$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft File: 295FB7ECBA6239B644592BD0426F101D644A0F61.mft (raw, json) Hash identifier: INt8Pd9cj3Av6j5fwJg3XKHFC08pwxpKqsG8+cLuqkE= Subject key identifier: 71:25:D7:53:B4:A3:E2:08:FF:EA:4D:6E:88:DE:CE:89:82:68:30:F3 Authority key identifier: 29:5F:B7:EC:BA:62:39:B6:44:59:2B:D0:42:6F:10:1D:64:4A:0F:61 Certificate issuer: /CN=295FB7ECBA6239B644592BD0426F101D644A0F61 Certificate serial: 4DC80F474BB65882B16316A71607DDAD74F0D698 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft Manifest number: 0108 Signing time: Sat 14 Nov 2026 15:44:11 +0000 Manifest this update: Sat 14 Nov 2026 15:39:11 +0000 Manifest next update: Sun 15 Nov 2026 16:48:11 +0000 Files and hashes: 1: 3135372e36362e3139322e302f32332d3234203d3e20313532373730.roa (hash: Xi9t9c0T9HENzdyMpUtRfuzPjw3DaO7OJkvxFqdByyY=) 2: 295FB7ECBA6239B644592BD0426F101D644A0F61.crl (hash: 9RCQjFLWPV8tCN3Bthu/ajPUCtktRmA/sgZEVu+Rs7g=) 3: 3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa (hash: sL7ncgOu/bSnEPaPTAZmx8BjyCkpPb4ur9OMw0WuPnA=) 4: 3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa (hash: 6VZQ++jLgt7SbEpV+414do5ReQLnOEeVOta5PPlvT9I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.crl rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 16:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c8:0f:47:4b:b6:58:82:b1:63:16:a7:16:07:dd:ad:74:f0:d6:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295FB7ECBA6239B644592BD0426F101D644A0F61 Validity Not Before: Nov 14 15:39:11 2026 GMT Not After : Nov 15 16:48:11 2026 GMT Subject: CN=7125D753B4A3E208FFEA4D6E88DECE89826830F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2a:20:cf:0a:aa:b1:d4:95:80:af:ec:40:60: 2d:d8:24:c5:b5:f3:26:84:e2:c6:ce:0a:6c:a6:be: 97:f6:db:8b:d7:70:47:ec:1f:d9:3f:b5:3d:c4:ba: 97:90:bc:85:e0:ef:ba:0e:54:a7:2f:ac:98:4f:63: 43:8c:66:b6:f8:cb:d1:81:c3:77:70:38:96:15:be: 26:2d:84:6f:5d:58:47:a2:44:50:12:65:54:57:54: 90:d8:4b:96:b1:8a:e2:3e:30:43:e9:5f:62:11:0c: bf:6e:b8:00:3a:41:10:50:8c:1d:d4:56:3d:e1:cd: 44:65:3c:20:cc:73:8e:09:92:b7:d5:af:d8:b9:7e: 0c:a8:e7:f9:cb:62:45:bb:95:75:b0:d1:fa:18:1e: 4e:5a:2c:2f:c3:8e:94:34:64:0c:09:32:6f:61:b7: ba:f7:fe:f8:2d:3f:87:b5:f8:48:f6:eb:a1:51:94: d2:79:24:09:de:e7:8b:95:9c:4e:bd:44:16:2a:0c: 68:80:33:4b:ec:56:a8:5d:11:c3:83:08:13:1b:9a: 5e:4d:01:2b:91:fa:de:94:2c:36:51:26:29:65:ef: 51:5e:9b:40:35:6f:2c:b2:7b:80:4e:48:e0:1b:08: 53:13:f4:86:83:c0:1a:0a:a2:f8:b5:85:a6:c9:80: 12:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:25:D7:53:B4:A3:E2:08:FF:EA:4D:6E:88:DE:CE:89:82:68:30:F3 X509v3 Authority Key Identifier: keyid:29:5F:B7:EC:BA:62:39:B6:44:59:2B:D0:42:6F:10:1D:64:4A:0F:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b1:ad:ae:12:49:77:2b:0b:18:25:44:60:b6:73:22:51:44: 16:ee:ba:62:c1:e9:a0:a5:1c:17:ff:6d:93:6f:e8:6f:0f:e1: ea:1f:bc:0d:59:8f:f3:9a:ca:6d:50:12:dd:5a:3a:12:a3:91: 3b:43:a4:7e:78:18:56:88:26:7a:aa:ec:75:05:9c:e6:98:71: 56:53:8f:ba:76:fc:c7:7d:9b:f3:b7:2a:1a:2e:da:ca:21:6a: 03:85:3d:94:75:15:f7:60:3d:56:ea:c8:ee:81:c5:f6:10:52: 1b:b2:fe:65:85:e9:57:2e:18:5b:67:f4:d5:42:48:9c:85:5d: 74:2c:91:3e:86:f1:f5:55:b5:24:12:01:7b:66:1c:be:c2:9a: 17:61:05:54:be:c6:37:2b:b8:54:27:a8:58:42:ce:11:33:42: bf:d0:02:fe:f0:49:03:70:40:7b:e2:17:90:a2:3a:4f:50:33: f7:f2:67:f5:81:95:bb:0d:a7:9d:12:26:6f:91:0e:8b:18:95: fb:f9:33:5b:ae:78:17:ad:9a:e8:93:89:f7:fb:1f:96:c8:96: 2b:11:af:87:77:a7:3c:fa:3a:40:02:26:97:81:b2:b7:dd:70: ca:5b:39:0b:9d:0d:26:79:70:71:bb:0d:a7:8c:17:46:2a:31: f7:ca:1b:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTcgPR0u2WIKxYxanFgfdrXTw1pgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1RkI3RUNCQTYyMzlCNjQ0NTkyQkQwNDI2RjEwMUQ2 NDRBMEY2MTAeFw0yNjExMTQxNTM5MTFaFw0yNjExMTUxNjQ4MTFaMDMxMTAvBgNV BAMTKDcxMjVENzUzQjRBM0UyMDhGRkVBNEQ2RTg4REVDRTg5ODI2ODMwRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKiDPCqqx1JWAr+xAYC3YJMW1 8yaE4sbOCmymvpf224vXcEfsH9k/tT3EupeQvIXg77oOVKcvrJhPY0OMZrb4y9GB w3dwOJYVviYthG9dWEeiRFASZVRXVJDYS5axiuI+MEPpX2IRDL9uuAA6QRBQjB3U Vj3hzURlPCDMc44JkrfVr9i5fgyo5/nLYkW7lXWw0foYHk5aLC/DjpQ0ZAwJMm9h t7r3/vgtP4e1+Ej266FRlNJ5JAne54uVnE69RBYqDGiAM0vsVqhdEcODCBMbml5N ASuR+t6ULDZRJill71Fem0A1byyye4BOSOAbCFMT9IaDwBoKovi1habJgBLzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcSXXU7Sj4gj/6k1uiN7OiYJoMPMwHwYDVR0j BBgwFoAUKV+37LpiObZEWSvQQm8QHWRKD2EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGRlMmQwOTAtNDc2Ni00NzVjLTljZWYtN2JlYjU4NWNmMjQxLzAvMjk1RkI3RUNC QTYyMzlCNjQ0NTkyQkQwNDI2RjEwMUQ2NDRBMEY2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yOTVGQjdFQ0JBNjIzOUI2NDQ1OTJCRDA0MjZGMTAxRDY0NEEw RjYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzAvMjk1RkI3RUNCQTYyMzlCNjQ0NTkyQkQwNDI2RjEw MUQ2NDRBMEY2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2xra4SSXcrCxglRGC2cyJRRBbuumLB6aCl HBf/bZNv6G8P4eofvA1Zj/Oaym1QEt1aOhKjkTtDpH54GFaIJnqq7HUFnOaYcVZT j7p2/Md9m/O3Khou2sohagOFPZR1FfdgPVbqyO6BxfYQUhuy/mWF6VcuGFtn9NVC SJyFXXQskT6G8fVVtSQSAXtmHL7CmhdhBVS+xjcruFQnqFhCzhEzQr/QAv7wSQNw QHviF5CiOk9QM/fyZ/WBlbsNp50SJm+RDosYlfv5M1uueBetmuiTiff7H5bIlisR r4d3pzz6OkACJpeBsrfdcMpbOQudDSZ5cHG7DaeMF0YqMffKGyA= -----END CERTIFICATE-----Generated at Sun Nov 15 00:38:27 2026 by rpki-client