$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft File: 629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft (raw, json) Hash identifier: f742vAzipvo60KwlWKG8txnfR7q9peoOACaZOZ4zRUk= Subject key identifier: BD:DE:83:73:1E:50:2D:35:5F:16:0B:84:96:EA:6D:BC:7E:DF:D6:22 Authority key identifier: 62:9E:74:A6:0B:52:AC:9F:C2:F7:A1:11:A6:83:76:BB:57:C1:CA:BD Certificate issuer: /CN=629E74A60B52AC9FC2F7A111A68376BB57C1CABD Certificate serial: 6FF3901D5E412669F082CE22A40CA634F21D0976 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 14:28:49 +0000 Manifest this update: Thu 24 Sep 2026 14:23:49 +0000 Manifest next update: Fri 25 Sep 2026 17:16:49 +0000 Files and hashes: 1: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: nOhj/KbLK8tB+8fzk/fF8cT34h0xCczJl9qDSLUlcwg=) 2: 629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl (hash: zovc4nMBRIGGF4ow3eAGbFnpqUfo28i9onaunc8YBQc=) 3: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: CVrUJTlhlyjQcXWYw9mEs6T2cItEcY6BENuMI3nROC0=) 4: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: QzM90YWTXns1ydz40IJ13wxTQ2LuYS2Sj6cuHqSNNQs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f3:90:1d:5e:41:26:69:f0:82:ce:22:a4:0c:a6:34:f2:1d:09:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=629E74A60B52AC9FC2F7A111A68376BB57C1CABD Validity Not Before: Sep 24 14:23:49 2026 GMT Not After : Sep 25 17:16:49 2026 GMT Subject: CN=BDDE83731E502D355F160B8496EA6DBC7EDFD622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:04:56:0d:6b:2c:9d:33:e9:fc:81:b1:36:2b: 93:51:6e:ca:1b:75:9e:ea:99:91:1b:4c:ab:7f:45: 2a:b3:51:90:d4:97:c0:10:9b:18:3b:2d:2e:f2:14: b7:ba:03:f5:78:42:b6:f4:85:62:80:e6:e0:b9:6d: 98:4b:4e:39:ab:11:74:9d:45:c5:11:b7:6d:6b:12: 2a:6f:81:d2:64:fb:99:3b:8d:01:fd:a8:c7:b2:21: ac:6d:d5:e1:07:50:e9:6a:1c:9b:46:ed:fb:ff:10: 11:85:83:26:5e:3c:41:b0:2b:54:19:7d:80:34:66: 56:d0:e8:fa:2e:3e:46:ce:5a:40:05:04:17:64:ce: 97:75:ee:7f:a2:22:b3:21:7e:db:11:97:f0:9c:d9: 3c:3a:60:88:97:95:2a:0c:aa:b2:2f:2d:32:ad:24: ad:8c:d4:91:46:fe:e4:b9:42:da:86:20:76:39:12: 0c:cb:10:7c:65:24:3d:fa:ca:be:86:d2:9e:d6:04: b3:b2:16:5e:fb:8d:0b:57:ce:b5:f5:70:c9:55:27: 6e:ef:29:ee:b2:02:34:62:6c:31:2a:9e:ed:1e:42: 88:49:cc:ca:32:91:c5:08:a2:b6:44:0f:2d:03:6b: df:d8:a9:d8:14:74:98:a4:d5:54:10:e5:ee:67:7f: f8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DE:83:73:1E:50:2D:35:5F:16:0B:84:96:EA:6D:BC:7E:DF:D6:22 X509v3 Authority Key Identifier: keyid:62:9E:74:A6:0B:52:AC:9F:C2:F7:A1:11:A6:83:76:BB:57:C1:CA:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/629E74A60B52AC9FC2F7A111A68376BB57C1CABD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:1a:65:da:be:76:11:43:cf:58:b4:7a:6b:34:56:9f:b0:4b: f6:ea:64:4b:05:61:79:b6:6a:62:2a:a8:ca:34:e1:2b:cf:c0: 35:9a:f5:c1:05:7c:d8:4a:da:91:9d:2d:02:ab:89:0c:62:40: 9e:c7:6a:38:48:ec:58:9c:7e:a1:3d:d1:bf:97:a2:6e:78:cb: e7:fd:6d:ce:24:a5:07:e7:e7:8e:ae:62:6a:3d:cc:d8:df:2b: e9:ce:7c:ab:25:30:f8:0b:b0:5e:e4:a2:76:ab:98:84:c3:c1: fb:ed:32:04:07:f1:b4:60:49:df:c7:be:06:87:d8:94:31:77: 9b:f9:b8:6e:d9:07:aa:fd:0f:44:b3:08:f0:69:27:07:8c:8f: 30:ea:a5:7f:b9:7f:87:12:88:40:21:ee:b6:8b:61:df:b1:86: 77:3d:6e:a7:52:81:40:76:19:55:43:31:9d:16:bb:f7:cf:fe: 0a:ac:c1:6c:cf:f9:3c:d7:9c:3e:68:7d:8f:73:b6:bd:2a:12: aa:70:2a:9f:8d:73:17:e9:48:2c:e0:ec:66:0e:96:7f:3e:6e: f3:3b:df:d9:07:d9:2f:3d:e4:d5:b6:f5:77:c4:85:c8:88:b1: b3:95:64:1f:3c:82:c7:78:4d:8a:ed:1b:64:3b:ff:ed:54:28: 5c:59:c2:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb/OQHV5BJmnwgs4ipAymNPIdCXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI5RTc0QTYwQjUyQUM5RkMyRjdBMTExQTY4Mzc2QkI1 N0MxQ0FCRDAeFw0yNjA5MjQxNDIzNDlaFw0yNjA5MjUxNzE2NDlaMDMxMTAvBgNV BAMTKEJEREU4MzczMUU1MDJEMzU1RjE2MEI4NDk2RUE2REJDN0VERkQ2MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBBFYNayydM+n8gbE2K5NRbsob dZ7qmZEbTKt/RSqzUZDUl8AQmxg7LS7yFLe6A/V4Qrb0hWKA5uC5bZhLTjmrEXSd RcURt21rEipvgdJk+5k7jQH9qMeyIaxt1eEHUOlqHJtG7fv/EBGFgyZePEGwK1QZ fYA0ZlbQ6PouPkbOWkAFBBdkzpd17n+iIrMhftsRl/Cc2Tw6YIiXlSoMqrIvLTKt JK2M1JFG/uS5QtqGIHY5EgzLEHxlJD36yr6G0p7WBLOyFl77jQtXzrX1cMlVJ27v Ke6yAjRibDEqnu0eQohJzMoykcUIorZEDy0Da9/YqdgUdJik1VQQ5e5nf/gJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvd6Dcx5QLTVfFguEluptvH7f1iIwHwYDVR0j BBgwFoAUYp50pgtSrJ/C96ERpoN2u1fByr0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE5N2JjZjQtZTFhYS00N2Q2LWJkZTYtMmU2NjdiOWQ2MTM0LzAvNjI5RTc0QTYw QjUyQUM5RkMyRjdBMTExQTY4Mzc2QkI1N0MxQ0FCRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MjlFNzRBNjBCNTJBQzlGQzJGN0ExMTFBNjgzNzZCQjU3QzFD QUJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvNjI5RTc0QTYwQjUyQUM5RkMyRjdBMTExQTY4Mzc2 QkI1N0MxQ0FCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcaZdq+dhFDz1i0ems0Vp+wS/bqZEsFYXm2 amIqqMo04SvPwDWa9cEFfNhK2pGdLQKriQxiQJ7HajhI7FicfqE90b+Xom54y+f9 bc4kpQfn546uYmo9zNjfK+nOfKslMPgLsF7konarmITDwfvtMgQH8bRgSd/HvgaH 2JQxd5v5uG7ZB6r9D0SzCPBpJweMjzDqpX+5f4cSiEAh7raLYd+xhnc9bqdSgUB2 GVVDMZ0Wu/fP/gqswWzP+TzXnD5ofY9ztr0qEqpwKp+NcxfpSCzg7GYOln8+bvM7 39kH2S895NW29XfEhciIsbOVZB88gsd4TYrtG2Q7/+1UKFxZwoY= -----END CERTIFICATE-----Generated at Fri Sep 25 00:16:47 2026 by rpki-client