$ rpki-client -vvf rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft File: B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft (raw, json) Hash identifier: LxhSAlILgUdlfmlK8WoD1vcayO6T1NE8DvuKSbRUMDw= Subject key identifier: 26:3D:FB:55:9D:91:B7:4E:81:72:61:25:88:26:37:B3:DF:EA:3F:3F Authority key identifier: B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC Certificate issuer: /CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC Certificate serial: 4E59F20382FB8AA36EDE1B916C931CA1F8D189E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:51:59 +0000 Manifest this update: Thu 23 Jul 2026 17:46:59 +0000 Manifest next update: Fri 24 Jul 2026 20:09:59 +0000 Files and hashes: 1: 3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa (hash: sRKPnzGfUxDUkQc/uHwTXrV9y9ShQIMBUc92DmR5O3I=) 2: 3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa (hash: yM1LTxIdpeyMR1p9WgI/UIRLyLNQIFut/De/3EKELPo=) 3: 3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa (hash: 3M/zffCD2uZ4gUtU0kj+QpLY9M8dXiZOvxPEwukMu5g=) 4: B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl (hash: DX0p8E4rB+N0fwBu4vNdvW6aGRTvVF9IvV24i+EJUc4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:59:f2:03:82:fb:8a:a3:6e:de:1b:91:6c:93:1c:a1:f8:d1:89:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B29D87E078AED1426FE7DDBC14415A2B7D4D72BC Validity Not Before: Jul 23 17:46:59 2026 GMT Not After : Jul 24 20:09:59 2026 GMT Subject: CN=263DFB559D91B74E81726125882637B3DFEA3F3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0c:3f:2d:e7:a6:60:88:f6:2e:ae:45:04:4a: 18:32:eb:27:a6:59:90:8b:62:d3:d4:cb:bb:05:71: cf:d6:a0:58:2a:35:4c:8a:4b:cd:58:e6:db:a7:af: 13:b0:e2:fb:31:c3:e6:f9:b0:59:d0:2c:30:52:7d: 28:52:08:66:cf:eb:26:4e:c4:96:26:97:85:48:83: d2:c6:4c:0f:3a:fd:60:98:1d:f4:d1:1a:b2:71:ce: b3:00:e4:03:33:7c:3e:2e:26:4e:a6:00:83:6d:31: 86:ca:ac:1e:d9:43:9f:87:7f:c7:ee:e4:ee:1d:1e: 7b:f4:20:81:30:cc:e2:64:22:b7:a3:d3:60:b5:12: 95:87:4a:85:f7:c3:83:bc:22:b2:eb:fb:3f:2a:a8: 60:1f:98:8e:ac:cd:85:2f:e7:08:b9:66:ba:f7:5b: 52:7c:e8:72:08:c0:77:a6:f1:74:21:9b:c0:5b:5c: 95:4d:1f:d0:04:db:dc:8a:c2:80:7d:14:e4:2b:1e: 2a:bf:af:7b:e7:f4:74:a5:c6:92:08:22:bd:63:a9: b9:38:44:c0:4a:e5:0f:13:a6:91:f5:05:c9:aa:6d: 2d:3e:9e:88:d3:53:86:04:a7:4e:5f:a8:80:57:0c: c7:6a:d2:89:cb:18:76:90:f7:26:f1:3a:54:77:f7: b4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3D:FB:55:9D:91:B7:4E:81:72:61:25:88:26:37:B3:DF:EA:3F:3F X509v3 Authority Key Identifier: keyid:B2:9D:87:E0:78:AE:D1:42:6F:E7:DD:BC:14:41:5A:2B:7D:4D:72:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/B29D87E078AED1426FE7DDBC14415A2B7D4D72BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:b9:b9:88:94:ea:0b:b5:f5:56:77:43:e8:8d:8d:5e:d4:35: 52:bf:6c:86:fc:c6:99:52:e4:cb:ee:0f:22:fe:22:36:bc:d5: 4d:21:e5:de:d9:d1:00:c8:e8:17:69:41:fa:25:cc:cb:8b:18: 1c:27:5c:00:2c:ee:d6:29:a3:98:cf:b3:13:79:59:13:1b:23: 42:ca:7b:24:d9:12:81:c3:d5:f2:07:a2:0c:29:46:3e:76:62: ec:a5:8e:86:4f:e7:64:d4:e7:f0:8b:62:10:7e:8c:82:69:bd: 0b:de:77:aa:50:2c:9b:28:a1:a5:59:d0:7e:32:d6:5d:b5:3c: 55:b6:4b:03:b6:c8:6f:96:a1:0c:fd:a5:4f:3d:25:6e:8a:4f: 51:1b:90:d1:55:a1:1c:a1:c3:58:23:f7:87:03:24:ea:17:0e: 7c:36:db:bb:24:13:b3:ac:16:5c:d4:19:10:2e:3b:c9:b8:86: 35:90:11:67:13:b8:28:c8:7e:a6:dc:b7:f9:89:3d:58:6e:32: 98:50:2c:95:eb:ac:ad:59:e5:5d:7a:d9:0f:99:7b:6c:eb:27: ee:5a:05:10:f6:d3:56:8a:96:2c:fa:c7:b8:ec:3c:e3:d0:d2: 26:0d:c1:0d:5e:49:e5:8c:cf:09:eb:62:c2:ca:c7:d7:e7:95: 14:86:0f:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTlnyA4L7iqNu3huRbJMcofjRiegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI5RDg3RTA3OEFFRDE0MjZGRTdEREJDMTQ0MTVBMkI3 RDRENzJCQzAeFw0yNjA3MjMxNzQ2NTlaFw0yNjA3MjQyMDA5NTlaMDMxMTAvBgNV BAMTKDI2M0RGQjU1OUQ5MUI3NEU4MTcyNjEyNTg4MjYzN0IzREZFQTNGM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbDD8t56ZgiPYurkUEShgy6yem WZCLYtPUy7sFcc/WoFgqNUyKS81Y5tunrxOw4vsxw+b5sFnQLDBSfShSCGbP6yZO xJYml4VIg9LGTA86/WCYHfTRGrJxzrMA5AMzfD4uJk6mAINtMYbKrB7ZQ5+Hf8fu 5O4dHnv0IIEwzOJkIrej02C1EpWHSoX3w4O8IrLr+z8qqGAfmI6szYUv5wi5Zrr3 W1J86HIIwHem8XQhm8BbXJVNH9AE29yKwoB9FOQrHiq/r3vn9HSlxpIIIr1jqbk4 RMBK5Q8TppH1BcmqbS0+nojTU4YEp05fqIBXDMdq0onLGHaQ9ybxOlR397QJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJj37VZ2Rt06BcmEliCY3s9/qPz8wHwYDVR0j BBgwFoAUsp2H4Hiu0UJv5928FEFaK31NcrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjA5OGY5MjQtOWYyZS00OTliLTgxMDEtMDJmNzUwNjkzMmJmLzAvQjI5RDg3RTA3 OEFFRDE0MjZGRTdEREJDMTQ0MTVBMkI3RDRENzJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMjlEODdFMDc4QUVEMTQyNkZFN0REQkMxNDQxNUEyQjdENEQ3 MkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjA5OGY5MjQtOWYyZS00OTliLTgx MDEtMDJmNzUwNjkzMmJmLzAvQjI5RDg3RTA3OEFFRDE0MjZGRTdEREJDMTQ0MTVB MkI3RDRENzJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL25uYiU6gu19VZ3Q+iNjV7UNVK/bIb8xplS 5MvuDyL+Ija81U0h5d7Z0QDI6BdpQfolzMuLGBwnXAAs7tYpo5jPsxN5WRMbI0LK eyTZEoHD1fIHogwpRj52YuyljoZP52TU5/CLYhB+jIJpvQved6pQLJsooaVZ0H4y 1l21PFW2SwO2yG+WoQz9pU89JW6KT1EbkNFVoRyhw1gj94cDJOoXDnw227skE7Os FlzUGRAuO8m4hjWQEWcTuCjIfqbct/mJPVhuMphQLJXrrK1Z5V162Q+Ze2zrJ+5a BRD201aKliz6x7jsPOPQ0iYNwQ1eSeWMzwnrYsLKx9fnlRSGDxs= -----END CERTIFICATE-----Generated at Fri Jul 24 01:52:27 2026 by rpki-client