$ rpki-client -vvf rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft File: 29FA80F6176C25C691091C10B9D90672CFD66E6D.mft (raw, json) Hash identifier: gyIvJAf9RpqR10VPiLAY+VxNKt1nFBmt29zzjNcmYVg= Subject key identifier: FC:53:2E:BE:85:65:7F:5F:BC:0D:82:88:DC:F7:F2:87:CA:5C:AC:95 Authority key identifier: 29:FA:80:F6:17:6C:25:C6:91:09:1C:10:B9:D9:06:72:CF:D6:6E:6D Certificate issuer: /CN=29FA80F6176C25C691091C10B9D90672CFD66E6D Certificate serial: 766DB67C33CD044B326C0A685EB82947FFCBF93D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft Manifest number: 0F Signing time: Wed 13 May 2026 01:04:54 +0000 Manifest this update: Wed 13 May 2026 00:59:54 +0000 Manifest next update: Thu 14 May 2026 02:30:54 +0000 Files and hashes: 1: 3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa (hash: RoLrz7G1R33kfqGbX8nuSO6gHFL4kaqL21h4DNDlHHo=) 2: 29FA80F6176C25C691091C10B9D90672CFD66E6D.crl (hash: /dAYJrDSt+C0N2201SeYB0WAnvhz0kOVvVvty1XGcOQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.crl rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:6d:b6:7c:33:cd:04:4b:32:6c:0a:68:5e:b8:29:47:ff:cb:f9:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29FA80F6176C25C691091C10B9D90672CFD66E6D Validity Not Before: May 13 00:59:54 2026 GMT Not After : May 14 02:30:54 2026 GMT Subject: CN=FC532EBE85657F5FBC0D8288DCF7F287CA5CAC95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:77:3d:d7:5a:3b:40:f3:34:53:ee:a3:31:fd: 34:93:39:12:fb:16:f4:6e:d4:3c:fe:ec:cc:13:6c: 3f:97:bf:29:3d:8d:99:ea:ee:3e:de:95:64:53:7c: df:ae:59:17:d7:3a:03:23:24:2c:2f:01:4e:1f:f1: 93:03:0d:a8:8b:89:c4:2e:6b:23:e4:39:68:fb:6d: 03:9e:ed:ae:82:33:68:e9:1e:66:8c:0d:0a:fa:3d: 77:65:0f:d8:f5:21:99:ab:2d:2d:ee:dc:8a:42:30: 48:55:7c:9c:3c:6d:c5:1e:09:d5:93:d6:9f:67:ba: 14:83:dc:fd:81:12:47:5d:82:67:c8:e7:c8:06:f5: cb:4b:b5:94:88:e6:35:eb:5c:ce:1f:ef:f3:5b:8c: 21:87:8b:53:db:b1:a0:5c:1c:16:6e:18:28:3b:5c: 9a:ac:63:33:32:e6:a4:e4:1e:b9:f9:b3:6b:9d:12: b2:53:f6:0e:ce:52:79:b6:47:9a:bb:b8:cf:df:90: 26:4d:9f:98:2f:e0:7c:09:58:65:2a:65:10:63:46: 5d:e4:d9:57:a0:9c:6d:18:69:da:c8:5a:da:77:d2: 94:76:b4:6c:b7:98:30:81:10:3a:c1:a4:2d:7e:19: cb:c9:79:5f:76:40:96:bf:11:8c:d1:2d:3a:93:01: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:53:2E:BE:85:65:7F:5F:BC:0D:82:88:DC:F7:F2:87:CA:5C:AC:95 X509v3 Authority Key Identifier: keyid:29:FA:80:F6:17:6C:25:C6:91:09:1C:10:B9:D9:06:72:CF:D6:6E:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d4:52:bb:51:e7:4d:d1:c8:09:67:1f:4f:78:71:53:53:6f: 9e:b0:07:af:74:27:6d:85:dd:f6:46:ff:13:ba:72:b5:82:09: 1a:48:e2:1e:ca:bb:5c:2d:4e:87:19:e9:ca:83:aa:2c:a0:2b: ad:37:69:a6:93:be:b2:76:ed:82:7a:08:d2:52:82:6d:ba:4a: 36:46:fa:39:cb:3d:33:d0:fa:b5:ef:68:4d:ec:81:d5:72:c6: ef:27:fb:a3:ac:d4:03:66:31:7c:85:53:c7:a9:d4:24:b1:70: d6:05:bd:c2:e0:cc:a2:40:81:27:80:d1:32:67:ab:4c:fb:f4: 6d:c3:7d:6b:48:cc:14:18:47:08:9c:68:7f:b0:20:7d:69:a3: 6e:6b:f1:ce:3d:1c:13:1a:1c:b6:59:ba:6a:26:c5:ab:a4:02: d9:d5:61:67:cf:b1:4a:d7:11:d9:82:d1:07:1d:44:12:77:f7: 74:51:a0:29:e9:19:d7:a5:d2:5e:47:29:e5:e3:67:02:57:10: 16:16:70:6a:72:ae:ea:50:f9:ed:c3:c4:f5:e3:d7:65:e5:5f: e9:b7:01:a9:20:d2:4b:39:b0:5b:e5:1d:79:c4:be:02:0a:9e: 47:1c:1e:45:38:21:c0:68:94:2e:f3:bc:be:67:3d:9a:25:2b: aa:c3:9e:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdm22fDPNBEsybApoXrgpR//L+T0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGQTgwRjYxNzZDMjVDNjkxMDkxQzEwQjlEOTA2NzJD RkQ2NkU2RDAeFw0yNjA1MTMwMDU5NTRaFw0yNjA1MTQwMjMwNTRaMDMxMTAvBgNV BAMTKEZDNTMyRUJFODU2NTdGNUZCQzBEODI4OERDRjdGMjg3Q0E1Q0FDOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+dz3XWjtA8zRT7qMx/TSTORL7 FvRu1Dz+7MwTbD+Xvyk9jZnq7j7elWRTfN+uWRfXOgMjJCwvAU4f8ZMDDaiLicQu ayPkOWj7bQOe7a6CM2jpHmaMDQr6PXdlD9j1IZmrLS3u3IpCMEhVfJw8bcUeCdWT 1p9nuhSD3P2BEkddgmfI58gG9ctLtZSI5jXrXM4f7/NbjCGHi1PbsaBcHBZuGCg7 XJqsYzMy5qTkHrn5s2udErJT9g7OUnm2R5q7uM/fkCZNn5gv4HwJWGUqZRBjRl3k 2VegnG0YadrIWtp30pR2tGy3mDCBEDrBpC1+GcvJeV92QJa/EYzRLTqTAVbTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/FMuvoVlf1+8DYKI3Pfyh8pcrJUwHwYDVR0j BBgwFoAUKfqA9hdsJcaRCRwQudkGcs/Wbm0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE0OGIyMjItNmRlZC00MjhhLTg4OGYtMTA0NTRiMDg4MGMyLzAvMjlGQTgwRjYx NzZDMjVDNjkxMDkxQzEwQjlEOTA2NzJDRkQ2NkU2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUZBODBGNjE3NkMyNUM2OTEwOTFDMTBCOUQ5MDY3MkNGRDY2 RTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE0OGIyMjItNmRlZC00MjhhLTg4 OGYtMTA0NTRiMDg4MGMyLzAvMjlGQTgwRjYxNzZDMjVDNjkxMDkxQzEwQjlEOTA2 NzJDRkQ2NkU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3UUrtR503RyAlnH094cVNTb56wB690J22F 3fZG/xO6crWCCRpI4h7Ku1wtTocZ6cqDqiygK603aaaTvrJ27YJ6CNJSgm26SjZG +jnLPTPQ+rXvaE3sgdVyxu8n+6Os1ANmMXyFU8ep1CSxcNYFvcLgzKJAgSeA0TJn q0z79G3DfWtIzBQYRwicaH+wIH1po25r8c49HBMaHLZZumomxaukAtnVYWfPsUrX EdmC0QcdRBJ393RRoCnpGdel0l5HKeXjZwJXEBYWcGpyrupQ+e3DxPXj12XlX+m3 Aakg0ks5sFvlHXnEvgIKnkccHkU4IcBolC7zvL5nPZolK6rDno0= -----END CERTIFICATE-----Generated at Wed May 13 05:48:24 2026 by rpki-client