$ rpki-client -vvf rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft File: 295FB7ECBA6239B644592BD0426F101D644A0F61.mft (raw, json) Hash identifier: Ozwn0RaJG1riE+Jsp3skBWqs4cTYhMo4B9bmnrYwICY= Subject key identifier: 5C:BB:49:D8:D8:3C:EE:B3:70:CB:1C:75:4E:DE:59:1A:0A:2F:63:11 Authority key identifier: 29:5F:B7:EC:BA:62:39:B6:44:59:2B:D0:42:6F:10:1D:64:4A:0F:61 Certificate issuer: /CN=295FB7ECBA6239B644592BD0426F101D644A0F61 Certificate serial: 024A37BCD5D098A07ADC05A77656664F3411E33D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 22:40:00 +0000 Manifest this update: Wed 17 Jun 2026 22:35:00 +0000 Manifest next update: Thu 18 Jun 2026 23:06:00 +0000 Files and hashes: 1: 3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa (hash: sL7ncgOu/bSnEPaPTAZmx8BjyCkpPb4ur9OMw0WuPnA=) 2: 3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa (hash: 6VZQ++jLgt7SbEpV+414do5ReQLnOEeVOta5PPlvT9I=) 3: 295FB7ECBA6239B644592BD0426F101D644A0F61.crl (hash: 38dC3Ao7FJZDuLSLSYVMMoU8OwCde4eUb2oP/YdnRYQ=) 4: 3135372e36362e3139322e302f32332d3234203d3e20313532373730.roa (hash: Xi9t9c0T9HENzdyMpUtRfuzPjw3DaO7OJkvxFqdByyY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.crl rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 23:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:4a:37:bc:d5:d0:98:a0:7a:dc:05:a7:76:56:66:4f:34:11:e3:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295FB7ECBA6239B644592BD0426F101D644A0F61 Validity Not Before: Jun 17 22:35:00 2026 GMT Not After : Jun 18 23:06:00 2026 GMT Subject: CN=5CBB49D8D83CEEB370CB1C754EDE591A0A2F6311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:80:ea:e0:63:8d:54:07:9b:47:12:71:64:7d: 4f:e2:b5:dc:a8:43:f8:86:2c:3b:e0:b1:b6:7d:7e: 49:14:be:34:47:9f:7d:21:9d:3e:e8:23:9b:d6:91: 35:d5:85:5b:3d:d6:79:7a:b3:be:18:4e:6b:8b:fd: fa:22:05:1f:94:6c:9c:09:4e:66:68:2d:54:2f:fb: 0c:ea:86:5b:46:78:69:3f:8e:ef:d0:0c:47:1b:7a: ba:f6:dc:3e:9d:c6:2a:86:96:d0:8a:60:32:b1:14: 64:61:2b:8b:54:10:52:13:e6:89:ed:a2:ff:5b:08: a8:ca:44:7a:b5:9f:b6:58:5d:a7:01:d1:a5:09:33: 04:9c:93:06:c2:b8:b8:bf:66:4d:16:b5:cc:fe:96: 20:83:e2:3e:4d:9f:e9:b7:04:f0:48:dc:35:57:9d: 67:28:a2:7f:af:78:ad:f6:6b:ba:34:70:0a:9a:83: ce:22:be:ae:df:b9:c4:e6:e5:c7:f2:03:ea:91:f2: 1e:ac:86:7e:53:3b:88:cb:e5:e1:a9:d3:5e:a0:17: 66:7c:db:e9:42:26:2c:f3:b9:46:6f:ba:4f:63:92: 1a:fa:2f:bc:4f:dc:64:d7:13:46:a7:15:a6:f2:d7: 1c:b0:85:57:a3:32:e6:02:9a:94:7e:02:96:73:89: 26:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BB:49:D8:D8:3C:EE:B3:70:CB:1C:75:4E:DE:59:1A:0A:2F:63:11 X509v3 Authority Key Identifier: keyid:29:5F:B7:EC:BA:62:39:B6:44:59:2B:D0:42:6F:10:1D:64:4A:0F:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b7:b3:ba:e6:54:8f:d4:25:66:4e:ba:24:1f:5e:cb:08:12: 3b:51:87:1f:3f:68:c7:85:02:12:cd:2c:2d:b8:6d:85:07:80: df:04:9d:0f:24:8a:68:ad:fa:51:2f:fc:ef:dc:1c:b2:88:70: 09:38:cd:93:08:aa:4e:22:f0:5d:18:bf:53:c5:fc:f3:63:28: b1:ee:21:14:82:bf:b2:88:c4:a4:cb:81:22:b9:0d:0a:89:fe: a3:3b:5a:3f:9c:e3:08:d3:3c:b4:88:79:6b:08:64:04:be:55: e8:c6:c5:a4:6c:e0:29:13:7e:be:25:0e:c4:4b:4c:a7:89:88: a1:a5:23:79:aa:83:e1:75:47:ea:40:15:cc:4e:0c:f7:2b:13: 0c:56:aa:31:1b:98:f8:e5:a4:3c:96:02:cb:eb:04:60:bb:ef: ef:31:dc:65:be:61:3c:cb:f9:31:c6:79:87:5e:29:4a:cc:bc: fb:38:02:c6:b2:55:9b:f5:76:ff:36:32:ba:5f:46:69:7e:ef: b4:93:0b:06:7f:5c:89:65:16:c2:0f:d4:a5:54:83:d0:c1:b1: b8:84:f8:fa:a0:49:97:0c:d6:bd:a8:b8:2a:fe:9f:9d:5d:3b: 17:62:99:b7:65:d2:c1:ee:04:ad:17:76:ff:67:f4:56:3b:2e: 33:6e:f5:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAko3vNXQmKB63AWndlZmTzQR4z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1RkI3RUNCQTYyMzlCNjQ0NTkyQkQwNDI2RjEwMUQ2 NDRBMEY2MTAeFw0yNjA2MTcyMjM1MDBaFw0yNjA2MTgyMzA2MDBaMDMxMTAvBgNV BAMTKDVDQkI0OUQ4RDgzQ0VFQjM3MENCMUM3NTRFREU1OTFBMEEyRjYzMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmgOrgY41UB5tHEnFkfU/itdyo Q/iGLDvgsbZ9fkkUvjRHn30hnT7oI5vWkTXVhVs91nl6s74YTmuL/foiBR+UbJwJ TmZoLVQv+wzqhltGeGk/ju/QDEcberr23D6dxiqGltCKYDKxFGRhK4tUEFIT5ont ov9bCKjKRHq1n7ZYXacB0aUJMwSckwbCuLi/Zk0Wtcz+liCD4j5Nn+m3BPBI3DVX nWcoon+veK32a7o0cAqag84ivq7fucTm5cfyA+qR8h6shn5TO4jL5eGp016gF2Z8 2+lCJizzuUZvuk9jkhr6L7xP3GTXE0anFaby1xywhVejMuYCmpR+ApZziSaTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXLtJ2Ng87rNwyxx1Tt5ZGgovYxEwHwYDVR0j BBgwFoAUKV+37LpiObZEWSvQQm8QHWRKD2EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGRlMmQwOTAtNDc2Ni00NzVjLTljZWYtN2JlYjU4NWNmMjQxLzAvMjk1RkI3RUNC QTYyMzlCNjQ0NTkyQkQwNDI2RjEwMUQ2NDRBMEY2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yOTVGQjdFQ0JBNjIzOUI2NDQ1OTJCRDA0MjZGMTAxRDY0NEEw RjYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzAvMjk1RkI3RUNCQTYyMzlCNjQ0NTkyQkQwNDI2RjEw MUQ2NDRBMEY2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAy3s7rmVI/UJWZOuiQfXssIEjtRhx8/aMeF AhLNLC24bYUHgN8EnQ8kimit+lEv/O/cHLKIcAk4zZMIqk4i8F0Yv1PF/PNjKLHu IRSCv7KIxKTLgSK5DQqJ/qM7Wj+c4wjTPLSIeWsIZAS+VejGxaRs4CkTfr4lDsRL TKeJiKGlI3mqg+F1R+pAFcxODPcrEwxWqjEbmPjlpDyWAsvrBGC77+8x3GW+YTzL +THGeYdeKUrMvPs4AsayVZv1dv82MrpfRml+77STCwZ/XIllFsIP1KVUg9DBsbiE +PqgSZcM1r2ouCr+n51dOxdimbdl0sHuBK0Xdv9n9FY7LjNu9cY= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:35 2026 by rpki-client