$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft File: 95C0FEDF4348635C616CCD76866299FFF41521C1.mft (raw, json) Hash identifier: h+gRp95Jd/RVPcbGPRPd2bYn8ed4GRDrxDoIAB8rVy0= Subject key identifier: B5:B2:9E:68:C9:58:BF:C9:71:B4:A3:9F:35:AD:D5:F6:8C:47:35:56 Authority key identifier: 95:C0:FE:DF:43:48:63:5C:61:6C:CD:76:86:62:99:FF:F4:15:21:C1 Certificate issuer: /CN=95C0FEDF4348635C616CCD76866299FFF41521C1 Certificate serial: 0655414C4E5704BF3B9CDA762207C5A8EAFF7C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 23:27:56 +0000 Manifest this update: Wed 16 Sep 2026 23:22:56 +0000 Manifest next update: Fri 18 Sep 2026 01:25:56 +0000 Files and hashes: 1: 3130332e3134352e35322e302f32342d3234203d3e20313339343535.roa (hash: h+0fD6qzNLY/87deDA6R1jRhs0ceFeWyvO6Ew7fmyvY=) 2: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (hash: O1v/bS1Rz6LYE4uphPLJ6skO/weLSpE9O9uIKbdx440=) 3: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (hash: nctWeqdG+C+yzM3us3hfFDeGU29WHbKA/XQo+aeaR/w=) 4: 95C0FEDF4348635C616CCD76866299FFF41521C1.crl (hash: ckinIONf+MGf4bi8cWwzo78EZB557rUKMewkIo1RYvs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.crl rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:25:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:55:41:4c:4e:57:04:bf:3b:9c:da:76:22:07:c5:a8:ea:ff:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C0FEDF4348635C616CCD76866299FFF41521C1 Validity Not Before: Sep 16 23:22:56 2026 GMT Not After : Sep 18 01:25:56 2026 GMT Subject: CN=B5B29E68C958BFC971B4A39F35ADD5F68C473556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d8:85:ac:33:dd:6c:48:5c:05:40:e5:3c:10: f1:73:2c:4f:7f:33:8a:b2:b9:4a:c5:40:f0:be:8e: 1c:a9:4f:c0:b1:d5:68:3b:68:04:48:fc:b4:0d:6f: a6:14:01:3a:b2:0f:6f:8e:c9:54:a6:dd:e4:81:8d: b0:47:14:4e:7b:f8:76:cf:7a:fb:e2:f1:ac:0b:b5: 76:f3:41:37:f2:6d:cf:2f:02:87:54:44:8c:44:86: 83:40:e3:d1:9e:1c:89:fb:58:d8:12:ba:45:13:4b: 70:0f:12:93:0d:c0:ef:a8:31:f2:22:4d:61:ab:9e: be:8b:a0:32:fc:5d:5a:02:42:07:b7:90:83:87:40: 54:88:19:39:0c:35:20:f2:e1:eb:1b:cb:f2:5c:35: 89:e6:79:8a:88:57:8c:20:76:ba:a6:a2:83:65:89: 7c:b0:79:b3:88:dc:00:52:25:cf:e3:97:88:a5:bf: aa:ee:7f:a4:1e:9a:d6:a2:53:d2:10:82:61:2d:83: 24:11:99:9f:c6:dd:62:d8:79:d6:f3:bb:6f:5d:aa: a4:3a:db:91:47:c9:db:cb:33:e3:04:17:2e:2a:62: 1a:3a:19:e5:5b:41:13:38:71:45:fe:b7:1d:9c:9b: e7:a1:23:86:a7:b2:f4:60:77:17:6f:8d:75:40:59: 17:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B2:9E:68:C9:58:BF:C9:71:B4:A3:9F:35:AD:D5:F6:8C:47:35:56 X509v3 Authority Key Identifier: keyid:95:C0:FE:DF:43:48:63:5C:61:6C:CD:76:86:62:99:FF:F4:15:21:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:bd:b9:8f:4d:98:c7:7f:31:77:b6:bb:d7:c0:59:75:38:92: 18:85:d3:6e:41:df:d1:07:06:a1:98:58:0c:f0:df:02:7b:27: 55:38:31:3e:b4:48:44:fc:28:3f:e9:87:b8:b9:70:b8:7d:92: 88:2f:50:59:bf:a1:d0:00:0d:a8:8b:5e:e6:7f:68:89:45:d2: 56:df:e6:b6:e3:c2:f5:95:7c:f3:38:43:a9:9b:59:e0:dd:6f: d5:30:4f:90:7b:bf:7d:06:ca:8d:fa:95:eb:20:a7:df:3b:10: ff:a4:21:e1:3e:9a:42:b0:2a:59:b2:b8:9c:29:5b:e2:f0:eb: 36:73:35:d2:fd:fc:fa:11:56:6d:60:fe:f1:f6:19:77:8a:84: 47:b0:7d:5a:14:85:c2:24:a1:7d:7b:62:65:3c:f4:d4:5f:60: 76:84:9f:2d:b5:0e:f6:79:48:29:e9:da:21:3c:8c:1b:9e:d3: 8e:d8:dc:45:bb:03:af:c9:be:a4:47:a1:f5:22:dd:4c:fd:2e: 09:48:f6:b2:d7:46:a3:fa:ee:4e:fc:a3:c1:b7:39:23:ab:27: da:4c:b6:9d:50:7e:1c:84:4a:52:ef:e0:d9:f9:bb:d5:3d:89: 69:2d:67:88:ad:89:54:1a:91:00:cd:61:74:a4:f6:ff:d0:21: 79:46:15:94 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITBlVBTE5XBL87nNp2IgfFqOr/fDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg5NUMwRkVERjQzNDg2MzVDNjE2Q0NENzY4NjYyOTlGRkY0 MTUyMUMxMB4XDTI2MDkxNjIzMjI1NloXDTI2MDkxODAxMjU1NlowMzExMC8GA1UE AxMoQjVCMjlFNjhDOTU4QkZDOTcxQjRBMzlGMzVBREQ1RjY4QzQ3MzU1NjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALnYhawz3WxIXAVA5TwQ8XMsT38z irK5SsVA8L6OHKlPwLHVaDtoBEj8tA1vphQBOrIPb47JVKbd5IGNsEcUTnv4ds96 ++LxrAu1dvNBN/Jtzy8Ch1REjESGg0Dj0Z4ciftY2BK6RRNLcA8Skw3A76gx8iJN YauevougMvxdWgJCB7eQg4dAVIgZOQw1IPLh6xvL8lw1ieZ5iohXjCB2uqaig2WJ fLB5s4jcAFIlz+OXiKW/qu5/pB6a1qJT0hCCYS2DJBGZn8bdYth51vO7b12qpDrb kUfJ28sz4wQXLipiGjoZ5VtBEzhxRf63HZyb56Ejhqey9GB3F2+NdUBZF0kCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBS1sp5oyVi/yXG0o581rdX2jEc1VjAfBgNVHSME GDAWgBSVwP7fQ0hjXGFszXaGYpn/9BUhwTAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9m NzdmZmUyYS0zMWU0LTQ4MDAtOTdkNC03ODc0YzEyMzE5MTEvMC85NUMwRkVERjQz NDg2MzVDNjE2Q0NENzY4NjYyOTlGRkY0MTUyMUMxLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzk1QzBGRURGNDM0ODYzNUM2MTZDQ0Q3Njg2NjI5OUZGRjQxNTIx QzEuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mNzdmZmUyYS0zMWU0LTQ4MDAtOTdk NC03ODc0YzEyMzE5MTEvMC85NUMwRkVERjQzNDg2MzVDNjE2Q0NENzY4NjYyOTlG RkY0MTUyMUMxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEASb25j02Yx38xd7a718BZdTiSGIXTbkHf0QcG oZhYDPDfAnsnVTgxPrRIRPwoP+mHuLlwuH2SiC9QWb+h0AANqIte5n9oiUXSVt/m tuPC9ZV88zhDqZtZ4N1v1TBPkHu/fQbKjfqV6yCn3zsQ/6Qh4T6aQrAqWbK4nClb 4vDrNnM10v38+hFWbWD+8fYZd4qER7B9WhSFwiShfXtiZTz01F9gdoSfLbUO9nlI KenaITyMG57TjtjcRbsDr8m+pEeh9SLdTP0uCUj2stdGo/ruTvyjwbc5I6sn2ky2 nVB+HIRKUu/g2fm71T2JaS1niK2JVBqRAM1hdKT2/9AheUYVlA== -----END CERTIFICATE-----Generated at Thu Sep 17 15:19:58 2026 by rpki-client