$ rpki-client -vvf rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft File: 295E13E5C8926C8780CF0694E90F77298E60C812.mft (raw, json) Hash identifier: lm/FZz63JMfJ6BLRmatDayKnup4HiWTs4hm+kLLHAdo= Subject key identifier: DD:2F:D7:C4:33:54:36:4C:60:CF:97:EF:24:17:F0:61:36:3E:C9:A2 Authority key identifier: 29:5E:13:E5:C8:92:6C:87:80:CF:06:94:E9:0F:77:29:8E:60:C8:12 Certificate issuer: /CN=295E13E5C8926C8780CF0694E90F77298E60C812 Certificate serial: 130069098EBD261EDDF78B66BCE1FBFE977A5211 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 07:49:42 +0000 Manifest this update: Tue 02 Jun 2026 07:44:42 +0000 Manifest next update: Wed 03 Jun 2026 09:38:42 +0000 Files and hashes: 1: 3130332e3130322e32362e302f32342d3234203d3e20313530323833.roa (hash: 8uDSee80WU9BwE7TeL4b74xk08iB/J8lbI5bPlFFs2Y=) 2: 295E13E5C8926C8780CF0694E90F77298E60C812.crl (hash: Sof6R0LevaIPhp03C41wkj05FfKj/VZLoaiHhM0FWe0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.crl rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 09:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:00:69:09:8e:bd:26:1e:dd:f7:8b:66:bc:e1:fb:fe:97:7a:52:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295E13E5C8926C8780CF0694E90F77298E60C812 Validity Not Before: Jun 2 07:44:42 2026 GMT Not After : Jun 3 09:38:42 2026 GMT Subject: CN=DD2FD7C43354364C60CF97EF2417F061363EC9A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:60:67:1d:54:4a:fa:d6:99:85:ad:60:a6:a5: 02:77:e0:32:97:7a:5b:f0:4e:88:f8:9c:a8:cc:89: af:9d:68:e2:31:a6:cf:6b:6b:c3:51:40:5c:7b:de: 40:21:dd:aa:94:a7:65:a3:c5:38:b3:6b:d4:52:7f: f1:b1:6a:bf:d1:bf:6e:75:a9:bb:c0:0b:5b:92:c3: cb:3d:b3:ed:9f:1c:86:1c:c0:32:ea:3c:16:71:8a: 6d:a4:b0:76:a6:7a:2a:6c:17:03:0d:33:22:68:e4: 60:37:e9:ad:cd:bf:3e:5f:e3:bf:4d:32:f8:b5:99: 82:fa:f6:a5:9b:2d:3b:9a:34:00:52:85:80:95:55: 84:7e:b8:a8:f1:ba:b7:19:16:55:f1:2d:04:64:47: b1:2b:a4:96:23:24:c8:38:43:b0:64:8c:84:ed:81: 11:f4:5c:30:c8:78:06:65:ff:19:18:c7:63:90:59: 96:95:a1:17:a4:a3:b6:92:1c:a6:83:62:95:a5:b8: ae:8a:36:45:19:64:62:a1:ae:7a:ec:5e:a1:cc:2a: 09:c2:e3:23:2d:52:c5:19:9c:91:8b:7c:32:96:06: 1f:af:73:d9:e7:79:40:9c:bb:95:2e:13:77:25:2f: f1:7c:f4:ca:81:cc:30:3f:1d:26:0b:04:0d:22:6f: c3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2F:D7:C4:33:54:36:4C:60:CF:97:EF:24:17:F0:61:36:3E:C9:A2 X509v3 Authority Key Identifier: keyid:29:5E:13:E5:C8:92:6C:87:80:CF:06:94:E9:0F:77:29:8E:60:C8:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/295E13E5C8926C8780CF0694E90F77298E60C812.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/295E13E5C8926C8780CF0694E90F77298E60C812.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:03:a0:d8:7a:24:45:6a:33:a0:78:a7:15:27:7f:38:03:ab: 2e:a7:a2:89:85:84:d5:6d:89:ee:ab:68:cb:43:df:31:b2:25: 6e:8f:a6:5a:28:b2:20:2d:e6:c6:9e:bb:3e:a5:14:e8:fe:0c: e3:d8:0b:39:d2:c4:ae:5e:6b:d0:ab:80:77:d9:92:25:1a:d6: 23:c8:f3:2b:ee:3d:6b:30:bb:92:2f:64:53:89:79:8e:41:16: 27:71:7f:d6:7f:c3:1e:7c:1f:70:f3:b0:5c:87:a2:bb:7c:8a: 61:f0:a3:ab:71:34:07:f0:21:6d:d0:92:86:0c:7b:cd:fe:03: eb:34:40:c2:29:e8:0a:31:95:48:2e:b8:66:3b:76:10:a8:92: 60:58:78:fc:88:1d:f0:aa:71:39:6b:b0:73:d5:59:72:bf:07: 5b:f9:36:f3:79:62:5e:18:b5:9f:12:1f:7d:f2:38:d3:09:ca: 55:03:3b:e8:29:07:f2:a1:a1:91:e3:7e:4d:ed:15:5e:f9:3c: 94:d5:83:73:f3:89:cc:43:26:7b:2d:79:2d:6e:25:83:a4:47: 96:43:04:81:26:39:11:b7:f4:e0:6d:97:45:49:7f:f0:bf:50: 41:72:2f:a1:70:b9:a1:d4:26:4f:36:c3:9c:8f:7b:a4:c4:ac: ce:05:ec:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEwBpCY69Jh7d94tmvOH7/pd6UhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1RTEzRTVDODkyNkM4NzgwQ0YwNjk0RTkwRjc3Mjk4 RTYwQzgxMjAeFw0yNjA2MDIwNzQ0NDJaFw0yNjA2MDMwOTM4NDJaMDMxMTAvBgNV BAMTKEREMkZEN0M0MzM1NDM2NEM2MENGOTdFRjI0MTdGMDYxMzYzRUM5QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnYGcdVEr61pmFrWCmpQJ34DKX elvwToj4nKjMia+daOIxps9ra8NRQFx73kAh3aqUp2WjxTiza9RSf/Gxar/Rv251 qbvAC1uSw8s9s+2fHIYcwDLqPBZxim2ksHameipsFwMNMyJo5GA36a3Nvz5f479N Mvi1mYL69qWbLTuaNABShYCVVYR+uKjxurcZFlXxLQRkR7ErpJYjJMg4Q7BkjITt gRH0XDDIeAZl/xkYx2OQWZaVoReko7aSHKaDYpWluK6KNkUZZGKhrnrsXqHMKgnC 4yMtUsUZnJGLfDKWBh+vc9nneUCcu5UuE3clL/F89MqBzDA/HSYLBA0ib8MrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3S/XxDNUNkxgz5fvJBfwYTY+yaIwHwYDVR0j BBgwFoAUKV4T5ciSbIeAzwaU6Q93KY5gyBIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTMzODQ0OTctNzcyZC00MTc5LWIyNDctYjAxYzY0ZWQxMGQxLzAvMjk1RTEzRTVD ODkyNkM4NzgwQ0YwNjk0RTkwRjc3Mjk4RTYwQzgxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTVFMTNFNUM4OTI2Qzg3ODBDRjA2OTRFOTBGNzcyOThFNjBD ODEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTMzODQ0OTctNzcyZC00MTc5LWIy NDctYjAxYzY0ZWQxMGQxLzAvMjk1RTEzRTVDODkyNkM4NzgwQ0YwNjk0RTkwRjc3 Mjk4RTYwQzgxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIDoNh6JEVqM6B4pxUnfzgDqy6noomFhNVt ie6raMtD3zGyJW6PploosiAt5saeuz6lFOj+DOPYCznSxK5ea9CrgHfZkiUa1iPI 8yvuPWswu5IvZFOJeY5BFidxf9Z/wx58H3DzsFyHort8imHwo6txNAfwIW3QkoYM e83+A+s0QMIp6AoxlUguuGY7dhCokmBYePyIHfCqcTlrsHPVWXK/B1v5NvN5Yl4Y tZ8SH33yONMJylUDO+gpB/KhoZHjfk3tFV75PJTVg3PzicxDJnsteS1uJYOkR5ZD BIEmORG39OBtl0VJf/C/UEFyL6FwuaHUJk82w5yPe6TErM4F7Iw= -----END CERTIFICATE-----Generated at Wed Jun 3 03:47:20 2026 by rpki-client