$ rpki-client -vvvf rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft File: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft (raw, json) Hash identifier: iTzA3A7Ndg6i12CH+DucWsvxvzXT//IiVaFe/YITy+w= Subject key identifier: 64:AF:4C:A3:5E:BA:1E:66:D8:E7:E2:8E:A1:7C:36:31:66:A8:05:FF Authority key identifier: 29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA Certificate issuer: /CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Certificate serial: 16B1D295CFD7B841DF95940537F49C4A7F3F92A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft Manifest number: BE Signing time: Wed 23 Sep 2026 07:20:14 +0000 Manifest this update: Wed 23 Sep 2026 07:15:14 +0000 Manifest next update: Thu 24 Sep 2026 08:25:14 +0000 Files and hashes: 1: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl (hash: pN9khzH1XLbffPuM9qQD4BoQLdj1pp514A0UTjfEufk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:b1:d2:95:cf:d7:b8:41:df:95:94:05:37:f4:9c:4a:7f:3f:92:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Validity Not Before: Sep 23 07:15:14 2026 GMT Not After : Sep 24 08:25:14 2026 GMT Subject: CN=64AF4CA35EBA1E66D8E7E28EA17C363166A805FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:71:39:30:4b:e2:2b:2f:e9:c9:c0:cb:bd:01: 16:a7:1e:5f:0f:93:c5:4f:d4:35:cd:aa:e7:2a:7a: e2:f8:68:15:88:b7:a7:24:ce:f8:e2:98:98:93:95: 47:2d:c8:ea:73:52:f2:f8:0b:93:c7:b1:58:3e:45: 5e:a0:b5:fd:cf:00:63:85:b8:cd:fe:53:88:19:0c: 0c:cc:55:c7:23:bc:87:a2:f5:e6:6a:13:30:5c:01: 2b:f1:b5:67:a6:d7:95:81:f8:b3:5a:79:dd:fb:d1: 8f:9b:ed:e0:65:18:96:14:29:8c:ae:c9:ab:80:bc: 6b:b4:2f:16:3a:31:7b:33:57:1a:ce:41:03:12:c1: 42:44:c6:4a:6c:65:f4:f4:df:c2:cf:d2:8e:a6:93: b1:61:d9:5d:d0:8f:38:01:b4:c9:a6:aa:a6:4b:f4: 47:2b:4d:a3:84:e6:19:7e:82:18:ed:92:28:a0:38: 43:97:6e:cf:65:91:8b:0c:e6:e5:be:21:3d:c0:64: 78:28:eb:04:bd:f5:2b:ba:e7:e1:dc:bd:a7:3d:1f: d8:ec:6a:61:ea:0e:95:56:58:a1:34:91:a0:f5:3d: 4f:2f:1a:ff:e7:30:2d:ee:b1:fe:3e:b1:0a:b5:00: 65:75:ff:bc:b7:e3:9e:85:67:4a:52:aa:fb:f5:e0: f2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AF:4C:A3:5E:BA:1E:66:D8:E7:E2:8E:A1:7C:36:31:66:A8:05:FF X509v3 Authority Key Identifier: keyid:29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:19:0c:13:22:92:3d:97:2a:b7:67:de:1d:8d:5e:8a:93:93: 03:c7:bc:56:a1:8e:97:31:c0:8b:c1:20:d0:bf:38:f9:52:6c: 4e:d4:90:68:c8:0b:7f:37:0b:b5:a6:8a:0d:5e:26:c9:74:f9: f8:da:af:e0:c0:b1:9c:1e:05:15:e5:d1:ec:ee:0e:2e:6d:74: 70:20:86:07:d3:9b:d5:a7:ed:5c:27:35:90:40:6f:87:db:ff: a3:98:61:2d:69:b0:91:a1:50:5c:c6:e2:b8:56:02:59:4f:13: fa:c7:65:9a:c9:9c:5f:0b:83:2f:3e:ec:0b:9c:fa:c2:2c:66: c3:a7:c9:55:95:3e:1e:59:5a:fa:6b:d1:fd:75:7e:fe:32:df: 1c:57:5a:42:c1:96:7c:e7:9f:b5:1c:21:fa:4a:08:f8:4c:e9: 5c:cc:c2:8b:0f:ce:d9:b1:5f:5c:db:2c:b5:f7:2f:52:7a:cc: 62:0d:69:85:e9:0e:cf:92:9f:ff:ef:c0:7b:91:d7:0a:9b:1b: b1:8d:fa:b9:88:ab:48:10:a4:89:79:5c:20:22:dd:c8:1f:7d: fb:b2:64:22:17:1b:34:43:e1:70:f4:6e:1a:d7:90:00:ae:1f: 9f:32:49:6e:70:03:37:35:81:68:da:f6:2f:a7:d0:12:3c:76: 53:2c:80:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFrHSlc/XuEHflZQFN/ScSn8/kqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4 MkY4ODlCQTAeFw0yNjA5MjMwNzE1MTRaFw0yNjA5MjQwODI1MTRaMDMxMTAvBgNV BAMTKDY0QUY0Q0EzNUVCQTFFNjZEOEU3RTI4RUExN0MzNjMxNjZBODA1RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQcTkwS+IrL+nJwMu9ARanHl8P k8VP1DXNqucqeuL4aBWIt6ckzvjimJiTlUctyOpzUvL4C5PHsVg+RV6gtf3PAGOF uM3+U4gZDAzMVccjvIei9eZqEzBcASvxtWem15WB+LNaed370Y+b7eBlGJYUKYyu yauAvGu0LxY6MXszVxrOQQMSwUJExkpsZfT038LP0o6mk7Fh2V3QjzgBtMmmqqZL 9EcrTaOE5hl+ghjtkiigOEOXbs9lkYsM5uW+IT3AZHgo6wS99Su65+Hcvac9H9js amHqDpVWWKE0kaD1PU8vGv/nMC3usf4+sQq1AGV1/7y3456FZ0pSqvv14PJrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZK9Mo166HmbY5+KOoXw2MWaoBf8wHwYDVR0j BBgwFoAUKdDUWI2NMjP2Dw9OLsGgUIL4ibowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODFhNGI3ODItYzM3Zi00Mzc5LWE4YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4 RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4MkY4ODlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yOUQwRDQ1ODhEOEQzMjMzRjYwRjBGNEUyRUMxQTA1MDgyRjg4 OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODFhNGI3ODItYzM3Zi00Mzc5LWE4 YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEw NTA4MkY4ODlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYZDBMikj2XKrdn3h2NXoqTkwPHvFahjpcx wIvBINC/OPlSbE7UkGjIC383C7Wmig1eJsl0+fjar+DAsZweBRXl0ezuDi5tdHAg hgfTm9Wn7VwnNZBAb4fb/6OYYS1psJGhUFzG4rhWAllPE/rHZZrJnF8Lgy8+7Auc +sIsZsOnyVWVPh5ZWvpr0f11fv4y3xxXWkLBlnznn7UcIfpKCPhM6VzMwosPztmx X1zbLLX3L1J6zGINaYXpDs+Sn//vwHuR1wqbG7GN+rmIq0gQpIl5XCAi3cgfffuy ZCIXGzRD4XD0bhrXkACuH58ySW5wAzc1gWja9i+n0BI8dlMsgIw= -----END CERTIFICATE-----Generated at Wed Sep 23 23:09:37 2026 by rpki-client