$ rpki-client -vvf rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft File: 295FB7ECBA6239B644592BD0426F101D644A0F61.mft (raw, json) Hash identifier: bhtCRW82X2WFTvr0Viixafso934tbrxr7Gmomxeao9k= Subject key identifier: E8:EA:92:7F:54:E0:74:D8:F3:5D:F4:E8:10:23:6E:06:E8:93:2A:74 Authority key identifier: 29:5F:B7:EC:BA:62:39:B6:44:59:2B:D0:42:6F:10:1D:64:4A:0F:61 Certificate issuer: /CN=295FB7ECBA6239B644592BD0426F101D644A0F61 Certificate serial: 44D086D2AD5CEF137AD2AB53CE57FE72E5B5487E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft Manifest number: 7D Signing time: Sun 02 Aug 2026 19:05:32 +0000 Manifest this update: Sun 02 Aug 2026 19:00:32 +0000 Manifest next update: Mon 03 Aug 2026 20:47:32 +0000 Files and hashes: 1: 295FB7ECBA6239B644592BD0426F101D644A0F61.crl (hash: SmiIx7vhy2BlhsxmkPkZIZkr76tdz8iSyorovexE2Zo=) 2: 3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa (hash: sL7ncgOu/bSnEPaPTAZmx8BjyCkpPb4ur9OMw0WuPnA=) 3: 3135372e36362e3139322e302f32332d3234203d3e20313532373730.roa (hash: Xi9t9c0T9HENzdyMpUtRfuzPjw3DaO7OJkvxFqdByyY=) 4: 3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa (hash: 6VZQ++jLgt7SbEpV+414do5ReQLnOEeVOta5PPlvT9I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.crl rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d0:86:d2:ad:5c:ef:13:7a:d2:ab:53:ce:57:fe:72:e5:b5:48:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295FB7ECBA6239B644592BD0426F101D644A0F61 Validity Not Before: Aug 2 19:00:32 2026 GMT Not After : Aug 3 20:47:32 2026 GMT Subject: CN=E8EA927F54E074D8F35DF4E810236E06E8932A74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:8a:ac:06:5a:eb:0e:bf:79:c8:c8:d5:f6: a8:2b:09:02:6a:43:2a:65:d1:fb:a8:52:ef:6b:f8: a2:51:97:8c:5a:dd:01:17:55:fa:70:60:63:8e:b8: 0c:e1:a7:c4:44:90:15:8a:33:d0:8f:ca:38:b4:41: 21:87:78:9b:35:53:4d:aa:3b:ee:11:4a:75:37:32: 5e:f8:ed:aa:b6:df:c4:73:41:cc:07:26:1b:fc:e4: 8b:ca:19:b3:e6:57:fb:f8:73:9b:6d:fa:8d:04:23: 29:33:43:4c:01:0e:68:a4:91:67:cf:fa:36:f1:5f: bd:5d:c2:33:cc:2b:fb:2d:05:f1:bb:89:e3:57:0c: 4d:57:7c:03:96:6b:3e:96:f3:eb:1c:21:4c:dd:2d: f3:63:d5:5c:cf:06:c4:23:2a:f0:55:2e:9c:95:0c: 21:b2:e3:6d:cc:c2:7f:09:d1:a4:81:8d:2c:7e:f5: 5e:89:3f:7d:f9:50:19:5d:ea:59:9e:51:17:80:00: bb:49:bf:f5:f0:9f:b5:b6:2f:57:d7:7a:5e:b4:be: 9f:25:dc:54:51:f6:17:2f:c4:45:23:a2:c9:8a:8a: f7:ab:93:b6:6e:b0:12:93:f1:4e:19:3d:f9:02:36: 4c:98:da:a8:bd:70:7d:5b:45:00:1b:37:d7:fd:cb: 35:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:EA:92:7F:54:E0:74:D8:F3:5D:F4:E8:10:23:6E:06:E8:93:2A:74 X509v3 Authority Key Identifier: keyid:29:5F:B7:EC:BA:62:39:B6:44:59:2B:D0:42:6F:10:1D:64:4A:0F:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/295FB7ECBA6239B644592BD0426F101D644A0F61.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/295FB7ECBA6239B644592BD0426F101D644A0F61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:73:3f:59:79:8f:92:78:be:38:ed:fc:3f:4c:40:ff:b1:98: 74:f1:90:5e:3c:04:cb:18:91:a9:3f:89:14:a5:51:b9:ee:8f: f1:69:3a:e2:8e:fd:df:24:61:dc:d2:d7:6f:ad:a7:6e:52:ad: 98:67:36:65:72:32:e1:58:c2:5e:ad:2b:3d:20:ad:ac:27:47: 4b:80:62:f8:43:c2:5f:fc:87:e9:42:6b:d6:47:b7:8e:24:26: a4:48:30:58:68:7e:be:46:ca:74:d6:76:ea:b5:02:96:f7:40: 4f:11:dc:7a:1f:51:2e:8d:b9:1f:e8:f9:8c:e3:4b:27:9c:99: f1:39:fb:e8:c1:db:95:6c:b5:da:fe:ef:77:a8:1a:89:dd:0e: 0e:fa:dd:61:56:c9:ca:7c:fe:eb:61:55:ef:8e:52:83:2e:61: 6a:5e:08:de:91:09:af:9a:3c:4e:4d:e6:9d:1f:65:fa:89:36: ec:aa:ef:e5:1a:a4:7e:6e:e9:b8:2f:55:d8:a9:a1:fc:44:47: b2:a1:7c:d3:f3:96:32:82:31:33:87:c4:86:f6:89:2c:4f:f8: 47:bd:01:7c:15:b3:46:7a:46:59:3e:de:a0:ce:13:b1:51:76: 13:93:14:ce:27:79:19:07:8b:8e:f4:56:72:81:bf:99:87:c4: 3e:aa:3a:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURNCG0q1c7xN60qtTzlf+cuW1SH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1RkI3RUNCQTYyMzlCNjQ0NTkyQkQwNDI2RjEwMUQ2 NDRBMEY2MTAeFw0yNjA4MDIxOTAwMzJaFw0yNjA4MDMyMDQ3MzJaMDMxMTAvBgNV BAMTKEU4RUE5MjdGNTRFMDc0RDhGMzVERjRFODEwMjM2RTA2RTg5MzJBNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC414qsBlrrDr95yMjV9qgrCQJq Qypl0fuoUu9r+KJRl4xa3QEXVfpwYGOOuAzhp8REkBWKM9CPyji0QSGHeJs1U02q O+4RSnU3Ml747aq238RzQcwHJhv85IvKGbPmV/v4c5tt+o0EIykzQ0wBDmikkWfP +jbxX71dwjPMK/stBfG7ieNXDE1XfAOWaz6W8+scIUzdLfNj1VzPBsQjKvBVLpyV DCGy423Mwn8J0aSBjSx+9V6JP335UBld6lmeUReAALtJv/Xwn7W2L1fXel60vp8l 3FRR9hcvxEUjosmKiverk7ZusBKT8U4ZPfkCNkyY2qi9cH1bRQAbN9f9yzVfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6OqSf1TgdNjzXfToECNuBuiTKnQwHwYDVR0j BBgwFoAUKV+37LpiObZEWSvQQm8QHWRKD2EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGRlMmQwOTAtNDc2Ni00NzVjLTljZWYtN2JlYjU4NWNmMjQxLzAvMjk1RkI3RUNC QTYyMzlCNjQ0NTkyQkQwNDI2RjEwMUQ2NDRBMEY2MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yOTVGQjdFQ0JBNjIzOUI2NDQ1OTJCRDA0MjZGMTAxRDY0NEEw RjYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGRlMmQwOTAtNDc2Ni00NzVjLTlj ZWYtN2JlYjU4NWNmMjQxLzAvMjk1RkI3RUNCQTYyMzlCNjQ0NTkyQkQwNDI2RjEw MUQ2NDRBMEY2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtzP1l5j5J4vjjt/D9MQP+xmHTxkF48BMsY kak/iRSlUbnuj/FpOuKO/d8kYdzS12+tp25SrZhnNmVyMuFYwl6tKz0grawnR0uA YvhDwl/8h+lCa9ZHt44kJqRIMFhofr5GynTWduq1Apb3QE8R3HofUS6NuR/o+Yzj SyecmfE5++jB25Vstdr+73eoGondDg763WFWycp8/uthVe+OUoMuYWpeCN6RCa+a PE5N5p0fZfqJNuyq7+UapH5u6bgvVdipofxER7KhfNPzljKCMTOHxIb2iSxP+Ee9 AXwVs0Z6Rlk+3qDOE7FRdhOTFM4neRkHi470VnKBv5mHxD6qOgU= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:40 2026 by rpki-client