$ rpki-client -vvf rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft File: C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft (raw, json) Hash identifier: LiCQbAPkKA+6MQBRdfNGG9cBJObsAGFcRvYUc8da3mo= Subject key identifier: BE:AD:18:88:AC:E8:CF:E7:F3:07:6C:1C:09:72:B4:AE:47:7E:1C:B4 Authority key identifier: C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D Certificate issuer: /CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D Certificate serial: 321477B87189AAAA01C5B2C052639C4D8FBB4279 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 10:55:15 +0000 Manifest this update: Sun 19 Jul 2026 10:50:15 +0000 Manifest next update: Mon 20 Jul 2026 11:04:15 +0000 Files and hashes: 1: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: 8OYioJHXFDxSOXWT6kL63xMJJjG7Wo+wmLm6z+bx6x0=) 2: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 1gFxJKdThhrkplcpi1An+c+/wNEctIua90b5P0hZdUI=) 3: C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl (hash: GlwdT0xjbhRXq1QBWDOX8Q7Hj7DsPUJJ9cTncMPtEZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:14:77:b8:71:89:aa:aa:01:c5:b2:c0:52:63:9c:4d:8f:bb:42:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D Validity Not Before: Jul 19 10:50:15 2026 GMT Not After : Jul 20 11:04:15 2026 GMT Subject: CN=BEAD1888ACE8CFE7F3076C1C0972B4AE477E1CB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d6:11:05:57:60:77:a1:6a:71:c3:4a:ce:2d: b6:56:e1:37:c5:81:cd:67:00:a8:ea:b5:46:3f:a1: fd:98:d9:58:b8:5a:24:03:e7:fe:a0:a7:d0:03:43: a0:98:50:4d:1f:45:32:94:d5:72:4b:a0:a0:06:0c: ff:16:31:32:2a:bf:84:4a:e0:67:68:c4:92:0b:2b: f4:72:df:f7:9b:8e:02:a4:d2:82:85:81:17:34:00: 2b:74:14:3e:4e:b9:9a:8c:ee:e6:4c:44:0b:b7:19: 03:30:25:ed:07:e6:30:20:1d:24:f0:c8:cc:00:45: a6:91:7f:f6:41:04:50:18:45:17:16:41:8c:49:bd: 67:29:9d:b3:e9:df:1f:86:28:82:aa:c5:73:68:4e: 94:fd:7a:94:71:e3:db:a1:74:52:71:3c:74:2b:53: 4d:74:8e:73:a7:56:97:2c:b1:e1:b1:89:87:1a:84: 16:5a:bf:a6:cb:32:0f:00:42:20:c8:4d:6b:ea:14: 21:56:c4:57:6c:6d:88:b9:ad:11:16:12:1a:69:d0: 5b:19:1e:54:d6:e6:c2:76:bc:b7:40:db:b7:86:c5: bc:b1:4d:7a:9f:a5:77:ff:72:00:28:8a:b4:52:37: a7:e4:f5:11:24:01:81:af:8f:45:03:ed:66:83:60: d0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AD:18:88:AC:E8:CF:E7:F3:07:6C:1C:09:72:B4:AE:47:7E:1C:B4 X509v3 Authority Key Identifier: keyid:C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:01:61:05:ae:af:a2:db:90:60:9d:50:45:e9:e4:4c:48:00: 26:6e:57:91:68:ca:80:40:1b:f4:98:03:8d:78:bf:f4:5e:ab: e2:5a:db:1c:72:6f:5b:c5:e6:57:84:5d:23:d9:aa:3f:a0:88: 80:28:bc:6f:ae:e9:5d:2c:d9:dd:bb:fd:60:a1:0e:06:41:81: a7:32:02:d0:05:da:a2:0a:be:5d:58:5d:8f:92:fc:6d:fc:f8: bb:83:1f:8e:30:d9:7d:22:0b:90:51:59:63:bc:15:5d:74:65: 61:45:c9:ec:58:82:7d:15:25:af:a0:00:37:9e:d2:cc:65:12: 31:cf:ff:c9:e0:4b:36:7b:8f:dc:71:65:ef:56:73:4d:bf:c1: 6e:e8:92:27:fe:cb:67:66:ad:73:65:46:69:25:3c:39:a8:78: b8:5f:39:74:eb:77:63:d9:fe:95:00:b8:a2:ab:14:b1:9c:f9: 6a:f0:ee:44:ba:90:aa:da:cd:12:93:ee:f7:59:ef:a6:d6:d0: dc:ed:0c:e3:6c:d7:0d:11:71:1a:07:f7:c9:3e:4f:e9:42:76: b2:26:67:b3:1a:47:5e:de:ea:90:a2:2c:b0:32:96:f3:70:36: f1:b4:fd:59:7e:b8:54:b5:1f:c9:e4:c1:29:52:90:3e:c6:19: 51:a2:29:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMhR3uHGJqqoBxbLAUmOcTY+7QnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk1MERDMzUyOEUxNzQ5QzcyMUQ0Mzk4NTIzREExQkFG QjZCQkExRDAeFw0yNjA3MTkxMDUwMTVaFw0yNjA3MjAxMTA0MTVaMDMxMTAvBgNV BAMTKEJFQUQxODg4QUNFOENGRTdGMzA3NkMxQzA5NzJCNEFFNDc3RTFDQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt1hEFV2B3oWpxw0rOLbZW4TfF gc1nAKjqtUY/of2Y2Vi4WiQD5/6gp9ADQ6CYUE0fRTKU1XJLoKAGDP8WMTIqv4RK 4GdoxJILK/Ry3/ebjgKk0oKFgRc0ACt0FD5OuZqM7uZMRAu3GQMwJe0H5jAgHSTw yMwARaaRf/ZBBFAYRRcWQYxJvWcpnbPp3x+GKIKqxXNoTpT9epRx49uhdFJxPHQr U010jnOnVpcsseGxiYcahBZav6bLMg8AQiDITWvqFCFWxFdsbYi5rREWEhpp0FsZ HlTW5sJ2vLdA27eGxbyxTXqfpXf/cgAoirRSN6fk9REkAYGvj0UD7WaDYNAtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvq0YiKzoz+fzB2wcCXK0rkd+HLQwHwYDVR0j BBgwFoAUyVDcNSjhdJxyHUOYUj2huvtruh0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1NjgtMWQ4NjMzNjBlNDIxLzAvQzk1MERDMzUy OEUxNzQ5QzcyMUQ0Mzk4NTIzREExQkFGQjZCQkExRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTUwREMzNTI4RTE3NDlDNzIxRDQzOTg1MjNEQTFCQUZCNkJC QTFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvQzk1MERDMzUyOEUxNzQ5QzcyMUQ0Mzk4NTIzREEx QkFGQjZCQkExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsBYQWur6LbkGCdUEXp5ExIACZuV5FoyoBA G/SYA414v/Req+Ja2xxyb1vF5leEXSPZqj+giIAovG+u6V0s2d27/WChDgZBgacy AtAF2qIKvl1YXY+S/G38+LuDH44w2X0iC5BRWWO8FV10ZWFFyexYgn0VJa+gADee 0sxlEjHP/8ngSzZ7j9xxZe9Wc02/wW7okif+y2dmrXNlRmklPDmoeLhfOXTrd2PZ /pUAuKKrFLGc+Wrw7kS6kKrazRKT7vdZ76bW0NztDONs1w0RcRoH98k+T+lCdrIm Z7MaR17e6pCiLLAylvNwNvG0/Vl+uFS1H8nkwSlSkD7GGVGiKYA= -----END CERTIFICATE-----Generated at Sun Jul 19 23:58:08 2026 by rpki-client