$ rpki-client -vvf rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft File: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft (raw, json) Hash identifier: ZQU5tQQogzxkuj628JhnEWvLd7n/67JCXBtAKFe/2bA= Subject key identifier: 99:CD:D1:2B:B9:F4:A6:CD:63:AF:30:FC:FC:71:02:9E:84:01:E2:8C Authority key identifier: 29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA Certificate issuer: /CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Certificate serial: 4D71095C94AF1532D4E5CA6EA25C78D81AC54762 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft Manifest number: 0D Signing time: Tue 12 May 2026 05:25:48 +0000 Manifest this update: Tue 12 May 2026 05:20:48 +0000 Manifest next update: Wed 13 May 2026 08:49:48 +0000 Files and hashes: 1: 29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl (hash: wBX/9P7GEBZU9tnSfjX8SW0QkUNkoP1XnSEHbQ7b7rg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:71:09:5c:94:af:15:32:d4:e5:ca:6e:a2:5c:78:d8:1a:c5:47:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29D0D4588D8D3233F60F0F4E2EC1A05082F889BA Validity Not Before: May 12 05:20:48 2026 GMT Not After : May 13 08:49:48 2026 GMT Subject: CN=99CDD12BB9F4A6CD63AF30FCFC71029E8401E28C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b8:97:13:2d:c1:e4:55:d6:01:7a:d5:30:94: 56:05:60:6c:2c:cf:a1:8e:a2:e2:fd:65:00:3b:df: 45:33:fa:c3:8a:65:54:97:b1:7a:2d:9e:33:b0:38: 01:4e:45:59:15:0d:ce:71:80:9b:ce:ea:62:34:65: b7:6c:7b:a2:50:af:7c:93:55:4b:f8:1e:ef:48:cc: 5f:a2:e8:c3:8e:a4:09:7e:1b:30:5f:60:72:13:cd: 69:a3:3b:cb:4f:b4:fd:7f:e4:39:48:24:12:ca:cf: 54:97:6f:0f:07:29:e7:f2:0f:65:91:44:d3:a3:f3: ba:8d:84:b5:af:d6:fa:9e:ef:83:9b:31:94:91:b9: f7:61:ae:7a:db:a2:eb:71:70:0f:e7:e8:5c:14:c3: 40:e4:65:78:de:f3:8e:54:1e:84:09:d3:dc:01:c3: 48:d4:c5:7c:56:af:a3:24:91:34:7b:bf:32:d2:38: 77:06:11:11:95:b3:f5:d5:51:91:63:c2:b6:b0:89: 39:e2:bc:ca:6b:94:98:50:fb:45:f0:1e:0b:cf:93: 2e:87:60:1e:7e:61:08:c2:85:71:f9:76:be:86:63: 83:66:8d:35:d8:e9:b2:f6:8e:da:2c:6d:48:7f:ba: ec:f6:92:23:f4:cd:18:2d:22:d5:14:3a:24:87:ee: d7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CD:D1:2B:B9:F4:A6:CD:63:AF:30:FC:FC:71:02:9E:84:01:E2:8C X509v3 Authority Key Identifier: keyid:29:D0:D4:58:8D:8D:32:33:F6:0F:0F:4E:2E:C1:A0:50:82:F8:89:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/81a4b782-c37f-4379-a8a6-4da5d82b239f/0/29D0D4588D8D3233F60F0F4E2EC1A05082F889BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:fe:80:ba:43:2f:94:e6:9c:78:87:02:f8:3a:ac:03:69:de: 9d:7e:63:6e:02:33:0c:86:86:c5:e8:4f:ca:d6:53:7d:c7:aa: 95:22:4f:ff:2b:98:67:5f:54:a3:23:6d:bb:9c:4e:23:b3:de: e6:c5:7e:90:58:1f:c7:36:f2:11:2e:fd:72:24:17:26:bf:ac: ef:24:45:28:c4:20:f5:7f:a1:91:22:50:6d:a2:0e:17:2e:e6: ec:a9:68:3a:e9:11:d1:e8:b4:46:25:2f:d4:1c:b9:fb:36:67: 3d:5b:5d:4b:30:1d:2b:2f:69:9a:eb:c2:ea:92:e8:0d:62:83: e4:30:94:93:4b:99:b2:6c:40:33:ca:bf:c2:22:8b:2f:06:97: 21:3b:6b:29:15:06:4b:fc:9d:fa:aa:68:90:44:e4:56:e8:f1: 9e:f0:bb:b8:07:0c:81:56:a4:00:bf:cb:ee:29:00:9f:b2:59: 93:53:41:2d:64:97:21:08:3e:7d:1a:0b:b4:0d:b2:09:ae:8c: 03:d5:2e:1a:7d:d7:4c:19:3c:3b:07:86:db:fb:3c:39:92:57: 2f:38:ea:8d:b7:8c:f2:7d:81:b2:3e:43:be:b1:3b:d8:cf:17: 88:3a:82:12:4a:f1:e2:b8:33:42:d0:d2:54:58:ec:1a:ce:08: ef:cf:15:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTXEJXJSvFTLU5cpuolx42BrFR2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4 MkY4ODlCQTAeFw0yNjA1MTIwNTIwNDhaFw0yNjA1MTMwODQ5NDhaMDMxMTAvBgNV BAMTKDk5Q0REMTJCQjlGNEE2Q0Q2M0FGMzBGQ0ZDNzEwMjlFODQwMUUyOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnuJcTLcHkVdYBetUwlFYFYGws z6GOouL9ZQA730Uz+sOKZVSXsXotnjOwOAFORVkVDc5xgJvO6mI0Zbdse6JQr3yT VUv4Hu9IzF+i6MOOpAl+GzBfYHITzWmjO8tPtP1/5DlIJBLKz1SXbw8HKefyD2WR RNOj87qNhLWv1vqe74ObMZSRufdhrnrboutxcA/n6FwUw0DkZXje845UHoQJ09wB w0jUxXxWr6MkkTR7vzLSOHcGERGVs/XVUZFjwrawiTnivMprlJhQ+0XwHgvPky6H YB5+YQjChXH5dr6GY4NmjTXY6bL2jtosbUh/uuz2kiP0zRgtItUUOiSH7tcjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmc3RK7n0ps1jrzD8/HECnoQB4owwHwYDVR0j BBgwFoAUKdDUWI2NMjP2Dw9OLsGgUIL4ibowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODFhNGI3ODItYzM3Zi00Mzc5LWE4YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4 RDhEMzIzM0Y2MEYwRjRFMkVDMUEwNTA4MkY4ODlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yOUQwRDQ1ODhEOEQzMjMzRjYwRjBGNEUyRUMxQTA1MDgyRjg4 OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODFhNGI3ODItYzM3Zi00Mzc5LWE4 YTYtNGRhNWQ4MmIyMzlmLzAvMjlEMEQ0NTg4RDhEMzIzM0Y2MEYwRjRFMkVDMUEw NTA4MkY4ODlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADv+gLpDL5TmnHiHAvg6rANp3p1+Y24CMwyG hsXoT8rWU33HqpUiT/8rmGdfVKMjbbucTiOz3ubFfpBYH8c28hEu/XIkFya/rO8k RSjEIPV/oZEiUG2iDhcu5uypaDrpEdHotEYlL9Qcufs2Zz1bXUswHSsvaZrrwuqS 6A1ig+QwlJNLmbJsQDPKv8Iiiy8GlyE7aykVBkv8nfqqaJBE5Fbo8Z7wu7gHDIFW pAC/y+4pAJ+yWZNTQS1klyEIPn0aC7QNsgmujAPVLhp910wZPDsHhtv7PDmSVy84 6o23jPJ9gbI+Q76xO9jPF4g6ghJK8eK4M0LQ0lRY7BrOCO/PFUY= -----END CERTIFICATE-----Generated at Tue May 12 22:47:04 2026 by rpki-client