$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft File: 297248FCECD7534E50147B8F048420E637A10C3B.mft (raw, json) Hash identifier: ypOtIUjSewpJprPs2sYR/38JUbwvikz8Gl0N9ceLm7o= Subject key identifier: 8F:CD:42:9D:A2:A7:AB:92:1B:AB:61:A3:AA:64:53:98:51:72:CB:3E Authority key identifier: 29:72:48:FC:EC:D7:53:4E:50:14:7B:8F:04:84:20:E6:37:A1:0C:3B Certificate issuer: /CN=297248FCECD7534E50147B8F048420E637A10C3B Certificate serial: 71C3063DBF05FF0BC234F5CAB6216383BBB611DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft Manifest number: EB Signing time: Sun 25 Oct 2026 08:26:59 +0000 Manifest this update: Sun 25 Oct 2026 08:21:59 +0000 Manifest next update: Mon 26 Oct 2026 09:03:59 +0000 Files and hashes: 1: 3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa (hash: WyHWzOQjnsC2hpvAqyEJHrmMYVhTQqPIZfmDPtTVAjE=) 2: 323430343a366338303a3a2f33322d3438203d3e20313334363538.roa (hash: vbWvmbfXyDXP8OYXwRYd8ewAC5pZZAMFd2A+j8XIRO0=) 3: 3130332e3231302e3132302e302f32342d3234203d3e20313334363538.roa (hash: 6aYUJ+FNHyAIseZkPJnJdcJkRNhk0jl4taXFBkoPhy4=) 4: 3130332e3231302e3132332e302f32342d3234203d3e20313334363538.roa (hash: oo4ZcfhhW+jQdvMEKA+FggmiNv1c+DnGSDh7E0qxnXk=) 5: 3130332e3231302e3132302e302f32322d3234203d3e20313334363538.roa (hash: 20fCkguAbqvRTSySsq+/45gChYsBUHF6oH8avUHMm98=) 6: 3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa (hash: o2D89SHonpDeTNoYqCdnV9a5Dvq6OVmwktk4FXHsfdM=) 7: 297248FCECD7534E50147B8F048420E637A10C3B.crl (hash: CLsjvNQPzrAjYPBuc50BcYvqavrg75MOnobJesTKgDM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.crl rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 09:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c3:06:3d:bf:05:ff:0b:c2:34:f5:ca:b6:21:63:83:bb:b6:11:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297248FCECD7534E50147B8F048420E637A10C3B Validity Not Before: Oct 25 08:21:59 2026 GMT Not After : Oct 26 09:03:59 2026 GMT Subject: CN=8FCD429DA2A7AB921BAB61A3AA6453985172CB3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e8:ce:99:2f:64:f1:a6:f8:1a:cb:42:dd:4f: 60:d2:09:ba:15:e8:ed:c7:ef:0d:55:23:43:eb:3e: ea:49:ed:62:b8:7d:90:6a:67:32:80:ef:87:ab:13: 30:a3:24:88:07:32:a6:0c:ae:81:cd:7a:39:aa:ab: 15:df:62:69:5c:8f:f1:0d:ef:24:6b:55:b5:14:0a: b7:0c:35:13:34:e1:87:d7:19:49:ff:5e:22:d4:c0: a7:2d:95:f7:d3:52:c4:7f:3c:b4:50:ce:d5:f3:81: cf:19:77:7d:cf:44:31:09:5b:4c:e4:50:50:73:c9: 04:a1:d6:c2:38:18:a0:77:f2:30:92:35:49:b3:be: 10:b9:a1:3c:6d:c5:5c:fb:46:c1:61:66:2e:32:8a: 7a:d3:cd:b6:5d:a3:54:ee:b2:7e:0f:a6:e1:f9:01: 0f:97:1b:b4:69:71:9f:36:5a:21:28:cd:7e:62:f9: eb:27:a2:99:d6:97:57:e1:2a:7d:6a:88:7b:af:f8: ae:be:3b:f4:a8:40:4b:ab:73:4b:14:12:c7:b5:2c: a6:5f:af:e3:68:5d:ca:ab:7e:90:d4:49:39:c9:09: 69:f8:57:84:17:98:1c:df:34:12:e5:47:1a:12:73: 60:2a:40:a9:ca:b4:51:ef:6b:6e:3d:96:18:e3:93: f2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CD:42:9D:A2:A7:AB:92:1B:AB:61:A3:AA:64:53:98:51:72:CB:3E X509v3 Authority Key Identifier: keyid:29:72:48:FC:EC:D7:53:4E:50:14:7B:8F:04:84:20:E6:37:A1:0C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/297248FCECD7534E50147B8F048420E637A10C3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/297248FCECD7534E50147B8F048420E637A10C3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:24:99:41:69:75:ce:97:af:da:1b:48:ef:06:2c:bf:12:06: f5:e8:1f:07:6a:e4:65:9f:b8:a5:e9:2c:aa:aa:ab:2a:b8:df: 93:31:a1:9b:f5:fe:9a:8f:1c:f2:0b:6d:cf:7e:27:61:52:5b: 4a:7b:9d:66:46:dd:dd:4e:64:e5:e4:12:0e:4c:4d:6c:2c:3a: 05:37:ac:0a:ac:a8:db:2a:7d:eb:6a:6c:6c:93:c7:0d:55:21: 05:33:b7:34:a4:c9:45:c2:97:3d:10:b5:04:52:cb:59:5b:ab: cf:95:2b:f2:dc:b9:05:96:14:79:2d:68:66:a7:d4:9b:ed:31: e4:04:30:aa:59:9a:f5:30:fc:40:ff:ce:36:74:cf:28:3c:c2: 40:2b:dd:4f:14:74:dd:45:1d:22:e9:bf:18:5f:23:89:2e:41: 91:a5:a9:ae:63:b6:ab:fd:dd:86:38:4b:76:be:d4:8b:d6:16: 8e:28:27:d0:28:52:96:28:3c:e5:26:61:ab:97:75:c4:2b:c3: 90:41:70:de:b4:32:eb:ba:6a:d9:02:20:84:7b:ac:9c:5f:89: 19:9a:9a:86:51:f6:2a:b5:35:24:9a:73:57:16:1d:62:6c:91: 44:53:3a:69:97:2d:0b:92:c1:ce:57:29:25:c1:b5:1c:cf:8a: ea:4a:d8:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUccMGPb8F/wvCNPXKtiFjg7u2Ed4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3MjQ4RkNFQ0Q3NTM0RTUwMTQ3QjhGMDQ4NDIwRTYz N0ExMEMzQjAeFw0yNjEwMjUwODIxNTlaFw0yNjEwMjYwOTAzNTlaMDMxMTAvBgNV BAMTKDhGQ0Q0MjlEQTJBN0FCOTIxQkFCNjFBM0FBNjQ1Mzk4NTE3MkNCM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp6M6ZL2Txpvgay0LdT2DSCboV 6O3H7w1VI0PrPupJ7WK4fZBqZzKA74erEzCjJIgHMqYMroHNejmqqxXfYmlcj/EN 7yRrVbUUCrcMNRM04YfXGUn/XiLUwKctlffTUsR/PLRQztXzgc8Zd33PRDEJW0zk UFBzyQSh1sI4GKB38jCSNUmzvhC5oTxtxVz7RsFhZi4yinrTzbZdo1Tusn4PpuH5 AQ+XG7RpcZ82WiEozX5i+esnopnWl1fhKn1qiHuv+K6+O/SoQEurc0sUEse1LKZf r+NoXcqrfpDUSTnJCWn4V4QXmBzfNBLlRxoSc2AqQKnKtFHva249lhjjk/L3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj81CnaKnq5Ibq2GjqmRTmFFyyz4wHwYDVR0j BBgwFoAUKXJI/OzXU05QFHuPBIQg5jehDDswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ0ODczNjAtODczNS00MWQ3LTk3YTgtZGJiMzRkNzllZmY0LzAvMjk3MjQ4RkNF Q0Q3NTM0RTUwMTQ3QjhGMDQ4NDIwRTYzN0ExMEMzQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTcyNDhGQ0VDRDc1MzRFNTAxNDdCOEYwNDg0MjBFNjM3QTEw QzNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ0ODczNjAtODczNS00MWQ3LTk3 YTgtZGJiMzRkNzllZmY0LzAvMjk3MjQ4RkNFQ0Q3NTM0RTUwMTQ3QjhGMDQ4NDIw RTYzN0ExMEMzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAkmUFpdc6Xr9obSO8GLL8SBvXoHwdq5GWf uKXpLKqqqyq435MxoZv1/pqPHPILbc9+J2FSW0p7nWZG3d1OZOXkEg5MTWwsOgU3 rAqsqNsqfetqbGyTxw1VIQUztzSkyUXClz0QtQRSy1lbq8+VK/LcuQWWFHktaGan 1JvtMeQEMKpZmvUw/ED/zjZ0zyg8wkAr3U8UdN1FHSLpvxhfI4kuQZGlqa5jtqv9 3YY4S3a+1IvWFo4oJ9AoUpYoPOUmYauXdcQrw5BBcN60Muu6atkCIIR7rJxfiRma moZR9iq1NSSac1cWHWJskURTOmmXLQuSwc5XKSXBtRzPiupK2DA= -----END CERTIFICATE-----Generated at Sun Oct 25 14:31:19 2026 by rpki-client