$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft File: B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft (raw, json) Hash identifier: 1HdY5MzYWq82HIuDDTFKFvTfxvKBzry7937TCB/Mjog= Subject key identifier: 45:37:F2:EA:23:5E:93:81:1C:A9:FC:10:E1:AE:5C:61:98:2A:38:D3 Authority key identifier: B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC Certificate issuer: /CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC Certificate serial: 758884F15AFB770F881BE3CA83F032FB141627F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 07:08:40 +0000 Manifest this update: Sat 26 Sep 2026 07:03:40 +0000 Manifest next update: Sun 27 Sep 2026 07:39:40 +0000 Files and hashes: 1: 3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa (hash: sRKPnzGfUxDUkQc/uHwTXrV9y9ShQIMBUc92DmR5O3I=) 2: 3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa (hash: 3M/zffCD2uZ4gUtU0kj+QpLY9M8dXiZOvxPEwukMu5g=) 3: 3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa (hash: yM1LTxIdpeyMR1p9WgI/UIRLyLNQIFut/De/3EKELPo=) 4: B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl (hash: rkH1r5kYlmSLsVSuZPTMv8r4B7hRqrvD0XfmmwYtABA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:88:84:f1:5a:fb:77:0f:88:1b:e3:ca:83:f0:32:fb:14:16:27:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC Validity Not Before: Sep 26 07:03:40 2026 GMT Not After : Sep 27 07:39:40 2026 GMT Subject: CN=4537F2EA235E93811CA9FC10E1AE5C61982A38D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:4c:1a:f5:b8:12:fd:fc:d5:55:b4:06:42: 51:5e:11:42:14:ec:a9:7e:5a:34:46:d0:d4:b7:a0: b6:dd:a5:80:5a:32:db:c5:a5:54:b6:b1:26:84:7e: 6c:15:bb:e6:04:3b:94:a8:2a:ec:5e:3d:17:92:07: 52:91:96:0d:aa:dd:bb:44:ab:c4:bd:18:ac:ae:00: ae:3b:86:ad:22:25:5e:4d:dd:00:be:9c:a9:1d:4f: 2b:c7:96:cc:cf:72:1c:bc:e2:3b:78:f0:cf:b1:6e: 16:8e:7e:86:dd:89:e0:f4:65:97:06:9d:26:5f:d5: 4e:f3:94:3a:c6:3a:42:05:3d:1d:72:1d:23:58:a8: 9b:18:85:3d:7c:2e:03:16:36:e3:68:b3:64:47:e4: 62:dd:00:90:89:a8:4f:c2:08:4b:66:34:f9:a7:8f: fa:91:b2:eb:24:70:cb:e4:ad:59:ac:f1:f7:cb:87: fe:9e:c1:6e:7d:df:04:4c:e4:3c:76:dc:1c:6d:0b: 9c:dc:00:c6:35:03:4a:66:11:11:ad:5b:25:d4:9f: 2f:22:30:b4:be:e2:e2:c5:dd:05:ab:d5:1f:52:a0: 55:64:5e:04:47:1d:cf:af:52:23:5b:fe:dd:f7:2a: 79:fc:24:be:54:73:00:bd:b8:50:df:84:4a:46:be: a5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:37:F2:EA:23:5E:93:81:1C:A9:FC:10:E1:AE:5C:61:98:2A:38:D3 X509v3 Authority Key Identifier: keyid:B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:7c:2a:7b:0a:bc:32:9a:29:b4:fc:70:e7:b6:a1:1a:e7:de: 35:dc:58:74:23:c1:79:a1:8d:8b:d5:31:6c:8c:79:ca:51:22: 33:a7:c9:75:c8:16:4b:b3:6c:98:c5:a0:98:e5:a0:0f:06:39: f6:56:07:ae:23:e2:f3:86:e4:8e:97:1f:91:82:11:a2:01:31: 97:8b:ef:73:76:dc:f1:0a:26:80:4e:21:a9:a8:42:a9:2f:03: 3c:f9:46:c1:16:29:87:3a:ae:11:53:c6:9e:ff:3d:66:08:8d: 6d:e8:59:d7:3a:c0:ed:1a:cb:92:de:a9:c6:ed:14:35:cc:5b: bd:51:cc:1a:b8:84:39:f8:e4:73:e1:27:04:1f:7a:14:0c:18: 6f:3a:76:5c:70:d5:24:20:01:62:c6:a6:7c:3a:02:ba:e7:e8: 85:78:e3:d8:ff:a1:a9:52:09:86:0a:61:d3:06:7e:b1:38:1b: b4:1f:02:db:12:72:09:37:01:df:2a:0e:89:b3:5b:da:99:c1: dd:45:2d:6b:cf:09:a5:37:42:09:ba:46:1f:e9:a6:4e:e0:70: ab:f6:5b:67:cd:85:08:53:a3:d7:eb:00:1c:21:4e:68:d7:18: fe:69:63:3a:cd:4c:85:e5:0f:7e:7d:10:d6:9d:8e:e8:01:50: c2:75:ed:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdYiE8Vr7dw+IG+PKg/Ay+xQWJ/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI5RDg3RTA3OEFFRDE0MjZGRTdEREJDMTQ0MTVBMkI3 RDRENzJCQzAeFw0yNjA5MjYwNzAzNDBaFw0yNjA5MjcwNzM5NDBaMDMxMTAvBgNV BAMTKDQ1MzdGMkVBMjM1RTkzODExQ0E5RkMxMEUxQUU1QzYxOTgyQTM4RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1QUwa9bgS/fzVVbQGQlFeEUIU 7Kl+WjRG0NS3oLbdpYBaMtvFpVS2sSaEfmwVu+YEO5SoKuxePReSB1KRlg2q3btE q8S9GKyuAK47hq0iJV5N3QC+nKkdTyvHlszPchy84jt48M+xbhaOfobdieD0ZZcG nSZf1U7zlDrGOkIFPR1yHSNYqJsYhT18LgMWNuNos2RH5GLdAJCJqE/CCEtmNPmn j/qRsuskcMvkrVms8ffLh/6ewW593wRM5Dx23BxtC5zcAMY1A0pmERGtWyXUny8i MLS+4uLF3QWr1R9SoFVkXgRHHc+vUiNb/t33Knn8JL5UcwC9uFDfhEpGvqVNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURTfy6iNek4EcqfwQ4a5cYZgqONMwHwYDVR0j BBgwFoAUsp2H4Hiu0UJv5928FEFaK31NcrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA5OGY5MjQtOWYyZS00OTliLTgxMDEtMDJmNzUwNjkzMmJmLzAvQjI5RDg3RTA3 OEFFRDE0MjZGRTdEREJDMTQ0MTVBMkI3RDRENzJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMjlEODdFMDc4QUVEMTQyNkZFN0REQkMxNDQxNUEyQjdENEQ3 MkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA5OGY5MjQtOWYyZS00OTliLTgx MDEtMDJmNzUwNjkzMmJmLzAvQjI5RDg3RTA3OEFFRDE0MjZGRTdEREJDMTQ0MTVB MkI3RDRENzJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJ8KnsKvDKaKbT8cOe2oRrn3jXcWHQjwXmh jYvVMWyMecpRIjOnyXXIFkuzbJjFoJjloA8GOfZWB64j4vOG5I6XH5GCEaIBMZeL 73N23PEKJoBOIamoQqkvAzz5RsEWKYc6rhFTxp7/PWYIjW3oWdc6wO0ay5Leqcbt FDXMW71RzBq4hDn45HPhJwQfehQMGG86dlxw1SQgAWLGpnw6Arrn6IV449j/oalS CYYKYdMGfrE4G7QfAtsScgk3Ad8qDomzW9qZwd1FLWvPCaU3Qgm6Rh/ppk7gcKv2 W2fNhQhTo9frABwhTmjXGP5pYzrNTIXlD359ENadjugBUMJ17VQ= -----END CERTIFICATE-----Generated at Sat Sep 26 11:10:15 2026 by rpki-client