$ rpki-client -vvf rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft File: C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft (raw, json) Hash identifier: lZY54uyIEC837vnfUHY4yWRUKUlozjlES973+cH9t68= Subject key identifier: 8B:7A:A4:8E:76:85:1F:77:CD:50:8C:B0:27:EA:85:B3:F9:DF:F0:FF Authority key identifier: C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D Certificate issuer: /CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D Certificate serial: 22408DD5B82719BF91F662F9F1D529229475D5F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:54:09 +0000 Manifest this update: Tue 02 Jun 2026 19:49:09 +0000 Manifest next update: Wed 03 Jun 2026 23:46:09 +0000 Files and hashes: 1: C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl (hash: egqtWxbNk6MQUmpDm4Xmj9NLeYXpc/Q0pPSeukZgG/k=) 2: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: 8OYioJHXFDxSOXWT6kL63xMJJjG7Wo+wmLm6z+bx6x0=) 3: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 1gFxJKdThhrkplcpi1An+c+/wNEctIua90b5P0hZdUI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:40:8d:d5:b8:27:19:bf:91:f6:62:f9:f1:d5:29:22:94:75:d5:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D Validity Not Before: Jun 2 19:49:09 2026 GMT Not After : Jun 3 23:46:09 2026 GMT Subject: CN=8B7AA48E76851F77CD508CB027EA85B3F9DFF0FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:d5:77:82:16:a9:d8:be:c9:bf:21:a3:fd: c5:db:5d:70:3e:49:de:4e:b3:c7:4b:c4:b6:cb:86: 16:b2:76:2a:4f:91:86:62:36:a5:42:67:b9:f2:99: ee:8f:f8:d0:59:53:28:10:5f:db:d5:3a:4f:1c:e2: d5:c0:60:d9:66:86:0e:31:a6:bf:dd:b9:d5:16:06: bb:77:41:c4:81:ff:13:81:e9:b4:10:f2:ec:23:3e: 74:0a:35:f7:35:27:e2:85:d1:a2:f7:1c:d3:89:31: 6a:2a:c7:e4:18:75:0b:bf:1c:fc:c6:01:9e:e8:3b: 86:56:d3:c6:ea:2a:2e:43:d0:ab:66:cb:5c:d5:05: e1:da:22:5a:07:ae:db:d9:fe:cb:a0:df:e5:09:b2: b2:01:e6:af:98:29:1c:49:15:44:85:fd:7c:7d:49: 46:b6:6c:05:8b:e8:4b:d4:fc:50:e4:9a:01:af:46: c4:56:a2:43:bf:b5:56:96:46:99:f7:89:03:b4:0f: 8a:6b:13:04:52:bc:cf:84:e1:b6:da:30:48:53:63: a6:00:cf:15:4b:fb:2a:67:99:44:36:74:9b:dd:0b: 1b:b9:4e:1f:4f:ee:11:f7:d6:f2:6d:d3:fd:b1:fd: 5b:22:ac:9d:78:2b:53:07:58:2e:e8:45:ca:e5:92: 7e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7A:A4:8E:76:85:1F:77:CD:50:8C:B0:27:EA:85:B3:F9:DF:F0:FF X509v3 Authority Key Identifier: keyid:C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8d:89:4e:cd:08:73:3a:d2:f9:5c:b5:09:06:62:48:ab:15: 59:f9:a4:e4:ce:ed:09:de:d2:2d:3a:ea:fe:a1:e5:b5:da:4e: be:b1:62:63:ec:24:d5:de:dc:f7:e9:dd:7f:40:11:01:d6:83: 62:4d:de:5a:ce:b7:15:ad:ca:0c:e0:83:18:14:06:8a:8d:45: 32:e5:bc:2c:fe:c3:f6:01:ee:cf:cf:e8:58:fc:46:22:dc:67: ee:8b:f0:89:2b:06:da:51:f4:b5:02:fa:62:16:5c:c9:d7:a4: ae:c8:3d:50:a6:f1:8b:9f:49:36:ec:64:f8:30:1a:ec:b0:8f: 74:39:72:30:7e:0b:a0:8a:fa:ef:00:75:1f:f7:01:ba:01:03: d3:d3:e3:e8:80:fb:5c:52:d7:93:bb:8b:96:b0:e2:dc:5e:48: ac:22:13:42:8c:d1:e6:91:c3:79:b4:de:c8:9f:ec:c8:a8:18: 50:c0:c3:aa:55:dc:36:57:18:54:2f:2b:c9:82:50:00:e2:a0: 4e:8c:e9:b9:92:33:78:4e:2c:f1:a7:3c:91:1a:23:fe:74:1a: 3a:56:0d:4d:57:1e:2f:f7:19:4c:a6:bc:97:ca:d0:e3:cd:be: 94:b5:77:23:ce:cd:bc:b3:25:e0:ce:f8:e5:01:d9:a2:0d:58: 76:cd:db:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIkCN1bgnGb+R9mL58dUpIpR11fUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk1MERDMzUyOEUxNzQ5QzcyMUQ0Mzk4NTIzREExQkFG QjZCQkExRDAeFw0yNjA2MDIxOTQ5MDlaFw0yNjA2MDMyMzQ2MDlaMDMxMTAvBgNV BAMTKDhCN0FBNDhFNzY4NTFGNzdDRDUwOENCMDI3RUE4NUIzRjlERkYwRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC83dV3ghap2L7JvyGj/cXbXXA+ Sd5Os8dLxLbLhhaydipPkYZiNqVCZ7nyme6P+NBZUygQX9vVOk8c4tXAYNlmhg4x pr/dudUWBrt3QcSB/xOB6bQQ8uwjPnQKNfc1J+KF0aL3HNOJMWoqx+QYdQu/HPzG AZ7oO4ZW08bqKi5D0Ktmy1zVBeHaIloHrtvZ/sug3+UJsrIB5q+YKRxJFUSF/Xx9 SUa2bAWL6EvU/FDkmgGvRsRWokO/tVaWRpn3iQO0D4prEwRSvM+E4bbaMEhTY6YA zxVL+ypnmUQ2dJvdCxu5Th9P7hH31vJt0/2x/VsirJ14K1MHWC7oRcrlkn6BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi3qkjnaFH3fNUIywJ+qFs/nf8P8wHwYDVR0j BBgwFoAUyVDcNSjhdJxyHUOYUj2huvtruh0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1NjgtMWQ4NjMzNjBlNDIxLzAvQzk1MERDMzUy OEUxNzQ5QzcyMUQ0Mzk4NTIzREExQkFGQjZCQkExRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTUwREMzNTI4RTE3NDlDNzIxRDQzOTg1MjNEQTFCQUZCNkJC QTFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvQzk1MERDMzUyOEUxNzQ5QzcyMUQ0Mzk4NTIzREEx QkFGQjZCQkExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqNiU7NCHM60vlctQkGYkirFVn5pOTO7Qne 0i066v6h5bXaTr6xYmPsJNXe3Pfp3X9AEQHWg2JN3lrOtxWtygzggxgUBoqNRTLl vCz+w/YB7s/P6Fj8RiLcZ+6L8IkrBtpR9LUC+mIWXMnXpK7IPVCm8YufSTbsZPgw Guywj3Q5cjB+C6CK+u8AdR/3AboBA9PT4+iA+1xS15O7i5aw4txeSKwiE0KM0eaR w3m03sif7MioGFDAw6pV3DZXGFQvK8mCUADioE6M6bmSM3hOLPGnPJEaI/50GjpW DU1XHi/3GUymvJfK0OPNvpS1dyPOzbyzJeDO+OUB2aINWHbN2xc= -----END CERTIFICATE-----Generated at Wed Jun 3 04:21:00 2026 by rpki-client