$ rpki-client -vvf rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft File: 29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft (raw, json) Hash identifier: WEJnpe3Vk+WDM9WTLQQA2jJTlWlNAPnf1rFnl4mDEs0= Subject key identifier: 39:13:0E:98:B5:EF:E1:F6:65:D0:63:99:36:F6:1D:59:88:24:DA:0F Authority key identifier: 29:FF:1F:61:AC:5E:94:F6:E6:4A:87:7D:64:C8:98:89:1C:93:B9:D4 Certificate issuer: /CN=29FF1F61AC5E94F6E64A877D64C898891C93B9D4 Certificate serial: 06FCD07967B44E96D8EABBB5CD8BDC1091051C1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 06:01:46 +0000 Manifest this update: Fri 24 Jul 2026 05:56:46 +0000 Manifest next update: Sat 25 Jul 2026 09:58:46 +0000 Files and hashes: 1: 29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl (hash: 1zpQwCb0LnXhgzgZC+ogBtuxCd2JOpU4xn2nhVpmsow=) 2: 3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa (hash: LF59rdbly3qY6QhOFQEuAQ69CIbhIGzKez5frVrEQC4=) 3: 323430363a6263303a3a2f33322d3332203d3e20313430343032.roa (hash: GxU5DwtXFetlD8xuWWi1FQ28pr6GVadjxWaNVjtxKHQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:fc:d0:79:67:b4:4e:96:d8:ea:bb:b5:cd:8b:dc:10:91:05:1c:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29FF1F61AC5E94F6E64A877D64C898891C93B9D4 Validity Not Before: Jul 24 05:56:46 2026 GMT Not After : Jul 25 09:58:46 2026 GMT Subject: CN=39130E98B5EFE1F665D0639936F61D598824DA0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:24:88:ef:ad:b7:be:6f:6b:6d:ff:04:b2:dc: 55:d5:8b:1b:79:8f:b9:7f:34:4b:f8:a7:5d:06:38: 9b:69:64:39:b8:24:5f:fc:a0:7f:7d:d9:14:cc:13: 58:2a:13:bb:f5:bd:40:7b:d3:b4:40:58:77:82:01: 3d:ee:96:1b:d3:ae:2e:db:7d:90:12:33:4a:1f:76: 79:4c:a8:a3:e5:3a:f4:87:d4:d8:e2:70:40:b6:eb: f9:de:2a:e3:4c:33:7f:af:db:27:df:65:80:a7:7a: c5:ba:d8:e4:ff:8b:2e:0e:0c:a2:51:c0:49:ef:80: 49:0b:64:e5:9d:08:15:e1:31:8e:e5:b1:6f:ef:93: 1c:f3:bf:8e:fe:c3:2b:92:7d:36:a2:ac:58:80:66: e5:1f:22:66:40:8b:4d:78:88:1e:22:72:6e:a3:90: fa:ae:e4:28:3c:a4:63:d9:2e:8c:fc:bf:cb:9c:0a: cd:3c:ba:69:9b:19:e6:96:9a:7b:1d:f4:1c:f3:62: d9:a7:56:44:a4:0b:42:d4:d3:8f:2c:1f:9b:cc:6d: 9b:e9:06:7f:f7:c6:00:3d:45:64:f1:b4:40:90:bc: d3:4b:e2:0d:55:23:4e:7a:97:7b:d3:42:7b:87:bd: dc:93:27:b8:db:ff:fd:aa:f7:dd:93:b6:e7:d3:93: b9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:13:0E:98:B5:EF:E1:F6:65:D0:63:99:36:F6:1D:59:88:24:DA:0F X509v3 Authority Key Identifier: keyid:29:FF:1F:61:AC:5E:94:F6:E6:4A:87:7D:64:C8:98:89:1C:93:B9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9e:c1:e2:b5:3a:93:01:c2:f3:6f:81:70:a4:f6:da:84:b4: 2a:bf:86:2d:40:4c:66:04:6b:28:4a:a4:f9:21:1c:b0:08:6e: 1e:52:e5:28:f6:60:8c:b8:b0:38:18:1c:40:70:c5:22:75:bd: 69:63:76:32:98:55:2e:a6:57:0f:ef:c7:31:d2:51:fd:2e:c8: 08:ae:ad:99:41:63:43:29:00:4f:cf:27:93:8f:c9:54:aa:60: 4b:bb:e6:b2:44:76:3b:a1:fd:46:29:ab:29:4a:19:0a:cb:fe: 27:c5:5c:ec:bc:1b:fc:50:ff:e1:5f:8c:ef:cf:af:60:27:b9: 11:95:d8:bc:06:3b:8e:71:b0:22:6f:e7:0b:a4:1b:91:d6:17: ec:a3:68:d9:c6:4d:88:32:2f:ed:11:2f:69:93:b7:05:1a:58: ff:71:4e:d9:1b:42:78:8c:32:25:89:27:56:b8:f2:90:84:81: 8f:07:3c:fb:81:b5:5c:77:86:34:cf:da:5e:8d:06:9a:a6:93: a0:f6:67:a4:00:a2:c4:0e:5a:51:f2:1f:2c:60:1a:0f:45:4e: b4:ce:a0:24:b2:58:89:d2:52:dc:8e:39:b5:f0:e7:88:01:53: f1:09:20:c1:38:fa:34:0e:78:22:85:29:3a:5a:03:f3:79:95: 03:f7:b7:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBvzQeWe0TpbY6ru1zYvcEJEFHBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGRjFGNjFBQzVFOTRGNkU2NEE4NzdENjRDODk4ODkx QzkzQjlENDAeFw0yNjA3MjQwNTU2NDZaFw0yNjA3MjUwOTU4NDZaMDMxMTAvBgNV BAMTKDM5MTMwRTk4QjVFRkUxRjY2NUQwNjM5OTM2RjYxRDU5ODgyNERBMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJIjvrbe+b2tt/wSy3FXVixt5 j7l/NEv4p10GOJtpZDm4JF/8oH992RTME1gqE7v1vUB707RAWHeCAT3ulhvTri7b fZASM0ofdnlMqKPlOvSH1NjicEC26/neKuNMM3+v2yffZYCnesW62OT/iy4ODKJR wEnvgEkLZOWdCBXhMY7lsW/vkxzzv47+wyuSfTairFiAZuUfImZAi014iB4icm6j kPqu5Cg8pGPZLoz8v8ucCs08ummbGeaWmnsd9BzzYtmnVkSkC0LU048sH5vMbZvp Bn/3xgA9RWTxtECQvNNL4g1VI056l3vTQnuHvdyTJ7jb//2q992TtufTk7mrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUORMOmLXv4fZl0GOZNvYdWYgk2g8wHwYDVR0j BBgwFoAUKf8fYaxelPbmSod9ZMiYiRyTudQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODI5ZTcwNjQtYjM1Mi00M2I2LTlmMDktNTE0ZDY4YTI3MzllLzAvMjlGRjFGNjFB QzVFOTRGNkU2NEE4NzdENjRDODk4ODkxQzkzQjlENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUZGMUY2MUFDNUU5NEY2RTY0QTg3N0Q2NEM4OTg4OTFDOTNC OUQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODI5ZTcwNjQtYjM1Mi00M2I2LTlm MDktNTE0ZDY4YTI3MzllLzAvMjlGRjFGNjFBQzVFOTRGNkU2NEE4NzdENjRDODk4 ODkxQzkzQjlENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqeweK1OpMBwvNvgXCk9tqEtCq/hi1ATGYE ayhKpPkhHLAIbh5S5Sj2YIy4sDgYHEBwxSJ1vWljdjKYVS6mVw/vxzHSUf0uyAiu rZlBY0MpAE/PJ5OPyVSqYEu75rJEdjuh/UYpqylKGQrL/ifFXOy8G/xQ/+FfjO/P r2AnuRGV2LwGO45xsCJv5wukG5HWF+yjaNnGTYgyL+0RL2mTtwUaWP9xTtkbQniM MiWJJ1a48pCEgY8HPPuBtVx3hjTP2l6NBpqmk6D2Z6QAosQOWlHyHyxgGg9FTrTO oCSyWInSUtyOObXw54gBU/EJIME4+jQOeCKFKTpaA/N5lQP3tzI= -----END CERTIFICATE-----Generated at Fri Jul 24 13:55:46 2026 by rpki-client