$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft File: C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft (raw, json) Hash identifier: IivqCuafrBr0jRV4PQGq/AhHV3B9IWIbKSh1S+p23ws= Subject key identifier: 3A:D8:7A:42:13:6B:F3:CC:49:4F:28:B4:78:3F:00:A4:98:B6:E4:8F Authority key identifier: C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D Certificate issuer: /CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D Certificate serial: 73C4ED2AD464450EA6412B4AE0A0A64B49D810E6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 02:05:30 +0000 Manifest this update: Thu 03 Sep 2026 02:00:30 +0000 Manifest next update: Fri 04 Sep 2026 05:57:30 +0000 Files and hashes: 1: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 1gFxJKdThhrkplcpi1An+c+/wNEctIua90b5P0hZdUI=) 2: C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl (hash: ZpilrShTYqJTbc/BPn8Cuvt0BrXbvNF1a4NCCDPtDwM=) 3: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: 8OYioJHXFDxSOXWT6kL63xMJJjG7Wo+wmLm6z+bx6x0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 05:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c4:ed:2a:d4:64:45:0e:a6:41:2b:4a:e0:a0:a6:4b:49:d8:10:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D Validity Not Before: Sep 3 02:00:30 2026 GMT Not After : Sep 4 05:57:30 2026 GMT Subject: CN=3AD87A42136BF3CC494F28B4783F00A498B6E48F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e2:05:1c:e3:06:17:5f:46:0d:6d:9d:09:70: 13:a8:82:82:31:bc:01:ca:de:2a:cb:12:dd:21:95: 44:91:7e:7f:9f:69:26:d2:51:89:f8:14:37:18:57: e1:fb:40:85:c4:26:a3:7b:f4:08:c3:67:14:3b:7b: fa:60:8c:a8:e9:02:44:c4:38:48:e4:9b:3d:40:41: 49:34:d7:e0:2f:10:07:78:39:1b:1c:98:8d:12:be: 33:53:2c:e4:93:f9:bb:9f:92:f9:b9:6d:2f:ac:97: 0e:73:ee:99:5b:c6:5c:ca:f4:3b:cf:e7:b9:bb:8d: 4e:ff:83:eb:42:e4:a5:72:30:62:39:66:b7:b6:b9: 32:d2:b0:ad:2e:90:97:fb:5d:48:e8:33:fa:ca:a3: d4:1a:1b:cf:b9:57:55:86:16:ef:19:ff:9a:28:d6: ea:cd:bc:7e:f1:b4:90:0b:cf:48:6b:39:07:57:f3: 40:1c:69:f6:02:13:ed:a1:6a:2d:ef:66:91:dc:e3: e0:d0:9f:b1:1d:bf:76:eb:70:ed:b7:d7:9e:0d:6a: cf:b2:16:c9:88:28:24:ec:93:cd:dd:b7:a4:04:a5: 1d:77:6a:25:6c:68:21:e7:c2:89:28:18:1d:5a:dc: 72:66:66:5d:31:31:c1:2b:21:5c:23:be:30:b9:15: 0f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D8:7A:42:13:6B:F3:CC:49:4F:28:B4:78:3F:00:A4:98:B6:E4:8F X509v3 Authority Key Identifier: keyid:C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:71:77:5d:b5:e4:7d:b6:24:d0:a1:71:2b:00:82:ea:5d:9a: 8c:10:1d:c8:0b:89:1b:a9:d5:c8:21:89:52:3e:f4:6d:71:94: 94:8d:65:fe:5f:6d:c5:47:27:21:e4:43:d6:4f:00:f3:ea:58: d0:4a:80:2c:66:f5:b0:d7:af:75:d9:bb:d4:f5:91:cf:fd:4f: 95:ef:59:6f:d5:3d:91:35:82:da:c2:78:b5:92:99:6e:b5:57: af:24:d5:5f:7a:e8:f3:96:bd:07:df:4d:5d:06:4e:88:b1:01: 4a:ae:2c:2a:58:16:73:ad:0e:a3:36:f4:89:5a:47:f2:52:42: d0:16:ff:de:cf:a8:78:c0:00:55:0d:a1:2b:de:66:87:6e:3e: 21:3a:64:3f:3d:2f:88:4c:a7:3e:db:a1:fd:6c:f7:f9:1c:37: 88:9f:04:24:d4:34:64:44:11:30:da:92:ba:ed:9d:ef:d9:76: 77:d7:ca:6c:08:31:7f:df:ac:fe:ee:7b:f3:ab:01:bf:31:86: 22:d4:3b:23:e1:42:8f:68:8d:bc:86:ce:d9:86:d7:eb:c7:e9: c9:fa:3f:4f:41:15:8f:ec:26:d8:26:78:43:f1:38:a7:4b:b4: e6:96:c8:20:5e:c1:31:39:74:52:52:bf:eb:c8:a2:d6:14:8e: df:37:9a:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc8TtKtRkRQ6mQStK4KCmS0nYEOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk1MERDMzUyOEUxNzQ5QzcyMUQ0Mzk4NTIzREExQkFG QjZCQkExRDAeFw0yNjA5MDMwMjAwMzBaFw0yNjA5MDQwNTU3MzBaMDMxMTAvBgNV BAMTKDNBRDg3QTQyMTM2QkYzQ0M0OTRGMjhCNDc4M0YwMEE0OThCNkU0OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS4gUc4wYXX0YNbZ0JcBOogoIx vAHK3irLEt0hlUSRfn+faSbSUYn4FDcYV+H7QIXEJqN79AjDZxQ7e/pgjKjpAkTE OEjkmz1AQUk01+AvEAd4ORscmI0SvjNTLOST+bufkvm5bS+slw5z7plbxlzK9DvP 57m7jU7/g+tC5KVyMGI5Zre2uTLSsK0ukJf7XUjoM/rKo9QaG8+5V1WGFu8Z/5oo 1urNvH7xtJALz0hrOQdX80AcafYCE+2hai3vZpHc4+DQn7Edv3brcO23154Nas+y FsmIKCTsk83dt6QEpR13aiVsaCHnwokoGB1a3HJmZl0xMcErIVwjvjC5FQ+9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOth6QhNr88xJTyi0eD8ApJi25I8wHwYDVR0j BBgwFoAUyVDcNSjhdJxyHUOYUj2huvtruh0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1NjgtMWQ4NjMzNjBlNDIxLzAvQzk1MERDMzUy OEUxNzQ5QzcyMUQ0Mzk4NTIzREExQkFGQjZCQkExRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTUwREMzNTI4RTE3NDlDNzIxRDQzOTg1MjNEQTFCQUZCNkJC QTFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvQzk1MERDMzUyOEUxNzQ5QzcyMUQ0Mzk4NTIzREEx QkFGQjZCQkExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1xd1215H22JNChcSsAgupdmowQHcgLiRup 1cghiVI+9G1xlJSNZf5fbcVHJyHkQ9ZPAPPqWNBKgCxm9bDXr3XZu9T1kc/9T5Xv WW/VPZE1gtrCeLWSmW61V68k1V966POWvQffTV0GToixAUquLCpYFnOtDqM29Ila R/JSQtAW/97PqHjAAFUNoSveZoduPiE6ZD89L4hMpz7bof1s9/kcN4ifBCTUNGRE ETDakrrtne/ZdnfXymwIMX/frP7ue/OrAb8xhiLUOyPhQo9ojbyGztmG1+vH6cn6 P09BFY/sJtgmeEPxOKdLtOaWyCBewTE5dFJSv+vIotYUjt83mhY= -----END CERTIFICATE-----Generated at Thu Sep 3 18:04:25 2026 by rpki-client