$ rpki-client -vvvf rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft File: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft (raw, json) Hash identifier: WVJZysGpedSagMgq3RVDGGj9DfEb2JOQdIaa//LNhxo= Subject key identifier: A8:E3:36:4D:A7:A5:27:3B:ED:56:E7:31:00:C9:AB:55:12:2A:4E:62 Authority key identifier: 29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA Certificate issuer: /CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Certificate serial: 5C13047A01D8A5FDCFF42E77622619F75715304B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft Manifest number: 0104 Signing time: Sat 14 Nov 2026 10:48:07 +0000 Manifest this update: Sat 14 Nov 2026 10:43:07 +0000 Manifest next update: Sun 15 Nov 2026 12:21:07 +0000 Files and hashes: 1: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl (hash: jOclPaZQB0nVlwbxJzW4ItRT8IRV5IZE5SOnPSdhP+k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 12:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:13:04:7a:01:d8:a5:fd:cf:f4:2e:77:62:26:19:f7:57:15:30:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Validity Not Before: Nov 14 10:43:07 2026 GMT Not After : Nov 15 12:21:07 2026 GMT Subject: CN=A8E3364DA7A5273BED56E73100C9AB55122A4E62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:74:eb:a7:46:42:c6:1e:c0:43:af:03:c8:c9: 5e:e6:d2:ba:e4:9f:a1:68:16:88:b4:2e:68:f1:b9: d7:3d:9c:8e:bf:bc:2b:6a:a0:b1:df:70:6e:1f:d4: d8:f1:8f:66:bd:42:33:d1:34:b9:21:cb:24:71:71: 1c:65:98:1e:c4:48:bd:ca:83:98:04:9e:c7:49:d1: 79:50:3e:7e:a5:ea:87:ca:06:c4:55:f3:a8:ac:73: 89:d4:e0:fd:4a:1e:e2:eb:21:3c:2f:c2:0f:3f:d2: dd:30:de:4b:9d:80:01:23:9c:52:9b:d2:67:f2:60: 9a:76:8d:45:00:99:51:cc:f0:c9:bc:d8:4f:55:e8: 07:54:29:d0:ff:2d:3d:96:10:67:e7:07:bf:21:89: 4b:b5:d1:45:f4:06:ff:05:b9:06:f2:21:66:94:41: 41:e7:13:26:4e:05:bf:76:56:b6:9a:a1:a6:91:7d: 29:8f:cb:60:96:f5:6b:dc:3d:5b:7b:76:67:2f:f2: fb:51:98:81:75:fd:74:a0:a7:b4:17:6d:42:3f:55: f8:c8:43:50:ed:89:ed:61:98:04:0b:c5:8e:56:cf: 5e:89:b5:70:86:56:16:d7:ce:1f:c7:0d:ef:80:de: 5a:1c:f5:af:c3:7c:ce:0f:ab:79:bb:fd:aa:62:e7: 3d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E3:36:4D:A7:A5:27:3B:ED:56:E7:31:00:C9:AB:55:12:2A:4E:62 X509v3 Authority Key Identifier: keyid:29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:aa:6d:d5:dc:48:bf:6d:84:b3:0a:cb:63:1a:92:77:4a:cf: d2:5b:3a:05:61:9b:74:45:a8:59:8f:a1:f2:bc:64:67:7a:20: 18:c4:2b:f3:8e:c9:64:9e:d6:aa:e9:08:42:d8:77:6f:36:f3: 23:7e:42:eb:36:ce:19:46:0d:ca:27:d2:e1:e1:cd:09:a6:05: 9f:2c:41:85:d1:e8:ea:f4:16:08:8c:51:ee:0e:f4:bf:9e:49: ce:1a:e9:7f:f8:16:d7:29:6b:7f:72:04:2f:24:ed:9c:f8:a7: 42:ba:ef:91:66:34:70:0b:b8:7a:52:99:7b:49:c3:cd:40:b9: ee:44:18:07:b0:ef:e3:14:90:96:90:e0:98:03:04:a3:26:49: 27:19:3b:9a:01:9d:06:95:04:92:74:5e:32:2d:86:29:d9:6d: c4:08:d1:8a:09:57:e0:05:67:3b:6b:fc:32:53:bc:af:c7:52: 0e:87:bb:0a:34:d5:9c:1c:e1:fa:7e:6a:02:5f:30:a4:eb:b8: 4e:11:2d:77:7c:0a:99:d2:43:cd:56:20:1a:35:31:bc:f7:dd: 24:c3:35:ba:00:b2:ed:09:e8:4d:77:ab:db:50:0c:b0:e8:38: 61:b3:d4:b9:ca:4f:5d:19:5c:b3:fa:28:ee:f9:35:5a:97:33: c4:4f:99:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXBMEegHYpf3P9C53YiYZ91cVMEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4 MkY4ODlCQTAeFw0yNjExMTQxMDQzMDdaFw0yNjExMTUxMjIxMDdaMDMxMTAvBgNV BAMTKEE4RTMzNjREQTdBNTI3M0JFRDU2RTczMTAwQzlBQjU1MTIyQTRFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwdOunRkLGHsBDrwPIyV7m0rrk n6FoFoi0Lmjxudc9nI6/vCtqoLHfcG4f1Njxj2a9QjPRNLkhyyRxcRxlmB7ESL3K g5gEnsdJ0XlQPn6l6ofKBsRV86isc4nU4P1KHuLrITwvwg8/0t0w3kudgAEjnFKb 0mfyYJp2jUUAmVHM8Mm82E9V6AdUKdD/LT2WEGfnB78hiUu10UX0Bv8FuQbyIWaU QUHnEyZOBb92VraaoaaRfSmPy2CW9WvcPVt7dmcv8vtRmIF1/XSgp7QXbUI/VfjI Q1Dtie1hmAQLxY5Wz16JtXCGVhbXzh/HDe+A3loc9a/DfM4Pq3m7/api5z2NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqOM2TaelJzvtVucxAMmrVRIqTmIwHwYDVR0j BBgwFoAUKdDUWI2NMjP2Dw9OLsGgUIL4ibowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODFhNGI3ODItYzM3Zi00Mzc5LWE4YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4 RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4MkY4ODlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yOUQwRDQ1ODhEOEQzMjMzRjYwRjBGNEUyRUMxQTA1MDgyRjg4 OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODFhNGI3ODItYzM3Zi00Mzc5LWE4 YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEw NTA4MkY4ODlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGqbdXcSL9thLMKy2MakndKz9JbOgVhm3RF qFmPofK8ZGd6IBjEK/OOyWSe1qrpCELYd2828yN+Qus2zhlGDcon0uHhzQmmBZ8s QYXR6Or0FgiMUe4O9L+eSc4a6X/4Ftcpa39yBC8k7Zz4p0K675FmNHALuHpSmXtJ w81Aue5EGAew7+MUkJaQ4JgDBKMmSScZO5oBnQaVBJJ0XjIthinZbcQI0YoJV+AF Zztr/DJTvK/HUg6Huwo01Zwc4fp+agJfMKTruE4RLXd8CpnSQ81WIBo1Mbz33STD NboAsu0J6E13q9tQDLDoOGGz1LnKT10ZXLP6KO75NVqXM8RPmbs= -----END CERTIFICATE-----Generated at Sat Nov 14 22:26:42 2026 by rpki-client