$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft File: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft (raw, json) Hash identifier: dD6WvgCJYouO8NWP0Qx9mZ8x2izXnGpSB/PETuTt1y8= Subject key identifier: 40:33:5B:C6:D3:83:7E:1D:43:B0:0E:BB:9D:EB:33:17:01:89:15:98 Authority key identifier: 29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 Certificate issuer: /CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Certificate serial: 250EDA7B2317F4E433FF38CD41D33AD87C3A1B41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 14:43:31 +0000 Manifest this update: Fri 25 Sep 2026 14:38:31 +0000 Manifest next update: Sat 26 Sep 2026 17:52:31 +0000 Files and hashes: 1: 3132332e3235332e3234342e302f32322d3234203d3e20313339333939.roa (hash: AkdaEMd+XmRC7LIhRP1qHPpsq0xWW6OO7uiTTYl9niM=) 2: 323030313a6466303a663730303a3a2f34382d3438203d3e20313339333939.roa (hash: VVOefWlNgIrxkTxjv4HjTw9WKSQHPhLghu8AquJqLFo=) 3: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (hash: 9IfkkC/i5Kuy1L3bffZaVJ8s7U1zqTIr/KouC9nKsl0=) 4: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl (hash: vBK25UCOipbRyyPd4FbzW9KprR92vEMmgQ/7+O5bE6E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:0e:da:7b:23:17:f4:e4:33:ff:38:cd:41:d3:3a:d8:7c:3a:1b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Validity Not Before: Sep 25 14:38:31 2026 GMT Not After : Sep 26 17:52:31 2026 GMT Subject: CN=40335BC6D3837E1D43B00EBB9DEB331701891598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:39:52:b7:5d:41:cb:0c:1b:38:37:7e:44:22: 7d:76:bc:c0:35:bf:3b:f1:84:3a:3d:a9:09:be:c7: 41:83:04:e5:15:85:f7:f9:f0:a5:90:95:37:b6:29: 98:f9:ba:18:f5:e6:a6:e0:2f:ea:bc:c0:a2:d3:9f: 43:38:04:be:1d:3e:02:6f:21:49:92:ed:93:ff:64: 43:a4:be:93:3b:86:f5:5d:8e:96:0c:a7:99:23:df: 74:ea:7b:87:e0:b0:79:8f:f2:61:bc:b9:c7:bb:ad: 81:fc:47:18:8e:35:c6:50:be:2e:f9:0a:14:e7:76: a4:3e:5f:ab:ba:5c:44:2b:a5:b6:9a:84:f7:bf:c0: e5:5b:40:76:18:4a:d5:85:89:14:ca:85:80:34:20: 6b:78:4d:a3:a8:71:01:c7:08:3f:99:8e:8c:f0:d6: 2b:1e:80:79:e2:9a:62:58:46:0d:49:ae:f8:9c:b5: 6a:d1:d3:b9:d1:96:8d:dc:f1:84:54:c8:26:65:ea: d9:ee:73:1e:0a:7c:3f:3b:13:38:82:2b:c6:11:d3: b5:b3:04:c8:b3:a6:24:be:17:85:25:d4:fb:fb:f9: 82:17:62:49:d1:3f:90:9f:c6:06:14:e5:fe:ad:88: 01:ef:21:59:2c:f6:4c:52:48:97:f6:26:bb:75:77: f9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:33:5B:C6:D3:83:7E:1D:43:B0:0E:BB:9D:EB:33:17:01:89:15:98 X509v3 Authority Key Identifier: keyid:29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:d3:af:d2:80:72:06:62:5d:3d:62:a4:45:41:47:0e:9c:34: 88:33:50:1e:0f:1b:d8:e9:34:74:64:67:d8:4b:5e:39:c7:0d: 94:f8:52:36:a7:db:ba:e1:b7:ea:9d:38:b2:3a:7c:a2:58:ed: 4c:96:1b:6b:7a:a0:6c:53:6d:db:17:31:90:73:08:e5:66:f8: a4:60:8b:02:dd:4a:09:22:75:35:f0:33:17:6f:78:3d:ca:47: c5:23:93:11:2e:eb:ff:b8:29:57:bd:4c:19:cd:86:55:f3:12: 94:7d:3c:87:d1:72:e8:fb:a9:e4:2e:08:d4:39:c1:d9:1e:63: f7:36:fa:46:3c:89:39:be:b6:88:29:e6:d7:46:28:9b:7e:2b: 0c:6c:47:2d:7c:b3:2f:54:5c:c2:bb:79:9f:e1:18:15:b7:2c: c9:02:c6:54:9e:f6:70:0f:ba:c4:6d:99:5a:47:8c:2d:88:62: 85:aa:ea:19:a5:1c:54:d8:ad:92:57:41:d8:da:e6:ba:45:ed: 46:72:54:5e:91:81:18:b6:ff:48:51:76:4b:f4:d2:84:d3:32: 2c:a1:ac:a1:4b:d4:a4:94:82:eb:70:35:8d:23:ca:b4:70:a8: c0:8b:aa:65:78:a0:af:80:6b:cc:61:7c:a8:1e:3d:78:8d:ce: 37:0e:f8:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJQ7aeyMX9OQz/zjNQdM62Hw6G0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGODk1M0QzQkQxM0Q3NEY2MEJBQ0E2MUUwMjgxMUI0 RDZBNkFENDAeFw0yNjA5MjUxNDM4MzFaFw0yNjA5MjYxNzUyMzFaMDMxMTAvBgNV BAMTKDQwMzM1QkM2RDM4MzdFMUQ0M0IwMEVCQjlERUIzMzE3MDE4OTE1OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClOVK3XUHLDBs4N35EIn12vMA1 vzvxhDo9qQm+x0GDBOUVhff58KWQlTe2KZj5uhj15qbgL+q8wKLTn0M4BL4dPgJv IUmS7ZP/ZEOkvpM7hvVdjpYMp5kj33Tqe4fgsHmP8mG8uce7rYH8RxiONcZQvi75 ChTndqQ+X6u6XEQrpbaahPe/wOVbQHYYStWFiRTKhYA0IGt4TaOocQHHCD+Zjozw 1isegHnimmJYRg1JrvictWrR07nRlo3c8YRUyCZl6tnucx4KfD87EziCK8YR07Wz BMizpiS+F4Ul1Pv7+YIXYknRP5CfxgYU5f6tiAHvIVks9kxSSJf2Jrt1d/nVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQDNbxtODfh1DsA67neszFwGJFZgwHwYDVR0j BBgwFoAUKfiVPTvRPXT2C6ymHgKBG01qatQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQyMTk4NWItYTBlNi00ZTA1LWJlZjYtZmU2ZjVhNmUyZjQzLzAvMjlGODk1M0Qz QkQxM0Q3NEY2MEJBQ0E2MUUwMjgxMUI0RDZBNkFENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUY4OTUzRDNCRDEzRDc0RjYwQkFDQTYxRTAyODExQjRENkE2 QUQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQyMTk4NWItYTBlNi00ZTA1LWJl ZjYtZmU2ZjVhNmUyZjQzLzAvMjlGODk1M0QzQkQxM0Q3NEY2MEJBQ0E2MUUwMjgx MUI0RDZBNkFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnTr9KAcgZiXT1ipEVBRw6cNIgzUB4PG9jp NHRkZ9hLXjnHDZT4Ujan27rht+qdOLI6fKJY7UyWG2t6oGxTbdsXMZBzCOVm+KRg iwLdSgkidTXwMxdveD3KR8UjkxEu6/+4KVe9TBnNhlXzEpR9PIfRcuj7qeQuCNQ5 wdkeY/c2+kY8iTm+togp5tdGKJt+KwxsRy18sy9UXMK7eZ/hGBW3LMkCxlSe9nAP usRtmVpHjC2IYoWq6hmlHFTYrZJXQdja5rpF7UZyVF6RgRi2/0hRdkv00oTTMiyh rKFL1KSUgutwNY0jyrRwqMCLqmV4oK+Aa8xhfKgePXiNzjcO+NA= -----END CERTIFICATE-----Generated at Fri Sep 25 23:33:12 2026 by rpki-client