$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft File: 95C2241DAF3580597A730032BDD8356019AA8598.mft (raw, json) Hash identifier: OZ8oJ3Gv+vyOZ5PLTGQCsISASUIfx0PyhdIlmSIYsq8= Subject key identifier: A2:1F:77:6B:B7:8E:52:1A:46:11:66:46:08:30:36:56:DF:57:7C:B6 Authority key identifier: 95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 Certificate issuer: /CN=95C2241DAF3580597A730032BDD8356019AA8598 Certificate serial: 308D474E190EED68026B6EDAE3D87A9AC345F648 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 05:36:55 +0000 Manifest this update: Tue 02 Jun 2026 05:31:55 +0000 Manifest next update: Wed 03 Jun 2026 05:52:55 +0000 Files and hashes: 1: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (hash: dzNpcw838jqHTmD5WMvONS88+Ve5iK9R+so7TDu1v9o=) 2: 3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (hash: HPli/3Qu6kod/7xjBSFbg6jtPr5ON8VO23CexUu2Djc=) 3: 323030313a6466323a6634303a3a2f34382d3438203d3e20313530393232.roa (hash: zqwI6m4XrFv8eZM9FUpfWXpZ18MF12p+MPV+FGxatII=) 4: 3130332e39362e35332e302f32342d3234203d3e20323135373237.roa (hash: 0wPUMAsuo5ZHSc/EbFWdWxfuAnUpnc2Dl/9rdO80RmQ=) 5: 3130332e39362e35322e302f32332d3233203d3e20323135373237.roa (hash: Qx+7jCeA4ACEoLOWICApKLjJLJEDMdzGbyJBoCyvwDU=) 6: 3130332e39362e35322e302f32332d3233203d3e20313534343130.roa (hash: 1ThuN5znJDyBHXMDEeUc73QYCJg2P4WsNNUGGs+3coA=) 7: 3130332e39362e35322e302f32342d3234203d3e20323135373237.roa (hash: XQXfUBbOhxVs8/s2589fLuZ2gOOuek0QydHFHlibVLk=) 8: 3130332e39362e35322e302f32342d3234203d3e20313534343130.roa (hash: DZZr3wFG43up9aE69tnG8Ls9OH8+Et1zoRrcXN9QSWM=) 9: 95C2241DAF3580597A730032BDD8356019AA8598.crl (hash: B0MGFq6M8yp3kJoXhwEAFukBQHwNcFGbE3xD6vE9WiY=) 10: 3130332e39362e35332e302f32342d3234203d3e20313534343130.roa (hash: lhdzmYQ+4NDivJfAldib42nRBStQ7ZYmo6omhPmOepI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 05:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:8d:47:4e:19:0e:ed:68:02:6b:6e:da:e3:d8:7a:9a:c3:45:f6:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C2241DAF3580597A730032BDD8356019AA8598 Validity Not Before: Jun 2 05:31:55 2026 GMT Not After : Jun 3 05:52:55 2026 GMT Subject: CN=A21F776BB78E521A4611664608303656DF577CB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d7:6d:43:ac:37:b1:b1:8a:cd:87:45:f9:20: 19:86:89:c2:19:24:4c:4e:e7:33:69:8e:da:20:04: 86:dd:ce:44:79:0d:13:b2:24:96:33:03:46:3c:71: 28:b8:67:ca:8b:b3:4e:26:4e:c2:c4:97:a4:4b:00: 1b:9b:40:e9:b7:4a:13:96:5d:86:90:07:ca:3b:e7: 74:07:14:db:70:40:ee:cb:58:d7:0a:bb:99:ce:42: 31:c7:d7:73:96:a2:23:15:07:24:8b:97:d2:3d:50: b9:b7:84:18:c9:d3:0b:b1:d1:11:d4:cb:f5:61:49: 37:88:e0:6f:8c:2e:8d:36:e4:ca:99:49:f6:47:1d: 46:2d:c7:3e:00:c5:d9:63:1b:7a:a9:9b:51:7a:38: d6:7e:d2:f6:0a:4e:83:33:9e:0b:fd:07:8f:38:96: ba:23:80:52:2f:0c:d4:5d:bc:47:4b:0e:48:c7:9a: b9:60:e9:34:6d:5c:5a:dc:36:76:a7:be:97:74:f4: 63:6a:0b:8e:96:2b:36:87:ab:87:2c:8e:4e:3c:43: b4:ed:0f:61:d3:13:c4:cf:8b:54:f1:03:2e:86:ab: 71:3a:ae:09:b2:2f:11:7e:d2:b9:fc:44:9c:19:bb: 18:04:bc:da:ee:66:4c:e2:c5:34:d0:0e:24:7e:5b: b2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1F:77:6B:B7:8E:52:1A:46:11:66:46:08:30:36:56:DF:57:7C:B6 X509v3 Authority Key Identifier: keyid:95:C2:24:1D:AF:35:80:59:7A:73:00:32:BD:D8:35:60:19:AA:85:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C2241DAF3580597A730032BDD8356019AA8598.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/95C2241DAF3580597A730032BDD8356019AA8598.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:f2:ed:94:cc:ad:52:7a:e5:32:8a:fa:be:33:e9:f3:ba:94: b4:9a:96:a4:40:4c:a2:6f:e4:98:eb:8f:1a:97:4a:86:17:c0: 2d:ff:3f:e8:a9:46:44:02:e0:4f:e5:b8:20:18:06:f1:ff:08: af:7c:8c:e0:c9:61:a7:c1:3f:d2:d0:ac:37:53:b1:10:5f:9f: f2:e8:f1:c3:9c:e6:57:ac:2b:21:e0:2c:7d:c3:b4:b9:2a:89: 0d:6c:21:68:c7:22:f3:94:29:48:f7:1e:47:37:5f:e1:5b:9f: a6:a5:3a:e0:3a:f3:36:f2:39:75:3d:fd:d3:e8:31:36:1f:47: bd:d4:0f:a5:bd:f9:53:07:25:cd:42:17:7a:41:fa:5d:de:31: 88:98:3d:27:53:cf:de:92:56:fe:f5:bc:71:9f:32:49:b8:6d: 84:79:cb:a7:65:11:7e:ba:3d:f5:61:2a:92:ec:5b:e9:00:0f: 15:5f:7c:aa:41:49:dc:4e:be:78:f4:3b:9c:d1:ef:a2:8f:f2: d5:79:74:92:b5:a5:f6:d1:6a:f1:e3:ee:71:a8:c8:fd:a5:1c: 1b:6b:c3:78:c5:2e:58:1d:c7:46:a5:52:3e:e7:70:1f:d5:b8: bf:22:11:6a:78:1f:d8:db:a4:23:3c:b1:ab:f3:27:3a:d5:36: 80:81:8a:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMI1HThkO7WgCa27a49h6msNF9kgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1NjAx OUFBODU5ODAeFw0yNjA2MDIwNTMxNTVaFw0yNjA2MDMwNTUyNTVaMDMxMTAvBgNV BAMTKEEyMUY3NzZCQjc4RTUyMUE0NjExNjY0NjA4MzAzNjU2REY1NzdDQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn121DrDexsYrNh0X5IBmGicIZ JExO5zNpjtogBIbdzkR5DROyJJYzA0Y8cSi4Z8qLs04mTsLEl6RLABubQOm3ShOW XYaQB8o753QHFNtwQO7LWNcKu5nOQjHH13OWoiMVBySLl9I9ULm3hBjJ0wux0RHU y/VhSTeI4G+MLo025MqZSfZHHUYtxz4AxdljG3qpm1F6ONZ+0vYKToMzngv9B484 lrojgFIvDNRdvEdLDkjHmrlg6TRtXFrcNnanvpd09GNqC46WKzaHq4csjk48Q7Tt D2HTE8TPi1TxAy6Gq3E6rgmyLxF+0rn8RJwZuxgEvNruZkzixTTQDiR+W7JRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoh93a7eOUhpGEWZGCDA2Vt9XfLYwHwYDVR0j BBgwFoAUlcIkHa81gFl6cwAyvdg1YBmqhZgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ExYzRjMWYtNzE0MS00N2Q2LWE3ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURB RjM1ODA1OTdBNzMwMDMyQkREODM1NjAxOUFBODU5OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NUMyMjQxREFGMzU4MDU5N0E3MzAwMzJCREQ4MzU2MDE5QUE4 NTk4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ExYzRjMWYtNzE0MS00N2Q2LWE3 ZjgtZTM1ZmZlMTE3NDA0LzAvOTVDMjI0MURBRjM1ODA1OTdBNzMwMDMyQkREODM1 NjAxOUFBODU5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGby7ZTMrVJ65TKK+r4z6fO6lLSalqRATKJv 5JjrjxqXSoYXwC3/P+ipRkQC4E/luCAYBvH/CK98jODJYafBP9LQrDdTsRBfn/Lo 8cOc5lesKyHgLH3DtLkqiQ1sIWjHIvOUKUj3Hkc3X+Fbn6alOuA68zbyOXU9/dPo MTYfR73UD6W9+VMHJc1CF3pB+l3eMYiYPSdTz96SVv71vHGfMkm4bYR5y6dlEX66 PfVhKpLsW+kADxVffKpBSdxOvnj0O5zR76KP8tV5dJK1pfbRavHj7nGoyP2lHBtr w3jFLlgdx0alUj7ncB/VuL8iEWp4H9jbpCM8savzJzrVNoCBiv0= -----END CERTIFICATE-----Generated at Tue Jun 2 21:39:28 2026 by rpki-client