$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft File: 95C2241DAF3580597A730032BDD8356019AA8598.mft (raw, json) Hash identifier: ctL/DYyjKWvnL+md/0cZrSdv76kAJWcqvQh9mEodGrE= Subject key identifier: 74:BB:88:35:F8:90:B5:9C:6D:8A:E8:69:96:E8:69:11:AF:F1:FB:5C Authority key identifier: 95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 Certificate issuer: /CN=95C2241DAF3580597A730032BDD8356019AA8598 Certificate serial: 73F966A16A5BCC59629C22E4DF7B7A3653042514 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft Manifest number: 66 Signing time: Fri 17 Jul 2026 11:27:06 +0000 Manifest this update: Fri 17 Jul 2026 11:22:06 +0000 Manifest next update: Sat 18 Jul 2026 14:37:06 +0000 Files and hashes: 1: 3130332e39362e35322e302f32332d3233203d3e20313534343130.roa (hash: 1ThuN5znJDyBHXMDEeUc73QYCJg2P4WsNNUGGs+3coA=) 2: 3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (hash: HPli/3Qu6kod/7xjBSFbg6jtPr5ON8VO23CexUu2Djc=) 3: 3130332e39362e35322e302f32342d3234203d3e20313534343130.roa (hash: DZZr3wFG43up9aE69tnG8Ls9OH8+Et1zoRrcXN9QSWM=) 4: 3130332e39362e35332e302f32342d3234203d3e20323135373237.roa (hash: 0wPUMAsuo5ZHSc/EbFWdWxfuAnUpnc2Dl/9rdO80RmQ=) 5: 3130332e39362e35332e302f32342d3234203d3e20313534343130.roa (hash: lhdzmYQ+4NDivJfAldib42nRBStQ7ZYmo6omhPmOepI=) 6: 323030313a6466323a6634303a3a2f34382d3438203d3e20313530393232.roa (hash: zqwI6m4XrFv8eZM9FUpfWXpZ18MF12p+MPV+FGxatII=) 7: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (hash: dzNpcw838jqHTmD5WMvONS88+Ve5iK9R+so7TDu1v9o=) 8: 95C2241DAF3580597A730032BDD8356019AA8598.crl (hash: Lx/JY+rENNzrXhaT3ahPrORrxCc8LOiej43ho34Skjk=) 9: 3130332e39362e35322e302f32332d3233203d3e20323135373237.roa (hash: Qx+7jCeA4ACEoLOWICApKLjJLJEDMdzGbyJBoCyvwDU=) 10: 3130332e39362e35322e302f32342d3234203d3e20323135373237.roa (hash: XQXfUBbOhxVs8/s2589fLuZ2gOOuek0QydHFHlibVLk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 14:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:f9:66:a1:6a:5b:cc:59:62:9c:22:e4:df:7b:7a:36:53:04:25:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C2241DAF3580597A730032BDD8356019AA8598 Validity Not Before: Jul 17 11:22:06 2026 GMT Not After : Jul 18 14:37:06 2026 GMT Subject: CN=74BB8835F890B59C6D8AE86996E86911AFF1FB5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:80:cc:dd:71:24:35:95:d5:25:d3:7f:e0:c5: c1:78:d6:00:0d:dc:a2:75:c6:dd:83:d7:21:b0:06: 07:04:95:c7:6f:de:a4:86:08:f0:61:99:cd:f6:f1: b1:c8:47:5a:f3:e6:8b:40:7c:8d:ff:57:2f:9a:e0: bb:5e:23:7a:21:37:41:ca:bc:b0:42:35:63:50:e5: 8e:f2:93:7d:94:a2:ad:3a:46:28:b3:1c:a5:68:b3: 8d:bd:fc:72:71:8c:36:f2:91:a5:a6:fd:56:1d:ff: d6:17:f4:c2:7c:d1:df:57:0e:d4:86:cb:7a:16:23: d1:a8:d1:88:71:84:50:2f:03:bc:41:c5:a7:f2:ae: e2:ea:6b:d6:71:21:89:d1:29:e9:01:27:2c:8d:a9: 8b:67:71:68:e1:08:f2:6c:c0:75:f2:58:67:14:b2: 22:9c:53:1c:1b:f5:27:b3:09:70:1c:67:51:1d:c4: 24:44:7f:aa:b2:87:73:55:92:ec:e6:7f:f9:41:97: 05:6a:98:f2:1d:c0:23:61:8e:62:5c:13:73:82:b2: fb:39:88:43:20:4b:02:0d:3c:d0:a1:4d:27:9f:16: 6e:89:6a:d0:73:40:d1:a9:69:4b:be:4b:7d:71:e4: 69:b3:cb:72:b2:55:fb:58:4f:d1:7c:62:e0:16:fb: 34:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BB:88:35:F8:90:B5:9C:6D:8A:E8:69:96:E8:69:11:AF:F1:FB:5C X509v3 Authority Key Identifier: keyid:95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d4:29:cb:61:eb:a8:a2:b7:51:f0:3b:15:d7:2e:70:91:f6: 8e:50:aa:c9:69:3c:2e:fe:40:67:40:0e:63:7e:8d:41:e9:19: 09:03:4c:65:dd:bb:fb:72:86:78:cb:a8:81:df:88:e8:14:46: c9:4d:c7:19:29:07:da:d7:20:d3:df:f4:30:e4:a4:39:94:0a: 71:a9:19:e9:d3:0c:79:88:1a:6d:b5:ad:1b:6b:a3:8a:89:53: 5d:dd:9e:37:8e:b1:ff:e6:67:1f:6b:6b:d4:27:44:20:57:b7: fc:ee:bd:7d:4e:f3:e8:6e:95:2c:c3:fc:77:26:62:3f:3f:83: f9:ec:28:62:32:5c:d2:b5:80:72:04:80:a7:6f:10:f6:87:40: d7:65:29:fd:04:01:6c:9f:49:a8:a8:74:5c:c8:a0:82:b6:e7: 3c:08:d9:da:77:b8:77:85:df:96:c7:e8:52:18:d2:11:bb:0f: 44:d4:36:88:e3:2a:5a:ef:0c:6f:9d:8b:4f:be:3f:74:7d:95: b5:02:2e:dd:dc:ee:8f:8a:f3:04:90:c0:7d:98:6f:10:52:e1: 10:ac:ce:49:b0:19:36:3b:8e:31:92:f2:6a:9a:10:b5:11:b5: 06:50:8a:e0:05:d8:a2:c0:85:90:a3:64:7f:2c:85:4d:b6:d5: dd:50:56:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc/lmoWpbzFlinCLk33t6NlMEJRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1NjAx OUFBODU5ODAeFw0yNjA3MTcxMTIyMDZaFw0yNjA3MTgxNDM3MDZaMDMxMTAvBgNV BAMTKDc0QkI4ODM1Rjg5MEI1OUM2RDhBRTg2OTk2RTg2OTExQUZGMUZCNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOgMzdcSQ1ldUl03/gxcF41gAN 3KJ1xt2D1yGwBgcElcdv3qSGCPBhmc328bHIR1rz5otAfI3/Vy+a4LteI3ohN0HK vLBCNWNQ5Y7yk32Uoq06RiizHKVos429/HJxjDbykaWm/VYd/9YX9MJ80d9XDtSG y3oWI9Go0YhxhFAvA7xBxafyruLqa9ZxIYnRKekBJyyNqYtncWjhCPJswHXyWGcU siKcUxwb9SezCXAcZ1EdxCREf6qyh3NVkuzmf/lBlwVqmPIdwCNhjmJcE3OCsvs5 iEMgSwINPNChTSefFm6JatBzQNGpaUu+S31x5Gmzy3KyVftYT9F8YuAW+zRVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdLuINfiQtZxtiuhpluhpEa/x+1wwHwYDVR0j BBgwFoAUlcIkHa81gFl6cwAyvdg1YBmqhZgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ExYzRjMWYtNzE0MS00N2Q2LWE3ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURB RjM1ODA1OTdBNzMwMDMyQkREODM1NjAxOUFBODU5OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NUMyMjQxREFGMzU4MDU5N0E3MzAwMzJCREQ4MzU2MDE5QUE4 NTk4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ExYzRjMWYtNzE0MS00N2Q2LWE3 ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1 NjAxOUFBODU5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3UKcth66iit1HwOxXXLnCR9o5QqslpPC7+ QGdADmN+jUHpGQkDTGXdu/tyhnjLqIHfiOgURslNxxkpB9rXINPf9DDkpDmUCnGp GenTDHmIGm21rRtro4qJU13dnjeOsf/mZx9ra9QnRCBXt/zuvX1O8+hulSzD/Hcm Yj8/g/nsKGIyXNK1gHIEgKdvEPaHQNdlKf0EAWyfSaiodFzIoIK25zwI2dp3uHeF 35bH6FIY0hG7D0TUNojjKlrvDG+di0++P3R9lbUCLt3c7o+K8wSQwH2YbxBS4RCs zkmwGTY7jjGS8mqaELURtQZQiuAF2KLAhZCjZH8shU221d1QVgw= -----END CERTIFICATE-----Generated at Sat Jul 18 02:23:56 2026 by rpki-client