$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft File: 29FA80F6176C25C691091C10B9D90672CFD66E6D.mft (raw, json) Hash identifier: m88rI69ToaTe52gKDAwYNig9hpEv0UBS6iZ0tULiacI= Subject key identifier: FE:27:B4:1E:E0:E4:91:41:65:FC:72:78:36:3B:DF:52:01:21:BF:75 Authority key identifier: 29:FA:80:F6:17:6C:25:C6:91:09:1C:10:B9:D9:06:72:CF:D6:6E:6D Certificate issuer: /CN=29FA80F6176C25C691091C10B9D90672CFD66E6D Certificate serial: 07F8DEEBA17FF385AD55C967EA8A70C49E869742 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 16:45:28 +0000 Manifest this update: Thu 23 Jul 2026 16:40:28 +0000 Manifest next update: Fri 24 Jul 2026 20:13:28 +0000 Files and hashes: 1: 29FA80F6176C25C691091C10B9D90672CFD66E6D.crl (hash: dcw4FfGvA6t494ilC7lQc3ncfXArl74vP+YN7ht1oOM=) 2: 3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa (hash: RoLrz7G1R33kfqGbX8nuSO6gHFL4kaqL21h4DNDlHHo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.crl rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:f8:de:eb:a1:7f:f3:85:ad:55:c9:67:ea:8a:70:c4:9e:86:97:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29FA80F6176C25C691091C10B9D90672CFD66E6D Validity Not Before: Jul 23 16:40:28 2026 GMT Not After : Jul 24 20:13:28 2026 GMT Subject: CN=FE27B41EE0E4914165FC7278363BDF520121BF75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:37:d7:88:e3:12:b7:25:4c:76:ef:9a:9e:91: a1:bd:8a:a5:eb:05:f6:09:d3:e5:7b:ef:ae:b6:b2: c9:2f:77:9e:0e:81:1a:c6:47:15:70:59:e8:52:b4: b1:4c:e5:da:d9:6d:47:20:7a:3b:11:1d:75:15:79: 53:0c:a1:4f:5a:9a:18:c0:85:5a:4c:8f:ee:8f:3a: 63:94:c7:6a:49:0c:a0:6e:f0:50:18:69:43:1b:a3: a8:e4:83:9b:8f:03:be:23:82:5c:6a:43:0f:28:c6: e8:f5:17:5a:46:23:78:c6:70:1f:20:01:35:43:24: 98:d9:19:28:76:e1:47:1f:2c:40:82:a6:3f:e0:d9: 69:1b:64:ec:9e:9e:e8:6d:2f:cc:6d:20:46:8a:b3: 33:ce:8b:5a:a5:ba:08:cd:c6:00:c4:e0:0c:2a:bf: 56:67:13:2f:3f:34:f4:ca:58:e4:75:2e:46:74:41: a0:0b:dd:bc:4b:7b:98:28:ed:b0:2a:74:b9:29:f6: 7a:a0:35:4b:22:47:3e:33:38:5d:a9:9f:c7:ca:dd: f2:62:89:0e:89:a4:50:56:97:24:5a:2c:69:c0:e0: c8:c4:a8:cb:5d:74:7b:6d:64:2a:37:10:3a:e1:9b: a8:8d:9a:48:0d:56:84:fc:ea:4b:04:83:32:77:69: 46:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:27:B4:1E:E0:E4:91:41:65:FC:72:78:36:3B:DF:52:01:21:BF:75 X509v3 Authority Key Identifier: keyid:29:FA:80:F6:17:6C:25:C6:91:09:1C:10:B9:D9:06:72:CF:D6:6E:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:1e:3b:95:6a:51:76:9a:29:b5:32:f2:b3:e5:06:f2:b2:e8: e2:ac:3c:66:24:d8:b6:08:e6:e3:78:b4:5b:d3:48:54:fd:df: b6:c2:5a:ca:79:53:b0:06:82:76:3c:ac:20:81:6d:83:d5:a4: b9:82:c3:48:01:63:ea:50:20:21:f0:ea:86:53:84:a8:0d:39: 1f:86:20:0d:7f:aa:18:4f:c8:fa:be:b0:73:42:f3:ca:bb:60: 60:50:5a:5e:dc:2a:5c:26:26:26:5a:07:ee:ee:6e:b9:9e:c5: e4:33:a8:fa:fd:2a:f2:0a:e6:7d:b9:31:3f:a1:83:02:99:1e: 9d:f0:e4:0b:79:f4:6a:70:60:d2:23:eb:37:73:0f:53:0a:01: ee:c1:b7:9c:c0:f9:32:7a:53:35:c7:02:5b:4d:7f:26:5c:ac: 15:0f:55:3f:b0:c6:9d:9b:93:8d:cd:69:9a:8f:38:67:b1:0b: bc:c0:2a:31:6d:45:27:ea:36:0f:72:65:b5:37:4b:21:3c:ab: 25:38:98:b6:e9:68:45:70:15:0d:95:22:32:6a:10:85:23:2f: 30:23:fa:21:63:ee:6a:dc:3d:03:86:3a:ac:54:53:09:bb:43: 76:7f:97:94:a2:3e:f2:ff:2a:cb:14:6d:16:fe:e3:6f:0b:95: a9:c1:e7:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB/je66F/84WtVcln6opwxJ6Gl0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGQTgwRjYxNzZDMjVDNjkxMDkxQzEwQjlEOTA2NzJD RkQ2NkU2RDAeFw0yNjA3MjMxNjQwMjhaFw0yNjA3MjQyMDEzMjhaMDMxMTAvBgNV BAMTKEZFMjdCNDFFRTBFNDkxNDE2NUZDNzI3ODM2M0JERjUyMDEyMUJGNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsN9eI4xK3JUx275qekaG9iqXr BfYJ0+V77662sskvd54OgRrGRxVwWehStLFM5drZbUcgejsRHXUVeVMMoU9amhjA hVpMj+6POmOUx2pJDKBu8FAYaUMbo6jkg5uPA74jglxqQw8oxuj1F1pGI3jGcB8g ATVDJJjZGSh24UcfLECCpj/g2WkbZOyenuhtL8xtIEaKszPOi1qlugjNxgDE4Awq v1ZnEy8/NPTKWOR1LkZ0QaAL3bxLe5go7bAqdLkp9nqgNUsiRz4zOF2pn8fK3fJi iQ6JpFBWlyRaLGnA4MjEqMtddHttZCo3EDrhm6iNmkgNVoT86ksEgzJ3aUa3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/ie0HuDkkUFl/HJ4NjvfUgEhv3UwHwYDVR0j BBgwFoAUKfqA9hdsJcaRCRwQudkGcs/Wbm0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE0OGIyMjItNmRlZC00MjhhLTg4OGYtMTA0NTRiMDg4MGMyLzAvMjlGQTgwRjYx NzZDMjVDNjkxMDkxQzEwQjlEOTA2NzJDRkQ2NkU2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUZBODBGNjE3NkMyNUM2OTEwOTFDMTBCOUQ5MDY3MkNGRDY2 RTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE0OGIyMjItNmRlZC00MjhhLTg4 OGYtMTA0NTRiMDg4MGMyLzAvMjlGQTgwRjYxNzZDMjVDNjkxMDkxQzEwQjlEOTA2 NzJDRkQ2NkU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMeO5VqUXaaKbUy8rPlBvKy6OKsPGYk2LYI 5uN4tFvTSFT937bCWsp5U7AGgnY8rCCBbYPVpLmCw0gBY+pQICHw6oZThKgNOR+G IA1/qhhPyPq+sHNC88q7YGBQWl7cKlwmJiZaB+7ubrmexeQzqPr9KvIK5n25MT+h gwKZHp3w5At59GpwYNIj6zdzD1MKAe7Bt5zA+TJ6UzXHAltNfyZcrBUPVT+wxp2b k43NaZqPOGexC7zAKjFtRSfqNg9yZbU3SyE8qyU4mLbpaEVwFQ2VIjJqEIUjLzAj +iFj7mrcPQOGOqxUUwm7Q3Z/l5SiPvL/KssUbRb+428LlanB53w= -----END CERTIFICATE-----Generated at Fri Jul 24 10:08:18 2026 by rpki-client