$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft File: 29FA80F6176C25C691091C10B9D90672CFD66E6D.mft (raw, json) Hash identifier: gmZqsYICgw0ElHu/0toGX0SXeXfiBEZ2umIfAnnUyIc= Subject key identifier: 94:D9:4C:CC:5F:78:78:7B:CF:0E:F3:BC:32:4C:B7:E6:E9:65:18:ED Authority key identifier: 29:FA:80:F6:17:6C:25:C6:91:09:1C:10:B9:D9:06:72:CF:D6:6E:6D Certificate issuer: /CN=29FA80F6176C25C691091C10B9D90672CFD66E6D Certificate serial: 0E6EC79F0727B2255BE10993652546C62F64E500 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 14:23:45 +0000 Manifest this update: Thu 24 Sep 2026 14:18:45 +0000 Manifest next update: Fri 25 Sep 2026 17:17:45 +0000 Files and hashes: 1: 29FA80F6176C25C691091C10B9D90672CFD66E6D.crl (hash: fCCrQ/uVIPjYUBmilTQROjbCOlLBOEpaTQyIlSaugC8=) 2: 3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa (hash: RoLrz7G1R33kfqGbX8nuSO6gHFL4kaqL21h4DNDlHHo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.crl rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 17:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:6e:c7:9f:07:27:b2:25:5b:e1:09:93:65:25:46:c6:2f:64:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29FA80F6176C25C691091C10B9D90672CFD66E6D Validity Not Before: Sep 24 14:18:45 2026 GMT Not After : Sep 25 17:17:45 2026 GMT Subject: CN=94D94CCC5F78787BCF0EF3BC324CB7E6E96518ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d4:9f:81:86:5b:62:a1:fc:72:d3:59:cf:83: 84:41:73:1f:d6:b5:04:9e:5a:ca:3d:51:3d:e9:cc: 9d:e6:c7:4f:61:5a:d9:b7:8c:fe:e0:55:bf:1f:9d: 30:8a:82:9c:86:76:f2:d2:24:2d:9b:bd:a7:a3:97: ab:3c:00:07:f9:75:00:ea:0d:65:79:9b:dd:e7:0c: 1d:13:97:6a:92:e1:4d:57:fb:cd:6c:f3:77:3a:f1: 04:35:80:b6:d0:94:f0:d1:f8:37:f1:93:95:64:90: 5c:7e:93:5a:f0:a8:0b:c0:62:d0:ed:95:80:47:9f: 46:db:89:0e:82:19:90:86:60:40:3a:28:46:a1:6e: e4:3f:05:ee:71:0e:a0:d4:fa:9e:60:f1:ac:8c:35: 04:6f:2f:0e:9f:0e:a4:a7:bb:c2:0e:fc:df:ec:fc: 61:37:66:de:6a:17:fb:ea:de:11:5e:0a:ae:e8:fb: ce:bd:07:b8:19:38:cd:c1:49:a1:29:c2:a9:5b:e0: fb:db:ce:47:7d:eb:8c:cf:5f:04:8c:62:05:a8:ef: 78:82:0a:52:88:ca:9c:c8:5d:f4:0f:ff:03:3c:85: 53:20:ae:95:64:62:3d:3a:3e:a4:a0:70:86:7d:20: 81:e5:68:94:da:29:f3:5e:14:c3:72:c2:cc:fb:79: cf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D9:4C:CC:5F:78:78:7B:CF:0E:F3:BC:32:4C:B7:E6:E9:65:18:ED X509v3 Authority Key Identifier: keyid:29:FA:80:F6:17:6C:25:C6:91:09:1C:10:B9:D9:06:72:CF:D6:6E:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:7d:24:86:f7:39:81:59:f4:08:66:2d:c5:9a:78:68:fd:a1: 89:a5:28:8d:6b:bb:ae:cc:db:51:cb:96:bf:01:cb:f9:9f:8f: 51:37:67:40:8b:fe:2b:a5:52:1c:77:cd:22:6c:e2:59:94:6f: a0:07:54:ab:4a:5a:cd:13:63:a2:18:87:3e:0c:cd:e2:8b:b9: 7e:4c:c5:08:4d:0c:67:33:29:f5:f8:c2:f1:f6:d8:20:65:88: ba:f0:ea:ca:05:cd:cc:c7:72:75:37:c8:3d:2f:f0:4f:f6:14: 55:b5:08:40:ff:f4:34:32:36:8c:1f:74:c2:45:b1:2c:5e:a9: 3b:77:22:24:2f:79:a5:82:00:79:64:08:e5:e1:df:e2:ee:92: 85:99:e5:bc:a4:40:68:dd:35:8d:1d:b4:c6:82:b5:8f:44:3f: ce:95:29:f8:00:e0:cf:81:16:d2:a9:8d:2c:f8:20:3a:5d:2a: 4e:bf:63:65:5c:cb:07:f1:79:91:40:2c:7a:f6:ae:53:84:a9: 6d:da:c2:56:fe:b8:da:c4:9d:09:65:86:e1:f9:3b:97:8b:00: cd:e1:a8:1f:32:dd:2d:ef:71:0d:49:1a:d1:b2:db:5a:f5:9c: 25:da:c6:3f:1c:2c:7f:8c:31:b2:c6:fd:13:6a:6c:85:a7:87: af:ea:f4:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDm7HnwcnsiVb4QmTZSVGxi9k5QAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGQTgwRjYxNzZDMjVDNjkxMDkxQzEwQjlEOTA2NzJD RkQ2NkU2RDAeFw0yNjA5MjQxNDE4NDVaFw0yNjA5MjUxNzE3NDVaMDMxMTAvBgNV BAMTKDk0RDk0Q0NDNUY3ODc4N0JDRjBFRjNCQzMyNENCN0U2RTk2NTE4RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP1J+Bhltiofxy01nPg4RBcx/W tQSeWso9UT3pzJ3mx09hWtm3jP7gVb8fnTCKgpyGdvLSJC2bvaejl6s8AAf5dQDq DWV5m93nDB0Tl2qS4U1X+81s83c68QQ1gLbQlPDR+Dfxk5VkkFx+k1rwqAvAYtDt lYBHn0bbiQ6CGZCGYEA6KEahbuQ/Be5xDqDU+p5g8ayMNQRvLw6fDqSnu8IO/N/s /GE3Zt5qF/vq3hFeCq7o+869B7gZOM3BSaEpwqlb4Pvbzkd964zPXwSMYgWo73iC ClKIypzIXfQP/wM8hVMgrpVkYj06PqSgcIZ9IIHlaJTaKfNeFMNywsz7ec/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlNlMzF94eHvPDvO8Mky35ullGO0wHwYDVR0j BBgwFoAUKfqA9hdsJcaRCRwQudkGcs/Wbm0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE0OGIyMjItNmRlZC00MjhhLTg4OGYtMTA0NTRiMDg4MGMyLzAvMjlGQTgwRjYx NzZDMjVDNjkxMDkxQzEwQjlEOTA2NzJDRkQ2NkU2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUZBODBGNjE3NkMyNUM2OTEwOTFDMTBCOUQ5MDY3MkNGRDY2 RTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE0OGIyMjItNmRlZC00MjhhLTg4 OGYtMTA0NTRiMDg4MGMyLzAvMjlGQTgwRjYxNzZDMjVDNjkxMDkxQzEwQjlEOTA2 NzJDRkQ2NkU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ19JIb3OYFZ9AhmLcWaeGj9oYmlKI1ru67M 21HLlr8By/mfj1E3Z0CL/iulUhx3zSJs4lmUb6AHVKtKWs0TY6IYhz4MzeKLuX5M xQhNDGczKfX4wvH22CBliLrw6soFzczHcnU3yD0v8E/2FFW1CED/9DQyNowfdMJF sSxeqTt3IiQveaWCAHlkCOXh3+LukoWZ5bykQGjdNY0dtMaCtY9EP86VKfgA4M+B FtKpjSz4IDpdKk6/Y2VcywfxeZFALHr2rlOEqW3awlb+uNrEnQllhuH5O5eLAM3h qB8y3S3vcQ1JGtGy21r1nCXaxj8cLH+MMbLG/RNqbIWnh6/q9J8= -----END CERTIFICATE-----Generated at Fri Sep 25 05:57:10 2026 by rpki-client