$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft File: 295FB7ECBA6239B644592BD0426F101D644A0F61.mft (raw, json) Hash identifier: xH5sXHRwemyMR4POQIXRFoBhpuOvTcYsCVc3Sc7DRT4= Subject key identifier: BD:E9:EA:87:DE:9F:81:A3:29:B8:80:35:1C:FE:1C:88:AD:0B:B9:81 Authority key identifier: 29:5F:B7:EC:BA:62:39:B6:44:59:2B:D0:42:6F:10:1D:64:4A:0F:61 Certificate issuer: /CN=295FB7ECBA6239B644592BD0426F101D644A0F61 Certificate serial: 2B186F73D12AF4B73F3BF3A2C5C5A8467BC9E990 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft Manifest number: BA Signing time: Thu 17 Sep 2026 11:43:04 +0000 Manifest this update: Thu 17 Sep 2026 11:38:04 +0000 Manifest next update: Fri 18 Sep 2026 14:00:04 +0000 Files and hashes: 1: 3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa (hash: sL7ncgOu/bSnEPaPTAZmx8BjyCkpPb4ur9OMw0WuPnA=) 2: 3135372e36362e3139322e302f32332d3234203d3e20313532373730.roa (hash: Xi9t9c0T9HENzdyMpUtRfuzPjw3DaO7OJkvxFqdByyY=) 3: 3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa (hash: 6VZQ++jLgt7SbEpV+414do5ReQLnOEeVOta5PPlvT9I=) 4: 295FB7ECBA6239B644592BD0426F101D644A0F61.crl (hash: uQxe1Jj3wSNgnTqrQpZIJ7h6UzED4x65QcvRz4Tz1Do=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.crl rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:18:6f:73:d1:2a:f4:b7:3f:3b:f3:a2:c5:c5:a8:46:7b:c9:e9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295FB7ECBA6239B644592BD0426F101D644A0F61 Validity Not Before: Sep 17 11:38:04 2026 GMT Not After : Sep 18 14:00:04 2026 GMT Subject: CN=BDE9EA87DE9F81A329B880351CFE1C88AD0BB981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:16:88:9b:b8:80:e7:9f:50:9f:6d:73:99:e0: fd:bf:f2:c3:7c:81:cc:90:0d:5e:d8:e3:3e:b6:7e: 0e:92:9f:8d:41:7e:f3:70:00:e5:ca:e1:d2:2d:d3: e1:50:40:4b:b3:d5:b9:b6:56:73:2b:fa:eb:4f:40: 66:77:f9:b0:0e:19:d5:64:3a:d5:5f:77:0e:3a:53: 23:3e:a0:dc:e8:aa:0f:2e:9a:7d:bb:3b:e8:83:98: 4d:8a:f0:ec:0d:88:ae:57:a6:51:0a:91:ee:ba:4b: 47:c7:2b:72:49:8f:f7:d3:9d:0f:6f:7f:4d:0d:13: 64:b4:b3:27:a3:56:1b:69:07:b0:b3:1b:2d:da:1f: 03:e9:b7:e2:1b:e6:75:4d:a9:c5:2e:55:1c:04:ce: 2a:97:9b:62:90:1b:64:2d:34:0c:35:dd:56:b3:fb: 7d:72:54:9c:67:d0:8f:b4:01:19:f0:cd:b1:39:96: 2d:b3:75:ca:79:ca:0c:56:94:5c:5c:74:fe:c3:19: d6:a2:14:f8:74:eb:1d:8d:bc:40:b7:e2:6e:2b:80: 18:84:6f:99:91:a3:a6:86:ac:f7:6d:00:23:e9:36: 4f:36:d1:db:36:be:55:37:3a:cd:23:16:26:e1:45: ad:4c:47:5a:c7:6e:cd:f2:37:f0:87:8a:4e:8c:98: 16:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E9:EA:87:DE:9F:81:A3:29:B8:80:35:1C:FE:1C:88:AD:0B:B9:81 X509v3 Authority Key Identifier: keyid:29:5F:B7:EC:BA:62:39:B6:44:59:2B:D0:42:6F:10:1D:64:4A:0F:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:5c:c4:83:00:9c:0c:a7:12:fe:6f:7c:d0:8d:d6:45:fe:52: f4:0f:79:0c:f9:ed:ea:bb:7a:b6:47:a9:b7:26:dd:fa:72:5c: 2d:7a:5b:9f:86:5a:0b:77:63:e0:9a:8e:48:96:eb:81:0b:3b: 31:6e:34:3f:69:55:2e:79:e6:c3:28:55:8b:31:8e:66:fe:68: 94:87:59:18:7c:ca:ea:65:b7:e9:8c:4f:18:76:72:98:c8:83: 44:df:4f:cb:67:4e:98:e8:0a:16:98:ae:f0:8c:97:79:0e:76: 00:f7:21:e1:a2:c3:48:d9:63:62:ea:99:d2:64:b3:88:4b:9e: cb:43:38:3b:61:16:ac:f6:37:4f:d3:ca:e3:3b:0d:fe:66:ba: ca:b5:e9:e4:a6:05:f1:c9:8c:e0:b3:c4:dc:39:e4:83:31:1f: e3:ef:03:65:88:07:e7:6a:62:5c:f6:b6:19:a4:31:e8:64:10: 6f:00:10:fb:6b:e6:33:2f:cd:c7:bd:fc:c2:38:6a:f1:d7:cc: 79:ca:a3:89:73:77:2b:be:04:66:56:c8:8d:e3:bc:93:c8:b7: 93:f5:c2:b1:64:af:1b:3d:88:06:03:a8:1d:b1:cf:d5:3c:fa: c6:3b:6a:69:61:54:c4:8f:50:8f:16:94:58:f6:91:44:5e:95: 27:6d:5c:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKxhvc9Eq9Lc/O/OixcWoRnvJ6ZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1RkI3RUNCQTYyMzlCNjQ0NTkyQkQwNDI2RjEwMUQ2 NDRBMEY2MTAeFw0yNjA5MTcxMTM4MDRaFw0yNjA5MTgxNDAwMDRaMDMxMTAvBgNV BAMTKEJERTlFQTg3REU5RjgxQTMyOUI4ODAzNTFDRkUxQzg4QUQwQkI5ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUFoibuIDnn1CfbXOZ4P2/8sN8 gcyQDV7Y4z62fg6Sn41BfvNwAOXK4dIt0+FQQEuz1bm2VnMr+utPQGZ3+bAOGdVk OtVfdw46UyM+oNzoqg8umn27O+iDmE2K8OwNiK5XplEKke66S0fHK3JJj/fTnQ9v f00NE2S0syejVhtpB7CzGy3aHwPpt+Ib5nVNqcUuVRwEziqXm2KQG2QtNAw13Vaz +31yVJxn0I+0ARnwzbE5li2zdcp5ygxWlFxcdP7DGdaiFPh06x2NvEC34m4rgBiE b5mRo6aGrPdtACPpNk820ds2vlU3Os0jFibhRa1MR1rHbs3yN/CHik6MmBbnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvenqh96fgaMpuIA1HP4ciK0LuYEwHwYDVR0j BBgwFoAUKV+37LpiObZEWSvQQm8QHWRKD2EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGRlMmQwOTAtNDc2Ni00NzVjLTljZWYtN2JlYjU4NWNmMjQxLzAvMjk1RkI3RUNC QTYyMzlCNjQ0NTkyQkQwNDI2RjEwMUQ2NDRBMEY2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yOTVGQjdFQ0JBNjIzOUI2NDQ1OTJCRDA0MjZGMTAxRDY0NEEw RjYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzAvMjk1RkI3RUNCQTYyMzlCNjQ0NTkyQkQwNDI2RjEw MUQ2NDRBMEY2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhcxIMAnAynEv5vfNCN1kX+UvQPeQz57eq7 erZHqbcm3fpyXC16W5+GWgt3Y+CajkiW64ELOzFuND9pVS555sMoVYsxjmb+aJSH WRh8yuplt+mMTxh2cpjIg0TfT8tnTpjoChaYrvCMl3kOdgD3IeGiw0jZY2LqmdJk s4hLnstDODthFqz2N0/TyuM7Df5musq16eSmBfHJjOCzxNw55IMxH+PvA2WIB+dq Ylz2thmkMehkEG8AEPtr5jMvzce9/MI4avHXzHnKo4lzdyu+BGZWyI3jvJPIt5P1 wrFkrxs9iAYDqB2xz9U8+sY7amlhVMSPUI8WlFj2kURelSdtXJA= -----END CERTIFICATE-----Generated at Thu Sep 17 14:23:04 2026 by rpki-client