$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft File: C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft (raw, json) Hash identifier: ESC1t0rLtnXPF78IO1EZZNCmeidsQCCpDJeTTWrZ1U0= Subject key identifier: 3D:F3:C8:0F:63:54:53:35:84:A5:46:CA:F3:4D:80:98:F0:80:62:B9 Authority key identifier: C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D Certificate issuer: /CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D Certificate serial: 189A42F64F5E19F0912C73AAD5CDE142ACD3F7D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft Manifest number: EB Signing time: Sat 24 Oct 2026 18:27:07 +0000 Manifest this update: Sat 24 Oct 2026 18:22:07 +0000 Manifest next update: Sun 25 Oct 2026 20:05:07 +0000 Files and hashes: 1: C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl (hash: AhF02qBtXqnTbbZq8wG1I4beydyW7gajb+fGw+keJTw=) 2: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 1gFxJKdThhrkplcpi1An+c+/wNEctIua90b5P0hZdUI=) 3: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: 8OYioJHXFDxSOXWT6kL63xMJJjG7Wo+wmLm6z+bx6x0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:9a:42:f6:4f:5e:19:f0:91:2c:73:aa:d5:cd:e1:42:ac:d3:f7:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C950DC3528E1749C721D4398523DA1BAFB6BBA1D Validity Not Before: Oct 24 18:22:07 2026 GMT Not After : Oct 25 20:05:07 2026 GMT Subject: CN=3DF3C80F6354533584A546CAF34D8098F08062B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7e:4c:1d:46:24:f7:69:70:70:ae:25:eb:8e: b8:1b:f3:d5:56:7d:e1:23:0c:d7:d5:ac:53:be:5f: 66:75:75:6c:f4:55:47:69:d6:83:55:02:f6:cd:59: 94:14:87:4c:a5:e7:a6:35:e6:5b:7b:02:f5:5c:ce: 76:90:94:07:0b:3a:77:28:da:88:82:1e:b9:e3:2f: f9:85:ac:23:9f:3e:67:89:93:43:55:a0:34:83:79: 65:3a:ef:94:a8:f1:11:06:41:ff:40:4c:f1:29:d9: f8:6a:fb:e1:19:9c:19:8e:9c:ca:d1:92:55:72:8b: 47:e7:1a:12:87:2c:65:55:95:72:c6:b7:00:71:b5: 01:3f:e0:09:07:7a:c1:7c:0c:ea:d3:4c:40:66:72: d5:78:33:7c:46:35:a4:74:24:fd:36:3b:e1:a9:d7: 49:7c:64:37:2e:ea:91:1f:4a:69:10:0f:01:71:e4: ae:de:1e:48:5f:dd:95:98:36:3e:43:cf:b6:85:15: 05:57:0c:02:7f:73:75:80:50:69:3c:2d:1d:28:ec: 75:64:a3:a6:28:af:ba:93:ad:91:d8:5c:ba:0b:b2: 5e:2f:1d:75:c7:dd:33:85:92:6f:c0:59:f5:23:0b: 63:43:ab:58:2c:21:19:f4:dc:4b:0b:07:c1:a0:36: 61:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F3:C8:0F:63:54:53:35:84:A5:46:CA:F3:4D:80:98:F0:80:62:B9 X509v3 Authority Key Identifier: keyid:C9:50:DC:35:28:E1:74:9C:72:1D:43:98:52:3D:A1:BA:FB:6B:BA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/C950DC3528E1749C721D4398523DA1BAFB6BBA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:b1:a0:d9:35:8e:50:ba:48:0f:7d:64:93:47:c9:a4:b5:62: 1b:13:58:05:fd:2b:96:ce:c5:1d:67:53:24:a2:38:16:0b:33: 90:1a:0c:73:b6:45:8c:8c:49:9c:73:fd:f9:71:8e:da:ca:59: 6c:fc:1e:31:32:65:02:a5:95:30:22:7a:11:ca:4f:94:1b:a3: 2c:a2:32:ab:2e:bf:f9:00:53:2a:c9:63:f7:0b:3c:fa:78:16: 17:d5:c9:fc:5a:0d:00:e1:c4:56:86:3e:64:27:6f:0a:4c:13: 93:31:e0:ed:61:f8:32:50:68:22:f3:af:07:dc:bd:73:d4:d5: 21:6d:5f:34:de:51:95:f7:a5:d4:92:38:d6:d1:16:12:fd:2f: 59:19:75:e3:76:13:48:38:ac:a4:8d:76:81:50:5f:a9:64:0c: 3d:68:8c:df:66:9f:7a:fc:07:5b:4e:0a:bf:dd:c8:08:57:1a: a6:06:24:cb:2c:1b:2b:8f:95:d7:4a:a7:f6:9b:0b:c0:48:5c: 3c:47:c1:65:e2:ed:36:b0:c4:aa:bc:54:89:30:d0:7d:36:72: 5d:d7:ed:8c:da:0e:e0:5b:dd:0e:39:8a:d8:89:09:f5:94:3d: bc:e6:83:13:3a:f1:b4:8c:c0:35:82:d8:7c:3e:38:c5:31:38: 4f:00:9f:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGJpC9k9eGfCRLHOq1c3hQqzT99YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk1MERDMzUyOEUxNzQ5QzcyMUQ0Mzk4NTIzREExQkFG QjZCQkExRDAeFw0yNjEwMjQxODIyMDdaFw0yNjEwMjUyMDA1MDdaMDMxMTAvBgNV BAMTKDNERjNDODBGNjM1NDUzMzU4NEE1NDZDQUYzNEQ4MDk4RjA4MDYyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGfkwdRiT3aXBwriXrjrgb89VW feEjDNfVrFO+X2Z1dWz0VUdp1oNVAvbNWZQUh0yl56Y15lt7AvVcznaQlAcLOnco 2oiCHrnjL/mFrCOfPmeJk0NVoDSDeWU675So8REGQf9ATPEp2fhq++EZnBmOnMrR klVyi0fnGhKHLGVVlXLGtwBxtQE/4AkHesF8DOrTTEBmctV4M3xGNaR0JP02O+Gp 10l8ZDcu6pEfSmkQDwFx5K7eHkhf3ZWYNj5Dz7aFFQVXDAJ/c3WAUGk8LR0o7HVk o6Yor7qTrZHYXLoLsl4vHXXH3TOFkm/AWfUjC2NDq1gsIRn03EsLB8GgNmGBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPfPID2NUUzWEpUbK802AmPCAYrkwHwYDVR0j BBgwFoAUyVDcNSjhdJxyHUOYUj2huvtruh0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1NjgtMWQ4NjMzNjBlNDIxLzAvQzk1MERDMzUy OEUxNzQ5QzcyMUQ0Mzk4NTIzREExQkFGQjZCQkExRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTUwREMzNTI4RTE3NDlDNzIxRDQzOTg1MjNEQTFCQUZCNkJC QTFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvQzk1MERDMzUyOEUxNzQ5QzcyMUQ0Mzk4NTIzREEx QkFGQjZCQkExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWxoNk1jlC6SA99ZJNHyaS1YhsTWAX9K5bO xR1nUySiOBYLM5AaDHO2RYyMSZxz/flxjtrKWWz8HjEyZQKllTAiehHKT5Qboyyi Mqsuv/kAUyrJY/cLPPp4FhfVyfxaDQDhxFaGPmQnbwpME5Mx4O1h+DJQaCLzrwfc vXPU1SFtXzTeUZX3pdSSONbRFhL9L1kZdeN2E0g4rKSNdoFQX6lkDD1ojN9mn3r8 B1tOCr/dyAhXGqYGJMssGyuPlddKp/abC8BIXDxHwWXi7TawxKq8VIkw0H02cl3X 7YzaDuBb3Q45itiJCfWUPbzmgxM68bSMwDWC2Hw+OMUxOE8An2I= -----END CERTIFICATE-----Generated at Sun Oct 25 09:51:05 2026 by rpki-client