$ rpki-client -vvf rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft File: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft (raw, json) Hash identifier: szdxPNQjHy5tCece1Ac6dGboW9ziG5qACpa9F4FGMY4= Subject key identifier: 28:D7:3F:99:D2:0B:FB:D8:46:DD:57:27:2A:54:27:F1:8D:37:BB:EA Authority key identifier: 29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 Certificate issuer: /CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Certificate serial: 4C6547832F4F96A7056BD60F01E6A348BE99AE0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 06:11:57 +0000 Manifest this update: Fri 24 Jul 2026 06:06:57 +0000 Manifest next update: Sat 25 Jul 2026 08:41:57 +0000 Files and hashes: 1: 323030313a6466303a663730303a3a2f34382d3438203d3e20313339333939.roa (hash: VVOefWlNgIrxkTxjv4HjTw9WKSQHPhLghu8AquJqLFo=) 2: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl (hash: HsczR51yefv+nV9W2vqvtZTQTzwogRHtiOrkuSKy6W8=) 3: 3132332e3235332e3234342e302f32322d3234203d3e20313339333939.roa (hash: AkdaEMd+XmRC7LIhRP1qHPpsq0xWW6OO7uiTTYl9niM=) 4: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (hash: 9IfkkC/i5Kuy1L3bffZaVJ8s7U1zqTIr/KouC9nKsl0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:65:47:83:2f:4f:96:a7:05:6b:d6:0f:01:e6:a3:48:be:99:ae:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Validity Not Before: Jul 24 06:06:57 2026 GMT Not After : Jul 25 08:41:57 2026 GMT Subject: CN=28D73F99D20BFBD846DD57272A5427F18D37BBEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f5:aa:f1:b7:9c:0f:15:e6:f2:ae:a2:08:68: 51:3c:f0:f0:53:cc:48:2b:c8:f0:b5:7f:1e:f2:d6: 29:bf:e1:70:b0:83:f1:fc:66:ad:95:44:6d:17:8d: 55:af:67:1c:1b:79:58:31:40:95:61:eb:95:34:9f: f3:12:01:8c:37:55:a0:15:ea:9d:87:95:ae:13:41: aa:73:19:cd:ab:1c:17:72:ee:2c:9c:73:15:98:d2: f0:8d:37:7d:26:a8:20:8c:19:c9:9c:4e:47:c6:aa: 24:58:f8:0b:29:8a:06:13:44:29:53:a4:f6:39:b5: 47:3f:40:1c:02:b3:6c:4b:2f:56:63:fe:66:c6:3e: d8:74:b9:db:79:d6:8d:17:ee:f3:a6:f8:0b:fe:be: b9:09:13:72:9f:73:9f:45:e1:7e:86:c4:73:5e:97: 52:e4:c7:b9:cf:77:7f:ad:7f:a7:09:f2:4a:e1:b0: 37:79:49:0a:52:51:01:5c:33:8d:27:6c:44:1c:02: 11:52:90:de:ce:8b:72:51:8f:d1:5c:c0:73:87:5c: 96:8a:6a:81:49:52:77:5a:5f:db:36:78:e8:79:1d: a1:91:2c:fc:c8:e8:b8:ce:cd:cf:5e:65:70:b6:b1: 6a:34:6c:c5:dc:d7:ce:90:bb:50:77:1a:5f:95:e1: 3e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D7:3F:99:D2:0B:FB:D8:46:DD:57:27:2A:54:27:F1:8D:37:BB:EA X509v3 Authority Key Identifier: keyid:29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:5c:45:a3:6c:e4:af:ca:77:d1:3a:87:bd:8b:c1:30:22:20: 0e:64:c6:72:34:ed:5a:20:34:ef:df:23:18:bc:d4:c2:4b:06: 0b:3a:84:a2:8e:dd:66:9b:f2:31:eb:3c:24:eb:dd:f2:1c:71: f1:f9:26:55:b6:fe:b4:0a:74:55:c6:4c:94:0e:4e:9c:5a:84: 8f:7e:d7:53:e9:e2:2a:a3:e9:bf:73:55:5c:90:9a:14:01:67: 98:cd:b8:28:4f:d8:0c:af:68:65:5e:65:f9:a5:db:bf:86:46: 29:a4:f6:70:8b:45:e7:f9:1d:88:ae:b6:33:b5:6f:cc:40:86: 07:fd:b4:ef:c7:27:d7:6c:47:37:1b:63:2e:36:e3:9c:2a:98: 96:49:63:2d:79:1a:fe:26:8f:a4:ce:83:bb:5c:24:ce:1e:f2: e8:8c:da:7d:ae:03:66:24:2b:b5:60:d8:7c:ba:9c:89:3d:e5: 9d:56:b7:49:77:43:64:3e:df:d6:d4:6f:4f:70:00:af:37:f7: b4:82:9c:32:41:fa:33:1f:92:6d:30:d7:24:b5:0d:26:13:d8: f6:54:c4:07:83:6f:e7:84:8e:9c:57:dd:a7:99:64:74:09:3d: da:d5:49:39:e0:cd:a6:81:0b:17:a3:44:6b:e8:fc:21:c4:0b: ae:0a:8f:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTGVHgy9PlqcFa9YPAeajSL6ZrgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGODk1M0QzQkQxM0Q3NEY2MEJBQ0E2MUUwMjgxMUI0 RDZBNkFENDAeFw0yNjA3MjQwNjA2NTdaFw0yNjA3MjUwODQxNTdaMDMxMTAvBgNV BAMTKDI4RDczRjk5RDIwQkZCRDg0NkRENTcyNzJBNTQyN0YxOEQzN0JCRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59arxt5wPFebyrqIIaFE88PBT zEgryPC1fx7y1im/4XCwg/H8Zq2VRG0XjVWvZxwbeVgxQJVh65U0n/MSAYw3VaAV 6p2Hla4TQapzGc2rHBdy7iyccxWY0vCNN30mqCCMGcmcTkfGqiRY+AspigYTRClT pPY5tUc/QBwCs2xLL1Zj/mbGPth0udt51o0X7vOm+Av+vrkJE3Kfc59F4X6GxHNe l1Lkx7nPd3+tf6cJ8krhsDd5SQpSUQFcM40nbEQcAhFSkN7Oi3JRj9FcwHOHXJaK aoFJUndaX9s2eOh5HaGRLPzI6LjOzc9eZXC2sWo0bMXc186Qu1B3Gl+V4T63AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKNc/mdIL+9hG3VcnKlQn8Y03u+owHwYDVR0j BBgwFoAUKfiVPTvRPXT2C6ymHgKBG01qatQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQyMTk4NWItYTBlNi00ZTA1LWJlZjYtZmU2ZjVhNmUyZjQzLzAvMjlGODk1M0Qz QkQxM0Q3NEY2MEJBQ0E2MUUwMjgxMUI0RDZBNkFENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUY4OTUzRDNCRDEzRDc0RjYwQkFDQTYxRTAyODExQjRENkE2 QUQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQyMTk4NWItYTBlNi00ZTA1LWJl ZjYtZmU2ZjVhNmUyZjQzLzAvMjlGODk1M0QzQkQxM0Q3NEY2MEJBQ0E2MUUwMjgx MUI0RDZBNkFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpcRaNs5K/Kd9E6h72LwTAiIA5kxnI07Vog NO/fIxi81MJLBgs6hKKO3Wab8jHrPCTr3fIccfH5JlW2/rQKdFXGTJQOTpxahI9+ 11Pp4iqj6b9zVVyQmhQBZ5jNuChP2AyvaGVeZfml27+GRimk9nCLRef5HYiutjO1 b8xAhgf9tO/HJ9dsRzcbYy4245wqmJZJYy15Gv4mj6TOg7tcJM4e8uiM2n2uA2Yk K7Vg2Hy6nIk95Z1Wt0l3Q2Q+39bUb09wAK8397SCnDJB+jMfkm0w1yS1DSYT2PZU xAeDb+eEjpxX3aeZZHQJPdrVSTngzaaBCxejRGvo/CHEC64Kjy0= -----END CERTIFICATE-----Generated at Fri Jul 24 09:57:50 2026 by rpki-client