$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft File: 950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft (raw, json) Hash identifier: rcFOqD6zSEdzs7NYPIhnRNgOGZyslukJC9Z7fiEtUR4= Subject key identifier: 67:D5:C4:34:A0:00:8D:00:B2:46:90:94:45:B3:EE:BB:19:89:70:7A Authority key identifier: 95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51 Certificate issuer: /CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751 Certificate serial: 79461F2E072787A9C2D7A5FCC76E49ACE64B0993 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft Manifest number: B6 Signing time: Thu 17 Sep 2026 00:59:51 +0000 Manifest this update: Thu 17 Sep 2026 00:54:51 +0000 Manifest next update: Fri 18 Sep 2026 03:19:51 +0000 Files and hashes: 1: 950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl (hash: dJDvTCtEVnMUjqkEHZJsj20mijRAZOZslqtmdw+71XE=) 2: 3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa (hash: 2Og4FIysb2wd35eqOCjNVfXf+ZPGg3kEvtQOXJnk+xE=) 3: 3130332e3136322e3233382e302f32342d3234203d3e20313431363639.roa (hash: viFyM1HFUzcMqtq2FKm6xB7dBBL2CbC6fte+ULEjCo4=) 4: 3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa (hash: Ko0biNHo/OilJd2E0SwGMCh23IyoKfHyT2KDez8VfH4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:46:1f:2e:07:27:87:a9:c2:d7:a5:fc:c7:6e:49:ac:e6:4b:09:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=950BCAEB519E51C997432A3CD3E5FB2BACA8F751 Validity Not Before: Sep 17 00:54:51 2026 GMT Not After : Sep 18 03:19:51 2026 GMT Subject: CN=67D5C434A0008D00B246909445B3EEBB1989707A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:46:2e:08:ae:b7:ee:5d:ca:98:29:46:72:a3: 4d:02:39:d5:4d:5f:84:56:a9:4d:dc:4c:13:b3:93: 82:3c:ce:26:d5:60:fd:26:d1:65:59:70:80:cb:0b: 6b:78:e0:14:08:64:8f:2b:fd:b1:5a:e4:88:f6:8f: 0d:89:0d:99:58:01:d8:5c:96:4a:d9:2e:b2:5e:1c: b2:00:37:e9:f0:ca:45:1b:08:a0:bb:a6:a1:ac:44: 4a:8d:2d:15:54:79:5b:cd:90:d3:23:78:9e:22:89: cf:8b:27:7e:de:fd:ca:e7:50:be:99:37:2f:8d:b6: 66:3c:65:95:4a:3c:fe:ba:ee:18:44:e9:9d:64:9b: b7:1a:f9:92:33:7f:bf:3a:f6:be:dc:59:5e:d1:27: f6:49:36:b7:22:6f:5d:17:2c:47:11:3b:5a:08:e9: c4:0b:29:74:e1:c4:15:ac:ca:51:f0:84:f1:95:aa: ad:99:5e:b0:03:6e:c0:97:b5:44:b6:6c:3d:a1:db: cd:5e:59:9b:00:0a:71:b8:1f:4f:b3:bb:85:67:cc: 8a:d4:c4:e3:20:89:ef:34:c2:a0:55:53:c0:c6:d6: 78:5d:ac:67:46:67:4a:65:df:69:90:9b:20:cd:67: 38:5a:0c:f7:95:35:af:de:a6:d1:75:d5:7e:ff:b1: 45:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D5:C4:34:A0:00:8D:00:B2:46:90:94:45:B3:EE:BB:19:89:70:7A X509v3 Authority Key Identifier: keyid:95:0B:CA:EB:51:9E:51:C9:97:43:2A:3C:D3:E5:FB:2B:AC:A8:F7:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/950BCAEB519E51C997432A3CD3E5FB2BACA8F751.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:5f:3c:e6:7c:e8:39:72:2d:b6:e2:f8:4e:31:29:8d:25:75: d1:07:df:04:3b:11:58:d8:70:8d:5e:2a:27:55:f0:0e:6d:ad: 52:e1:e0:eb:34:0d:87:07:d8:83:b7:9e:34:a3:82:6e:20:c8: 56:0e:a5:7d:6c:6b:2b:5f:aa:b4:7f:5a:e1:73:82:9d:ad:6a: 1a:c3:cc:93:30:8e:13:9f:72:46:d0:35:4f:86:2e:1b:59:16: 8e:0f:42:92:71:6a:42:56:c4:88:a1:f8:6d:58:f2:88:98:53: 04:dc:20:b7:d4:bb:96:49:88:3b:9d:54:d8:26:e3:81:e5:66: 75:e4:75:c6:0b:3b:05:2b:b0:6e:95:63:37:d3:35:a4:19:7f: 8c:f2:38:b7:4c:20:25:34:77:d9:17:67:21:26:98:1b:28:ac: c0:19:99:92:10:5f:5b:4b:37:b4:48:df:ea:7e:27:fa:1e:58: df:8f:5f:e0:98:42:e0:45:6a:be:3f:3a:7e:de:90:1a:63:ca: 79:2c:c8:19:7b:2d:52:ea:b6:30:14:27:ad:4a:8d:5e:3b:04: b8:e1:d5:cd:34:1a:60:7c:c5:28:12:01:61:d0:02:7c:bf:c3: 53:60:68:be:db:bf:a1:36:28:c8:fd:6b:cf:25:c2:7c:a5:42: d7:89:6a:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeUYfLgcnh6nC16X8x25JrOZLCZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUwQkNBRUI1MTlFNTFDOTk3NDMyQTNDRDNFNUZCMkJB Q0E4Rjc1MTAeFw0yNjA5MTcwMDU0NTFaFw0yNjA5MTgwMzE5NTFaMDMxMTAvBgNV BAMTKDY3RDVDNDM0QTAwMDhEMDBCMjQ2OTA5NDQ1QjNFRUJCMTk4OTcwN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Ri4IrrfuXcqYKUZyo00COdVN X4RWqU3cTBOzk4I8zibVYP0m0WVZcIDLC2t44BQIZI8r/bFa5Ij2jw2JDZlYAdhc lkrZLrJeHLIAN+nwykUbCKC7pqGsREqNLRVUeVvNkNMjeJ4iic+LJ37e/crnUL6Z Ny+NtmY8ZZVKPP667hhE6Z1km7ca+ZIzf7869r7cWV7RJ/ZJNrcib10XLEcRO1oI 6cQLKXThxBWsylHwhPGVqq2ZXrADbsCXtUS2bD2h281eWZsACnG4H0+zu4VnzIrU xOMgie80wqBVU8DG1nhdrGdGZ0pl32mQmyDNZzhaDPeVNa/eptF11X7/sUWNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ9XENKAAjQCyRpCURbPuuxmJcHowHwYDVR0j BBgwFoAUlQvK61GeUcmXQyo80+X7K6yo91EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFmNjk4NGYtY2NmOS00YzQwLWIxMTQtMzgwMzU2YThjZDg4LzAvOTUwQkNBRUI1 MTlFNTFDOTk3NDMyQTNDRDNFNUZCMkJBQ0E4Rjc1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTBCQ0FFQjUxOUU1MUM5OTc0MzJBM0NEM0U1RkIyQkFDQThG NzUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFmNjk4NGYtY2NmOS00YzQwLWIx MTQtMzgwMzU2YThjZDg4LzAvOTUwQkNBRUI1MTlFNTFDOTk3NDMyQTNDRDNFNUZC MkJBQ0E4Rjc1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpfPOZ86DlyLbbi+E4xKY0lddEH3wQ7EVjY cI1eKidV8A5trVLh4Os0DYcH2IO3njSjgm4gyFYOpX1saytfqrR/WuFzgp2tahrD zJMwjhOfckbQNU+GLhtZFo4PQpJxakJWxIih+G1Y8oiYUwTcILfUu5ZJiDudVNgm 44HlZnXkdcYLOwUrsG6VYzfTNaQZf4zyOLdMICU0d9kXZyEmmBsorMAZmZIQX1tL N7RI3+p+J/oeWN+PX+CYQuBFar4/On7ekBpjynksyBl7LVLqtjAUJ61KjV47BLjh 1c00GmB8xSgSAWHQAny/w1NgaL7bv6E2KMj9a88lwnylQteJaik= -----END CERTIFICATE-----Generated at Thu Sep 17 15:09:06 2026 by rpki-client