$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft File: 95C0FEDF4348635C616CCD76866299FFF41521C1.mft (raw, json) Hash identifier: q3u+ROxVlOYSroDKCIXjdW99JjYSdm1+9i5wRuP/yBw= Subject key identifier: 63:A0:43:1D:5C:CB:5F:BA:62:35:AF:C2:EA:20:44:EB:E7:EA:24:61 Authority key identifier: 95:C0:FE:DF:43:48:63:5C:61:6C:CD:76:86:62:99:FF:F4:15:21:C1 Certificate issuer: /CN=95C0FEDF4348635C616CCD76866299FFF41521C1 Certificate serial: 4CE15A2C8B70FE1716167B9CADF8F46B6ED1CD2D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 04:18:14 +0000 Manifest this update: Tue 03 Nov 2026 04:13:14 +0000 Manifest next update: Wed 04 Nov 2026 04:43:14 +0000 Files and hashes: 1: 3130332e3134352e35322e302f32342d3234203d3e20313339343535.roa (hash: h+0fD6qzNLY/87deDA6R1jRhs0ceFeWyvO6Ew7fmyvY=) 2: 95C0FEDF4348635C616CCD76866299FFF41521C1.crl (hash: K/afANIpIBrCrp1gCM+NBnkB7FTuXoe1eYEWKT4l6xc=) 3: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (hash: nctWeqdG+C+yzM3us3hfFDeGU29WHbKA/XQo+aeaR/w=) 4: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (hash: O1v/bS1Rz6LYE4uphPLJ6skO/weLSpE9O9uIKbdx440=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.crl rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 04:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:e1:5a:2c:8b:70:fe:17:16:16:7b:9c:ad:f8:f4:6b:6e:d1:cd:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C0FEDF4348635C616CCD76866299FFF41521C1 Validity Not Before: Nov 3 04:13:14 2026 GMT Not After : Nov 4 04:43:14 2026 GMT Subject: CN=63A0431D5CCB5FBA6235AFC2EA2044EBE7EA2461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:57:a4:4c:b8:2f:6a:58:81:b9:e7:6f:0e:41: 1d:e3:f2:37:97:e6:09:27:35:0d:22:51:55:89:8c: d8:12:f5:b9:74:93:05:86:53:be:28:4c:0a:dc:14: d1:ae:d8:dd:1b:78:53:90:fc:64:ed:66:fb:b0:64: 88:7d:8a:73:37:18:d1:be:59:68:db:30:96:3e:53: 07:e8:38:a8:c9:3f:da:c2:e4:63:e1:b1:9c:06:20: b4:ec:3c:76:93:2b:ce:cf:91:aa:c5:8f:77:29:ff: 3e:77:69:bc:3a:c0:b3:2c:19:82:2e:49:6e:16:00: 53:9c:77:77:43:cd:82:e7:32:41:8d:1b:8a:ad:e6: ed:cf:28:c3:72:35:1e:05:8b:4b:8e:fe:da:ac:ef: 91:0f:ef:7c:1b:5c:24:a8:8f:a5:6b:1a:05:4c:a7: 0c:07:31:61:b8:5f:1a:43:ef:f7:07:bd:1d:b1:02: e2:3a:8a:10:43:6a:3d:b9:bc:23:43:03:a1:07:a3: f3:fd:54:b3:92:76:2b:3a:96:21:82:26:49:8a:85: ef:2f:bf:31:f5:9e:0d:9b:54:e5:ea:1c:16:7c:79: d2:a5:75:55:70:cc:d8:08:ba:14:ee:d9:6f:da:bd: 28:47:cf:ce:10:35:9d:90:fe:28:a9:c1:d0:b2:e7: 3e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A0:43:1D:5C:CB:5F:BA:62:35:AF:C2:EA:20:44:EB:E7:EA:24:61 X509v3 Authority Key Identifier: keyid:95:C0:FE:DF:43:48:63:5C:61:6C:CD:76:86:62:99:FF:F4:15:21:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:cd:fa:d6:96:c0:cc:76:62:96:a1:a6:36:55:77:5c:c3:4c: 03:d4:73:78:1b:ad:d9:e1:82:d8:d8:41:b6:fa:16:25:d5:8b: 6a:18:31:f6:fb:39:87:8b:ba:4c:04:91:cc:28:ec:7e:6f:8a: 39:01:26:55:08:36:2f:c1:8d:39:05:c3:6c:43:c2:ec:cb:d3: 69:45:79:22:78:2d:9c:74:48:b6:35:2b:db:8e:34:09:c4:b3: 96:84:fe:aa:5d:40:d8:9e:a4:8b:e8:7e:a4:2d:4d:55:87:32: 26:e2:89:81:d9:4a:ea:84:c7:82:53:6b:be:f5:3f:6f:dc:fb: 4f:f8:81:8f:cb:7c:25:dc:1a:fb:c6:09:bc:ef:6e:33:0f:8f: f9:98:aa:74:55:52:d0:07:07:b0:67:f0:e8:dc:48:01:f4:ac: 4a:d5:e7:2b:3d:b8:48:f6:61:1d:84:c3:2d:4f:d0:fc:42:72: 2e:13:0e:41:c0:80:12:61:04:be:58:ef:67:d0:52:fa:3c:87: c2:1d:ba:74:dd:f8:d7:8b:9d:24:62:44:63:93:d2:62:26:5f: d7:3c:b3:da:8e:46:3b:2a:2d:3d:ef:b6:c4:c6:a6:b4:78:9f: 53:5e:d2:83:82:48:9c:0c:a5:b4:23:98:f4:fa:af:69:7e:fb: 74:0d:41:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTOFaLItw/hcWFnucrfj0a27RzS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDMEZFREY0MzQ4NjM1QzYxNkNDRDc2ODY2Mjk5RkZG NDE1MjFDMTAeFw0yNjExMDMwNDEzMTRaFw0yNjExMDQwNDQzMTRaMDMxMTAvBgNV BAMTKDYzQTA0MzFENUNDQjVGQkE2MjM1QUZDMkVBMjA0NEVCRTdFQTI0NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7V6RMuC9qWIG5528OQR3j8jeX 5gknNQ0iUVWJjNgS9bl0kwWGU74oTArcFNGu2N0beFOQ/GTtZvuwZIh9inM3GNG+ WWjbMJY+UwfoOKjJP9rC5GPhsZwGILTsPHaTK87PkarFj3cp/z53abw6wLMsGYIu SW4WAFOcd3dDzYLnMkGNG4qt5u3PKMNyNR4Fi0uO/tqs75EP73wbXCSoj6VrGgVM pwwHMWG4XxpD7/cHvR2xAuI6ihBDaj25vCNDA6EHo/P9VLOSdis6liGCJkmKhe8v vzH1ng2bVOXqHBZ8edKldVVwzNgIuhTu2W/avShHz84QNZ2Q/iipwdCy5z7bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY6BDHVzLX7piNa/C6iBE6+fqJGEwHwYDVR0j BBgwFoAUlcD+30NIY1xhbM12hmKZ//QVIcEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjc3ZmZlMmEtMzFlNC00ODAwLTk3ZDQtNzg3NGMxMjMxOTExLzAvOTVDMEZFREY0 MzQ4NjM1QzYxNkNDRDc2ODY2Mjk5RkZGNDE1MjFDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NUMwRkVERjQzNDg2MzVDNjE2Q0NENzY4NjYyOTlGRkY0MTUy MUMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjc3ZmZlMmEtMzFlNC00ODAwLTk3 ZDQtNzg3NGMxMjMxOTExLzAvOTVDMEZFREY0MzQ4NjM1QzYxNkNDRDc2ODY2Mjk5 RkZGNDE1MjFDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXN+taWwMx2YpahpjZVd1zDTAPUc3gbrdnh gtjYQbb6FiXVi2oYMfb7OYeLukwEkcwo7H5vijkBJlUINi/BjTkFw2xDwuzL02lF eSJ4LZx0SLY1K9uONAnEs5aE/qpdQNiepIvofqQtTVWHMibiiYHZSuqEx4JTa771 P2/c+0/4gY/LfCXcGvvGCbzvbjMPj/mYqnRVUtAHB7Bn8OjcSAH0rErV5ys9uEj2 YR2Ewy1P0PxCci4TDkHAgBJhBL5Y72fQUvo8h8IdunTd+NeLnSRiRGOT0mImX9c8 s9qORjsqLT3vtsTGprR4n1Ne0oOCSJwMpbQjmPT6r2l++3QNQVs= -----END CERTIFICATE-----Generated at Tue Nov 3 20:49:25 2026 by rpki-client