$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft File: 029298EDFAB613103A6838C4E6588574BAE7834B.mft (raw, json) Hash identifier: Tkf6xqsSZ3ecIbNpoxVVSGgIj4TLPV/DMXB5wxJ6ZOk= Subject key identifier: 2A:B4:05:A5:3A:45:C6:35:AE:DF:DF:C5:AB:25:A2:0C:FE:33:B4:5F Authority key identifier: 02:92:98:ED:FA:B6:13:10:3A:68:38:C4:E6:58:85:74:BA:E7:83:4B Certificate issuer: /CN=029298EDFAB613103A6838C4E6588574BAE7834B Certificate serial: 4CEDC59C886357BAFEFC763777F2B2AFB22516D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 05:12:26 +0000 Manifest this update: Wed 23 Sep 2026 05:07:26 +0000 Manifest next update: Thu 24 Sep 2026 08:36:26 +0000 Files and hashes: 1: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: kjFpYE2tHcJudyUulebatKRmVdaAJGBwcjnuFBP+Tj8=) 2: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: 5Ux9FZjiRKbHvcLMHj57vi8xCjfaDnZG5BpZ2qxgkCs=) 3: 029298EDFAB613103A6838C4E6588574BAE7834B.crl (hash: CjbZcFNdTMOMhtNnZ+a87k/lPMh9Dc3kavMiLP+RmjQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.crl rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ed:c5:9c:88:63:57:ba:fe:fc:76:37:77:f2:b2:af:b2:25:16:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=029298EDFAB613103A6838C4E6588574BAE7834B Validity Not Before: Sep 23 05:07:26 2026 GMT Not After : Sep 24 08:36:26 2026 GMT Subject: CN=2AB405A53A45C635AEDFDFC5AB25A20CFE33B45F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:76:fc:54:90:02:50:6c:33:4b:a5:37:14:7d: cd:26:3b:dd:dc:28:d6:9c:6a:b2:25:62:26:8c:d3: f9:32:b4:4f:7f:a4:49:53:7e:cf:f0:37:eb:d9:01: 65:e7:4c:c2:0f:08:72:43:16:30:6a:f9:be:43:71: 06:a7:07:a9:ee:64:fb:96:f7:a2:2d:f5:b1:d6:f4: c5:88:6b:72:c5:8d:29:56:32:5b:a3:35:72:16:de: cd:9d:f8:86:6e:ee:d4:03:ff:eb:93:e6:d9:26:73: 6d:f7:3b:89:7f:c0:63:03:02:f9:e6:c9:b1:d4:01: 13:62:a6:31:11:5c:77:23:bd:7a:2e:9c:5b:25:4e: eb:f7:41:ee:1d:29:a1:4b:7a:ee:ff:c1:f0:5a:98: 1c:fd:44:f6:2a:40:20:2d:0b:9e:3b:32:cf:b0:52: 2a:1d:bb:08:62:4c:95:0c:50:a0:f0:fa:44:f1:3c: 41:c4:65:b1:9a:e2:1b:70:70:cd:9b:a2:f7:a9:16: 0d:fe:fd:00:16:34:5d:92:5a:2f:fd:26:d6:a7:bf: 29:3e:7f:4e:2b:b1:ca:bc:da:ee:49:9e:2a:a9:fe: 0f:59:82:15:dd:a9:3c:b2:4f:d4:7a:a8:a6:e4:5a: 22:71:0c:3b:41:bf:b0:21:d6:75:c5:e6:20:63:ea: 33:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B4:05:A5:3A:45:C6:35:AE:DF:DF:C5:AB:25:A2:0C:FE:33:B4:5F X509v3 Authority Key Identifier: keyid:02:92:98:ED:FA:B6:13:10:3A:68:38:C4:E6:58:85:74:BA:E7:83:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:87:2c:85:0f:93:db:a6:8f:d4:ce:d0:06:c6:f6:de:22:46: c6:95:a7:1b:8a:e9:f6:3d:bb:cd:00:25:43:6e:6b:92:9a:b7: 74:09:ba:1a:56:45:04:00:07:1b:6d:72:52:ee:17:5a:67:a0: d4:16:73:2e:eb:78:c8:eb:43:c2:62:ba:c8:ab:4e:80:f8:c2: 58:c5:ce:40:32:89:6e:6c:9c:90:d9:88:e8:26:b4:e6:75:e7: 13:e8:45:32:9b:62:4d:73:25:1d:9a:92:45:64:13:98:f2:66: ce:63:52:d3:76:f5:24:de:fa:42:de:bf:47:d9:92:84:0d:14: ee:7d:1d:f8:04:ea:c4:91:39:e2:01:66:e2:12:64:48:3d:04: 67:7e:92:40:65:a9:b9:5a:45:f7:fc:56:b1:a0:ec:bd:d2:0e: fd:e1:76:de:8d:c4:67:0e:ca:38:9c:1c:ce:65:a0:a9:45:98: 2b:fb:25:4e:5b:b5:9b:98:3d:93:3c:fd:16:c0:43:52:5e:80: e5:57:c8:af:8c:1e:19:d8:0f:f3:cb:f1:f4:e8:6c:21:9f:9c: 34:4c:e7:93:23:04:42:b8:4a:f7:56:eb:b0:65:22:cb:a1:ab: 0e:52:15:aa:e3:4e:b3:a3:d5:37:68:85:5f:0f:73:6f:75:64: 77:f8:ee:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTO3FnIhjV7r+/HY3d/Kyr7IlFtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI5Mjk4RURGQUI2MTMxMDNBNjgzOEM0RTY1ODg1NzRC QUU3ODM0QjAeFw0yNjA5MjMwNTA3MjZaFw0yNjA5MjQwODM2MjZaMDMxMTAvBgNV BAMTKDJBQjQwNUE1M0E0NUM2MzVBRURGREZDNUFCMjVBMjBDRkUzM0I0NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxdvxUkAJQbDNLpTcUfc0mO93c KNacarIlYiaM0/kytE9/pElTfs/wN+vZAWXnTMIPCHJDFjBq+b5DcQanB6nuZPuW 96It9bHW9MWIa3LFjSlWMlujNXIW3s2d+IZu7tQD/+uT5tkmc233O4l/wGMDAvnm ybHUARNipjERXHcjvXounFslTuv3Qe4dKaFLeu7/wfBamBz9RPYqQCAtC547Ms+w UioduwhiTJUMUKDw+kTxPEHEZbGa4htwcM2bovepFg3+/QAWNF2SWi/9Jtanvyk+ f04rscq82u5Jniqp/g9ZghXdqTyyT9R6qKbkWiJxDDtBv7Ah1nXF5iBj6jN9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKrQFpTpFxjWu39/FqyWiDP4ztF8wHwYDVR0j BBgwFoAUApKY7fq2ExA6aDjE5liFdLrng0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRiMGJmNWItNDU2ZC00ZTYyLTlmNDgtNjE5MjE0OWQ1MmMyLzAvMDI5Mjk4RURG QUI2MTMxMDNBNjgzOEM0RTY1ODg1NzRCQUU3ODM0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjkyOThFREZBQjYxMzEwM0E2ODM4QzRFNjU4ODU3NEJBRTc4 MzRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMDI5Mjk4RURGQUI2MTMxMDNBNjgzOEM0RTY1ODg1 NzRCQUU3ODM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuHLIUPk9umj9TO0AbG9t4iRsaVpxuK6fY9 u80AJUNua5Kat3QJuhpWRQQABxttclLuF1pnoNQWcy7reMjrQ8JiusirToD4wljF zkAyiW5snJDZiOgmtOZ15xPoRTKbYk1zJR2akkVkE5jyZs5jUtN29STe+kLev0fZ koQNFO59HfgE6sSROeIBZuISZEg9BGd+kkBlqblaRff8VrGg7L3SDv3hdt6NxGcO yjicHM5loKlFmCv7JU5btZuYPZM8/RbAQ1JegOVXyK+MHhnYD/PL8fTobCGfnDRM 55MjBEK4SvdW67BlIsuhqw5SFarjTrOj1TdohV8Pc291ZHf47gQ= -----END CERTIFICATE-----Generated at Wed Sep 23 21:57:20 2026 by rpki-client