$ rpki-client -vvf rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft File: 295FB7ECBA6239B644592BD0426F101D644A0F61.mft (raw, json) Hash identifier: WZlio4jVk+S/6P0KtYmdii/wOq3uq2piOoqHUQxjll8= Subject key identifier: 03:25:48:C4:78:83:F3:41:7E:2F:BE:E3:AB:2F:6B:5D:B9:AF:E7:BC Authority key identifier: 29:5F:B7:EC:BA:62:39:B6:44:59:2B:D0:42:6F:10:1D:64:4A:0F:61 Certificate issuer: /CN=295FB7ECBA6239B644592BD0426F101D644A0F61 Certificate serial: 3606EE394C73585884CD83609BF4A792B12B79EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 03:33:35 +0000 Manifest this update: Fri 24 Jul 2026 03:28:35 +0000 Manifest next update: Sat 25 Jul 2026 06:45:35 +0000 Files and hashes: 1: 295FB7ECBA6239B644592BD0426F101D644A0F61.crl (hash: m9+NyuRaaKxPHjWB47wa06shCdUB7tbErRkVO2nxVjU=) 2: 3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa (hash: 6VZQ++jLgt7SbEpV+414do5ReQLnOEeVOta5PPlvT9I=) 3: 3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa (hash: sL7ncgOu/bSnEPaPTAZmx8BjyCkpPb4ur9OMw0WuPnA=) 4: 3135372e36362e3139322e302f32332d3234203d3e20313532373730.roa (hash: Xi9t9c0T9HENzdyMpUtRfuzPjw3DaO7OJkvxFqdByyY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.crl rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:06:ee:39:4c:73:58:58:84:cd:83:60:9b:f4:a7:92:b1:2b:79:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295FB7ECBA6239B644592BD0426F101D644A0F61 Validity Not Before: Jul 24 03:28:35 2026 GMT Not After : Jul 25 06:45:35 2026 GMT Subject: CN=032548C47883F3417E2FBEE3AB2F6B5DB9AFE7BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:93:82:dc:ad:1c:e8:36:fa:4c:e7:5f:29:62: 1f:9f:5e:b4:51:70:21:eb:5c:9b:45:f2:f6:88:8f: 5d:98:f1:f9:a6:1b:07:19:83:cb:f6:db:00:f0:10: 5d:69:39:e8:27:9a:f7:61:ee:90:70:d7:22:b9:a5: 14:ff:4f:3a:58:2f:a7:06:fa:51:4b:5b:5b:37:78: 32:6c:05:99:b6:bc:fc:c2:c2:0e:14:e9:28:6a:1d: cb:f7:a0:42:9c:db:d9:a1:e7:6c:1d:10:5d:a8:2e: d0:ba:50:f8:8f:05:a3:cf:f8:d3:70:6f:65:4a:9e: 0f:76:21:13:c6:4a:29:f8:c8:83:96:d0:25:5c:b6: d2:48:7c:74:a0:07:d7:15:ef:7d:fc:25:8f:23:11: a6:9c:c6:a7:34:79:a5:0a:77:e4:62:78:75:54:c3: c8:51:b0:08:b1:2f:26:69:e0:c7:27:a4:02:52:38: 4b:e4:2d:3c:35:e9:47:f3:6a:51:b1:73:42:3a:e2: d4:f7:0f:d3:a1:68:8b:f6:58:4b:ff:43:36:f6:f2: a5:f5:aa:12:89:e0:13:a2:ce:93:c1:0c:b6:95:1c: c0:84:10:ad:f1:7c:09:6d:d1:c9:62:50:27:b1:82: e6:60:65:54:69:09:60:8c:38:07:77:cd:97:06:42: af:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:25:48:C4:78:83:F3:41:7E:2F:BE:E3:AB:2F:6B:5D:B9:AF:E7:BC X509v3 Authority Key Identifier: keyid:29:5F:B7:EC:BA:62:39:B6:44:59:2B:D0:42:6F:10:1D:64:4A:0F:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:2d:80:48:83:8d:a0:d5:6d:5e:04:0f:ba:e4:34:68:f7:2c: 11:b3:5f:b0:c8:90:37:f7:18:ea:36:59:36:be:d9:81:27:59: ae:c3:a4:93:1f:b7:17:92:c0:72:93:64:4d:2a:3e:88:5a:11: de:33:08:06:b0:a1:4c:1f:2e:3d:71:77:31:5b:b0:0e:61:30: 99:10:3f:44:3d:cc:ef:cd:16:f8:25:17:ba:81:77:c3:14:1e: bb:64:0e:0b:85:1a:b4:69:57:d0:ff:cf:1a:71:1e:bf:21:8f: 7e:89:06:47:52:fc:0b:6e:d2:ed:91:00:1b:b5:5f:6c:e7:d4: 10:b8:26:72:03:44:29:f8:64:ee:d5:07:1c:a0:ea:83:b9:f4: b8:2f:37:53:2f:19:a1:9c:d1:56:0b:1d:79:9a:e8:cd:43:8b: dc:44:46:67:d3:75:99:04:81:30:76:63:c5:b5:8d:9e:25:be: 69:ba:39:53:3d:a2:90:07:32:ba:2f:80:ef:7d:96:57:86:3a: b3:e1:d7:72:e9:de:2b:25:ca:b8:eb:e3:50:b3:42:b1:98:76: 67:f3:df:d8:ef:e3:82:7a:d9:14:ce:bd:24:27:6b:9d:bf:fd: 91:b5:a3:08:f6:9e:13:7c:ce:1e:9a:d9:c4:14:bd:7d:d8:a6: d1:5d:c7:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNgbuOUxzWFiEzYNgm/SnkrEreeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1RkI3RUNCQTYyMzlCNjQ0NTkyQkQwNDI2RjEwMUQ2 NDRBMEY2MTAeFw0yNjA3MjQwMzI4MzVaFw0yNjA3MjUwNjQ1MzVaMDMxMTAvBgNV BAMTKDAzMjU0OEM0Nzg4M0YzNDE3RTJGQkVFM0FCMkY2QjVEQjlBRkU3QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBk4LcrRzoNvpM518pYh+fXrRR cCHrXJtF8vaIj12Y8fmmGwcZg8v22wDwEF1pOegnmvdh7pBw1yK5pRT/TzpYL6cG +lFLW1s3eDJsBZm2vPzCwg4U6ShqHcv3oEKc29mh52wdEF2oLtC6UPiPBaPP+NNw b2VKng92IRPGSin4yIOW0CVcttJIfHSgB9cV7338JY8jEaacxqc0eaUKd+RieHVU w8hRsAixLyZp4McnpAJSOEvkLTw16UfzalGxc0I64tT3D9OhaIv2WEv/Qzb28qX1 qhKJ4BOizpPBDLaVHMCEEK3xfAlt0cliUCexguZgZVRpCWCMOAd3zZcGQq9ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAyVIxHiD80F+L77jqy9rXbmv57wwHwYDVR0j BBgwFoAUKV+37LpiObZEWSvQQm8QHWRKD2EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGRlMmQwOTAtNDc2Ni00NzVjLTljZWYtN2JlYjU4NWNmMjQxLzAvMjk1RkI3RUNC QTYyMzlCNjQ0NTkyQkQwNDI2RjEwMUQ2NDRBMEY2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yOTVGQjdFQ0JBNjIzOUI2NDQ1OTJCRDA0MjZGMTAxRDY0NEEw RjYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzAvMjk1RkI3RUNCQTYyMzlCNjQ0NTkyQkQwNDI2RjEw MUQ2NDRBMEY2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABotgEiDjaDVbV4ED7rkNGj3LBGzX7DIkDf3 GOo2WTa+2YEnWa7DpJMftxeSwHKTZE0qPohaEd4zCAawoUwfLj1xdzFbsA5hMJkQ P0Q9zO/NFvglF7qBd8MUHrtkDguFGrRpV9D/zxpxHr8hj36JBkdS/Atu0u2RABu1 X2zn1BC4JnIDRCn4ZO7VBxyg6oO59LgvN1MvGaGc0VYLHXma6M1Di9xERmfTdZkE gTB2Y8W1jZ4lvmm6OVM9opAHMrovgO99lleGOrPh13Lp3islyrjr41CzQrGYdmfz 39jv44J62RTOvSQna52//ZG1owj2nhN8zh6a2cQUvX3YptFdx2c= -----END CERTIFICATE-----Generated at Fri Jul 24 07:39:38 2026 by rpki-client