$ rpki-client -vvf rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft File: 295FB7ECBA6239B644592BD0426F101D644A0F61.mft (raw, json) Hash identifier: enz0wf5UWHq5RWHRmdkL/d2cEtk47B7zTugHQD1Tfe8= Subject key identifier: 3B:5C:6E:EE:E1:88:48:32:CF:41:96:20:83:8E:15:BF:2E:88:B1:24 Authority key identifier: 29:5F:B7:EC:BA:62:39:B6:44:59:2B:D0:42:6F:10:1D:64:4A:0F:61 Certificate issuer: /CN=295FB7ECBA6239B644592BD0426F101D644A0F61 Certificate serial: 692369171E33288D37A260C6BEE496F9945E9333 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:57:56 +0000 Manifest this update: Tue 12 May 2026 17:52:56 +0000 Manifest next update: Wed 13 May 2026 20:22:56 +0000 Files and hashes: 1: 3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa (hash: sL7ncgOu/bSnEPaPTAZmx8BjyCkpPb4ur9OMw0WuPnA=) 2: 3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa (hash: 6VZQ++jLgt7SbEpV+414do5ReQLnOEeVOta5PPlvT9I=) 3: 295FB7ECBA6239B644592BD0426F101D644A0F61.crl (hash: yOh7Del7MTHO9zOZGKN8vAE13tMqwFpH8iEoJVQLqC0=) 4: 3135372e36362e3139322e302f32332d3234203d3e20313532373730.roa (hash: Xi9t9c0T9HENzdyMpUtRfuzPjw3DaO7OJkvxFqdByyY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.crl rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:23:69:17:1e:33:28:8d:37:a2:60:c6:be:e4:96:f9:94:5e:93:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295FB7ECBA6239B644592BD0426F101D644A0F61 Validity Not Before: May 12 17:52:56 2026 GMT Not After : May 13 20:22:56 2026 GMT Subject: CN=3B5C6EEEE1884832CF419620838E15BF2E88B124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:02:21:fa:7c:a2:eb:57:dc:a4:8d:10:74:52: 38:92:0b:f1:d2:f1:ff:d0:7e:03:34:cb:53:48:f6: 61:68:f2:22:84:58:fd:e7:5a:fe:6d:3a:8b:33:0b: 4c:94:3d:a4:19:90:81:e0:7e:29:02:94:70:72:71: 12:6b:30:ff:a4:c0:10:c1:06:f7:7c:83:0e:15:29: b0:82:0e:5f:08:01:d3:ec:2d:63:87:23:aa:4b:30: 62:98:7a:36:a4:cf:61:2e:50:98:8f:03:56:af:24: de:ee:ba:7a:be:ca:00:77:d7:b2:ff:ef:6a:db:f3: 9e:20:0c:cc:3e:0b:30:86:5e:da:53:40:e4:30:a3: 02:4c:6f:9b:b0:e7:ef:49:f1:c2:d9:32:5c:d2:64: 4c:34:0f:95:30:bd:9c:e6:09:6f:98:c3:27:4f:ab: bb:b8:50:94:1a:5b:b3:bf:0e:d4:12:9b:bd:fc:9d: 78:97:49:3e:15:3d:7b:1c:c3:f2:83:05:08:13:60: 30:2f:fb:49:c9:10:48:97:8d:4c:fa:a1:41:e7:91: 8c:49:6b:46:f8:a0:fd:5d:23:36:97:a8:7c:e7:d0: dc:e5:d2:bd:03:7b:75:d5:93:13:06:9c:fb:c2:0b: f3:47:06:80:6c:b8:fe:f7:01:cb:aa:ee:c7:ce:18: 5f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5C:6E:EE:E1:88:48:32:CF:41:96:20:83:8E:15:BF:2E:88:B1:24 X509v3 Authority Key Identifier: keyid:29:5F:B7:EC:BA:62:39:B6:44:59:2B:D0:42:6F:10:1D:64:4A:0F:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:61:9b:d8:1b:08:31:08:d5:19:27:c3:6a:ab:2a:f0:e7:df: e9:87:35:91:a7:eb:ba:d4:dd:19:44:69:a6:83:a6:e4:90:23: a8:73:37:ac:ff:11:14:43:0b:8d:14:c5:d5:db:ad:88:56:aa: 91:86:33:d2:52:39:4d:26:b5:70:b2:1c:00:99:eb:32:7d:76: 79:35:64:8f:e1:f2:cc:e5:2c:fc:dc:4d:fe:35:91:be:56:80: ef:e5:9b:1d:e2:fb:f8:e0:60:17:03:43:bf:90:93:2d:bd:57: df:8e:b5:0f:3d:6b:9d:b9:2c:ea:eb:45:11:d1:4b:55:85:db: 2a:ef:84:a9:0d:8d:17:c8:bf:27:8c:23:e6:d3:22:52:e5:78: b3:c4:c2:94:8c:57:55:b1:54:6c:f5:81:11:4a:5a:20:f5:75: 3b:ed:7a:5a:a2:7a:77:27:10:78:19:74:22:9e:4a:14:6f:6f: 75:98:e8:ab:42:d1:10:5a:cc:b2:9c:13:cf:35:f8:29:5e:22: 6b:a2:2c:de:08:d0:98:21:a5:4a:96:a5:85:28:9f:17:1e:73: 26:ae:12:1d:5c:fd:34:18:62:a5:41:f7:96:bc:57:7c:e6:e0: 4b:b5:09:da:ca:44:d8:b5:b6:1b:de:9e:13:34:64:52:8a:dd: d2:4a:24:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaSNpFx4zKI03omDGvuSW+ZRekzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1RkI3RUNCQTYyMzlCNjQ0NTkyQkQwNDI2RjEwMUQ2 NDRBMEY2MTAeFw0yNjA1MTIxNzUyNTZaFw0yNjA1MTMyMDIyNTZaMDMxMTAvBgNV BAMTKDNCNUM2RUVFRTE4ODQ4MzJDRjQxOTYyMDgzOEUxNUJGMkU4OEIxMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvAiH6fKLrV9ykjRB0UjiSC/HS 8f/QfgM0y1NI9mFo8iKEWP3nWv5tOoszC0yUPaQZkIHgfikClHBycRJrMP+kwBDB Bvd8gw4VKbCCDl8IAdPsLWOHI6pLMGKYejakz2EuUJiPA1avJN7uunq+ygB317L/ 72rb854gDMw+CzCGXtpTQOQwowJMb5uw5+9J8cLZMlzSZEw0D5UwvZzmCW+YwydP q7u4UJQaW7O/DtQSm738nXiXST4VPXscw/KDBQgTYDAv+0nJEEiXjUz6oUHnkYxJ a0b4oP1dIzaXqHzn0Nzl0r0De3XVkxMGnPvCC/NHBoBsuP73Acuq7sfOGF9XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO1xu7uGISDLPQZYgg44Vvy6IsSQwHwYDVR0j BBgwFoAUKV+37LpiObZEWSvQQm8QHWRKD2EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGRlMmQwOTAtNDc2Ni00NzVjLTljZWYtN2JlYjU4NWNmMjQxLzAvMjk1RkI3RUNC QTYyMzlCNjQ0NTkyQkQwNDI2RjEwMUQ2NDRBMEY2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yOTVGQjdFQ0JBNjIzOUI2NDQ1OTJCRDA0MjZGMTAxRDY0NEEw RjYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzAvMjk1RkI3RUNCQTYyMzlCNjQ0NTkyQkQwNDI2RjEw MUQ2NDRBMEY2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdhm9gbCDEI1Rknw2qrKvDn3+mHNZGn67rU 3RlEaaaDpuSQI6hzN6z/ERRDC40UxdXbrYhWqpGGM9JSOU0mtXCyHACZ6zJ9dnk1 ZI/h8szlLPzcTf41kb5WgO/lmx3i+/jgYBcDQ7+Qky29V9+OtQ89a525LOrrRRHR S1WF2yrvhKkNjRfIvyeMI+bTIlLleLPEwpSMV1WxVGz1gRFKWiD1dTvtelqiencn EHgZdCKeShRvb3WY6KtC0RBazLKcE881+CleImuiLN4I0JghpUqWpYUonxcecyau Eh1c/TQYYqVB95a8V3zm4Eu1CdrKRNi1thvenhM0ZFKK3dJKJD4= -----END CERTIFICATE-----Generated at Wed May 13 00:20:59 2026 by rpki-client