$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft File: 295FB7ECBA6239B644592BD0426F101D644A0F61.mft (raw, json) Hash identifier: PbIMXtLZi5ycvhbmRTsw0j/ZN34pDnRH1b8fJSTKQwk= Subject key identifier: AB:52:C6:A3:96:FB:23:83:6D:8A:A7:C0:18:68:DD:BD:23:5A:4D:9F Authority key identifier: 29:5F:B7:EC:BA:62:39:B6:44:59:2B:D0:42:6F:10:1D:64:4A:0F:61 Certificate issuer: /CN=295FB7ECBA6239B644592BD0426F101D644A0F61 Certificate serial: 034E9FE48E4EC54CCC867FF073D2EF0C797BFEF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 08:47:02 +0000 Manifest this update: Wed 23 Sep 2026 08:42:02 +0000 Manifest next update: Thu 24 Sep 2026 09:01:02 +0000 Files and hashes: 1: 295FB7ECBA6239B644592BD0426F101D644A0F61.crl (hash: 9jDE7bKE1whHAberde5RXupnXyPP8kH4E8hpIljZzRo=) 2: 3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa (hash: 6VZQ++jLgt7SbEpV+414do5ReQLnOEeVOta5PPlvT9I=) 3: 3135372e36362e3139322e302f32332d3234203d3e20313532373730.roa (hash: Xi9t9c0T9HENzdyMpUtRfuzPjw3DaO7OJkvxFqdByyY=) 4: 3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa (hash: sL7ncgOu/bSnEPaPTAZmx8BjyCkpPb4ur9OMw0WuPnA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.crl rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:4e:9f:e4:8e:4e:c5:4c:cc:86:7f:f0:73:d2:ef:0c:79:7b:fe:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295FB7ECBA6239B644592BD0426F101D644A0F61 Validity Not Before: Sep 23 08:42:02 2026 GMT Not After : Sep 24 09:01:02 2026 GMT Subject: CN=AB52C6A396FB23836D8AA7C01868DDBD235A4D9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5a:5c:e5:04:46:b4:2a:a6:af:0c:a1:ec:11: 11:ba:29:6d:a3:ab:42:9a:de:33:55:71:db:94:95: c8:f2:35:17:ab:9d:ad:e8:4e:cd:60:c9:65:44:33: b4:df:37:80:c1:c6:61:21:36:72:89:c7:c0:e7:04: 8d:00:f8:ba:f4:ee:78:39:5e:58:9a:c1:f4:cc:a2: fd:54:52:d6:ed:9b:92:29:32:63:3a:3c:80:f9:0f: fc:43:4c:d5:38:12:42:31:52:3d:97:e2:a1:d4:c2: 79:d9:93:5b:4a:d8:44:dd:79:00:18:09:c8:e4:ee: 24:3d:03:2d:a3:b8:34:d8:e8:65:10:c2:e1:0e:d3: 80:cc:90:2b:ca:f9:8f:38:0a:a4:c4:6c:38:73:71: 56:54:07:db:7d:49:ee:67:41:98:2b:97:e8:10:57: d9:6f:d2:b2:02:59:6d:1d:56:1b:8e:77:c3:5f:ed: bb:44:58:5b:f1:79:1c:a7:c2:a3:95:83:4e:a1:96: e9:13:d1:ed:59:09:d3:bd:a2:04:12:ee:fa:97:a0: 65:f3:72:52:8a:81:9a:0d:3b:f8:b5:ad:2b:bb:92: 42:6b:73:d9:8d:a5:c2:21:b5:30:73:c2:b5:77:d0: 83:1e:3e:68:26:ad:ff:90:9c:2f:2a:8d:f3:96:76: 59:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:52:C6:A3:96:FB:23:83:6D:8A:A7:C0:18:68:DD:BD:23:5A:4D:9F X509v3 Authority Key Identifier: keyid:29:5F:B7:EC:BA:62:39:B6:44:59:2B:D0:42:6F:10:1D:64:4A:0F:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:11:ac:c9:6e:23:e0:38:e1:65:80:a0:f5:1a:88:53:41:ff: 5a:ba:f4:b6:7d:77:f5:6e:d4:36:3a:50:ea:7a:d5:24:cd:bf: 86:65:65:0d:10:be:f9:ee:be:5b:e4:d6:01:c2:09:68:80:f5: 1e:21:2d:d3:ce:b6:36:96:b8:75:7f:bf:b9:b0:50:bd:eb:14: 9d:72:76:1a:7f:7a:59:70:6a:61:b4:43:a7:61:6c:be:e8:f5: 96:8e:17:86:37:09:8d:ec:c9:ae:28:ab:4b:75:f4:04:49:9e: 32:fd:6b:62:11:6c:00:ea:1c:6b:be:72:bd:4b:cc:83:6c:fa: a8:b3:d1:e8:e5:c1:3b:aa:98:57:b1:49:6d:c9:15:a0:c0:db: aa:1b:73:aa:c3:21:3e:d8:89:b2:3a:1f:02:a9:50:e1:db:ef: eb:0e:e6:03:21:37:4c:b1:d4:4b:74:11:3f:64:f3:6c:76:1f: 9f:63:df:81:f8:ca:ad:56:5d:7d:f4:52:18:9c:06:06:74:7d: af:3f:9a:7d:54:36:2a:32:47:00:ed:2a:bd:34:fb:9a:01:36: 45:37:cd:b5:1b:19:57:56:4f:b7:d4:2b:34:96:3e:3a:42:4a: 56:3b:14:1a:9f:98:9e:40:c5:a1:03:72:14:de:b2:68:e1:cb: ce:0f:20:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA06f5I5OxUzMhn/wc9LvDHl7/vgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1RkI3RUNCQTYyMzlCNjQ0NTkyQkQwNDI2RjEwMUQ2 NDRBMEY2MTAeFw0yNjA5MjMwODQyMDJaFw0yNjA5MjQwOTAxMDJaMDMxMTAvBgNV BAMTKEFCNTJDNkEzOTZGQjIzODM2RDhBQTdDMDE4NjhEREJEMjM1QTREOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkWlzlBEa0KqavDKHsERG6KW2j q0Ka3jNVcduUlcjyNRerna3oTs1gyWVEM7TfN4DBxmEhNnKJx8DnBI0A+Lr07ng5 XliawfTMov1UUtbtm5IpMmM6PID5D/xDTNU4EkIxUj2X4qHUwnnZk1tK2ETdeQAY Ccjk7iQ9Ay2juDTY6GUQwuEO04DMkCvK+Y84CqTEbDhzcVZUB9t9Se5nQZgrl+gQ V9lv0rICWW0dVhuOd8Nf7btEWFvxeRynwqOVg06hlukT0e1ZCdO9ogQS7vqXoGXz clKKgZoNO/i1rSu7kkJrc9mNpcIhtTBzwrV30IMePmgmrf+QnC8qjfOWdlkJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq1LGo5b7I4NtiqfAGGjdvSNaTZ8wHwYDVR0j BBgwFoAUKV+37LpiObZEWSvQQm8QHWRKD2EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGRlMmQwOTAtNDc2Ni00NzVjLTljZWYtN2JlYjU4NWNmMjQxLzAvMjk1RkI3RUNC QTYyMzlCNjQ0NTkyQkQwNDI2RjEwMUQ2NDRBMEY2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yOTVGQjdFQ0JBNjIzOUI2NDQ1OTJCRDA0MjZGMTAxRDY0NEEw RjYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzAvMjk1RkI3RUNCQTYyMzlCNjQ0NTkyQkQwNDI2RjEw MUQ2NDRBMEY2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4RrMluI+A44WWAoPUaiFNB/1q69LZ9d/Vu 1DY6UOp61STNv4ZlZQ0Qvvnuvlvk1gHCCWiA9R4hLdPOtjaWuHV/v7mwUL3rFJ1y dhp/ellwamG0Q6dhbL7o9ZaOF4Y3CY3sya4oq0t19ARJnjL9a2IRbADqHGu+cr1L zINs+qiz0ejlwTuqmFexSW3JFaDA26obc6rDIT7YibI6HwKpUOHb7+sO5gMhN0yx 1Et0ET9k82x2H59j34H4yq1WXX30UhicBgZ0fa8/mn1UNioyRwDtKr00+5oBNkU3 zbUbGVdWT7fUKzSWPjpCSlY7FBqfmJ5AxaEDchTesmjhy84PIHY= -----END CERTIFICATE-----Generated at Wed Sep 23 22:26:05 2026 by rpki-client