$ rpki-client -vvf rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft File: 29047775725807ADDC2CF5B31E6B548D16ACA73D.mft (raw, json) Hash identifier: 7DRE9n19FVjdR+uTFyFgfLuCjdg+aKp4RJ4maf2ZIN4= Subject key identifier: 2F:04:7A:F1:72:B1:7A:B9:70:F3:81:B0:88:76:F5:5E:D2:A0:5D:7D Authority key identifier: 29:04:77:75:72:58:07:AD:DC:2C:F5:B3:1E:6B:54:8D:16:AC:A7:3D Certificate issuer: /CN=29047775725807ADDC2CF5B31E6B548D16ACA73D Certificate serial: 0F832B4DFB9312A7205BC6CD5775120354371436 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:21:01 +0000 Manifest this update: Thu 23 Jul 2026 21:16:01 +0000 Manifest next update: Fri 24 Jul 2026 23:44:01 +0000 Files and hashes: 1: 29047775725807ADDC2CF5B31E6B548D16ACA73D.crl (hash: zeihJJK2+KynJFBTOHvX5EefbI0isZni+/JT5+cQl/E=) 2: 3130332e35352e32322e302f32332d3234203d3e20313530343930.roa (hash: Euiddqe4QqVPakY6ZLb5tUk6+F4coEUNqu/76ax8PhM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.crl rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:83:2b:4d:fb:93:12:a7:20:5b:c6:cd:57:75:12:03:54:37:14:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29047775725807ADDC2CF5B31E6B548D16ACA73D Validity Not Before: Jul 23 21:16:01 2026 GMT Not After : Jul 24 23:44:01 2026 GMT Subject: CN=2F047AF172B17AB970F381B08876F55ED2A05D7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e8:02:6f:7e:a6:20:e4:43:43:11:bc:34:1c: cf:c5:78:32:c0:7e:53:72:54:e9:86:2f:d6:c5:9d: 28:03:18:0e:21:2d:f8:87:c0:46:da:42:c3:41:66: 59:fe:9d:53:0d:67:ce:0a:cc:3b:93:3d:f5:e8:b8: 41:e7:1e:49:6f:cf:95:44:74:3a:bb:98:54:f5:2e: 00:ba:8c:0e:fa:45:7e:51:d4:a2:cb:36:bd:e2:ee: 8a:6a:5a:07:19:c8:d5:67:6d:1c:69:9c:07:68:38: 55:3a:aa:f1:17:18:1e:0d:34:55:08:f8:47:f5:50: 27:80:c7:25:e7:bc:27:37:53:ee:85:9c:64:14:ed: e9:ef:5b:3e:67:e2:9c:b2:d1:e4:90:e0:7c:75:64: 4a:86:2e:e0:2c:63:b3:a0:24:90:31:00:6f:49:f1: 26:4c:61:26:a9:91:0c:56:4a:15:e4:20:e9:49:9f: 21:58:87:9c:4b:58:cc:b2:af:e5:fb:c2:3c:a9:7d: 98:63:38:11:47:80:3a:fd:77:30:bc:9d:72:95:14: 7c:03:9a:7b:0d:5c:38:07:fd:d9:33:ed:c0:31:e4: 15:1e:f2:39:da:b6:c6:35:9a:03:b2:a7:04:a4:5d: 57:e9:c3:31:97:0f:32:fa:ae:45:2e:4c:98:4e:0b: d4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:04:7A:F1:72:B1:7A:B9:70:F3:81:B0:88:76:F5:5E:D2:A0:5D:7D X509v3 Authority Key Identifier: keyid:29:04:77:75:72:58:07:AD:DC:2C:F5:B3:1E:6B:54:8D:16:AC:A7:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:ca:c5:e0:fa:dc:21:0b:7c:96:d3:a0:dc:ba:24:c3:05:01: 1b:e2:9a:ce:08:4a:9d:a5:88:15:3f:0a:fc:63:15:d5:1d:f4: 0f:d2:7c:d4:0e:84:2d:85:9e:c0:b8:90:d9:17:5d:95:14:0a: ad:6c:d5:4f:3d:80:cf:db:9f:60:01:1f:af:31:29:85:b2:ef: 30:2f:63:26:f5:d1:c4:01:37:19:b3:62:90:b9:2d:67:30:af: 8d:ae:0a:02:ef:5a:84:cd:02:ef:22:9e:f4:94:40:cb:99:e7: 77:0e:ff:33:86:6c:5c:79:f1:86:e3:8b:b5:12:c8:78:68:f9: c0:59:d4:0f:27:07:09:fe:42:eb:73:eb:eb:b8:1f:ef:03:f0: 42:3a:da:dc:af:71:38:35:4e:03:f6:1f:b9:81:ba:a7:44:99: 62:5d:a8:d8:2d:82:01:13:b0:7a:9d:91:ea:5a:7f:aa:3b:35: 39:f7:37:72:11:86:07:3c:ca:5f:84:91:c5:62:a9:12:9c:02: 62:f5:8c:d4:7d:c1:97:df:c2:3e:dd:b7:7d:7f:b0:00:1b:d2: 55:15:f8:df:48:92:84:da:35:d8:21:55:5a:37:f8:59:0f:47: b3:cb:e3:f4:02:38:cd:a7:5b:c9:f8:d0:a8:75:c6:74:bf:60: a8:94:28:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD4MrTfuTEqcgW8bNV3USA1Q3FDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkwNDc3NzU3MjU4MDdBRERDMkNGNUIzMUU2QjU0OEQx NkFDQTczRDAeFw0yNjA3MjMyMTE2MDFaFw0yNjA3MjQyMzQ0MDFaMDMxMTAvBgNV BAMTKDJGMDQ3QUYxNzJCMTdBQjk3MEYzODFCMDg4NzZGNTVFRDJBMDVEN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN6AJvfqYg5ENDEbw0HM/FeDLA flNyVOmGL9bFnSgDGA4hLfiHwEbaQsNBZln+nVMNZ84KzDuTPfXouEHnHklvz5VE dDq7mFT1LgC6jA76RX5R1KLLNr3i7opqWgcZyNVnbRxpnAdoOFU6qvEXGB4NNFUI +Ef1UCeAxyXnvCc3U+6FnGQU7envWz5n4pyy0eSQ4Hx1ZEqGLuAsY7OgJJAxAG9J 8SZMYSapkQxWShXkIOlJnyFYh5xLWMyyr+X7wjypfZhjOBFHgDr9dzC8nXKVFHwD mnsNXDgH/dkz7cAx5BUe8jnatsY1mgOypwSkXVfpwzGXDzL6rkUuTJhOC9SNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULwR68XKxerlw84GwiHb1XtKgXX0wHwYDVR0j BBgwFoAUKQR3dXJYB63cLPWzHmtUjRaspz0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzc5NGRhNDAtYjM3ZS00ZmU2LThmNDAtNzNiM2IwYmUwMTlmLzAvMjkwNDc3NzU3 MjU4MDdBRERDMkNGNUIzMUU2QjU0OEQxNkFDQTczRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTA0Nzc3NTcyNTgwN0FEREMyQ0Y1QjMxRTZCNTQ4RDE2QUNB NzNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc5NGRhNDAtYjM3ZS00ZmU2LThm NDAtNzNiM2IwYmUwMTlmLzAvMjkwNDc3NzU3MjU4MDdBRERDMkNGNUIzMUU2QjU0 OEQxNkFDQTczRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPKxeD63CELfJbToNy6JMMFARvims4ISp2l iBU/CvxjFdUd9A/SfNQOhC2FnsC4kNkXXZUUCq1s1U89gM/bn2ABH68xKYWy7zAv Yyb10cQBNxmzYpC5LWcwr42uCgLvWoTNAu8invSUQMuZ53cO/zOGbFx58Ybji7US yHho+cBZ1A8nBwn+Qutz6+u4H+8D8EI62tyvcTg1TgP2H7mBuqdEmWJdqNgtggET sHqdkepaf6o7NTn3N3IRhgc8yl+EkcViqRKcAmL1jNR9wZffwj7dt31/sAAb0lUV +N9IkoTaNdghVVo3+FkPR7PL4/QCOM2nW8n40Kh1xnS/YKiUKLA= -----END CERTIFICATE-----Generated at Fri Jul 24 04:03:45 2026 by rpki-client