$ rpki-client -vvvf rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft File: F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft (raw, json) Hash identifier: TWNFcqlTtisC+/eq8QQFK1hdodky4rXjjNjV5SPVvVc= Subject key identifier: B4:C4:0B:BA:12:6C:0F:80:62:B9:2A:6B:5F:2D:DE:FD:7E:0E:A7:EF Authority key identifier: F9:51:81:B9:50:98:15:9C:25:87:D2:AE:64:AA:15:EC:F6:F7:BA:45 Certificate issuer: /CN=F95181B95098159C2587D2AE64AA15ECF6F7BA45 Certificate serial: 4C37A25F95A1BBE88E59AC551A3B4825479673 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F95181B95098159C2587D2AE64AA15ECF6F7BA45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft Manifest number: A2 Signing time: Mon 31 Aug 2026 14:47:33 +0000 Manifest this update: Mon 31 Aug 2026 14:42:33 +0000 Manifest next update: Tue 01 Sep 2026 16:13:33 +0000 Files and hashes: 1: 323030313a6466333a643663303a3a2f34382d3438203d3e20313531363030.roa (hash: pgEEArXd9XP8zXa/DdMQKaPdRhF2qiIImHSr7qGevFs=) 2: F95181B95098159C2587D2AE64AA15ECF6F7BA45.crl (hash: 5yvy0qDcp8YIRNkinGPA1/ZKLgsYVVXJ+OgFADFFc0A=) 3: 3130332e3230332e3233322e302f32342d3234203d3e20313531363030.roa (hash: IGQZppCH5Ww/fn6QSsHdhxefkfkyI2QhhtmZkcnBVVk=) 4: 3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa (hash: z7iqZjlXVRMDIQEXZKf98grHsnfTgjJWLqwQCjq3co8=) 5: 3130332e3230332e3233322e302f32332d3233203d3e20313531363030.roa (hash: QrZG0rd0H2oMRYUrnP7wml3+LX+uV/9SDTxjs0PrJoU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.crl rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F95181B95098159C2587D2AE64AA15ECF6F7BA45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 16:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:37:a2:5f:95:a1:bb:e8:8e:59:ac:55:1a:3b:48:25:47:96:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F95181B95098159C2587D2AE64AA15ECF6F7BA45 Validity Not Before: Aug 31 14:42:33 2026 GMT Not After : Sep 1 16:13:33 2026 GMT Subject: CN=B4C40BBA126C0F8062B92A6B5F2DDEFD7E0EA7EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b0:6b:db:82:94:11:9b:63:6c:11:a7:65:24: f6:e2:87:cb:1e:ac:94:be:a5:5e:d6:e6:1a:a5:80: c2:2d:75:41:3a:28:42:bc:8a:d2:07:67:1a:fc:be: a0:1a:3d:3c:fe:0c:cc:7e:73:b4:e3:76:13:30:5a: 08:11:0a:92:a8:ef:6e:0d:fc:2d:0f:b5:af:ef:be: f0:cb:9c:b4:f3:72:92:42:0b:59:a0:85:92:47:02: cc:e4:5a:9f:71:ae:d3:43:c9:9b:f8:88:1d:69:74: fc:4f:14:04:25:39:35:8d:80:ff:1d:95:0b:10:9e: 92:9e:25:23:e6:4f:05:ac:ab:34:b6:eb:90:96:2b: eb:c0:8a:12:e5:04:e0:b8:77:32:5c:ac:2a:37:84: 09:26:03:51:24:ae:60:66:56:fb:0d:2f:70:af:78: 19:5b:bc:95:82:a9:c1:5b:fd:41:e3:94:50:15:0e: c1:35:98:4a:42:4f:41:da:f5:7f:2b:dd:0c:ef:d6: 40:58:7f:cc:e7:9c:81:a5:a7:1f:7d:8e:72:84:d4: 27:3a:e3:e5:86:64:82:16:09:6d:3b:d1:1f:be:ae: ee:1c:91:98:e9:73:e4:63:99:b9:5c:41:f5:12:81: 49:35:99:31:9d:22:f8:3c:ce:55:0e:3b:3e:63:3d: 1a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C4:0B:BA:12:6C:0F:80:62:B9:2A:6B:5F:2D:DE:FD:7E:0E:A7:EF X509v3 Authority Key Identifier: keyid:F9:51:81:B9:50:98:15:9C:25:87:D2:AE:64:AA:15:EC:F6:F7:BA:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F95181B95098159C2587D2AE64AA15ECF6F7BA45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:e7:35:86:b6:29:93:b5:b6:de:fc:d8:b3:13:a3:c2:4e:f1: 7b:63:05:8a:99:3a:09:b3:f9:22:59:b9:60:52:e8:6b:ca:85: b0:7e:93:46:3f:d1:a0:09:ef:90:37:02:4f:c3:1a:c1:2c:7d: 2a:c6:82:d9:e4:b7:5d:02:bb:d4:39:d1:64:c8:ec:6f:00:11: 8b:f0:96:1a:cb:4e:bf:41:9c:68:32:34:dc:56:79:fb:3b:1c: 8f:3c:63:40:1d:c7:27:27:70:c3:96:ba:7f:05:2a:2e:ed:91: b6:00:49:68:d0:07:10:80:b0:7e:a2:5f:37:1a:78:28:a2:be: 45:1a:d2:d8:c4:2e:f1:20:28:85:f0:3c:2d:b1:5c:25:69:a0: 80:ac:49:35:84:ae:a3:6e:c2:85:49:3f:81:0a:22:8f:8d:21: 60:4c:d9:39:28:b9:07:b6:f9:eb:1f:2f:6e:48:8d:11:a5:44: 1e:77:5e:89:a4:50:27:70:5a:83:fc:ff:e9:8b:d7:d1:02:de: 56:b0:c9:c1:8e:7b:3d:ab:2f:1b:45:4a:6c:f3:a2:91:64:de: f0:de:12:21:b0:53:6e:65:e5:02:e6:4c:12:28:30:76:4f:59: ef:b1:69:76:f2:f1:a4:bb:9c:5c:20:b3:f7:bd:42:3a:f9:43: 41:ca:af:e4 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITTDeiX5Whu+iOWaxVGjtIJUeWczANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhGOTUxODFCOTUwOTgxNTlDMjU4N0QyQUU2NEFBMTVFQ0Y2 RjdCQTQ1MB4XDTI2MDgzMTE0NDIzM1oXDTI2MDkwMTE2MTMzM1owMzExMC8GA1UE AxMoQjRDNDBCQkExMjZDMEY4MDYyQjkyQTZCNUYyRERFRkQ3RTBFQTdFRjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIuwa9uClBGbY2wRp2Uk9uKHyx6s lL6lXtbmGqWAwi11QTooQryK0gdnGvy+oBo9PP4MzH5ztON2EzBaCBEKkqjvbg38 LQ+1r+++8MuctPNykkILWaCFkkcCzORan3Gu00PJm/iIHWl0/E8UBCU5NY2A/x2V CxCekp4lI+ZPBayrNLbrkJYr68CKEuUE4Lh3MlysKjeECSYDUSSuYGZW+w0vcK94 GVu8lYKpwVv9QeOUUBUOwTWYSkJPQdr1fyvdDO/WQFh/zOecgaWnH32OcoTUJzrj 5YZkghYJbTvRH76u7hyRmOlz5GOZuVxB9RKBSTWZMZ0i+DzOVQ47PmM9GksCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBS0xAu6EmwPgGK5KmtfLd79fg6n7zAfBgNVHSME GDAWgBT5UYG5UJgVnCWH0q5kqhXs9ve6RTAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8x NzY2MDdlYS1hZGQ3LTRjYTUtOGYyZC1kYThiNzkxYTNiNDIvMC9GOTUxODFCOTUw OTgxNTlDMjU4N0QyQUU2NEFBMTVFQ0Y2RjdCQTQ1LmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xL0Y5NTE4MUI5NTA5ODE1OUMyNTg3RDJBRTY0QUExNUVDRjZGN0JB NDUuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xNzY2MDdlYS1hZGQ3LTRjYTUtOGYy ZC1kYThiNzkxYTNiNDIvMC9GOTUxODFCOTUwOTgxNTlDMjU4N0QyQUU2NEFBMTVF Q0Y2RjdCQTQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAluc1hrYpk7W23vzYsxOjwk7xe2MFipk6CbP5 Ilm5YFLoa8qFsH6TRj/RoAnvkDcCT8MawSx9KsaC2eS3XQK71DnRZMjsbwARi/CW GstOv0GcaDI03FZ5+zscjzxjQB3HJydww5a6fwUqLu2RtgBJaNAHEICwfqJfNxp4 KKK+RRrS2MQu8SAohfA8LbFcJWmggKxJNYSuo27ChUk/gQoij40hYEzZOSi5B7b5 6x8vbkiNEaVEHndeiaRQJ3Bag/z/6YvX0QLeVrDJwY57PasvG0VKbPOikWTe8N4S IbBTbmXlAuZMEigwdk9Z77FpdvLxpLucXCCz971COvlDQcqv5A== -----END CERTIFICATE-----Generated at Tue Sep 1 03:21:16 2026 by rpki-client