$ rpki-client -vvf rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft File: 029298EDFAB613103A6838C4E6588574BAE7834B.mft (raw, json) Hash identifier: oZ7v5d/prUEVfe++PfP/mBEkktT9d1RTHB9Yu5pyA6s= Subject key identifier: 81:5B:4C:35:8D:56:FF:0F:25:95:46:45:1C:AE:03:29:25:EE:C2:50 Authority key identifier: 02:92:98:ED:FA:B6:13:10:3A:68:38:C4:E6:58:85:74:BA:E7:83:4B Certificate issuer: /CN=029298EDFAB613103A6838C4E6588574BAE7834B Certificate serial: 12C643296ACCE5861871AC12E05431A87A193264 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 13:01:05 +0000 Manifest this update: Tue 02 Jun 2026 12:56:05 +0000 Manifest next update: Wed 03 Jun 2026 14:03:05 +0000 Files and hashes: 1: 029298EDFAB613103A6838C4E6588574BAE7834B.crl (hash: G00pz0wDZPbniDDy4easWZ0w1sEARo40wYB81L2qoO4=) 2: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: kjFpYE2tHcJudyUulebatKRmVdaAJGBwcjnuFBP+Tj8=) 3: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: 5Ux9FZjiRKbHvcLMHj57vi8xCjfaDnZG5BpZ2qxgkCs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.crl rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c6:43:29:6a:cc:e5:86:18:71:ac:12:e0:54:31:a8:7a:19:32:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=029298EDFAB613103A6838C4E6588574BAE7834B Validity Not Before: Jun 2 12:56:05 2026 GMT Not After : Jun 3 14:03:05 2026 GMT Subject: CN=815B4C358D56FF0F259546451CAE032925EEC250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9a:2a:44:2f:ff:dc:72:ba:56:75:b7:80:d7: 0d:73:dd:40:71:dc:70:0b:d2:15:57:01:a5:64:42: f0:6e:06:cf:1d:d7:aa:bb:02:a5:48:59:fe:ae:45: 44:1b:9f:e9:57:77:ee:27:2a:84:22:f6:5c:90:7f: 94:6b:e4:32:94:67:fe:94:1a:af:36:ef:73:40:9a: 12:68:48:49:a4:29:3c:4d:ed:03:09:1e:78:80:a4: 58:01:42:5f:6f:08:d9:00:45:19:d2:be:01:5a:73: 3b:fa:ba:d4:47:04:e7:9e:f0:cf:ec:36:60:10:cb: 92:14:ec:6c:b6:fd:c9:0b:7b:e1:9b:22:8a:e9:ce: 0d:1a:11:6a:8e:4f:32:83:71:27:09:7c:8e:e6:e8: f7:b4:ea:97:bf:f0:45:4e:c6:00:70:d1:8e:a7:9a: 68:93:1f:e5:19:7b:26:9b:6d:e5:47:6b:7d:15:fb: 45:95:3d:a5:81:44:3f:ce:0e:0c:1b:fb:1c:82:06: 28:6b:03:d5:94:14:07:b3:1c:cc:f1:f6:98:b7:3b: 71:a4:2b:f5:94:07:ae:50:10:3c:6b:6d:52:a2:37: b5:5c:a0:3d:e0:5c:61:d6:d1:82:d0:9b:5e:20:f9: 0b:50:3e:6e:74:a5:f8:f3:51:d0:d5:e6:ce:44:d1: 0a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5B:4C:35:8D:56:FF:0F:25:95:46:45:1C:AE:03:29:25:EE:C2:50 X509v3 Authority Key Identifier: keyid:02:92:98:ED:FA:B6:13:10:3A:68:38:C4:E6:58:85:74:BA:E7:83:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:09:9e:21:5b:a8:b8:64:6e:32:f5:73:fa:70:8f:af:8a:ed: a6:75:0b:6d:67:cd:92:91:6d:ed:e5:b2:e4:65:d2:43:ce:01: 2e:17:63:09:e4:0a:ed:02:1a:1e:37:6c:1e:62:d3:82:52:41: f1:b6:dc:72:d7:f0:02:19:04:39:3f:2e:3d:36:26:35:bd:25: 5d:8d:17:4e:26:94:1b:74:ad:6b:7a:b1:77:70:50:f3:7b:f8: 14:70:60:5b:92:a6:ab:a6:d4:8f:24:71:ac:86:72:9f:87:a3: 30:e0:83:29:1d:70:d6:ce:7a:78:40:d6:0b:bd:5e:53:91:f9: 2d:cf:f2:d9:cf:34:d1:17:b0:db:22:b8:28:aa:55:2e:75:36: 2a:43:4f:17:26:f7:1f:5b:79:5a:5f:47:a5:17:45:88:6f:59: 95:1d:48:2a:b2:be:c7:c3:03:31:77:ae:22:37:6b:35:ce:05: dd:d9:fd:08:43:4b:b8:7f:a3:02:9d:38:fa:1f:2d:d4:62:88: ef:98:83:de:e1:78:54:9f:a8:98:b9:b3:2b:17:b8:40:6c:e8: bb:8f:82:8f:be:60:89:c5:bb:71:9e:66:93:41:c6:cf:7d:80: 84:49:b9:5e:ad:64:47:d0:1b:a1:99:d9:7f:a7:69:30:1f:d6: 01:9d:ef:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEsZDKWrM5YYYcawS4FQxqHoZMmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI5Mjk4RURGQUI2MTMxMDNBNjgzOEM0RTY1ODg1NzRC QUU3ODM0QjAeFw0yNjA2MDIxMjU2MDVaFw0yNjA2MDMxNDAzMDVaMDMxMTAvBgNV BAMTKDgxNUI0QzM1OEQ1NkZGMEYyNTk1NDY0NTFDQUUwMzI5MjVFRUMyNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOmipEL//ccrpWdbeA1w1z3UBx 3HAL0hVXAaVkQvBuBs8d16q7AqVIWf6uRUQbn+lXd+4nKoQi9lyQf5Rr5DKUZ/6U Gq8273NAmhJoSEmkKTxN7QMJHniApFgBQl9vCNkARRnSvgFaczv6utRHBOee8M/s NmAQy5IU7Gy2/ckLe+GbIorpzg0aEWqOTzKDcScJfI7m6Pe06pe/8EVOxgBw0Y6n mmiTH+UZeyabbeVHa30V+0WVPaWBRD/ODgwb+xyCBihrA9WUFAezHMzx9pi3O3Gk K/WUB65QEDxrbVKiN7VcoD3gXGHW0YLQm14g+QtQPm50pfjzUdDV5s5E0QovAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgVtMNY1W/w8llUZFHK4DKSXuwlAwHwYDVR0j BBgwFoAUApKY7fq2ExA6aDjE5liFdLrng0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRiMGJmNWItNDU2ZC00ZTYyLTlmNDgtNjE5MjE0OWQ1MmMyLzAvMDI5Mjk4RURG QUI2MTMxMDNBNjgzOEM0RTY1ODg1NzRCQUU3ODM0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjkyOThFREZBQjYxMzEwM0E2ODM4QzRFNjU4ODU3NEJBRTc4 MzRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMDI5Mjk4RURGQUI2MTMxMDNBNjgzOEM0RTY1ODg1 NzRCQUU3ODM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEJniFbqLhkbjL1c/pwj6+K7aZ1C21nzZKR be3lsuRl0kPOAS4XYwnkCu0CGh43bB5i04JSQfG23HLX8AIZBDk/Lj02JjW9JV2N F04mlBt0rWt6sXdwUPN7+BRwYFuSpqum1I8kcayGcp+HozDggykdcNbOenhA1gu9 XlOR+S3P8tnPNNEXsNsiuCiqVS51NipDTxcm9x9beVpfR6UXRYhvWZUdSCqyvsfD AzF3riI3azXOBd3Z/QhDS7h/owKdOPofLdRiiO+Yg97heFSfqJi5sysXuEBs6LuP go++YInFu3GeZpNBxs99gIRJuV6tZEfQG6GZ2X+naTAf1gGd79o= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:06 2026 by rpki-client