$ rpki-client -vvf rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft File: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft (raw, json) Hash identifier: gGXXOfUSTbPyLkDkHZd8CBvX9w3ms2R/wTflMUmSIaA= Subject key identifier: 7C:B6:33:B5:D7:2B:EE:E3:A2:57:EA:36:68:BE:FA:D2:C9:A5:0E:C8 Authority key identifier: 29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA Certificate issuer: /CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Certificate serial: 243C132FF3F6D743106DB2FCDEA8783D135F199B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 03:18:15 +0000 Manifest this update: Fri 24 Jul 2026 03:13:15 +0000 Manifest next update: Sat 25 Jul 2026 05:02:15 +0000 Files and hashes: 1: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl (hash: ILRfo6QejoN0tOm/WL25KDQgx+NSlIYC3+nAJ64aSws=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:3c:13:2f:f3:f6:d7:43:10:6d:b2:fc:de:a8:78:3d:13:5f:19:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Validity Not Before: Jul 24 03:13:15 2026 GMT Not After : Jul 25 05:02:15 2026 GMT Subject: CN=7CB633B5D72BEEE3A257EA3668BEFAD2C9A50EC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ef:ef:f7:94:75:aa:5d:f5:b7:fb:f6:db:82: c4:3e:76:5a:aa:74:c3:10:99:54:9f:9e:ca:4a:3f: 1b:74:d9:6c:9c:96:8d:ab:23:77:22:55:32:e9:6d: c6:73:35:db:76:5b:89:76:50:bd:99:d0:bb:3e:f3: e8:63:6a:72:6b:16:a9:4d:f2:4f:61:ea:b5:72:2d: 63:2c:69:70:d8:cd:bd:a2:dd:e9:44:75:f2:d2:38: 3a:a0:ba:de:7e:21:0f:93:b6:93:8b:3f:ee:05:ea: 3b:3a:bf:33:2f:e6:f1:3a:2d:80:03:20:e4:68:19: 5f:f3:12:08:e6:7f:be:f8:c7:06:d5:80:1e:29:5c: ba:6d:f2:46:21:a8:67:fd:8f:b3:53:04:c7:21:b4: c0:de:d3:53:22:e9:4e:2c:95:fd:37:41:a2:0d:18: cc:99:d7:88:8b:2a:3d:68:4b:af:c3:71:a2:50:68: c6:37:bd:0d:d2:1f:f8:5c:f7:e8:ce:98:56:09:fa: e8:d1:20:d6:27:25:6f:0e:fe:a0:43:18:94:2b:bc: d0:79:7e:09:a3:47:9f:e4:e0:86:4b:9d:59:55:24: 63:9f:10:15:14:01:08:52:ea:ae:a4:c7:2b:86:b8: 71:40:9c:26:38:1e:26:af:30:79:26:e3:cd:79:97: 3d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B6:33:B5:D7:2B:EE:E3:A2:57:EA:36:68:BE:FA:D2:C9:A5:0E:C8 X509v3 Authority Key Identifier: keyid:29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:cd:ce:d9:fe:98:26:63:a7:76:7f:39:fe:c8:47:de:a3:7b: 3e:a7:b6:50:79:b0:e4:06:c4:03:33:57:51:74:b1:f1:61:43: c1:a5:84:a4:58:b1:49:6a:75:5e:c0:8e:ce:15:80:f3:1d:c5: 75:e1:eb:63:bc:d4:5b:e3:f0:4b:2a:6a:3a:68:e8:ab:78:ee: 6e:b1:28:b7:7a:58:79:64:e2:f1:d7:d3:a4:e7:f4:d5:7e:63: 94:b3:67:33:a9:c6:20:f1:fa:e4:b9:79:f1:d8:c0:0e:49:72: 4b:dd:c1:e7:07:a0:db:b0:20:82:ec:2c:07:d6:9b:4d:a4:b6: 3a:89:cf:c6:37:a6:e0:f5:99:f4:4d:44:4e:2f:90:98:14:39: 6c:24:00:d2:e3:e8:e2:7c:d3:12:a9:14:d2:9b:c2:33:f9:cc: a1:5c:d6:70:ab:c0:7f:13:36:93:48:b5:85:53:25:48:c4:1b: 89:fd:03:b2:e1:d1:19:be:a9:6b:d6:b0:9a:02:ce:6f:7e:80: fd:08:fa:b7:a8:ad:b3:b4:c6:63:3e:97:e0:71:a8:ce:36:dc: 4c:e0:c7:92:b8:3c:cb:14:59:25:13:ca:90:70:6b:20:b9:ba: 04:3c:60:7e:83:bc:3d:67:9c:9e:8e:e0:80:fd:ce:c2:41:f7: 07:b5:ae:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJDwTL/P210MQbbL83qh4PRNfGZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4 MkY4ODlCQTAeFw0yNjA3MjQwMzEzMTVaFw0yNjA3MjUwNTAyMTVaMDMxMTAvBgNV BAMTKDdDQjYzM0I1RDcyQkVFRTNBMjU3RUEzNjY4QkVGQUQyQzlBNTBFQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN7+/3lHWqXfW3+/bbgsQ+dlqq dMMQmVSfnspKPxt02Wyclo2rI3ciVTLpbcZzNdt2W4l2UL2Z0Ls+8+hjanJrFqlN 8k9h6rVyLWMsaXDYzb2i3elEdfLSODqgut5+IQ+TtpOLP+4F6js6vzMv5vE6LYAD IORoGV/zEgjmf774xwbVgB4pXLpt8kYhqGf9j7NTBMchtMDe01Mi6U4slf03QaIN GMyZ14iLKj1oS6/DcaJQaMY3vQ3SH/hc9+jOmFYJ+ujRINYnJW8O/qBDGJQrvNB5 fgmjR5/k4IZLnVlVJGOfEBUUAQhS6q6kxyuGuHFAnCY4HiavMHkm4815lz2/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfLYztdcr7uOiV+o2aL760smlDsgwHwYDVR0j BBgwFoAUKdDUWI2NMjP2Dw9OLsGgUIL4ibowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODFhNGI3ODItYzM3Zi00Mzc5LWE4YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4 RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4MkY4ODlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yOUQwRDQ1ODhEOEQzMjMzRjYwRjBGNEUyRUMxQTA1MDgyRjg4 OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODFhNGI3ODItYzM3Zi00Mzc5LWE4 YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEw NTA4MkY4ODlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLNztn+mCZjp3Z/Of7IR96jez6ntlB5sOQG xAMzV1F0sfFhQ8GlhKRYsUlqdV7Ajs4VgPMdxXXh62O81Fvj8Esqajpo6Kt47m6x KLd6WHlk4vHX06Tn9NV+Y5SzZzOpxiDx+uS5efHYwA5JckvdwecHoNuwIILsLAfW m02ktjqJz8Y3puD1mfRNRE4vkJgUOWwkANLj6OJ80xKpFNKbwjP5zKFc1nCrwH8T NpNItYVTJUjEG4n9A7Lh0Rm+qWvWsJoCzm9+gP0I+reorbO0xmM+l+BxqM423Ezg x5K4PMsUWSUTypBwayC5ugQ8YH6DvD1nnJ6O4ID9zsJB9we1rpI= -----END CERTIFICATE-----Generated at Fri Jul 24 05:08:56 2026 by rpki-client