$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft File: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft (raw, json) Hash identifier: uXNPX+IymeBC5SS7ko8l3ThevEWxM6cOGqZWniWV1lM= Subject key identifier: 14:87:55:F5:E1:BF:18:3C:77:01:3A:6D:03:26:20:36:EC:90:52:9E Authority key identifier: 95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 Certificate issuer: /CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Certificate serial: 016444096ED13D93FC27859257FC1F83AB567823 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft Manifest number: 0132 Signing time: Mon 20 Apr 2026 20:21:40 +0000 Manifest this update: Mon 20 Apr 2026 20:16:40 +0000 Manifest next update: Thu 23 Apr 2026 21:27:40 +0000 Files and hashes: 1: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl (hash: p4xmP4hN7R0lEARfv8gAeghDq8WbN27fWezZ1HhVauk=) 2: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: b50sIU9yQxaEkBk9RbWIC1daty/+h8HIunUUQS3fj8c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:64:44:09:6e:d1:3d:93:fc:27:85:92:57:fc:1f:83:ab:56:78:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Validity Not Before: Apr 20 20:16:40 2026 GMT Not After : Apr 23 21:27:40 2026 GMT Subject: CN=148755F5E1BF183C77013A6D03262036EC90529E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:82:7b:c0:b4:63:3c:17:01:9b:c3:e6:e9:b5: 41:79:b0:9e:aa:06:16:57:89:4f:b6:32:97:8c:8e: 0c:31:ed:5c:23:ae:d9:99:91:04:aa:50:1b:eb:8b: 7a:0d:09:bb:74:b1:e2:a1:92:7a:a9:b8:d9:ec:42: 71:6d:0e:cd:c3:04:de:df:a6:28:af:2d:8a:f0:ea: 36:f6:56:b2:9b:70:a9:a9:97:17:2a:2b:48:24:6c: e6:5e:3e:f9:5e:dc:5a:df:a0:27:c6:71:04:94:66: 3e:ba:86:84:d0:58:05:10:3f:5c:c1:7b:f4:13:8d: d1:97:9e:f7:7b:47:8c:48:75:b9:70:82:83:37:b5: a4:1c:0c:c2:17:1c:a9:dc:de:c3:d0:8f:d1:c4:66: 50:ac:bc:71:50:19:1c:16:22:81:91:ab:a1:cd:3a: 01:0c:75:e7:d6:91:a8:02:68:43:10:9a:bd:75:e8: b2:f8:47:9d:7b:0f:fd:67:db:ad:38:1e:2c:6c:7a: 2d:56:4e:3d:fe:87:e1:25:77:2b:c8:94:c6:6d:44: 4f:d9:85:1e:71:78:bc:04:f4:66:09:50:b1:17:e1: a6:34:ea:29:57:99:ff:27:27:08:e7:55:f0:27:0b: 4a:e7:6c:5a:f3:54:55:65:ce:5c:ab:d2:a7:5a:f6: 4b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:87:55:F5:E1:BF:18:3C:77:01:3A:6D:03:26:20:36:EC:90:52:9E X509v3 Authority Key Identifier: keyid:95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:fc:eb:0d:ed:42:35:47:0b:62:02:6c:15:ec:45:38:d2:87: 02:86:11:92:d1:a1:a8:65:6a:62:7d:87:50:7c:6d:69:b2:28: 53:c7:3a:4e:66:a1:9c:d4:60:b7:03:68:2d:71:b5:ac:26:21: cf:3a:70:12:ab:35:f1:64:ea:eb:c4:aa:d5:ee:1d:5e:38:65: bc:89:56:da:5e:6f:8f:6e:f6:b3:5f:72:44:c8:2c:89:b3:08: 9b:45:31:a3:31:c2:52:8a:88:2d:7f:68:a5:88:ed:51:91:8f: fe:02:eb:7a:b1:5c:a0:24:61:35:31:86:20:4c:5b:21:03:d6: b1:0d:c7:4e:83:e2:1b:33:34:b2:5f:81:a4:93:66:41:13:e7: 4f:eb:e7:a5:5f:20:2f:e4:6e:22:6a:dd:27:91:b1:3a:ec:6f: de:22:6d:1f:88:0f:3c:94:6a:f2:cf:4c:6e:cd:35:34:4c:1f: 4a:f8:75:4b:ce:bc:20:a7:49:02:8b:a8:39:67:b4:20:aa:3c: d8:cf:4a:37:be:f9:a2:a8:a8:9d:23:3e:62:85:f3:0d:fe:87: d4:d8:0a:8c:ba:ad:85:fe:99:42:7b:e5:7e:2c:f2:06:06:d1: dd:7c:45:04:44:49:18:65:28:f9:ee:27:cb:91:e9:2c:51:7c: 2e:1d:80:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAWRECW7RPZP8J4WSV/wfg6tWeCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVB MzI4RDY4OTAeFw0yNjA0MjAyMDE2NDBaFw0yNjA0MjMyMTI3NDBaMDMxMTAvBgNV BAMTKDE0ODc1NUY1RTFCRjE4M0M3NzAxM0E2RDAzMjYyMDM2RUM5MDUyOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMgnvAtGM8FwGbw+bptUF5sJ6q BhZXiU+2MpeMjgwx7VwjrtmZkQSqUBvri3oNCbt0seKhknqpuNnsQnFtDs3DBN7f piivLYrw6jb2VrKbcKmplxcqK0gkbOZePvle3FrfoCfGcQSUZj66hoTQWAUQP1zB e/QTjdGXnvd7R4xIdblwgoM3taQcDMIXHKnc3sPQj9HEZlCsvHFQGRwWIoGRq6HN OgEMdefWkagCaEMQmr116LL4R517D/1n2604Hixsei1WTj3+h+EldyvIlMZtRE/Z hR5xeLwE9GYJULEX4aY06ilXmf8nJwjnVfAnC0rnbFrzVFVlzlyr0qda9kuZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFIdV9eG/GDx3ATptAyYgNuyQUp4wHwYDVR0j BBgwFoAUlfrDilyyzqPl/+JJVianvqMo1okwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMC85NUZBQzM4QTVD QjJDRUEzRTVGRkUyNDk1NjI2QTdCRUEzMjhENjg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVBMzI4 RDY4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3 QkVBMzI4RDY4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/86w3tQjVHC2ICbBXsRTjShwKGEZLRoahl amJ9h1B8bWmyKFPHOk5moZzUYLcDaC1xtawmIc86cBKrNfFk6uvEqtXuHV44ZbyJ Vtpeb49u9rNfckTILImzCJtFMaMxwlKKiC1/aKWI7VGRj/4C63qxXKAkYTUxhiBM WyED1rENx06D4hszNLJfgaSTZkET50/r56VfIC/kbiJq3SeRsTrsb94ibR+IDzyU avLPTG7NNTRMH0r4dUvOvCCnSQKLqDlntCCqPNjPSje++aKoqJ0jPmKF8w3+h9TY Coy6rYX+mUJ75X4s8gYG0d18RQRESRhlKPnuJ8uR6SxRfC4dgIc= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:32 2026 by rpki-client