$ rpki-client -vvf rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft File: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft (raw, json) Hash identifier: THblOdOBgHZpC1P7lXkzAs1Mj6FlE243EN+WCJ0It8o= Subject key identifier: 91:CD:9B:69:89:9C:5A:16:86:69:B6:96:C7:46:8C:47:1E:CA:A8:F2 Authority key identifier: 29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 Certificate issuer: /CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Certificate serial: 543663EC427FEEA0442AB87B8271F9C80ED8079D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 11:39:19 +0000 Manifest this update: Thu 23 Jul 2026 11:34:19 +0000 Manifest next update: Fri 24 Jul 2026 14:11:19 +0000 Files and hashes: 1: 323030313a6466303a663730303a3a2f34382d3438203d3e20313339333939.roa (hash: VVOefWlNgIrxkTxjv4HjTw9WKSQHPhLghu8AquJqLFo=) 2: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl (hash: sBZvIHvZdxqALS/9k7YLRH7XwZKFsIKNmGUnhdZsnt8=) 3: 3132332e3235332e3234342e302f32322d3234203d3e20313339333939.roa (hash: AkdaEMd+XmRC7LIhRP1qHPpsq0xWW6OO7uiTTYl9niM=) 4: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (hash: 9IfkkC/i5Kuy1L3bffZaVJ8s7U1zqTIr/KouC9nKsl0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:36:63:ec:42:7f:ee:a0:44:2a:b8:7b:82:71:f9:c8:0e:d8:07:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Validity Not Before: Jul 23 11:34:19 2026 GMT Not After : Jul 24 14:11:19 2026 GMT Subject: CN=91CD9B69899C5A168669B696C7468C471ECAA8F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c6:43:1d:87:9c:16:d4:77:58:82:ad:06:a4: ec:06:dd:d3:48:45:7c:b6:d0:c8:c6:51:3d:27:3c: 18:61:36:29:0b:33:df:c7:01:fd:70:7e:f6:57:a6: 62:a7:c7:1c:1e:d5:c8:67:4a:de:80:1b:8b:74:99: 22:89:b1:4b:e1:d8:c9:0d:a1:9e:db:73:7b:f9:97: 07:93:9e:db:e7:b5:3c:d4:d1:49:32:22:fe:ec:ba: 09:89:02:47:fe:1c:51:24:cf:41:f0:e7:a9:a6:af: cd:ba:ab:85:b4:ee:d5:b7:42:93:7e:2e:86:92:f9: f2:89:df:a7:f6:65:e0:7b:90:5b:80:2b:e3:08:b6: 05:a8:8d:b2:fe:be:55:36:1f:52:05:e3:1f:d3:d2: f7:6a:65:a8:ea:66:22:b9:83:ba:c4:df:2d:64:9d: 2e:dc:6e:f6:e0:1d:dc:25:14:61:96:a1:03:90:6a: 1e:49:a0:41:9b:6c:ea:b9:40:57:6b:e6:c4:9c:3d: 5b:cc:ac:cc:fa:d4:51:d9:aa:db:4c:43:9a:35:de: 19:41:a6:ae:3b:e6:f7:21:95:ef:0b:00:83:05:8f: 56:ad:ba:e9:d7:51:84:94:a9:94:5d:e7:52:90:b5: fd:87:b6:fb:ac:f9:ea:0f:87:1a:5f:5c:15:cf:d4: 93:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CD:9B:69:89:9C:5A:16:86:69:B6:96:C7:46:8C:47:1E:CA:A8:F2 X509v3 Authority Key Identifier: keyid:29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c0:09:64:c1:c5:2a:4b:3f:1d:5e:03:aa:a9:2d:98:02:ee: 87:97:6a:85:ac:53:8b:78:2e:6e:28:a7:80:96:e2:2d:4f:86: bf:73:48:45:be:39:66:3d:88:fd:5a:25:0d:11:80:99:8a:ba: 51:ce:5c:ed:71:8a:84:b4:a5:ab:d5:df:ee:f1:49:5d:01:de: 79:78:3a:ec:1c:ef:63:99:35:d9:0b:ff:30:ab:f8:00:db:61: 39:76:4f:fe:f6:0e:a5:5c:5e:80:ee:5f:37:8c:73:2e:18:04: 87:69:f7:46:25:b2:a0:bc:5a:a2:89:f7:2d:62:bd:c1:e6:23: f5:7a:21:5f:d0:59:88:4c:49:7f:d9:95:d6:f3:d6:de:b1:a5: 0f:1e:4c:a3:05:88:78:c8:ff:f8:9d:03:10:a0:81:6b:53:72: 0d:ce:17:e4:37:72:29:09:41:69:86:a6:e6:c8:a5:0f:b5:17: 70:3d:40:e2:50:6a:1c:b9:b7:93:1b:27:a3:30:51:49:5d:89: b7:67:4c:c7:6f:21:14:26:6a:a6:98:cd:ab:2f:75:ad:2c:82: 9e:0c:01:40:9b:c6:e4:0c:35:53:80:ff:ae:5b:c6:b6:6a:2a: bf:eb:74:40:72:a0:f6:49:f1:bb:8c:49:67:7a:b0:69:a0:e7: 2e:5a:d7:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVDZj7EJ/7qBEKrh7gnH5yA7YB50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGODk1M0QzQkQxM0Q3NEY2MEJBQ0E2MUUwMjgxMUI0 RDZBNkFENDAeFw0yNjA3MjMxMTM0MTlaFw0yNjA3MjQxNDExMTlaMDMxMTAvBgNV BAMTKDkxQ0Q5QjY5ODk5QzVBMTY4NjY5QjY5NkM3NDY4QzQ3MUVDQUE4RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxkMdh5wW1HdYgq0GpOwG3dNI RXy20MjGUT0nPBhhNikLM9/HAf1wfvZXpmKnxxwe1chnSt6AG4t0mSKJsUvh2MkN oZ7bc3v5lweTntvntTzU0UkyIv7sugmJAkf+HFEkz0Hw56mmr826q4W07tW3QpN+ LoaS+fKJ36f2ZeB7kFuAK+MItgWojbL+vlU2H1IF4x/T0vdqZajqZiK5g7rE3y1k nS7cbvbgHdwlFGGWoQOQah5JoEGbbOq5QFdr5sScPVvMrMz61FHZqttMQ5o13hlB pq475vchle8LAIMFj1atuunXUYSUqZRd51KQtf2Htvus+eoPhxpfXBXP1JO7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkc2baYmcWhaGabaWx0aMRx7KqPIwHwYDVR0j BBgwFoAUKfiVPTvRPXT2C6ymHgKBG01qatQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQyMTk4NWItYTBlNi00ZTA1LWJlZjYtZmU2ZjVhNmUyZjQzLzAvMjlGODk1M0Qz QkQxM0Q3NEY2MEJBQ0E2MUUwMjgxMUI0RDZBNkFENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUY4OTUzRDNCRDEzRDc0RjYwQkFDQTYxRTAyODExQjRENkE2 QUQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQyMTk4NWItYTBlNi00ZTA1LWJl ZjYtZmU2ZjVhNmUyZjQzLzAvMjlGODk1M0QzQkQxM0Q3NEY2MEJBQ0E2MUUwMjgx MUI0RDZBNkFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3ACWTBxSpLPx1eA6qpLZgC7oeXaoWsU4t4 Lm4op4CW4i1Phr9zSEW+OWY9iP1aJQ0RgJmKulHOXO1xioS0pavV3+7xSV0B3nl4 Ouwc72OZNdkL/zCr+ADbYTl2T/72DqVcXoDuXzeMcy4YBIdp90YlsqC8WqKJ9y1i vcHmI/V6IV/QWYhMSX/Zldbz1t6xpQ8eTKMFiHjI//idAxCggWtTcg3OF+Q3cikJ QWmGpubIpQ+1F3A9QOJQahy5t5MbJ6MwUUldibdnTMdvIRQmaqaYzasvda0sgp4M AUCbxuQMNVOA/65bxrZqKr/rdEByoPZJ8buMSWd6sGmg5y5a12E= -----END CERTIFICATE-----Generated at Fri Jul 24 07:43:25 2026 by rpki-client