$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft File: 295E13E5C8926C8780CF0694E90F77298E60C812.mft (raw, json) Hash identifier: rh0ZUWZ1UMxvWWp8mpprFe2hWtXqc7APSFYsxW4gvUg= Subject key identifier: C7:FB:57:AC:12:45:42:54:1F:94:5C:3A:4D:96:1D:38:F6:9A:5A:EA Authority key identifier: 29:5E:13:E5:C8:92:6C:87:80:CF:06:94:E9:0F:77:29:8E:60:C8:12 Certificate issuer: /CN=295E13E5C8926C8780CF0694E90F77298E60C812 Certificate serial: 72D99ECC9044C3D1DDE1F0F1E4AA403FEB91C71A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 21:16:23 +0000 Manifest this update: Sat 26 Sep 2026 21:11:23 +0000 Manifest next update: Mon 28 Sep 2026 01:12:23 +0000 Files and hashes: 1: 295E13E5C8926C8780CF0694E90F77298E60C812.crl (hash: G9PMQRTuk3rPGqYNNLjap0ZrIOxFnhI3kKE0+4tbqw8=) 2: 3130332e3130322e32362e302f32342d3234203d3e20313530323833.roa (hash: 8uDSee80WU9BwE7TeL4b74xk08iB/J8lbI5bPlFFs2Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.crl rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d9:9e:cc:90:44:c3:d1:dd:e1:f0:f1:e4:aa:40:3f:eb:91:c7:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295E13E5C8926C8780CF0694E90F77298E60C812 Validity Not Before: Sep 26 21:11:23 2026 GMT Not After : Sep 28 01:12:23 2026 GMT Subject: CN=C7FB57AC124542541F945C3A4D961D38F69A5AEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:94:57:80:cb:bd:71:c6:a1:9d:d6:a5:be:09: 01:78:c9:02:a5:9b:e1:ad:86:0d:a5:5d:69:19:59: 9d:39:5c:71:5b:f3:da:28:17:93:af:01:16:00:ad: 39:c1:22:2d:9b:87:4d:0b:77:48:77:ba:23:39:93: 72:4f:ac:fe:ce:62:d3:a7:02:0a:65:6f:fd:17:20: 84:04:66:7f:cb:4e:14:24:de:da:80:e2:02:cf:b1: 4c:b4:38:80:37:71:d1:51:f1:3b:df:9c:be:17:9b: f9:6f:b7:ca:81:9d:2f:9d:e9:0d:1d:3c:43:22:77: 58:15:4c:74:bf:9a:a3:65:c1:1e:6a:eb:38:6f:5c: d0:5b:b3:61:1b:ae:d2:5f:a9:25:87:f1:60:cc:e0: 1e:01:23:8f:cb:7a:a2:dd:3d:07:e9:23:6a:24:f5: de:81:b2:71:e7:b4:ee:d5:f0:b4:92:7c:be:9b:0f: 3d:b1:6f:54:93:85:dc:5d:ce:be:af:7c:e0:9d:ec: f8:ba:38:1a:3e:0a:d3:01:61:15:04:1a:72:ba:d2: 6b:08:1a:9d:56:53:c2:0e:cf:4c:d5:42:ad:45:be: b2:06:37:46:a2:b6:81:51:d9:b3:6e:25:aa:55:7d: 92:43:67:21:95:7e:8f:a7:95:ba:dd:25:c1:02:57: 3e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FB:57:AC:12:45:42:54:1F:94:5C:3A:4D:96:1D:38:F6:9A:5A:EA X509v3 Authority Key Identifier: keyid:29:5E:13:E5:C8:92:6C:87:80:CF:06:94:E9:0F:77:29:8E:60:C8:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:97:c8:0c:f3:3f:a2:a5:2e:00:5c:9a:7e:74:80:cf:1f:5c: 5e:a6:10:a6:cc:74:6f:01:a4:84:3f:19:c7:1b:61:66:35:fe: da:6a:21:0f:ec:22:91:ef:4d:39:2d:e3:6c:c4:ac:6f:59:6e: 30:07:98:15:c3:5d:64:48:82:0e:32:65:f4:d9:8c:53:dd:a1: 42:c9:01:c4:77:d8:4b:61:84:9a:12:41:1f:97:eb:df:e5:2a: fb:46:a3:8c:48:a8:39:8a:3e:ce:c4:29:24:c3:bb:72:6c:c0: 13:d2:15:e6:71:5f:60:17:f8:cf:3f:b0:65:ca:52:da:b0:0f: 81:0d:c8:b2:9c:4f:78:91:3d:d7:5b:64:1a:a9:25:27:a3:a7: a1:29:70:18:09:b9:90:e9:55:29:77:30:48:68:a9:34:40:e9: 07:c3:13:a4:4f:01:ba:e7:a6:58:63:99:04:fe:48:d2:fe:a5: 40:99:9c:c4:88:0f:28:a7:be:5a:1a:92:50:4f:15:ce:28:5d: d5:37:ad:b3:d2:52:60:20:e0:9b:2b:2b:6c:e1:a2:e0:d7:1d: 7c:6c:af:06:53:3e:88:d4:34:46:8c:f6:4f:17:4f:4b:f9:d1: e7:04:6d:a2:89:b4:bc:7b:b6:c3:b6:fa:13:c6:68:58:ee:3d: b8:d4:dc:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUctmezJBEw9Hd4fDx5KpAP+uRxxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1RTEzRTVDODkyNkM4NzgwQ0YwNjk0RTkwRjc3Mjk4 RTYwQzgxMjAeFw0yNjA5MjYyMTExMjNaFw0yNjA5MjgwMTEyMjNaMDMxMTAvBgNV BAMTKEM3RkI1N0FDMTI0NTQyNTQxRjk0NUMzQTREOTYxRDM4RjY5QTVBRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJlFeAy71xxqGd1qW+CQF4yQKl m+Gthg2lXWkZWZ05XHFb89ooF5OvARYArTnBIi2bh00Ld0h3uiM5k3JPrP7OYtOn Agplb/0XIIQEZn/LThQk3tqA4gLPsUy0OIA3cdFR8TvfnL4Xm/lvt8qBnS+d6Q0d PEMid1gVTHS/mqNlwR5q6zhvXNBbs2EbrtJfqSWH8WDM4B4BI4/LeqLdPQfpI2ok 9d6BsnHntO7V8LSSfL6bDz2xb1SThdxdzr6vfOCd7Pi6OBo+CtMBYRUEGnK60msI Gp1WU8IOz0zVQq1FvrIGN0aitoFR2bNuJapVfZJDZyGVfo+nlbrdJcECVz6TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx/tXrBJFQlQflFw6TZYdOPaaWuowHwYDVR0j BBgwFoAUKV4T5ciSbIeAzwaU6Q93KY5gyBIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTMzODQ0OTctNzcyZC00MTc5LWIyNDctYjAxYzY0ZWQxMGQxLzAvMjk1RTEzRTVD ODkyNkM4NzgwQ0YwNjk0RTkwRjc3Mjk4RTYwQzgxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTVFMTNFNUM4OTI2Qzg3ODBDRjA2OTRFOTBGNzcyOThFNjBD ODEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTMzODQ0OTctNzcyZC00MTc5LWIy NDctYjAxYzY0ZWQxMGQxLzAvMjk1RTEzRTVDODkyNkM4NzgwQ0YwNjk0RTkwRjc3 Mjk4RTYwQzgxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASXyAzzP6KlLgBcmn50gM8fXF6mEKbMdG8B pIQ/GccbYWY1/tpqIQ/sIpHvTTkt42zErG9ZbjAHmBXDXWRIgg4yZfTZjFPdoULJ AcR32EthhJoSQR+X69/lKvtGo4xIqDmKPs7EKSTDu3JswBPSFeZxX2AX+M8/sGXK UtqwD4ENyLKcT3iRPddbZBqpJSejp6EpcBgJuZDpVSl3MEhoqTRA6QfDE6RPAbrn plhjmQT+SNL+pUCZnMSIDyinvloaklBPFc4oXdU3rbPSUmAg4JsrK2zhouDXHXxs rwZTPojUNEaM9k8XT0v50ecEbaKJtLx7tsO2+hPGaFjuPbjU3NM= -----END CERTIFICATE-----Generated at Sun Sep 27 12:25:55 2026 by rpki-client