$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft File: 297248FCECD7534E50147B8F048420E637A10C3B.mft (raw, json) Hash identifier: 740aFHY5rf0YvhrJjGveNjfr9SmFCbdwp2JT/sqoXP0= Subject key identifier: FE:69:62:56:6E:FC:D1:33:DA:DA:22:AA:4C:58:78:FA:D5:5B:FF:18 Authority key identifier: 29:72:48:FC:EC:D7:53:4E:50:14:7B:8F:04:84:20:E6:37:A1:0C:3B Certificate issuer: /CN=297248FCECD7534E50147B8F048420E637A10C3B Certificate serial: 6C5A90B0B264F73FBCD99E4E7EF8C6E071860CC2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft Manifest number: BF Signing time: Mon 21 Sep 2026 19:05:07 +0000 Manifest this update: Mon 21 Sep 2026 19:00:07 +0000 Manifest next update: Tue 22 Sep 2026 21:30:07 +0000 Files and hashes: 1: 323430343a366338303a3a2f33322d3438203d3e20313334363538.roa (hash: vbWvmbfXyDXP8OYXwRYd8ewAC5pZZAMFd2A+j8XIRO0=) 2: 3130332e3231302e3132302e302f32342d3234203d3e20313334363538.roa (hash: 6aYUJ+FNHyAIseZkPJnJdcJkRNhk0jl4taXFBkoPhy4=) 3: 3130332e3231302e3132302e302f32322d3234203d3e20313334363538.roa (hash: 20fCkguAbqvRTSySsq+/45gChYsBUHF6oH8avUHMm98=) 4: 3130332e3231302e3132332e302f32342d3234203d3e20313334363538.roa (hash: oo4ZcfhhW+jQdvMEKA+FggmiNv1c+DnGSDh7E0qxnXk=) 5: 3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa (hash: o2D89SHonpDeTNoYqCdnV9a5Dvq6OVmwktk4FXHsfdM=) 6: 3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa (hash: WyHWzOQjnsC2hpvAqyEJHrmMYVhTQqPIZfmDPtTVAjE=) 7: 297248FCECD7534E50147B8F048420E637A10C3B.crl (hash: zbEaGg8Yp14HXDUAvcAUPA9WBsWHfnCVyjbPApTXYvw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.crl rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 21:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:5a:90:b0:b2:64:f7:3f:bc:d9:9e:4e:7e:f8:c6:e0:71:86:0c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297248FCECD7534E50147B8F048420E637A10C3B Validity Not Before: Sep 21 19:00:07 2026 GMT Not After : Sep 22 21:30:07 2026 GMT Subject: CN=FE6962566EFCD133DADA22AA4C5878FAD55BFF18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bf:d3:3f:ad:c4:aa:10:ac:d6:99:cb:31:08: 5c:4c:65:ed:90:ac:95:19:ef:04:88:80:72:70:7a: ee:20:31:d1:cd:43:ee:c1:03:0e:18:3c:c2:85:de: 6b:99:e7:14:07:bf:92:f6:8b:5f:df:79:12:51:66: 07:25:f2:7e:8e:f0:3c:d4:74:b6:e2:cd:e6:3c:72: f4:76:44:9e:4f:1b:1f:f6:25:3a:d7:b2:47:ca:56: e7:c2:79:e8:8e:50:fa:09:f7:65:6c:ca:58:aa:32: bb:37:90:a0:6a:0b:49:dc:d3:30:f8:f7:74:5e:5c: 44:e4:a6:42:ab:ad:48:dc:5a:05:27:8d:62:fe:4f: 4d:36:ef:d5:90:90:8d:09:4d:40:67:ee:c5:d7:df: b1:e0:5b:05:9c:6f:fe:3f:d3:2f:a7:bd:ec:1a:f4: 87:6c:9e:c9:a2:3a:70:d8:9c:55:6c:6c:06:3f:0a: f9:c1:f7:6a:d8:18:48:17:72:4a:87:ca:e1:d5:d5: da:15:09:bc:39:b6:d5:73:24:e9:9e:4f:12:8c:a2: da:a3:35:3a:d7:50:13:ee:5b:0d:94:48:79:0c:1f: 0d:1b:79:28:4b:08:6a:26:7f:b7:74:25:6c:56:e3: d3:58:0e:92:90:fa:49:2b:ee:41:75:de:80:88:e0: dc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:69:62:56:6E:FC:D1:33:DA:DA:22:AA:4C:58:78:FA:D5:5B:FF:18 X509v3 Authority Key Identifier: keyid:29:72:48:FC:EC:D7:53:4E:50:14:7B:8F:04:84:20:E6:37:A1:0C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:a4:58:6b:16:ee:aa:e8:c9:f6:32:87:26:1a:07:75:43:de: 69:6a:f4:07:66:2b:91:40:d1:f7:c4:1c:85:fb:28:ca:6a:49: ef:ed:11:b3:64:de:86:fd:38:b1:4f:69:dd:27:79:87:a4:a1: 6d:83:46:a6:f5:2d:11:79:0a:e9:f3:5c:17:2c:ad:bf:4c:b4: 81:b6:99:92:23:71:f5:ff:ee:ce:a5:d0:8f:8b:b7:d3:c1:eb: 13:41:b4:2e:a8:fb:bf:a5:1a:92:c4:ac:d0:09:a8:17:32:eb: e9:19:ff:d4:d2:f9:05:5d:89:a6:2b:3e:91:af:5b:fd:e7:d9: 7a:66:39:36:31:98:40:3a:43:13:c4:af:3d:60:3e:57:82:bf: ac:28:84:7d:09:3e:74:82:51:e9:0c:59:84:7c:76:40:86:45: c2:69:b1:e5:48:c8:f5:51:34:0d:90:45:7b:4a:ab:fe:d4:a4: c7:a1:44:97:55:f8:a8:51:27:a0:9a:3c:36:fe:7b:f7:c7:43: ca:9d:8e:65:af:df:a2:e5:3c:02:95:bb:bc:94:9f:9e:43:e7: 00:61:a8:6c:b0:c5:6e:34:30:25:6e:c8:4f:93:ed:19:32:19: 3b:94:e1:0c:71:cc:ae:f1:e5:d0:c4:c4:45:90:2c:39:7e:48: 13:92:9e:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbFqQsLJk9z+82Z5OfvjG4HGGDMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3MjQ4RkNFQ0Q3NTM0RTUwMTQ3QjhGMDQ4NDIwRTYz N0ExMEMzQjAeFw0yNjA5MjExOTAwMDdaFw0yNjA5MjIyMTMwMDdaMDMxMTAvBgNV BAMTKEZFNjk2MjU2NkVGQ0QxMzNEQURBMjJBQTRDNTg3OEZBRDU1QkZGMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKv9M/rcSqEKzWmcsxCFxMZe2Q rJUZ7wSIgHJweu4gMdHNQ+7BAw4YPMKF3muZ5xQHv5L2i1/feRJRZgcl8n6O8DzU dLbizeY8cvR2RJ5PGx/2JTrXskfKVufCeeiOUPoJ92VsyliqMrs3kKBqC0nc0zD4 93ReXETkpkKrrUjcWgUnjWL+T00279WQkI0JTUBn7sXX37HgWwWcb/4/0y+nvewa 9IdsnsmiOnDYnFVsbAY/CvnB92rYGEgXckqHyuHV1doVCbw5ttVzJOmeTxKMotqj NTrXUBPuWw2USHkMHw0beShLCGomf7d0JWxW49NYDpKQ+kkr7kF13oCI4NwJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/mliVm780TPa2iKqTFh4+tVb/xgwHwYDVR0j BBgwFoAUKXJI/OzXU05QFHuPBIQg5jehDDswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ0ODczNjAtODczNS00MWQ3LTk3YTgtZGJiMzRkNzllZmY0LzAvMjk3MjQ4RkNF Q0Q3NTM0RTUwMTQ3QjhGMDQ4NDIwRTYzN0ExMEMzQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTcyNDhGQ0VDRDc1MzRFNTAxNDdCOEYwNDg0MjBFNjM3QTEw QzNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ0ODczNjAtODczNS00MWQ3LTk3 YTgtZGJiMzRkNzllZmY0LzAvMjk3MjQ4RkNFQ0Q3NTM0RTUwMTQ3QjhGMDQ4NDIw RTYzN0ExMEMzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmkWGsW7qroyfYyhyYaB3VD3mlq9AdmK5FA 0ffEHIX7KMpqSe/tEbNk3ob9OLFPad0neYekoW2DRqb1LRF5CunzXBcsrb9MtIG2 mZIjcfX/7s6l0I+Lt9PB6xNBtC6o+7+lGpLErNAJqBcy6+kZ/9TS+QVdiaYrPpGv W/3n2XpmOTYxmEA6QxPErz1gPleCv6wohH0JPnSCUekMWYR8dkCGRcJpseVIyPVR NA2QRXtKq/7UpMehRJdV+KhRJ6CaPDb+e/fHQ8qdjmWv36LlPAKVu7yUn55D5wBh qGywxW40MCVuyE+T7RkyGTuU4QxxzK7x5dDExEWQLDl+SBOSnuI= -----END CERTIFICATE-----Generated at Tue Sep 22 10:54:11 2026 by rpki-client