$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft File: 95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft (raw, json) Hash identifier: P0LEqy4gmfvTRak6IaOBighU56zHetplMk/zk1XKpKk= Subject key identifier: 57:03:65:35:4F:D8:DD:D4:AB:AC:32:CC:87:E8:FE:08:42:47:DC:72 Authority key identifier: 95:E9:D0:33:C4:4A:D5:03:C4:29:A7:82:A6:4C:7B:0A:F8:A9:FF:36 Certificate issuer: /CN=95E9D033C44AD503C429A782A64C7B0AF8A9FF36 Certificate serial: 1B8145AEE2858034388909DCE4985660B822B54A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:58:32 +0000 Manifest this update: Tue 02 Jun 2026 10:53:32 +0000 Manifest next update: Wed 03 Jun 2026 14:47:32 +0000 Files and hashes: 1: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (hash: 0J9oKNbFkC4ek4+yIhYejI4HBbjKDbQ0B3Yfg4Dgqy4=) 2: 95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl (hash: ETE+QeaADheZHVoidYBKAjn2mOBmdvG7T03bW0QpVrg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:81:45:ae:e2:85:80:34:38:89:09:dc:e4:98:56:60:b8:22:b5:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95E9D033C44AD503C429A782A64C7B0AF8A9FF36 Validity Not Before: Jun 2 10:53:32 2026 GMT Not After : Jun 3 14:47:32 2026 GMT Subject: CN=570365354FD8DDD4ABAC32CC87E8FE084247DC72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:12:ef:56:f1:65:01:36:c8:e0:0d:d3:58:cb: d9:97:12:a3:d2:d3:84:4d:dd:12:cd:47:09:11:20: 17:85:56:44:e7:08:50:85:46:f4:f5:38:b6:a2:26: 6a:47:1f:8b:96:51:97:68:42:b6:3f:f9:90:71:d9: 2b:ea:b8:27:05:0d:c4:17:49:06:e7:84:7f:29:66: d5:e1:62:bf:f1:99:b8:e2:96:22:b0:6e:bc:14:9b: 77:7d:50:11:c9:ac:4b:ef:cf:57:4e:ce:48:7a:3c: 39:74:76:3d:b3:0d:e3:ea:f2:6d:00:27:f3:2e:fa: 68:48:1c:bc:42:3f:bf:b4:0f:aa:bd:04:d8:21:b3: 48:48:83:41:66:1b:af:90:66:42:ae:fc:3f:69:1a: 5f:2d:01:cc:d0:65:4d:d7:13:ff:79:f6:a1:3a:ca: ac:0d:5a:f2:1f:8d:a4:53:a8:61:40:e5:0d:e3:1d: 02:60:8f:15:db:0e:13:6d:b6:48:61:ce:ed:54:66: a0:ec:53:4d:a0:4d:40:75:54:26:80:90:d6:dc:18: a5:7b:9f:a4:d5:c8:9a:2d:8b:e9:7c:52:f3:c2:7a: bd:d0:46:6a:f3:46:38:aa:a4:78:91:ff:03:1e:c7: e0:08:ef:00:fb:06:86:ba:6b:3f:ab:9d:64:31:75: d6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:03:65:35:4F:D8:DD:D4:AB:AC:32:CC:87:E8:FE:08:42:47:DC:72 X509v3 Authority Key Identifier: keyid:95:E9:D0:33:C4:4A:D5:03:C4:29:A7:82:A6:4C:7B:0A:F8:A9:FF:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/95E9D033C44AD503C429A782A64C7B0AF8A9FF36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:57:38:3f:ef:f9:bb:f7:30:a3:1b:54:f5:b4:51:d3:aa:c8: 98:ae:64:0f:bd:ae:47:6b:82:a5:75:95:4c:4a:d3:6f:45:68: d5:3f:34:74:f6:a8:c4:d3:c3:06:2b:06:64:e6:3c:99:1c:60: 46:a8:f2:c1:23:84:37:94:e7:72:0e:4c:14:4f:6b:49:f9:b9: 04:50:24:a8:a9:55:b2:8e:4c:a1:44:86:4a:ae:58:9b:f0:65: 14:83:b0:96:08:23:df:87:d5:1f:ce:cf:e9:9f:06:73:46:a7: 01:65:a5:5a:65:08:26:66:0f:ed:85:65:10:e7:c8:8e:55:ae: 4a:6d:78:eb:71:11:59:83:5f:8a:4c:83:52:41:6b:be:75:fb: c4:52:7f:38:a0:9d:66:ed:35:83:3f:04:09:eb:09:4f:54:ff: df:f0:a1:f2:21:63:88:ea:57:ca:e8:ef:39:9a:4f:13:ca:01: aa:0e:69:ae:16:34:d0:62:72:a7:8b:48:21:9b:80:68:c0:b3: 2b:02:6a:60:c3:95:dd:97:35:89:c4:e2:19:d5:81:1e:13:b6: fd:3b:58:af:83:01:d5:0a:ab:ae:be:24:fd:72:b1:c0:ee:3c: 24:0b:7a:39:8d:7a:6a:26:42:8c:ab:42:c6:43:c9:cb:bf:23: 11:05:f2:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG4FFruKFgDQ4iQnc5JhWYLgitUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVFOUQwMzNDNDRBRDUwM0M0MjlBNzgyQTY0QzdCMEFG OEE5RkYzNjAeFw0yNjA2MDIxMDUzMzJaFw0yNjA2MDMxNDQ3MzJaMDMxMTAvBgNV BAMTKDU3MDM2NTM1NEZEOERERDRBQkFDMzJDQzg3RThGRTA4NDI0N0RDNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFEu9W8WUBNsjgDdNYy9mXEqPS 04RN3RLNRwkRIBeFVkTnCFCFRvT1OLaiJmpHH4uWUZdoQrY/+ZBx2SvquCcFDcQX SQbnhH8pZtXhYr/xmbjiliKwbrwUm3d9UBHJrEvvz1dOzkh6PDl0dj2zDePq8m0A J/Mu+mhIHLxCP7+0D6q9BNghs0hIg0FmG6+QZkKu/D9pGl8tAczQZU3XE/959qE6 yqwNWvIfjaRTqGFA5Q3jHQJgjxXbDhNttkhhzu1UZqDsU02gTUB1VCaAkNbcGKV7 n6TVyJoti+l8UvPCer3QRmrzRjiqpHiR/wMex+AI7wD7Boa6az+rnWQxddbjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVwNlNU/Y3dSrrDLMh+j+CEJH3HIwHwYDVR0j BBgwFoAUlenQM8RK1QPEKaeCpkx7Cvip/zYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmY3NmI3NzMtNDA1Zi00NThmLTliODgtODUyMDk1MTczZjE2LzAvOTVFOUQwMzND NDRBRDUwM0M0MjlBNzgyQTY0QzdCMEFGOEE5RkYzNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NUU5RDAzM0M0NEFENTAzQzQyOUE3ODJBNjRDN0IwQUY4QTlG RjM2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmY3NmI3NzMtNDA1Zi00NThmLTli ODgtODUyMDk1MTczZjE2LzAvOTVFOUQwMzNDNDRBRDUwM0M0MjlBNzgyQTY0QzdC MEFGOEE5RkYzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRXOD/v+bv3MKMbVPW0UdOqyJiuZA+9rkdr gqV1lUxK029FaNU/NHT2qMTTwwYrBmTmPJkcYEao8sEjhDeU53IOTBRPa0n5uQRQ JKipVbKOTKFEhkquWJvwZRSDsJYII9+H1R/Oz+mfBnNGpwFlpVplCCZmD+2FZRDn yI5VrkpteOtxEVmDX4pMg1JBa751+8RSfzignWbtNYM/BAnrCU9U/9/wofIhY4jq V8ro7zmaTxPKAaoOaa4WNNBicqeLSCGbgGjAsysCamDDld2XNYnE4hnVgR4Ttv07 WK+DAdUKq66+JP1yscDuPCQLejmNemomQoyrQsZDycu/IxEF8j8= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:46 2026 by rpki-client