$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft File: 297248FCECD7534E50147B8F048420E637A10C3B.mft (raw, json) Hash identifier: aT6Tr3yWQahxKOqaW20wnJ/z6mjzGjYaHcSXbSXmxwM= Subject key identifier: 23:1A:CE:CD:26:44:FC:BC:97:E8:45:86:C9:EE:6D:08:89:FA:BB:21 Authority key identifier: 29:72:48:FC:EC:D7:53:4E:50:14:7B:8F:04:84:20:E6:37:A1:0C:3B Certificate issuer: /CN=297248FCECD7534E50147B8F048420E637A10C3B Certificate serial: 0B84AE3E21ADBC1D4EC5B4EAE9010C5F38423F23 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 03:32:07 +0000 Manifest this update: Thu 03 Sep 2026 03:27:07 +0000 Manifest next update: Fri 04 Sep 2026 05:59:07 +0000 Files and hashes: 1: 3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa (hash: o2D89SHonpDeTNoYqCdnV9a5Dvq6OVmwktk4FXHsfdM=) 2: 323430343a366338303a3a2f33322d3438203d3e20313334363538.roa (hash: vbWvmbfXyDXP8OYXwRYd8ewAC5pZZAMFd2A+j8XIRO0=) 3: 3130332e3231302e3132302e302f32342d3234203d3e20313334363538.roa (hash: 6aYUJ+FNHyAIseZkPJnJdcJkRNhk0jl4taXFBkoPhy4=) 4: 3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa (hash: WyHWzOQjnsC2hpvAqyEJHrmMYVhTQqPIZfmDPtTVAjE=) 5: 3130332e3231302e3132332e302f32342d3234203d3e20313334363538.roa (hash: oo4ZcfhhW+jQdvMEKA+FggmiNv1c+DnGSDh7E0qxnXk=) 6: 297248FCECD7534E50147B8F048420E637A10C3B.crl (hash: B3Hf8XIYabV5hhUrBTFeDBgI+2ZXDv0Tig73BkKNC5k=) 7: 3130332e3231302e3132302e302f32322d3234203d3e20313334363538.roa (hash: 20fCkguAbqvRTSySsq+/45gChYsBUHF6oH8avUHMm98=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.crl rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 05:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:84:ae:3e:21:ad:bc:1d:4e:c5:b4:ea:e9:01:0c:5f:38:42:3f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297248FCECD7534E50147B8F048420E637A10C3B Validity Not Before: Sep 3 03:27:07 2026 GMT Not After : Sep 4 05:59:07 2026 GMT Subject: CN=231ACECD2644FCBC97E84586C9EE6D0889FABB21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:00:3c:53:9b:91:61:b1:e7:17:a6:7f:bf:f5: 76:1b:50:2c:a7:f8:24:2a:b3:79:18:ad:73:9e:6b: 60:c6:92:e8:c7:2a:7a:7a:48:d5:81:38:10:8f:77: 8b:4f:24:6c:a6:52:cb:52:9e:39:d2:da:e2:08:33: 58:a0:3f:0f:e4:c2:80:84:b2:05:4d:03:cf:b5:3c: 11:23:fb:ff:57:76:8e:95:92:aa:ee:67:cc:c7:5f: 96:6e:d9:e5:b7:7f:37:a1:38:2d:a9:89:9c:4b:8d: 2e:bf:4c:d7:a9:a3:4e:6b:14:21:65:07:8c:3f:d9: e7:38:c9:2c:7b:c5:fd:02:6a:2b:7b:eb:1a:89:2c: 95:f3:8c:de:69:d3:80:00:ef:f6:6a:09:08:0b:8c: 10:2e:2e:41:24:f0:47:a7:a4:1e:d2:24:8f:98:13: 83:f3:f6:16:cc:4a:eb:11:f9:0e:d4:f1:6d:6c:d9: 0e:4c:43:ec:9b:3c:8e:9d:fa:28:96:60:46:a4:16: 10:69:f3:b9:4d:88:54:ef:73:5d:9a:aa:3e:f1:05: 95:0a:76:ae:2f:c3:df:ed:1e:67:e6:fb:ad:37:57: ee:a6:cf:fd:a1:06:93:b9:ee:1d:3c:84:2d:2e:2c: 03:b3:d7:2e:90:aa:69:60:17:3c:bb:f7:65:0b:ec: 89:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1A:CE:CD:26:44:FC:BC:97:E8:45:86:C9:EE:6D:08:89:FA:BB:21 X509v3 Authority Key Identifier: keyid:29:72:48:FC:EC:D7:53:4E:50:14:7B:8F:04:84:20:E6:37:A1:0C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:3e:7a:15:56:f6:38:dc:8d:f8:eb:da:86:30:e5:0c:d9:30: 86:77:98:db:3e:5e:1e:60:c7:93:20:a6:1f:bc:29:25:24:92: d9:d3:50:bb:86:16:64:11:67:99:5f:da:d3:48:3e:ac:d7:d2: 70:fd:98:ec:15:5f:cb:be:d2:4c:f0:be:3c:ed:38:36:5e:e2: 3a:cd:c6:4c:51:57:44:3c:47:4a:b4:3d:7d:46:55:c2:18:cb: 7e:4a:ba:04:19:b1:ea:fc:41:fa:ef:97:50:d1:89:1a:53:43: f9:02:17:7a:ac:7a:39:19:1a:7e:1c:71:57:55:65:43:f4:a2: 60:e8:2d:2a:c9:bf:c1:06:12:ea:e9:11:6e:2b:0a:42:cf:91: fb:0a:af:c9:e0:c8:88:66:32:9b:66:15:e8:3f:a7:b6:79:8d: 3c:06:c5:54:23:45:56:af:21:39:52:6e:fd:4a:89:c1:48:13: 3a:bc:2a:b0:62:9f:ca:c5:eb:e9:d5:d5:50:6d:1c:a4:fe:39: 90:00:5e:08:58:89:5c:fb:b9:ef:d1:81:47:50:8e:b9:93:e3: dd:15:27:e5:68:1e:e6:c7:ee:07:2f:b8:44:ff:ee:14:8a:ad: 16:2a:01:d7:13:e8:a3:44:07:bf:8a:35:67:58:45:e7:c6:a8: 9b:8d:5e:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC4SuPiGtvB1OxbTq6QEMXzhCPyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3MjQ4RkNFQ0Q3NTM0RTUwMTQ3QjhGMDQ4NDIwRTYz N0ExMEMzQjAeFw0yNjA5MDMwMzI3MDdaFw0yNjA5MDQwNTU5MDdaMDMxMTAvBgNV BAMTKDIzMUFDRUNEMjY0NEZDQkM5N0U4NDU4NkM5RUU2RDA4ODlGQUJCMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLADxTm5FhsecXpn+/9XYbUCyn +CQqs3kYrXOea2DGkujHKnp6SNWBOBCPd4tPJGymUstSnjnS2uIIM1igPw/kwoCE sgVNA8+1PBEj+/9Xdo6VkqruZ8zHX5Zu2eW3fzehOC2piZxLjS6/TNepo05rFCFl B4w/2ec4ySx7xf0Cait76xqJLJXzjN5p04AA7/ZqCQgLjBAuLkEk8EenpB7SJI+Y E4Pz9hbMSusR+Q7U8W1s2Q5MQ+ybPI6d+iiWYEakFhBp87lNiFTvc12aqj7xBZUK dq4vw9/tHmfm+603V+6mz/2hBpO57h08hC0uLAOz1y6QqmlgFzy792UL7IkxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIxrOzSZE/LyX6EWGye5tCIn6uyEwHwYDVR0j BBgwFoAUKXJI/OzXU05QFHuPBIQg5jehDDswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ0ODczNjAtODczNS00MWQ3LTk3YTgtZGJiMzRkNzllZmY0LzAvMjk3MjQ4RkNF Q0Q3NTM0RTUwMTQ3QjhGMDQ4NDIwRTYzN0ExMEMzQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTcyNDhGQ0VDRDc1MzRFNTAxNDdCOEYwNDg0MjBFNjM3QTEw QzNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ0ODczNjAtODczNS00MWQ3LTk3 YTgtZGJiMzRkNzllZmY0LzAvMjk3MjQ4RkNFQ0Q3NTM0RTUwMTQ3QjhGMDQ4NDIw RTYzN0ExMEMzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFk+ehVW9jjcjfjr2oYw5QzZMIZ3mNs+Xh5g x5Mgph+8KSUkktnTULuGFmQRZ5lf2tNIPqzX0nD9mOwVX8u+0kzwvjztODZe4jrN xkxRV0Q8R0q0PX1GVcIYy35KugQZser8Qfrvl1DRiRpTQ/kCF3qsejkZGn4ccVdV ZUP0omDoLSrJv8EGEurpEW4rCkLPkfsKr8ngyIhmMptmFeg/p7Z5jTwGxVQjRVav ITlSbv1KicFIEzq8KrBin8rF6+nV1VBtHKT+OZAAXghYiVz7ue/RgUdQjrmT490V J+VoHubH7gcvuET/7hSKrRYqAdcT6KNEB7+KNWdYRefGqJuNXk4= -----END CERTIFICATE-----Generated at Thu Sep 3 12:39:01 2026 by rpki-client