$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft File: 295FB7ECBA6239B644592BD0426F101D644A0F61.mft (raw, json) Hash identifier: ZHO8gzciisC0Npp9jElgpPMLDA/n+8zRcV7hVihXrzI= Subject key identifier: 6D:BB:36:CD:D8:45:42:0D:55:24:AC:92:C5:5A:5D:FC:34:E7:50:A7 Authority key identifier: 29:5F:B7:EC:BA:62:39:B6:44:59:2B:D0:42:6F:10:1D:64:4A:0F:61 Certificate issuer: /CN=295FB7ECBA6239B644592BD0426F101D644A0F61 Certificate serial: 1E54967D8444FBC546F160A7A6EFB4042561FB2A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft Manifest number: BF Signing time: Mon 21 Sep 2026 04:06:32 +0000 Manifest this update: Mon 21 Sep 2026 04:01:32 +0000 Manifest next update: Tue 22 Sep 2026 04:18:32 +0000 Files and hashes: 1: 3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa (hash: sL7ncgOu/bSnEPaPTAZmx8BjyCkpPb4ur9OMw0WuPnA=) 2: 3135372e36362e3139322e302f32332d3234203d3e20313532373730.roa (hash: Xi9t9c0T9HENzdyMpUtRfuzPjw3DaO7OJkvxFqdByyY=) 3: 295FB7ECBA6239B644592BD0426F101D644A0F61.crl (hash: 7IKgOGOJycB451hTwUwdSbO98Tqe+J/Q085XldpqZmw=) 4: 3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa (hash: 6VZQ++jLgt7SbEpV+414do5ReQLnOEeVOta5PPlvT9I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.crl rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:54:96:7d:84:44:fb:c5:46:f1:60:a7:a6:ef:b4:04:25:61:fb:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295FB7ECBA6239B644592BD0426F101D644A0F61 Validity Not Before: Sep 21 04:01:32 2026 GMT Not After : Sep 22 04:18:32 2026 GMT Subject: CN=6DBB36CDD845420D5524AC92C55A5DFC34E750A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d5:bb:49:30:5f:41:4c:03:ee:10:22:37:75: c3:48:bf:1a:13:35:37:1e:94:72:1a:31:dc:78:2c: 1a:45:52:c1:c0:27:87:06:b3:e2:8f:25:1d:d3:95: 11:87:23:5b:e6:8e:4a:b9:24:c9:50:f0:b8:72:dc: 79:8d:c6:09:c8:33:f3:d7:c5:e7:b9:a2:e9:bb:a4: e3:85:42:83:bf:21:22:a1:75:20:01:2d:33:0b:78: bb:13:72:0b:14:ef:ee:55:ec:58:95:c7:37:44:10: c3:f9:7b:35:fc:5a:a0:54:a3:0a:77:c2:61:a2:e6: ee:72:c0:14:42:e8:2a:e0:b7:fa:5a:9a:a5:03:1e: 34:f9:f1:36:48:e9:c7:1b:16:e3:e4:92:dd:75:23: 6c:0b:0b:98:c4:d7:f1:ca:9f:41:ef:b1:27:82:ea: d6:a4:42:7b:4e:b8:dc:21:e2:5c:aa:f3:33:1d:de: 9a:8a:27:a4:ba:7e:6e:b4:20:61:f5:03:72:a1:70: f7:e9:4f:85:a6:f5:6b:d9:0d:43:41:91:77:99:5a: 95:e9:6c:5d:06:78:82:78:75:0a:02:d2:3a:08:b1: 8c:d3:c7:e6:c5:de:50:98:41:ee:ce:e1:07:a2:f1: 14:eb:f5:6a:c5:d2:3c:68:b2:96:0b:54:f8:ae:d9: 38:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BB:36:CD:D8:45:42:0D:55:24:AC:92:C5:5A:5D:FC:34:E7:50:A7 X509v3 Authority Key Identifier: keyid:29:5F:B7:EC:BA:62:39:B6:44:59:2B:D0:42:6F:10:1D:64:4A:0F:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:ed:56:23:11:ca:5c:d7:fc:25:31:b6:39:7b:77:cf:18:a2: 20:ec:fc:21:a6:75:6d:57:4a:55:d4:6b:ca:ed:d7:f4:62:96: 09:34:99:66:59:66:d5:b4:56:9b:e0:aa:a8:2e:15:42:6f:9f: cc:41:22:56:c6:1d:84:1b:b1:ed:76:c3:24:62:a2:ad:7f:c4: 13:89:bd:d1:0c:2f:4e:96:53:62:83:3e:8d:b3:c7:63:f0:ae: ba:99:d8:8f:77:dc:e9:cb:98:78:e6:93:f6:a8:fa:1e:ac:3f: 03:76:ad:50:fc:84:ac:19:e8:00:ef:0f:b7:aa:61:f9:0e:b0: 23:d9:9a:17:99:8e:21:44:20:22:6f:49:92:c4:8a:7d:92:93: 81:73:bd:28:c2:e0:27:93:83:33:f9:65:11:89:c2:ee:a7:71: 34:cd:b8:98:5d:11:03:fc:41:33:92:c3:66:bf:0f:b8:18:ba: 06:90:9d:a3:5b:59:e5:b6:ec:52:ed:dd:a8:44:b2:2d:ad:c0: 5c:56:05:0c:4b:cd:ab:69:7d:0c:d3:3d:5b:c7:1e:a3:37:ae: 83:c9:01:08:ed:52:d8:21:3c:a8:2e:8f:82:3f:05:77:e6:5d: 74:a5:79:89:e5:23:85:ca:1f:5f:6c:dd:29:3a:ef:3a:be:2a: 9d:9b:a5:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHlSWfYRE+8VG8WCnpu+0BCVh+yowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1RkI3RUNCQTYyMzlCNjQ0NTkyQkQwNDI2RjEwMUQ2 NDRBMEY2MTAeFw0yNjA5MjEwNDAxMzJaFw0yNjA5MjIwNDE4MzJaMDMxMTAvBgNV BAMTKDZEQkIzNkNERDg0NTQyMEQ1NTI0QUM5MkM1NUE1REZDMzRFNzUwQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS1btJMF9BTAPuECI3dcNIvxoT NTcelHIaMdx4LBpFUsHAJ4cGs+KPJR3TlRGHI1vmjkq5JMlQ8Lhy3HmNxgnIM/PX xee5oum7pOOFQoO/ISKhdSABLTMLeLsTcgsU7+5V7FiVxzdEEMP5ezX8WqBUowp3 wmGi5u5ywBRC6Crgt/pamqUDHjT58TZI6ccbFuPkkt11I2wLC5jE1/HKn0HvsSeC 6takQntOuNwh4lyq8zMd3pqKJ6S6fm60IGH1A3KhcPfpT4Wm9WvZDUNBkXeZWpXp bF0GeIJ4dQoC0joIsYzTx+bF3lCYQe7O4Qei8RTr9WrF0jxospYLVPiu2Ti9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbbs2zdhFQg1VJKySxVpd/DTnUKcwHwYDVR0j BBgwFoAUKV+37LpiObZEWSvQQm8QHWRKD2EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGRlMmQwOTAtNDc2Ni00NzVjLTljZWYtN2JlYjU4NWNmMjQxLzAvMjk1RkI3RUNC QTYyMzlCNjQ0NTkyQkQwNDI2RjEwMUQ2NDRBMEY2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yOTVGQjdFQ0JBNjIzOUI2NDQ1OTJCRDA0MjZGMTAxRDY0NEEw RjYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzAvMjk1RkI3RUNCQTYyMzlCNjQ0NTkyQkQwNDI2RjEw MUQ2NDRBMEY2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHtViMRylzX/CUxtjl7d88YoiDs/CGmdW1X SlXUa8rt1/Rilgk0mWZZZtW0VpvgqqguFUJvn8xBIlbGHYQbse12wyRioq1/xBOJ vdEML06WU2KDPo2zx2PwrrqZ2I933OnLmHjmk/ao+h6sPwN2rVD8hKwZ6ADvD7eq YfkOsCPZmheZjiFEICJvSZLEin2Sk4FzvSjC4CeTgzP5ZRGJwu6ncTTNuJhdEQP8 QTOSw2a/D7gYugaQnaNbWeW27FLt3ahEsi2twFxWBQxLzatpfQzTPVvHHqM3roPJ AQjtUtghPKguj4I/BXfmXXSleYnlI4XKH19s3Sk67zq+Kp2bpe4= -----END CERTIFICATE-----Generated at Mon Sep 21 16:59:41 2026 by rpki-client