$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft File: 29047775725807ADDC2CF5B31E6B548D16ACA73D.mft (raw, json) Hash identifier: JShxMtNnhqu/vZIHZJMmlkDaO/3OdR/NufRmOzJlSsw= Subject key identifier: 9C:22:4C:46:DE:81:0F:49:4A:79:DB:52:13:95:7C:65:C9:D0:09:8C Authority key identifier: 29:04:77:75:72:58:07:AD:DC:2C:F5:B3:1E:6B:54:8D:16:AC:A7:3D Certificate issuer: /CN=29047775725807ADDC2CF5B31E6B548D16ACA73D Certificate serial: 435DAAAA24B6C18F1284863CF958D2DFA7346665 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 06:03:14 +0000 Manifest this update: Thu 24 Sep 2026 05:58:14 +0000 Manifest next update: Fri 25 Sep 2026 07:03:14 +0000 Files and hashes: 1: 3130332e35352e32322e302f32332d3234203d3e20313530343930.roa (hash: Euiddqe4QqVPakY6ZLb5tUk6+F4coEUNqu/76ax8PhM=) 2: 29047775725807ADDC2CF5B31E6B548D16ACA73D.crl (hash: FmFHE3xZJeh/R5gqCeXSY3I2sTjFB5X3zg+Ro0Zo374=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.crl rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:5d:aa:aa:24:b6:c1:8f:12:84:86:3c:f9:58:d2:df:a7:34:66:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29047775725807ADDC2CF5B31E6B548D16ACA73D Validity Not Before: Sep 24 05:58:14 2026 GMT Not After : Sep 25 07:03:14 2026 GMT Subject: CN=9C224C46DE810F494A79DB5213957C65C9D0098C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:94:fd:43:21:52:4d:e6:2a:b8:7e:9b:99:e8: 51:52:a0:70:30:02:39:f7:07:9b:19:54:08:48:6f: 26:e5:10:8a:61:8d:f0:09:65:2d:48:7f:af:e7:2f: 8c:4a:7e:22:90:f6:e0:82:24:a1:20:cb:40:a7:8b: 0c:3d:ff:1c:59:9f:1d:ca:fa:cd:82:9c:94:8f:25: e4:ab:f3:fe:af:51:1a:eb:16:14:6f:53:13:65:bc: 50:1b:2b:7b:59:c6:9e:0e:0d:40:df:93:9f:db:dc: 53:87:51:69:25:0d:5a:0f:f5:73:1e:9f:ef:6e:58: 44:0e:54:89:8f:89:98:1d:aa:db:cf:66:af:9c:8e: 11:69:51:76:db:46:b8:cf:b4:2d:d6:89:ff:81:a5: 28:f0:fa:d7:38:9e:78:ce:b0:70:54:2a:00:17:b4: 01:ba:a3:12:0f:ca:f8:bf:a5:87:23:62:4c:55:75: df:c5:35:bb:20:e8:48:c6:16:80:fc:b4:ca:d6:40: 2d:85:8c:be:a0:df:80:a4:2d:82:5b:7f:5a:62:5a: c6:3f:65:f6:04:02:63:b7:ed:18:28:96:66:96:d3: 4f:e1:9b:49:11:9e:f3:35:c6:57:0c:9a:68:28:65: 91:70:5c:c0:8b:44:ef:70:f4:3d:06:ba:6d:3c:44: a6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:22:4C:46:DE:81:0F:49:4A:79:DB:52:13:95:7C:65:C9:D0:09:8C X509v3 Authority Key Identifier: keyid:29:04:77:75:72:58:07:AD:DC:2C:F5:B3:1E:6B:54:8D:16:AC:A7:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29047775725807ADDC2CF5B31E6B548D16ACA73D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/29047775725807ADDC2CF5B31E6B548D16ACA73D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:6d:95:bd:09:71:a0:cd:58:21:fd:f3:d4:c6:82:c9:2c:f7: 68:cc:27:d6:a9:d6:8e:3b:ed:a3:00:26:a4:52:16:12:b0:15: 4c:6c:0e:ae:7c:8a:5a:fe:d2:76:46:6e:59:33:0e:7b:37:fb: 3f:26:5a:ae:1d:b3:fa:87:58:42:74:a7:eb:7b:1f:a3:6a:14: 79:b5:22:e6:5e:90:32:9d:e8:38:4a:8e:4e:5b:48:de:0a:91: e7:66:28:ed:08:1c:9d:25:97:3c:3f:b5:bd:40:f5:56:48:01: 14:8e:d7:60:ad:50:33:6a:a5:d4:97:85:2b:2d:03:89:75:a6: 54:f3:c4:dc:c3:aa:61:5d:86:5f:3c:be:de:3f:bc:3b:29:d7: 6a:63:e2:27:40:95:d3:70:60:cd:88:dd:17:01:76:12:df:24: b5:f5:4f:f7:66:06:68:fa:ce:fa:fe:95:7a:76:60:2c:83:c2: 9e:35:57:12:d9:6c:eb:a5:56:d2:34:87:8c:54:f8:df:61:f3: 7c:1c:e4:08:e6:43:88:a8:0c:be:42:30:e2:3a:c3:51:b7:60: af:57:f5:b7:70:fc:3e:7f:e2:fc:85:01:f5:59:3d:c8:a6:78: ac:a0:ce:a2:aa:84:b6:cf:9c:17:1c:e6:6c:d7:c5:0e:c3:1b: 62:d2:6e:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ12qqiS2wY8ShIY8+VjS36c0ZmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkwNDc3NzU3MjU4MDdBRERDMkNGNUIzMUU2QjU0OEQx NkFDQTczRDAeFw0yNjA5MjQwNTU4MTRaFw0yNjA5MjUwNzAzMTRaMDMxMTAvBgNV BAMTKDlDMjI0QzQ2REU4MTBGNDk0QTc5REI1MjEzOTU3QzY1QzlEMDA5OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLlP1DIVJN5iq4fpuZ6FFSoHAw Ajn3B5sZVAhIbyblEIphjfAJZS1If6/nL4xKfiKQ9uCCJKEgy0Cniww9/xxZnx3K +s2CnJSPJeSr8/6vURrrFhRvUxNlvFAbK3tZxp4ODUDfk5/b3FOHUWklDVoP9XMe n+9uWEQOVImPiZgdqtvPZq+cjhFpUXbbRrjPtC3Wif+BpSjw+tc4nnjOsHBUKgAX tAG6oxIPyvi/pYcjYkxVdd/FNbsg6EjGFoD8tMrWQC2FjL6g34CkLYJbf1piWsY/ ZfYEAmO37RgolmaW00/hm0kRnvM1xlcMmmgoZZFwXMCLRO9w9D0Gum08RKYPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnCJMRt6BD0lKedtSE5V8ZcnQCYwwHwYDVR0j BBgwFoAUKQR3dXJYB63cLPWzHmtUjRaspz0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzc5NGRhNDAtYjM3ZS00ZmU2LThmNDAtNzNiM2IwYmUwMTlmLzAvMjkwNDc3NzU3 MjU4MDdBRERDMkNGNUIzMUU2QjU0OEQxNkFDQTczRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTA0Nzc3NTcyNTgwN0FEREMyQ0Y1QjMxRTZCNTQ4RDE2QUNB NzNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc5NGRhNDAtYjM3ZS00ZmU2LThm NDAtNzNiM2IwYmUwMTlmLzAvMjkwNDc3NzU3MjU4MDdBRERDMkNGNUIzMUU2QjU0 OEQxNkFDQTczRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJtlb0JcaDNWCH989TGgsks92jMJ9ap1o47 7aMAJqRSFhKwFUxsDq58ilr+0nZGblkzDns3+z8mWq4ds/qHWEJ0p+t7H6NqFHm1 IuZekDKd6DhKjk5bSN4KkedmKO0IHJ0llzw/tb1A9VZIARSO12CtUDNqpdSXhSst A4l1plTzxNzDqmFdhl88vt4/vDsp12pj4idAldNwYM2I3RcBdhLfJLX1T/dmBmj6 zvr+lXp2YCyDwp41VxLZbOulVtI0h4xU+N9h83wc5AjmQ4ioDL5CMOI6w1G3YK9X 9bdw/D5/4vyFAfVZPcimeKygzqKqhLbPnBcc5mzXxQ7DG2LSbrY= -----END CERTIFICATE-----Generated at Thu Sep 24 10:54:50 2026 by rpki-client