$ rpki-client -vvf rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft File: 029298EDFAB613103A6838C4E6588574BAE7834B.mft (raw, json) Hash identifier: WSL6hdvQuYyCOXf+dkwAYh0MlFGLsULg6GQG9lXkITE= Subject key identifier: F9:56:B6:20:C8:1C:79:2C:BD:2C:3B:4B:D8:66:DE:9A:92:D8:63:91 Authority key identifier: 02:92:98:ED:FA:B6:13:10:3A:68:38:C4:E6:58:85:74:BA:E7:83:4B Certificate issuer: /CN=029298EDFAB613103A6838C4E6588574BAE7834B Certificate serial: 60898D7FCD1D5CD15AA198AC5206BB5B19E2AD6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:00:11 +0000 Manifest this update: Tue 12 May 2026 21:55:11 +0000 Manifest next update: Thu 14 May 2026 01:17:11 +0000 Files and hashes: 1: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: kjFpYE2tHcJudyUulebatKRmVdaAJGBwcjnuFBP+Tj8=) 2: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: 5Ux9FZjiRKbHvcLMHj57vi8xCjfaDnZG5BpZ2qxgkCs=) 3: 029298EDFAB613103A6838C4E6588574BAE7834B.crl (hash: qGE6MtT83COSL7c7imvhG37IeevelO2XRhC0MpbzIi8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.crl rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:89:8d:7f:cd:1d:5c:d1:5a:a1:98:ac:52:06:bb:5b:19:e2:ad:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=029298EDFAB613103A6838C4E6588574BAE7834B Validity Not Before: May 12 21:55:11 2026 GMT Not After : May 14 01:17:11 2026 GMT Subject: CN=F956B620C81C792CBD2C3B4BD866DE9A92D86391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:10:ee:22:1c:06:a3:af:47:76:9e:d6:65:b1: 98:f4:22:b2:0c:3c:69:5b:6b:f9:4c:dd:e2:25:68: 81:d3:ff:81:41:fd:6c:55:32:82:21:f3:87:d7:66: 23:d4:5e:32:7c:3e:dd:31:c7:42:39:bc:0c:a5:f0: 9f:54:c9:02:d2:eb:5f:eb:6e:45:0b:a0:d5:16:3f: a6:7b:e7:d2:16:57:b3:31:42:0f:ae:c5:75:44:cb: 0a:69:f9:69:3b:34:c1:64:b5:46:53:81:4e:f5:4a: 28:ee:75:82:10:61:07:27:62:71:ce:2d:59:16:5a: 72:67:b0:a9:6b:30:26:f8:ba:56:ea:6f:45:47:26: e4:cb:07:dc:64:ec:1f:f4:fb:79:ce:72:56:81:ad: 99:8c:5a:6f:f2:35:17:de:d0:af:36:e6:72:cc:7a: 4f:ba:bd:68:3c:ec:e3:2a:4f:b0:8e:fb:cc:86:fd: 9e:0f:12:69:60:5e:61:5f:38:c4:b2:96:d5:89:0a: 5e:2a:0c:43:46:78:f7:d5:91:bc:f2:6c:07:4f:07: 49:73:03:db:84:e8:be:a2:08:b5:a8:6b:e7:8b:04: 9d:b4:a5:c9:90:74:98:74:5b:96:2b:28:05:87:e1: d2:c3:16:15:78:e2:88:91:ed:e5:77:35:38:83:90: 45:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:56:B6:20:C8:1C:79:2C:BD:2C:3B:4B:D8:66:DE:9A:92:D8:63:91 X509v3 Authority Key Identifier: keyid:02:92:98:ED:FA:B6:13:10:3A:68:38:C4:E6:58:85:74:BA:E7:83:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:40:95:5c:e9:bb:ce:ad:41:4f:c9:85:d9:ed:ef:07:23:cb: 83:d1:0b:9d:84:68:a0:c4:d7:89:ba:38:b5:0d:4d:b2:22:cf: 96:75:ae:10:42:d5:3f:74:9a:5e:f6:90:30:b0:e3:26:15:47: d5:7d:8a:07:70:a0:c6:62:2a:90:f9:82:14:2d:20:10:2a:69: 07:8b:bc:bb:32:26:91:ed:44:9b:39:51:83:d7:de:5a:7d:45: be:74:52:6d:be:da:fe:d9:02:13:82:b3:60:64:5c:60:c6:a4: 65:ed:6f:53:bf:76:fe:8b:91:7c:fd:b5:ac:85:d1:c2:35:3f: 5b:3b:e2:e6:f2:6f:d1:c7:6f:33:33:65:cf:82:ae:20:8d:0c: 6f:d1:ca:0e:23:db:40:e3:fc:9e:43:02:d5:19:f3:1d:be:cf: de:d7:77:81:8b:95:f0:f5:4b:7f:7e:75:50:9f:82:6d:64:e5: 32:27:41:99:d4:78:a5:b7:cb:2e:e2:8c:f7:1c:27:65:63:ac: 1b:66:dc:1c:52:f7:19:66:a1:22:b1:96:26:47:91:9b:6d:ca: 67:82:ef:02:a3:a9:69:07:09:75:4f:cb:d0:06:fe:66:4e:34: 13:72:d8:95:97:a6:4f:35:a8:ea:35:5c:06:6b:9d:35:8a:c7: ec:94:43:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYImNf80dXNFaoZisUga7WxnirW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI5Mjk4RURGQUI2MTMxMDNBNjgzOEM0RTY1ODg1NzRC QUU3ODM0QjAeFw0yNjA1MTIyMTU1MTFaFw0yNjA1MTQwMTE3MTFaMDMxMTAvBgNV BAMTKEY5NTZCNjIwQzgxQzc5MkNCRDJDM0I0QkQ4NjZERTlBOTJEODYzOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBEO4iHAajr0d2ntZlsZj0IrIM PGlba/lM3eIlaIHT/4FB/WxVMoIh84fXZiPUXjJ8Pt0xx0I5vAyl8J9UyQLS61/r bkULoNUWP6Z759IWV7MxQg+uxXVEywpp+Wk7NMFktUZTgU71SijudYIQYQcnYnHO LVkWWnJnsKlrMCb4ulbqb0VHJuTLB9xk7B/0+3nOclaBrZmMWm/yNRfe0K825nLM ek+6vWg87OMqT7CO+8yG/Z4PEmlgXmFfOMSyltWJCl4qDENGePfVkbzybAdPB0lz A9uE6L6iCLWoa+eLBJ20pcmQdJh0W5YrKAWH4dLDFhV44oiR7eV3NTiDkEWxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Va2IMgceSy9LDtL2GbempLYY5EwHwYDVR0j BBgwFoAUApKY7fq2ExA6aDjE5liFdLrng0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRiMGJmNWItNDU2ZC00ZTYyLTlmNDgtNjE5MjE0OWQ1MmMyLzAvMDI5Mjk4RURG QUI2MTMxMDNBNjgzOEM0RTY1ODg1NzRCQUU3ODM0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjkyOThFREZBQjYxMzEwM0E2ODM4QzRFNjU4ODU3NEJBRTc4 MzRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMDI5Mjk4RURGQUI2MTMxMDNBNjgzOEM0RTY1ODg1 NzRCQUU3ODM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlAlVzpu86tQU/Jhdnt7wcjy4PRC52EaKDE 14m6OLUNTbIiz5Z1rhBC1T90ml72kDCw4yYVR9V9igdwoMZiKpD5ghQtIBAqaQeL vLsyJpHtRJs5UYPX3lp9Rb50Um2+2v7ZAhOCs2BkXGDGpGXtb1O/dv6LkXz9tayF 0cI1P1s74ubyb9HHbzMzZc+CriCNDG/Ryg4j20Dj/J5DAtUZ8x2+z97Xd4GLlfD1 S39+dVCfgm1k5TInQZnUeKW3yy7ijPccJ2VjrBtm3BxS9xlmoSKxliZHkZttymeC 7wKjqWkHCXVPy9AG/mZONBNy2JWXpk81qOo1XAZrnTWKx+yUQ/0= -----END CERTIFICATE-----Generated at Wed May 13 01:45:16 2026 by rpki-client