$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft File: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft (raw, json) Hash identifier: 9VC/ohogIUVvOye9sBmsKf6+JaxKDnZDrQpoFSxbzK0= Subject key identifier: 0F:75:51:C4:12:01:1C:74:56:F6:06:5E:61:3F:F9:BB:65:08:84:39 Authority key identifier: 29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 Certificate issuer: /CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Certificate serial: 0CB8AD86157481268A260A37864F492800EAFB01 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 01:07:12 +0000 Manifest this update: Thu 24 Sep 2026 01:02:12 +0000 Manifest next update: Fri 25 Sep 2026 03:53:12 +0000 Files and hashes: 1: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl (hash: KLpbo6S2/rZ52xG6o6gPFMQGLTe1wKCiFDyoBrClof4=) 2: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (hash: 9IfkkC/i5Kuy1L3bffZaVJ8s7U1zqTIr/KouC9nKsl0=) 3: 3132332e3235332e3234342e302f32322d3234203d3e20313339333939.roa (hash: AkdaEMd+XmRC7LIhRP1qHPpsq0xWW6OO7uiTTYl9niM=) 4: 323030313a6466303a663730303a3a2f34382d3438203d3e20313339333939.roa (hash: VVOefWlNgIrxkTxjv4HjTw9WKSQHPhLghu8AquJqLFo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b8:ad:86:15:74:81:26:8a:26:0a:37:86:4f:49:28:00:ea:fb:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Validity Not Before: Sep 24 01:02:12 2026 GMT Not After : Sep 25 03:53:12 2026 GMT Subject: CN=0F7551C412011C7456F6065E613FF9BB65088439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fd:58:b8:63:b5:23:0e:b7:a1:65:e4:5e:0f: 4e:c6:b1:8b:77:26:51:af:d6:24:26:b3:0f:44:a7: 6c:dc:10:6c:f6:44:e5:ef:8e:6b:62:dd:39:41:99: 4b:d7:ec:03:51:c8:6e:0f:92:f4:c0:a7:99:be:5d: c5:59:2c:2b:8c:e7:a1:75:44:a9:4a:a6:42:53:39: 29:10:06:43:5c:19:f7:15:0a:ea:fc:0f:b7:8c:f8: 61:be:d0:15:ba:c7:27:fd:2c:dd:ff:50:02:75:61: 0a:60:c9:6a:13:4a:1e:0e:a3:61:83:eb:f8:8d:70: 38:b7:60:da:5c:19:c6:92:a9:d6:c8:17:fa:f5:da: 7f:ae:cd:9d:22:fe:41:40:1f:c7:bc:46:2c:5b:44: 84:f8:b7:51:33:4f:6f:1a:9d:b5:d6:75:54:9c:29: a4:96:5a:3b:5b:33:e2:c2:e8:10:e5:a2:f5:3a:d3: c9:42:77:bc:e8:4d:aa:f8:d6:e9:82:30:d7:c9:c0: cd:98:d9:b6:6b:c1:e0:f2:67:bb:94:3d:1f:33:19: 3a:04:3a:e2:f4:5a:10:9e:a6:a6:a0:fc:4a:e1:99: e7:42:43:40:37:66:8f:bc:90:a6:d3:06:87:12:32: b9:d1:a3:b7:db:3f:72:4a:d9:a7:21:28:6c:7f:c7: 1a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:75:51:C4:12:01:1C:74:56:F6:06:5E:61:3F:F9:BB:65:08:84:39 X509v3 Authority Key Identifier: keyid:29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:38:6d:a6:ed:85:e8:ab:da:d2:f1:bf:3b:2e:c3:a5:b0:a4: 3c:c4:76:12:22:c4:1c:3a:32:28:d6:9c:ba:b6:1d:33:08:1e: 1c:3d:b7:48:bd:83:7f:4e:8f:bf:06:6c:83:79:d8:74:0d:3b: e9:72:f4:84:0d:84:12:4a:7a:b3:0f:ac:c8:76:4d:dd:21:e6: e6:ea:db:bf:78:74:af:f4:6e:82:d7:76:7f:31:5b:f8:f0:b3: d4:f1:c2:d1:7d:c2:25:6d:23:ea:ff:68:14:01:07:07:11:98: a8:53:05:0c:bf:ba:62:9f:31:60:ff:5a:38:5c:fa:a8:56:dc: e2:fc:86:78:bc:e6:ec:42:00:06:f1:96:51:21:9f:e3:a6:0c: 96:4f:d8:f8:33:ba:bb:1f:96:40:f2:08:f0:b3:0c:40:d3:e8: ce:1c:6e:c7:1e:da:de:5a:b1:1d:79:84:17:5d:c7:37:f6:d5: ec:0a:33:08:ec:76:e5:52:e9:e5:c8:8d:e1:2e:23:5c:61:80: f7:0a:0e:41:6b:4b:60:7e:10:73:be:19:b7:0b:a2:ad:59:bf: 8c:e2:fc:d2:1b:23:88:0d:58:ee:3c:97:a3:79:6c:6e:25:9e: 8b:af:76:54:bd:e7:8a:52:a7:a1:60:34:af:95:e5:58:62:0d: 07:56:bc:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDLithhV0gSaKJgo3hk9JKADq+wEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGODk1M0QzQkQxM0Q3NEY2MEJBQ0E2MUUwMjgxMUI0 RDZBNkFENDAeFw0yNjA5MjQwMTAyMTJaFw0yNjA5MjUwMzUzMTJaMDMxMTAvBgNV BAMTKDBGNzU1MUM0MTIwMTFDNzQ1NkY2MDY1RTYxM0ZGOUJCNjUwODg0MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi/Vi4Y7UjDrehZeReD07GsYt3 JlGv1iQmsw9Ep2zcEGz2ROXvjmti3TlBmUvX7ANRyG4PkvTAp5m+XcVZLCuM56F1 RKlKpkJTOSkQBkNcGfcVCur8D7eM+GG+0BW6xyf9LN3/UAJ1YQpgyWoTSh4Oo2GD 6/iNcDi3YNpcGcaSqdbIF/r12n+uzZ0i/kFAH8e8RixbRIT4t1EzT28anbXWdVSc KaSWWjtbM+LC6BDlovU608lCd7zoTar41umCMNfJwM2Y2bZrweDyZ7uUPR8zGToE OuL0WhCepqag/ErhmedCQ0A3Zo+8kKbTBocSMrnRo7fbP3JK2achKGx/xxpPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD3VRxBIBHHRW9gZeYT/5u2UIhDkwHwYDVR0j BBgwFoAUKfiVPTvRPXT2C6ymHgKBG01qatQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQyMTk4NWItYTBlNi00ZTA1LWJlZjYtZmU2ZjVhNmUyZjQzLzAvMjlGODk1M0Qz QkQxM0Q3NEY2MEJBQ0E2MUUwMjgxMUI0RDZBNkFENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUY4OTUzRDNCRDEzRDc0RjYwQkFDQTYxRTAyODExQjRENkE2 QUQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQyMTk4NWItYTBlNi00ZTA1LWJl ZjYtZmU2ZjVhNmUyZjQzLzAvMjlGODk1M0QzQkQxM0Q3NEY2MEJBQ0E2MUUwMjgx MUI0RDZBNkFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKE4babtheir2tLxvzsuw6WwpDzEdhIixBw6 MijWnLq2HTMIHhw9t0i9g39Oj78GbIN52HQNO+ly9IQNhBJKerMPrMh2Td0h5ubq 2794dK/0boLXdn8xW/jws9TxwtF9wiVtI+r/aBQBBwcRmKhTBQy/umKfMWD/Wjhc +qhW3OL8hni85uxCAAbxllEhn+OmDJZP2PgzursflkDyCPCzDEDT6M4cbsce2t5a sR15hBddxzf21ewKMwjsduVS6eXIjeEuI1xhgPcKDkFrS2B+EHO+GbcLoq1Zv4zi /NIbI4gNWO48l6N5bG4lnouvdlS954pSp6FgNK+V5VhiDQdWvGA= -----END CERTIFICATE-----Generated at Thu Sep 24 20:52:13 2026 by rpki-client