$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft File: 95C2241DAF3580597A730032BDD8356019AA8598.mft (raw, json) Hash identifier: AE3NO5GZd5akEImtfm4NSYKSU6ooUb8tn7VDTMu4bh0= Subject key identifier: 87:8B:6B:35:CB:DB:CC:28:A8:41:DF:97:89:59:F3:E5:59:03:70:5C Authority key identifier: 95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 Certificate issuer: /CN=95C2241DAF3580597A730032BDD8356019AA8598 Certificate serial: 26120DA0AE040E202B99E50CCCE0E941BECC3F47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 03:06:44 +0000 Manifest this update: Thu 03 Sep 2026 03:01:44 +0000 Manifest next update: Fri 04 Sep 2026 05:40:44 +0000 Files and hashes: 1: 3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (hash: HPli/3Qu6kod/7xjBSFbg6jtPr5ON8VO23CexUu2Djc=) 2: 3130332e39362e35322e302f32342d3234203d3e20313534343130.roa (hash: DZZr3wFG43up9aE69tnG8Ls9OH8+Et1zoRrcXN9QSWM=) 3: 323030313a6466323a6634303a3a2f34382d3438203d3e20313530393232.roa (hash: zqwI6m4XrFv8eZM9FUpfWXpZ18MF12p+MPV+FGxatII=) 4: 3130332e39362e35332e302f32342d3234203d3e20313534343130.roa (hash: lhdzmYQ+4NDivJfAldib42nRBStQ7ZYmo6omhPmOepI=) 5: 3130332e39362e35322e302f32342d3234203d3e20323135373237.roa (hash: XQXfUBbOhxVs8/s2589fLuZ2gOOuek0QydHFHlibVLk=) 6: 95C2241DAF3580597A730032BDD8356019AA8598.crl (hash: 8ccGWN/wiQLDlh2y+dL+Z37R83TH5Wa41f8kiVGxXhQ=) 7: 3130332e39362e35332e302f32342d3234203d3e20323135373237.roa (hash: 0wPUMAsuo5ZHSc/EbFWdWxfuAnUpnc2Dl/9rdO80RmQ=) 8: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (hash: dzNpcw838jqHTmD5WMvONS88+Ve5iK9R+so7TDu1v9o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 05:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:12:0d:a0:ae:04:0e:20:2b:99:e5:0c:cc:e0:e9:41:be:cc:3f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C2241DAF3580597A730032BDD8356019AA8598 Validity Not Before: Sep 3 03:01:44 2026 GMT Not After : Sep 4 05:40:44 2026 GMT Subject: CN=878B6B35CBDBCC28A841DF978959F3E55903705C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8a:ec:33:ef:c3:c5:1e:2a:04:5a:84:a0:8f: 46:77:65:45:02:01:39:01:56:b8:8f:da:a0:82:fb: 1d:ea:5a:7f:31:08:a7:de:05:43:6d:28:00:c8:08: f8:17:e2:1c:fb:6f:7f:2e:9d:de:95:4f:26:a4:9a: a3:ce:cc:dd:17:ad:2c:72:d3:63:38:49:99:3d:b2: 42:ad:0b:22:c3:1e:a8:4b:fe:44:95:06:f5:9a:8f: c7:63:38:5a:da:ca:68:5e:b6:e8:b9:03:e1:53:9d: 8f:29:3f:e8:dd:69:4f:47:47:66:a7:e6:04:97:95: a6:42:35:9c:9f:eb:e3:18:c7:31:67:d5:2e:59:06: 22:a2:20:02:46:5e:e9:04:19:0a:54:16:2f:7a:7a: 6c:2e:52:34:8f:1b:0e:8a:8b:07:68:26:9b:d6:01: a5:49:5d:91:11:e0:20:3e:e8:e5:96:77:1d:2c:d5: ff:96:30:97:fd:fa:5a:62:7a:86:b2:b9:57:8b:c9: fa:3b:a9:8e:b3:4e:f1:58:a4:5b:69:42:5f:f6:22: 83:0d:dc:73:74:7c:0b:42:2c:1b:b0:33:d7:bf:e7: f2:c2:d8:ac:b3:80:4c:c5:20:c7:37:fa:ae:03:28: 4c:76:2e:b0:a7:7c:88:87:b0:d4:e0:4e:3b:ca:c8: 35:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8B:6B:35:CB:DB:CC:28:A8:41:DF:97:89:59:F3:E5:59:03:70:5C X509v3 Authority Key Identifier: keyid:95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:90:51:19:a3:98:29:a9:70:95:df:bc:96:f0:2a:27:9b:ce: 49:e4:e4:95:26:91:22:02:34:89:07:af:19:a7:77:2f:c8:0f: 65:1c:6b:7e:83:bb:81:23:6a:c3:ba:15:d0:a7:63:a7:12:ed: 6b:07:f1:0c:6b:7e:05:58:07:07:6e:21:72:bd:62:24:89:23: 94:df:e3:09:4b:c9:db:b8:ff:9b:1f:b3:90:af:20:ab:6a:b9: fe:ee:30:2b:b2:6b:c8:f2:e0:ec:45:5b:56:ed:f2:db:fe:2e: 54:9a:c6:99:c6:39:00:74:8f:09:8f:d5:49:92:ef:5d:66:f1: 99:c7:27:be:29:e0:47:32:1f:2b:44:15:39:46:1f:01:87:66: 9a:21:1b:7d:40:2d:5a:ef:9f:c8:f6:4c:ca:dd:9f:45:e4:ab: 56:a0:ef:9b:ce:91:73:c4:02:77:d6:12:3d:e6:c9:08:f1:e7: a0:4b:cd:d2:af:f7:f5:bd:32:7e:58:a2:de:7d:23:f4:4c:32: a7:e5:74:f5:94:a8:45:36:dd:4e:31:30:2c:3e:4e:7b:6c:a5: 94:d8:52:d9:74:82:ce:72:12:61:e2:7f:1f:b7:ff:0d:1b:2e: bb:ee:db:4b:84:4b:96:a2:f9:3e:99:bf:3d:cd:d6:86:8f:4f: 27:14:e0:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJhINoK4EDiArmeUMzODpQb7MP0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1NjAx OUFBODU5ODAeFw0yNjA5MDMwMzAxNDRaFw0yNjA5MDQwNTQwNDRaMDMxMTAvBgNV BAMTKDg3OEI2QjM1Q0JEQkNDMjhBODQxREY5Nzg5NTlGM0U1NTkwMzcwNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGiuwz78PFHioEWoSgj0Z3ZUUC ATkBVriP2qCC+x3qWn8xCKfeBUNtKADICPgX4hz7b38und6VTyakmqPOzN0XrSxy 02M4SZk9skKtCyLDHqhL/kSVBvWaj8djOFraymhetui5A+FTnY8pP+jdaU9HR2an 5gSXlaZCNZyf6+MYxzFn1S5ZBiKiIAJGXukEGQpUFi96emwuUjSPGw6KiwdoJpvW AaVJXZER4CA+6OWWdx0s1f+WMJf9+lpieoayuVeLyfo7qY6zTvFYpFtpQl/2IoMN 3HN0fAtCLBuwM9e/5/LC2KyzgEzFIMc3+q4DKEx2LrCnfIiHsNTgTjvKyDUTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh4trNcvbzCioQd+XiVnz5VkDcFwwHwYDVR0j BBgwFoAUlcIkHa81gFl6cwAyvdg1YBmqhZgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ExYzRjMWYtNzE0MS00N2Q2LWE3ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURB RjM1ODA1OTdBNzMwMDMyQkREODM1NjAxOUFBODU5OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NUMyMjQxREFGMzU4MDU5N0E3MzAwMzJCREQ4MzU2MDE5QUE4 NTk4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ExYzRjMWYtNzE0MS00N2Q2LWE3 ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1 NjAxOUFBODU5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6QURmjmCmpcJXfvJbwKiebzknk5JUmkSIC NIkHrxmndy/ID2Uca36Du4EjasO6FdCnY6cS7WsH8QxrfgVYBwduIXK9YiSJI5Tf 4wlLydu4/5sfs5CvIKtquf7uMCuya8jy4OxFW1bt8tv+LlSaxpnGOQB0jwmP1UmS 711m8ZnHJ74p4EcyHytEFTlGHwGHZpohG31ALVrvn8j2TMrdn0Xkq1ag75vOkXPE AnfWEj3myQjx56BLzdKv9/W9Mn5Yot59I/RMMqfldPWUqEU23U4xMCw+TntspZTY Utl0gs5yEmHifx+3/w0bLrvu20uES5ai+T6Zvz3N1oaPTycU4LQ= -----END CERTIFICATE-----Generated at Thu Sep 3 20:49:31 2026 by rpki-client