$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft File: 951C84D9FEAF87E2196BBF71DC0326053CC04478.mft (raw, json) Hash identifier: cAhtru/cYFIzjmUKcTdxdTMntVDraSk6/ebPko24huM= Subject key identifier: CF:F9:01:0A:EA:2A:7E:2A:1E:23:DD:78:8D:FB:3B:4C:7E:86:E8:FA Authority key identifier: 95:1C:84:D9:FE:AF:87:E2:19:6B:BF:71:DC:03:26:05:3C:C0:44:78 Certificate issuer: /CN=951C84D9FEAF87E2196BBF71DC0326053CC04478 Certificate serial: 4A49E5676840D2579AD97F5CCDF0FCDFD599A7CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft Manifest number: EA Signing time: Sun 25 Oct 2026 20:11:59 +0000 Manifest this update: Sun 25 Oct 2026 20:06:59 +0000 Manifest next update: Mon 26 Oct 2026 23:13:59 +0000 Files and hashes: 1: 951C84D9FEAF87E2196BBF71DC0326053CC04478.crl (hash: rJ3reyk6Tv2XDhOj8EnY9IsHAr4LH7hYW/6hWk+bZiM=) 2: 3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa (hash: /2R+nfFCxhyBUh1PRuVIBZMYLiYNSMPmjUD3SxKwk4w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.crl rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:49:e5:67:68:40:d2:57:9a:d9:7f:5c:cd:f0:fc:df:d5:99:a7:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=951C84D9FEAF87E2196BBF71DC0326053CC04478 Validity Not Before: Oct 25 20:06:59 2026 GMT Not After : Oct 26 23:13:59 2026 GMT Subject: CN=CFF9010AEA2A7E2A1E23DD788DFB3B4C7E86E8FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0f:f4:cc:35:eb:3b:09:7c:5b:40:66:74:43: eb:4c:37:0c:2f:68:14:1e:ef:f3:d1:d7:d6:8e:a9: e7:df:a2:77:21:96:4e:6d:87:7a:86:f4:0c:69:8e: 48:72:24:f0:c7:4c:2b:71:ac:d9:c2:c1:23:82:7b: a3:22:cc:1d:c1:f2:4c:98:e9:56:5a:19:f8:bc:21: 06:23:10:b1:12:03:a0:98:e5:2b:db:88:88:e5:f2: 86:ba:51:45:37:24:3f:74:6b:ed:8a:80:c3:9c:dc: 23:2a:95:03:13:33:4a:fd:9c:df:4f:d7:5f:4a:ae: ee:30:71:0b:09:04:f5:67:fd:5e:21:ef:f5:c3:8f: 9d:aa:aa:51:5d:ae:d7:4a:3d:72:c3:70:42:06:4d: 3d:05:b5:19:6c:38:8a:d1:a2:4a:08:32:74:32:ca: d3:82:38:ec:4d:3c:d6:51:9f:b8:f3:14:6d:a0:47: 21:f1:12:ac:f6:50:52:50:50:40:7b:ac:b5:56:e6: cb:4d:36:41:92:92:ee:3f:e4:af:da:0f:d5:28:d4: 08:92:c5:06:5e:5a:2c:a8:a7:10:50:2f:f8:d6:af: d3:26:b4:28:64:12:10:17:30:94:e7:4f:68:83:f3: e6:d0:4a:26:60:54:4a:a9:26:80:0d:48:51:4a:af: 66:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F9:01:0A:EA:2A:7E:2A:1E:23:DD:78:8D:FB:3B:4C:7E:86:E8:FA X509v3 Authority Key Identifier: keyid:95:1C:84:D9:FE:AF:87:E2:19:6B:BF:71:DC:03:26:05:3C:C0:44:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/951C84D9FEAF87E2196BBF71DC0326053CC04478.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/951C84D9FEAF87E2196BBF71DC0326053CC04478.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:43:cb:d9:c2:14:97:b6:9a:77:72:d2:4b:08:9d:36:e6:ad: bf:9f:60:3e:0d:c2:46:99:db:e5:4a:1a:d3:40:b6:8f:4b:f8: 05:0c:da:c3:3c:53:28:78:a8:57:4f:9a:98:3d:97:d7:39:99: ef:79:9e:43:b8:ff:80:53:d1:ca:69:55:99:3c:1f:b4:35:b0: 80:e8:76:ce:f2:f8:9a:bc:8a:1c:a6:b3:0a:f6:b9:75:9f:56: 01:c1:aa:03:7c:26:ec:13:37:ad:ac:4d:a2:6e:c6:e4:f7:89: 1b:a1:1f:bb:c6:16:bc:3a:7f:b4:2d:92:c3:1c:c8:85:7d:fd: f2:bc:e5:61:dc:83:6f:1d:61:22:64:de:d1:aa:79:d5:00:43: 37:a2:54:5b:22:fd:9b:30:7d:87:00:9c:5d:31:14:b7:4f:c7: f0:75:f5:94:d6:26:71:10:c7:5f:e0:91:ab:01:15:ec:29:9b: 93:3a:f2:06:69:27:19:73:42:08:b7:7e:83:e6:ce:fe:3e:46: bf:f5:19:9d:72:e9:f2:b2:52:b7:ff:0d:44:86:83:a9:36:99: 87:bf:0d:90:f1:ec:6b:a4:79:8b:b0:ab:1d:b2:46:46:b1:08: f6:39:61:2b:16:f0:ed:1e:78:e6:d2:25:57:8a:be:37:4d:0e: 97:0a:e4:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSknlZ2hA0lea2X9czfD839WZp8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUxQzg0RDlGRUFGODdFMjE5NkJCRjcxREMwMzI2MDUz Q0MwNDQ3ODAeFw0yNjEwMjUyMDA2NTlaFw0yNjEwMjYyMzEzNTlaMDMxMTAvBgNV BAMTKENGRjkwMTBBRUEyQTdFMkExRTIzREQ3ODhERkIzQjRDN0U4NkU4RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjD/TMNes7CXxbQGZ0Q+tMNwwv aBQe7/PR19aOqeffonchlk5th3qG9AxpjkhyJPDHTCtxrNnCwSOCe6MizB3B8kyY 6VZaGfi8IQYjELESA6CY5SvbiIjl8oa6UUU3JD90a+2KgMOc3CMqlQMTM0r9nN9P 119Kru4wcQsJBPVn/V4h7/XDj52qqlFdrtdKPXLDcEIGTT0FtRlsOIrRokoIMnQy ytOCOOxNPNZRn7jzFG2gRyHxEqz2UFJQUEB7rLVW5stNNkGSku4/5K/aD9Uo1AiS xQZeWiyopxBQL/jWr9MmtChkEhAXMJTnT2iD8+bQSiZgVEqpJoANSFFKr2bdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz/kBCuoqfioeI914jfs7TH6G6PowHwYDVR0j BBgwFoAUlRyE2f6vh+IZa79x3AMmBTzARHgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FlZjc4NmItNjIyNi00NGFmLTg1MmQtMWZiMDQ1YzRkZWIzLzAvOTUxQzg0RDlG RUFGODdFMjE5NkJCRjcxREMwMzI2MDUzQ0MwNDQ3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTFDODREOUZFQUY4N0UyMTk2QkJGNzFEQzAzMjYwNTNDQzA0 NDc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FlZjc4NmItNjIyNi00NGFmLTg1 MmQtMWZiMDQ1YzRkZWIzLzAvOTUxQzg0RDlGRUFGODdFMjE5NkJCRjcxREMwMzI2 MDUzQ0MwNDQ3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxDy9nCFJe2mndy0ksInTbmrb+fYD4NwkaZ 2+VKGtNAto9L+AUM2sM8Uyh4qFdPmpg9l9c5me95nkO4/4BT0cppVZk8H7Q1sIDo ds7y+Jq8ihymswr2uXWfVgHBqgN8JuwTN62sTaJuxuT3iRuhH7vGFrw6f7QtksMc yIV9/fK85WHcg28dYSJk3tGqedUAQzeiVFsi/ZswfYcAnF0xFLdPx/B19ZTWJnEQ x1/gkasBFewpm5M68gZpJxlzQgi3foPmzv4+Rr/1GZ1y6fKyUrf/DUSGg6k2mYe/ DZDx7GukeYuwqx2yRkaxCPY5YSsW8O0eeObSJVeKvjdNDpcK5Ks= -----END CERTIFICATE-----Generated at Mon Oct 26 02:16:09 2026 by rpki-client