$ rpki-client -vvf rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft File: 029298EDFAB613103A6838C4E6588574BAE7834B.mft (raw, json) Hash identifier: 1RWEq6o7MI3jrv5G6VwvssJ6S+i6cqL+R0Tfgl6JauM= Subject key identifier: 5C:6D:55:72:15:A6:72:89:88:31:41:A0:54:3D:B0:55:07:BE:3F:C8 Authority key identifier: 02:92:98:ED:FA:B6:13:10:3A:68:38:C4:E6:58:85:74:BA:E7:83:4B Certificate issuer: /CN=029298EDFAB613103A6838C4E6588574BAE7834B Certificate serial: 4CF9A32DA17DD55C2918ED62EA5D6A98219EB7AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:43:03 +0000 Manifest this update: Tue 16 Jun 2026 19:38:03 +0000 Manifest next update: Wed 17 Jun 2026 23:37:03 +0000 Files and hashes: 1: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: 5Ux9FZjiRKbHvcLMHj57vi8xCjfaDnZG5BpZ2qxgkCs=) 2: 029298EDFAB613103A6838C4E6588574BAE7834B.crl (hash: G+zmuKfuPjG4FvbF42yYOU8FP8FipVllKF92DCaBH7A=) 3: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: kjFpYE2tHcJudyUulebatKRmVdaAJGBwcjnuFBP+Tj8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.crl rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f9:a3:2d:a1:7d:d5:5c:29:18:ed:62:ea:5d:6a:98:21:9e:b7:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=029298EDFAB613103A6838C4E6588574BAE7834B Validity Not Before: Jun 16 19:38:03 2026 GMT Not After : Jun 17 23:37:03 2026 GMT Subject: CN=5C6D557215A67289883141A0543DB05507BE3FC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0d:de:da:45:0d:b2:a7:a3:58:a5:30:a6:c2: 69:7a:a8:d1:52:61:6a:59:1d:b0:7a:1c:a4:94:f5: 7a:da:bc:0d:cf:21:f9:13:34:01:2c:06:2b:53:b9: 87:ca:01:28:45:fb:5a:67:f6:ee:7c:6e:63:73:8c: 5b:7c:b5:4b:14:74:11:fa:21:20:a6:db:2e:d6:f2: aa:17:c4:48:5a:b0:b8:e1:50:bd:c6:9c:e0:b9:88: a5:19:e3:df:25:5f:5f:9c:ab:bc:8b:80:68:00:50: 8c:28:4b:4b:2a:a0:b2:15:82:a4:cb:8b:18:60:19: aa:fc:ed:08:75:c9:fe:03:42:bd:46:28:3f:df:71: 1e:2a:55:63:c9:21:53:44:d7:fe:ab:03:78:5a:b1: fb:7e:e0:24:7e:57:bc:53:f1:aa:6d:6f:ba:4d:29: 56:80:ba:23:ff:03:48:0a:44:25:fb:e9:62:39:30: a8:44:00:2b:ea:05:2a:57:93:d0:6a:36:13:77:40: bd:e2:f3:f8:11:fa:51:6b:1e:a5:2b:2c:e4:3c:7c: 1d:46:09:4c:ab:28:2b:af:5f:94:97:37:bb:c8:f4: 4e:96:6a:47:67:99:ef:50:7f:47:04:19:91:f6:de: a8:c0:1f:30:43:cc:c3:10:28:f3:fd:98:00:49:d6: 01:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6D:55:72:15:A6:72:89:88:31:41:A0:54:3D:B0:55:07:BE:3F:C8 X509v3 Authority Key Identifier: keyid:02:92:98:ED:FA:B6:13:10:3A:68:38:C4:E6:58:85:74:BA:E7:83:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:93:fd:71:fa:9e:96:17:3d:f2:10:e3:d8:8f:db:b8:4c:11: 49:f1:fe:64:fb:42:ff:44:c9:ca:2a:34:4b:2b:f3:f5:12:2f: 08:92:62:c0:65:77:7d:01:eb:af:65:0c:71:df:53:29:29:57: d6:80:63:91:ad:30:ab:bc:a1:95:37:55:1a:17:9b:40:7a:50: 75:f6:81:ab:55:70:6d:e9:5e:83:ab:d3:46:ce:78:36:85:07: eb:8c:54:81:ec:db:8f:24:0b:f9:62:3c:d7:9d:3f:41:8c:c9: c6:2a:c0:e8:a4:bb:88:f1:79:84:94:a8:84:19:34:ee:9a:d0: c5:fd:4c:e5:c2:cf:67:1f:f5:00:01:33:99:21:dc:38:82:ef: 8f:da:57:70:29:1d:3d:0f:01:4a:3b:c3:fd:23:02:fa:81:27: 49:d9:c5:3a:d2:41:9a:85:e5:89:5d:fc:ff:e0:f0:5d:9a:e5: a6:43:45:b3:46:14:9d:45:c6:ee:0c:a5:45:06:dd:17:2a:bd: 26:f4:f8:63:aa:45:cf:e9:f4:79:49:88:36:d6:4b:4d:34:0f: 39:f9:d1:d7:65:51:9d:53:ec:b0:7c:bc:2d:d6:a1:11:7a:55: 0c:ba:30:10:ab:06:ca:7e:df:b3:8f:4e:6c:1b:51:5a:16:a1: 9a:0f:df:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTPmjLaF91VwpGO1i6l1qmCGet6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI5Mjk4RURGQUI2MTMxMDNBNjgzOEM0RTY1ODg1NzRC QUU3ODM0QjAeFw0yNjA2MTYxOTM4MDNaFw0yNjA2MTcyMzM3MDNaMDMxMTAvBgNV BAMTKDVDNkQ1NTcyMTVBNjcyODk4ODMxNDFBMDU0M0RCMDU1MDdCRTNGQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTDd7aRQ2yp6NYpTCmwml6qNFS YWpZHbB6HKSU9XravA3PIfkTNAEsBitTuYfKAShF+1pn9u58bmNzjFt8tUsUdBH6 ISCm2y7W8qoXxEhasLjhUL3GnOC5iKUZ498lX1+cq7yLgGgAUIwoS0sqoLIVgqTL ixhgGar87Qh1yf4DQr1GKD/fcR4qVWPJIVNE1/6rA3hasft+4CR+V7xT8aptb7pN KVaAuiP/A0gKRCX76WI5MKhEACvqBSpXk9BqNhN3QL3i8/gR+lFrHqUrLOQ8fB1G CUyrKCuvX5SXN7vI9E6Wakdnme9Qf0cEGZH23qjAHzBDzMMQKPP9mABJ1gGXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXG1VchWmcomIMUGgVD2wVQe+P8gwHwYDVR0j BBgwFoAUApKY7fq2ExA6aDjE5liFdLrng0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRiMGJmNWItNDU2ZC00ZTYyLTlmNDgtNjE5MjE0OWQ1MmMyLzAvMDI5Mjk4RURG QUI2MTMxMDNBNjgzOEM0RTY1ODg1NzRCQUU3ODM0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjkyOThFREZBQjYxMzEwM0E2ODM4QzRFNjU4ODU3NEJBRTc4 MzRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMDI5Mjk4RURGQUI2MTMxMDNBNjgzOEM0RTY1ODg1 NzRCQUU3ODM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCT/XH6npYXPfIQ49iP27hMEUnx/mT7Qv9E ycoqNEsr8/USLwiSYsBld30B669lDHHfUykpV9aAY5GtMKu8oZU3VRoXm0B6UHX2 gatVcG3pXoOr00bOeDaFB+uMVIHs248kC/liPNedP0GMycYqwOiku4jxeYSUqIQZ NO6a0MX9TOXCz2cf9QABM5kh3DiC74/aV3ApHT0PAUo7w/0jAvqBJ0nZxTrSQZqF 5Yld/P/g8F2a5aZDRbNGFJ1Fxu4MpUUG3RcqvSb0+GOqRc/p9HlJiDbWS000Dzn5 0ddlUZ1T7LB8vC3WoRF6VQy6MBCrBsp+37OPTmwbUVoWoZoP37I= -----END CERTIFICATE-----Generated at Wed Jun 17 10:31:39 2026 by rpki-client