$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft File: 629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft (raw, json) Hash identifier: 0naw6Yg28Qe4V4LJiaxfqjSbZqRsW5KvlKCp1hEq6CQ= Subject key identifier: 19:D8:43:B3:BB:B0:80:0B:73:C3:AD:69:1B:63:70:3A:B4:04:FF:F2 Authority key identifier: 62:9E:74:A6:0B:52:AC:9F:C2:F7:A1:11:A6:83:76:BB:57:C1:CA:BD Certificate issuer: /CN=629E74A60B52AC9FC2F7A111A68376BB57C1CABD Certificate serial: 58656FFF16838F67B46C8C280CD3BCC47277D554 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:46:55 +0000 Manifest this update: Thu 23 Jul 2026 13:41:55 +0000 Manifest next update: Fri 24 Jul 2026 14:57:55 +0000 Files and hashes: 1: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: QzM90YWTXns1ydz40IJ13wxTQ2LuYS2Sj6cuHqSNNQs=) 2: 629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl (hash: aRAlP2sXfoLwkyA7rGeqr/yH+SY56UCbwSRMgUwM/Sc=) 3: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: nOhj/KbLK8tB+8fzk/fF8cT34h0xCczJl9qDSLUlcwg=) 4: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: CVrUJTlhlyjQcXWYw9mEs6T2cItEcY6BENuMI3nROC0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:65:6f:ff:16:83:8f:67:b4:6c:8c:28:0c:d3:bc:c4:72:77:d5:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=629E74A60B52AC9FC2F7A111A68376BB57C1CABD Validity Not Before: Jul 23 13:41:55 2026 GMT Not After : Jul 24 14:57:55 2026 GMT Subject: CN=19D843B3BBB0800B73C3AD691B63703AB404FFF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a1:81:9c:91:eb:10:81:a3:b4:7a:06:13:dd: 54:cd:e7:c1:e5:1a:18:9c:c7:27:2f:e9:92:02:29: 0d:5f:e8:36:eb:65:33:7d:15:83:c6:51:de:be:54: 25:b1:72:44:d9:2e:80:1e:6f:fd:94:5a:c4:1a:e9: 27:3c:5b:19:26:60:72:b4:49:eb:ee:65:0d:1c:2e: 7c:8d:47:a9:e4:30:b9:77:c9:95:66:a4:06:a1:31: 1e:6b:41:3a:63:08:01:41:58:2c:c5:7c:47:09:55: 20:73:c7:7f:02:eb:99:ce:60:1f:4f:a7:21:20:db: 11:79:17:81:2d:f7:24:4c:8f:f1:82:c6:8b:6b:ce: bc:a9:e7:21:5a:fc:10:37:da:3e:fb:f4:b5:af:8a: 93:f4:27:50:12:d8:9a:c3:38:08:23:27:28:d3:db: ff:9e:38:7a:27:57:95:1a:85:aa:67:dc:88:3d:2d: 2f:88:4d:0e:c6:e0:2b:49:66:81:01:80:62:e2:da: 5c:e2:44:6a:a7:b1:df:8f:43:64:01:0c:68:d2:df: 91:92:8b:d7:d4:cc:d9:55:e1:95:05:35:e2:38:f4: 4e:e9:8a:29:2a:85:6a:f2:cd:20:47:1b:30:75:63: 6b:6a:c6:43:1f:3f:3a:10:e5:27:f7:a5:20:74:88: e4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D8:43:B3:BB:B0:80:0B:73:C3:AD:69:1B:63:70:3A:B4:04:FF:F2 X509v3 Authority Key Identifier: keyid:62:9E:74:A6:0B:52:AC:9F:C2:F7:A1:11:A6:83:76:BB:57:C1:CA:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:4d:0d:ae:45:59:89:40:87:f3:7b:99:ea:11:c1:0f:e5:37: 4a:5d:6c:1b:a3:59:ae:65:ac:52:8f:18:dd:98:3c:f2:45:93: 3a:b7:a9:17:a7:b6:9b:e3:d3:77:ff:be:6c:ad:32:b2:a6:e3: 59:f2:75:65:ac:d1:91:66:30:64:02:90:dc:13:3a:2a:a0:c5: a4:ea:3c:03:3f:0c:7b:51:f9:85:e3:8b:40:92:f5:c3:df:11: 0d:b3:2b:a3:1c:a9:45:93:73:76:e6:42:36:a9:f6:58:74:38: b6:14:e2:1e:b3:1c:63:b4:29:a2:46:7f:88:78:cf:82:e4:e6: 23:4f:a7:52:b2:ab:05:79:8e:3a:de:04:3f:78:94:ae:4a:30: c9:9f:53:fd:c2:12:d4:b1:bc:a5:9f:64:04:af:49:84:88:7a: 51:b9:da:88:df:f2:8c:fa:c9:0a:43:45:40:e8:3a:98:1b:ca: 1f:ca:7c:b4:32:bb:3a:4f:c8:c7:dc:8b:c2:66:bf:95:08:0b: 54:7d:61:a0:3b:42:48:bc:30:e1:73:a7:f8:59:c6:5e:01:63: 7f:21:7f:b3:ea:dd:4f:9a:8f:99:ed:ce:b1:d0:a8:ab:62:51: 93:36:db:5c:53:e9:fd:42:d6:fe:a4:75:8a:f1:0c:22:fc:31: a3:37:0c:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWGVv/xaDj2e0bIwoDNO8xHJ31VQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI5RTc0QTYwQjUyQUM5RkMyRjdBMTExQTY4Mzc2QkI1 N0MxQ0FCRDAeFw0yNjA3MjMxMzQxNTVaFw0yNjA3MjQxNDU3NTVaMDMxMTAvBgNV BAMTKDE5RDg0M0IzQkJCMDgwMEI3M0MzQUQ2OTFCNjM3MDNBQjQwNEZGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4oYGckesQgaO0egYT3VTN58Hl Ghicxycv6ZICKQ1f6DbrZTN9FYPGUd6+VCWxckTZLoAeb/2UWsQa6Sc8WxkmYHK0 SevuZQ0cLnyNR6nkMLl3yZVmpAahMR5rQTpjCAFBWCzFfEcJVSBzx38C65nOYB9P pyEg2xF5F4Et9yRMj/GCxotrzryp5yFa/BA32j779LWvipP0J1AS2JrDOAgjJyjT 2/+eOHonV5Uahapn3Ig9LS+ITQ7G4CtJZoEBgGLi2lziRGqnsd+PQ2QBDGjS35GS i9fUzNlV4ZUFNeI49E7piikqhWryzSBHGzB1Y2tqxkMfPzoQ5Sf3pSB0iOSpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGdhDs7uwgAtzw61pG2NwOrQE//IwHwYDVR0j BBgwFoAUYp50pgtSrJ/C96ERpoN2u1fByr0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE5N2JjZjQtZTFhYS00N2Q2LWJkZTYtMmU2NjdiOWQ2MTM0LzAvNjI5RTc0QTYw QjUyQUM5RkMyRjdBMTExQTY4Mzc2QkI1N0MxQ0FCRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjlFNzRBNjBCNTJBQzlGQzJGN0ExMTFBNjgzNzZCQjU3QzFD QUJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvNjI5RTc0QTYwQjUyQUM5RkMyRjdBMTExQTY4Mzc2 QkI1N0MxQ0FCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhNDa5FWYlAh/N7meoRwQ/lN0pdbBujWa5l rFKPGN2YPPJFkzq3qRentpvj03f/vmytMrKm41nydWWs0ZFmMGQCkNwTOiqgxaTq PAM/DHtR+YXji0CS9cPfEQ2zK6McqUWTc3bmQjap9lh0OLYU4h6zHGO0KaJGf4h4 z4Lk5iNPp1KyqwV5jjreBD94lK5KMMmfU/3CEtSxvKWfZASvSYSIelG52ojf8oz6 yQpDRUDoOpgbyh/KfLQyuzpPyMfci8Jmv5UIC1R9YaA7Qki8MOFzp/hZxl4BY38h f7Pq3U+aj5ntzrHQqKtiUZM221xT6f1C1v6kdYrxDCL8MaM3DD8= -----END CERTIFICATE-----Generated at Fri Jul 24 01:19:32 2026 by rpki-client