$ rpki-client -vvf rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft File: 950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft (raw, json) Hash identifier: MOkj2Wag+k/adg8Wmzb4zw4ztsLJmd+VUFvDCkNxUVY= Subject key identifier: 0D:3E:AC:1E:6E:F3:07:E2:3C:8C:E4:04:A2:31:9A:95:52:C9:A2:FD Authority key identifier: 95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51 Certificate issuer: /CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751 Certificate serial: 7B5BBD5ED9B2FAE62F5136BBCD5EFC007FE94455 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 13:11:17 +0000 Manifest this update: Tue 02 Jun 2026 13:06:17 +0000 Manifest next update: Wed 03 Jun 2026 16:50:17 +0000 Files and hashes: 1: 3130332e3136322e3233382e302f32342d3234203d3e20313431363639.roa (hash: viFyM1HFUzcMqtq2FKm6xB7dBBL2CbC6fte+ULEjCo4=) 2: 3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa (hash: Ko0biNHo/OilJd2E0SwGMCh23IyoKfHyT2KDez8VfH4=) 3: 950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl (hash: 70Drd9ZqUir3EAIBtQrFgmlN5f872V/OJ77WQQlc9ng=) 4: 3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa (hash: 2Og4FIysb2wd35eqOCjNVfXf+ZPGg3kEvtQOXJnk+xE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:5b:bd:5e:d9:b2:fa:e6:2f:51:36:bb:cd:5e:fc:00:7f:e9:44:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751 Validity Not Before: Jun 2 13:06:17 2026 GMT Not After : Jun 3 16:50:17 2026 GMT Subject: CN=0D3EAC1E6EF307E23C8CE404A2319A9552C9A2FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:63:e7:c7:05:ec:42:5f:1b:ea:43:f0:1d:e6: 39:06:63:4b:f6:e3:18:99:e7:2e:c8:fd:ff:a4:70: 8e:0f:18:a1:07:7a:9f:7b:12:94:dd:b4:eb:8b:6c: a6:1e:36:e8:ac:bb:fe:d0:9e:fe:a0:9e:0b:d0:e1: 79:a9:da:a1:c6:5a:77:21:d7:41:70:22:88:06:ef: 8c:24:eb:bd:8a:03:eb:ae:1c:ea:b3:e8:0a:d5:ac: de:00:d9:5b:37:da:8f:e4:1d:00:9d:17:ea:b1:f1: 1a:f2:25:1c:d5:4e:1e:06:e6:49:ba:36:1c:92:eb: e1:5d:92:93:38:b9:8b:f1:9b:bc:55:d0:aa:07:6e: 38:e1:a6:3d:18:8c:20:36:c9:00:82:1f:9e:a4:48: 6b:66:64:cf:2f:06:8c:d8:b0:5e:ef:75:b3:1c:f7: db:97:bb:5d:bf:34:3e:7e:c9:72:78:55:5c:d2:e8: 9f:af:67:67:83:a2:e8:17:b3:1f:74:42:a9:80:94: b5:7a:69:3e:b9:69:a3:8c:65:30:9f:7f:c3:e6:ca: bc:c4:f3:60:6e:6a:be:50:37:fc:50:89:63:dd:bb: 86:4e:c9:66:a7:9c:64:20:7a:dd:80:f0:1c:70:98: 5e:4a:93:13:17:ab:57:05:cb:cd:dc:82:79:b1:60: 8a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3E:AC:1E:6E:F3:07:E2:3C:8C:E4:04:A2:31:9A:95:52:C9:A2:FD X509v3 Authority Key Identifier: keyid:95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:e5:0e:0d:12:4a:d7:08:41:f6:f7:1f:4e:05:e6:99:50:21: 22:02:e5:4f:41:61:61:64:47:44:af:3c:6c:35:e3:08:96:55: 29:99:f6:85:f5:1b:5b:1b:c5:a6:20:f7:e9:c1:a4:70:1b:9c: 2b:97:af:41:f8:36:9d:c3:cb:22:ea:95:5e:f0:ed:7b:1a:49: 08:8a:c6:74:1e:83:60:8d:8c:79:0f:36:65:d9:9c:ea:56:2a: cd:82:3d:80:a6:29:1d:f3:23:4d:db:b4:2a:74:b9:f8:9c:0c: d2:69:8a:2b:29:fc:27:85:bc:44:60:e9:11:47:77:c4:a0:e2: 48:b2:d4:91:bd:39:98:be:15:5d:65:51:33:6b:d7:e5:cd:05: 27:88:58:94:0c:10:80:c8:9a:34:1e:36:05:64:d2:71:74:8f: 67:33:26:29:6d:f8:1b:36:76:43:2c:5a:35:c2:fa:02:8e:c4: 15:b5:29:2b:38:f6:80:e5:5f:ce:9a:58:3f:1c:4d:77:fe:fe: 35:68:a0:ff:15:8b:23:12:a7:03:b0:c3:ce:dd:42:ed:6a:74: e3:c6:9d:b9:c8:0b:a0:3b:c1:86:fa:b6:0b:4c:5e:cc:30:b8: 7a:01:c9:b4:83:54:e7:ea:44:34:10:93:48:c3:19:82:3b:71: 94:1f:db:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe1u9Xtmy+uYvUTa7zV78AH/pRFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUwQkNBRUI1MTlFNTFDOTk3NDMyQTNDRDNFNUZCMkJB Q0E4Rjc1MTAeFw0yNjA2MDIxMzA2MTdaFw0yNjA2MDMxNjUwMTdaMDMxMTAvBgNV BAMTKDBEM0VBQzFFNkVGMzA3RTIzQzhDRTQwNEEyMzE5QTk1NTJDOUEyRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdY+fHBexCXxvqQ/Ad5jkGY0v2 4xiZ5y7I/f+kcI4PGKEHep97EpTdtOuLbKYeNuisu/7Qnv6gngvQ4Xmp2qHGWnch 10FwIogG74wk672KA+uuHOqz6ArVrN4A2Vs32o/kHQCdF+qx8RryJRzVTh4G5km6 NhyS6+FdkpM4uYvxm7xV0KoHbjjhpj0YjCA2yQCCH56kSGtmZM8vBozYsF7vdbMc 99uXu12/ND5+yXJ4VVzS6J+vZ2eDougXsx90QqmAlLV6aT65aaOMZTCff8PmyrzE 82Buar5QN/xQiWPdu4ZOyWannGQget2A8BxwmF5KkxMXq1cFy83cgnmxYIrzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDT6sHm7zB+I8jOQEojGalVLJov0wHwYDVR0j BBgwFoAUlQvK61GeUcmXQyo80+X7K6yo91EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFmNjk4NGYtY2NmOS00YzQwLWIxMTQtMzgwMzU2YThjZDg4LzAvOTUwQkNBRUI1 MTlFNTFDOTk3NDMyQTNDRDNFNUZCMkJBQ0E4Rjc1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTBCQ0FFQjUxOUU1MUM5OTc0MzJBM0NEM0U1RkIyQkFDQThG NzUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFmNjk4NGYtY2NmOS00YzQwLWIx MTQtMzgwMzU2YThjZDg4LzAvOTUwQkNBRUI1MTlFNTFDOTk3NDMyQTNDRDNFNUZC MkJBQ0E4Rjc1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJflDg0SStcIQfb3H04F5plQISIC5U9BYWFk R0SvPGw14wiWVSmZ9oX1G1sbxaYg9+nBpHAbnCuXr0H4Np3DyyLqlV7w7XsaSQiK xnQeg2CNjHkPNmXZnOpWKs2CPYCmKR3zI03btCp0uficDNJpiisp/CeFvERg6RFH d8Sg4kiy1JG9OZi+FV1lUTNr1+XNBSeIWJQMEIDImjQeNgVk0nF0j2czJilt+Bs2 dkMsWjXC+gKOxBW1KSs49oDlX86aWD8cTXf+/jVooP8ViyMSpwOww87dQu1qdOPG nbnIC6A7wYb6tgtMXswwuHoBybSDVOfqRDQQk0jDGYI7cZQf24g= -----END CERTIFICATE-----Generated at Wed Jun 3 04:21:01 2026 by rpki-client