBODU5OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NUMyMjQxREFGMzU4MDU5N0E3MzAwMzJCREQ4MzU2MDE5QUE4 NTk4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ExYzRjMWYtNzE0MS00N2Q2LWE3 ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1 NjAxOUFBODU5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsdrJEZMryW2f0ytYwgYuIWwPJHN/fwFhBR bZyWPmjw+8c1Obcp1ZlAgckeX87cqhYtqc+5Ht//cL4AxYu/TCNSJBevc34pQRV+ itQ5XytXuXu3/81IkAKYAw9u2trlPvughmm0uTFSmph2bymSXQNK+Ojf8fHT8CGP L+jSGK3O6PszXu/OT4HZc0ON1ID+8dG+dC1FJgK39rtlGiOZO29r+UzWQW3uneYb ke/DxknC8guMCj4reGbrBGoSw4Nk/KpHwfSWxHzUiALmWh62OgbJ7P2aOHWfm7Cc Wtv4zx5zBZKhR0+DjuOcBKnTGYcVXTlMVjyTxEZABTscYKFsJjY= -----END CERTIFICATE-----Generated at Mon Oct 19 23:54:13 2026 by rpki-client