$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft File: 297248FCECD7534E50147B8F048420E637A10C3B.mft (raw, json) Hash identifier: 9hz0n8h1VUdx+4hC9QKNcq1wVkplMNc9a9PMclL24zo= Subject key identifier: F5:E1:21:E3:B5:42:63:36:86:BF:AE:36:07:3E:0F:D1:D3:23:BB:C1 Authority key identifier: 29:72:48:FC:EC:D7:53:4E:50:14:7B:8F:04:84:20:E6:37:A1:0C:3B Certificate issuer: /CN=297248FCECD7534E50147B8F048420E637A10C3B Certificate serial: 4ACE4D150E876B726A408EBCE0BEB22429668C72 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 03:24:52 +0000 Manifest this update: Thu 24 Sep 2026 03:19:52 +0000 Manifest next update: Fri 25 Sep 2026 06:11:52 +0000 Files and hashes: 1: 3130332e3231302e3132302e302f32322d3234203d3e20313334363538.roa (hash: 20fCkguAbqvRTSySsq+/45gChYsBUHF6oH8avUHMm98=) 2: 297248FCECD7534E50147B8F048420E637A10C3B.crl (hash: aUT1cyDu8G5RWiyvbYwbSCvesNPlMkYlvMXqQiD2RiI=) 3: 3130332e3231302e3132302e302f32342d3234203d3e20313334363538.roa (hash: 6aYUJ+FNHyAIseZkPJnJdcJkRNhk0jl4taXFBkoPhy4=) 4: 3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa (hash: WyHWzOQjnsC2hpvAqyEJHrmMYVhTQqPIZfmDPtTVAjE=) 5: 3130332e3231302e3132332e302f32342d3234203d3e20313334363538.roa (hash: oo4ZcfhhW+jQdvMEKA+FggmiNv1c+DnGSDh7E0qxnXk=) 6: 3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa (hash: o2D89SHonpDeTNoYqCdnV9a5Dvq6OVmwktk4FXHsfdM=) 7: 323430343a366338303a3a2f33322d3438203d3e20313334363538.roa (hash: vbWvmbfXyDXP8OYXwRYd8ewAC5pZZAMFd2A+j8XIRO0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.crl rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ce:4d:15:0e:87:6b:72:6a:40:8e:bc:e0:be:b2:24:29:66:8c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297248FCECD7534E50147B8F048420E637A10C3B Validity Not Before: Sep 24 03:19:52 2026 GMT Not After : Sep 25 06:11:52 2026 GMT Subject: CN=F5E121E3B542633686BFAE36073E0FD1D323BBC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d8:b2:cc:f8:03:9f:6c:ad:0a:bf:a8:d7:76: b3:48:67:9f:96:42:a5:41:43:0d:df:ce:19:d9:26: f5:5f:d5:c5:59:49:fc:09:78:7c:91:3a:a6:5b:c7: c3:5d:ea:df:66:72:f7:62:8b:d7:1a:0c:60:e5:5e: d3:01:08:41:83:ba:aa:7e:6f:92:18:b4:4b:6b:46: 3f:d1:fc:8c:25:7d:01:9c:64:43:a3:ad:91:f1:ee: 50:b7:a5:c2:26:6f:18:70:64:47:09:73:a2:11:d7: 7f:84:d2:ef:5d:d7:6a:04:d1:e1:c9:f4:26:09:7b: 5d:e4:cd:3d:a3:a5:84:a0:81:09:38:10:6d:77:e2: a0:bc:54:c4:85:f2:bb:8d:b2:8f:72:24:41:67:91: f4:79:41:4a:c0:e7:3d:b9:75:fd:20:f6:86:d4:1a: 60:76:d5:fe:bf:d7:3a:00:04:69:8a:7c:2f:9e:44: aa:d2:79:08:25:6c:0d:7d:57:d4:6e:f3:e0:f9:fe: ed:0e:0e:1d:0d:cf:88:8d:13:34:28:b5:44:ae:81: f1:de:fa:6b:6a:08:16:65:77:ae:2e:07:36:15:96: de:b5:13:ad:05:9f:1a:d2:dc:6b:6a:a1:eb:b8:b5: dc:39:91:d1:cb:1e:a9:8a:5a:6e:99:14:ce:9c:6e: 11:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E1:21:E3:B5:42:63:36:86:BF:AE:36:07:3E:0F:D1:D3:23:BB:C1 X509v3 Authority Key Identifier: keyid:29:72:48:FC:EC:D7:53:4E:50:14:7B:8F:04:84:20:E6:37:A1:0C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:2e:eb:9f:f7:fe:39:4e:fe:82:98:a7:d8:f9:ab:12:27:8f: b4:c0:4c:61:ef:50:62:d4:9e:2e:af:86:07:75:df:6e:8b:a4: 0f:37:ad:d9:a4:bf:d8:52:6c:79:57:d5:70:4b:a9:ac:37:83: f2:e0:ec:7a:4b:0b:61:57:b7:4c:a0:b3:77:95:48:fe:b2:86: 7c:dc:72:3a:07:7c:80:0d:3e:f6:79:78:3e:75:0d:70:a5:e0: 7b:08:00:b2:b7:ea:cc:70:c9:91:09:f2:99:f4:b4:52:78:04: 94:f3:50:7b:3c:1d:1f:e4:50:92:09:d8:e9:ca:b8:5a:2a:8f: 54:9e:fe:33:33:7a:e7:2f:f5:48:f8:06:b3:93:43:43:31:31: 4d:e1:f1:44:3b:39:e4:1d:3e:24:9e:72:1f:ee:97:e0:05:f1: 4d:a5:2a:be:55:12:b8:56:78:c4:d7:b3:19:ea:07:ae:06:aa: 40:8f:16:bd:ee:c7:50:64:53:10:13:44:79:87:b8:3a:28:66: 1e:76:41:a4:71:95:3d:d1:d0:97:42:2e:2f:88:06:eb:2d:49: 14:89:54:39:91:a9:67:6e:4c:c9:9d:49:28:85:45:ca:4f:25: 76:ad:2d:1a:32:3c:43:4a:98:3e:b3:e6:1d:cd:40:a9:c6:d4: 4b:fa:96:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSs5NFQ6Ha3JqQI684L6yJClmjHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3MjQ4RkNFQ0Q3NTM0RTUwMTQ3QjhGMDQ4NDIwRTYz N0ExMEMzQjAeFw0yNjA5MjQwMzE5NTJaFw0yNjA5MjUwNjExNTJaMDMxMTAvBgNV BAMTKEY1RTEyMUUzQjU0MjYzMzY4NkJGQUUzNjA3M0UwRkQxRDMyM0JCQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl2LLM+AOfbK0Kv6jXdrNIZ5+W QqVBQw3fzhnZJvVf1cVZSfwJeHyROqZbx8Nd6t9mcvdii9caDGDlXtMBCEGDuqp+ b5IYtEtrRj/R/IwlfQGcZEOjrZHx7lC3pcImbxhwZEcJc6IR13+E0u9d12oE0eHJ 9CYJe13kzT2jpYSggQk4EG134qC8VMSF8ruNso9yJEFnkfR5QUrA5z25df0g9obU GmB21f6/1zoABGmKfC+eRKrSeQglbA19V9Ru8+D5/u0ODh0Nz4iNEzQotUSugfHe +mtqCBZld64uBzYVlt61E60FnxrS3Gtqoeu4tdw5kdHLHqmKWm6ZFM6cbhFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9eEh47VCYzaGv642Bz4P0dMju8EwHwYDVR0j BBgwFoAUKXJI/OzXU05QFHuPBIQg5jehDDswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ0ODczNjAtODczNS00MWQ3LTk3YTgtZGJiMzRkNzllZmY0LzAvMjk3MjQ4RkNF Q0Q3NTM0RTUwMTQ3QjhGMDQ4NDIwRTYzN0ExMEMzQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTcyNDhGQ0VDRDc1MzRFNTAxNDdCOEYwNDg0MjBFNjM3QTEw QzNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ0ODczNjAtODczNS00MWQ3LTk3 YTgtZGJiMzRkNzllZmY0LzAvMjk3MjQ4RkNFQ0Q3NTM0RTUwMTQ3QjhGMDQ4NDIw RTYzN0ExMEMzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcu65/3/jlO/oKYp9j5qxInj7TATGHvUGLU ni6vhgd1326LpA83rdmkv9hSbHlX1XBLqaw3g/Lg7HpLC2FXt0ygs3eVSP6yhnzc cjoHfIANPvZ5eD51DXCl4HsIALK36sxwyZEJ8pn0tFJ4BJTzUHs8HR/kUJIJ2OnK uFoqj1Se/jMzeucv9Uj4BrOTQ0MxMU3h8UQ7OeQdPiSech/ul+AF8U2lKr5VErhW eMTXsxnqB64GqkCPFr3ux1BkUxATRHmHuDooZh52QaRxlT3R0JdCLi+IBustSRSJ VDmRqWduTMmdSSiFRcpPJXatLRoyPENKmD6z5h3NQKnG1Ev6ln0= -----END CERTIFICATE-----Generated at Thu Sep 24 21:23:59 2026 by rpki-client