$ rpki-client -vvf rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft File: 29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft (raw, json) Hash identifier: w7sbZHyIvb+VOxDe/B3921PFJjMfGRXgcWgdV5dBwao= Subject key identifier: 43:53:28:7E:45:F1:18:F4:8D:32:07:0E:E0:AE:AF:99:FA:FF:C3:02 Authority key identifier: 29:FF:1F:61:AC:5E:94:F6:E6:4A:87:7D:64:C8:98:89:1C:93:B9:D4 Certificate issuer: /CN=29FF1F61AC5E94F6E64A877D64C898891C93B9D4 Certificate serial: 261614D84D32AAA6AC330C2D6F70A8138011D497 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:17:11 +0000 Manifest this update: Tue 12 May 2026 23:12:11 +0000 Manifest next update: Thu 14 May 2026 00:35:11 +0000 Files and hashes: 1: 323430363a6263303a3a2f33322d3332203d3e20313430343032.roa (hash: GxU5DwtXFetlD8xuWWi1FQ28pr6GVadjxWaNVjtxKHQ=) 2: 3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa (hash: LF59rdbly3qY6QhOFQEuAQ69CIbhIGzKez5frVrEQC4=) 3: 29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl (hash: Rz5kxMM+1pXFrxgai2YfmR8XZmeQH4kjuSAdhKhlPM4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:16:14:d8:4d:32:aa:a6:ac:33:0c:2d:6f:70:a8:13:80:11:d4:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29FF1F61AC5E94F6E64A877D64C898891C93B9D4 Validity Not Before: May 12 23:12:11 2026 GMT Not After : May 14 00:35:11 2026 GMT Subject: CN=4353287E45F118F48D32070EE0AEAF99FAFFC302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:66:f7:47:4d:8e:20:09:02:16:31:ae:97:cb: 39:de:f8:fa:86:02:38:3f:77:48:03:8b:db:c5:55: bc:f2:63:ca:91:89:89:75:ce:22:c6:5f:a9:ab:66: 07:b2:a3:16:41:8f:19:64:76:96:f1:7a:39:d7:07: c8:cc:c9:ea:8f:fc:d1:10:ed:29:5f:b8:73:09:0e: 41:b3:86:d8:eb:53:fa:81:7d:48:ba:e4:3a:d0:f9: 5e:b4:bc:f9:fd:2d:66:6c:89:c5:83:15:a0:2d:26: ba:da:04:09:ee:da:a6:ad:db:27:1f:22:9b:2f:1d: 99:2f:7a:d2:d5:95:b6:db:8c:62:79:ab:3f:4b:c2: bf:64:d1:69:50:0e:43:8d:b5:23:98:bc:58:20:47: 40:89:61:58:79:c0:62:af:6f:ff:f0:44:67:18:92: bb:24:e9:31:65:97:a9:1a:0f:eb:2d:19:d3:fe:f7: ac:23:c3:6d:c7:1f:0e:94:94:ff:aa:ed:81:01:02: df:a2:52:69:79:a8:63:3e:bd:45:5f:56:84:e6:6d: 96:86:20:ee:59:e7:b4:e6:6c:ce:38:3a:08:2c:6c: 26:a5:ab:d4:0d:ba:dd:f0:47:06:82:1c:12:2e:f3: 14:d6:f2:d6:1a:ce:d1:ce:7e:a6:e5:35:5c:ac:5b: fc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:53:28:7E:45:F1:18:F4:8D:32:07:0E:E0:AE:AF:99:FA:FF:C3:02 X509v3 Authority Key Identifier: keyid:29:FF:1F:61:AC:5E:94:F6:E6:4A:87:7D:64:C8:98:89:1C:93:B9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/29FF1F61AC5E94F6E64A877D64C898891C93B9D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:d5:58:05:d3:6d:15:60:e2:24:44:5a:74:70:52:55:e0:d3: 63:06:71:a5:d2:b8:5c:dd:b8:01:16:bb:5a:7b:8a:e3:23:12: e8:06:c4:7c:e6:c8:46:5e:91:45:bf:d9:3c:d2:0b:8c:57:d6: 02:05:cf:cb:87:af:77:99:4d:d5:4d:5b:bd:65:8c:b3:e6:18: 58:b6:4a:c2:11:b1:14:dc:d6:60:1d:68:cc:7b:4c:2c:e0:c9: c0:83:56:47:39:34:23:52:37:ce:0f:d5:8a:83:50:5f:a2:cd: 5e:ef:c4:08:a8:2a:9c:89:b8:17:d2:42:33:c3:f6:f3:e3:a3: 8a:17:b5:96:d6:ef:08:69:db:94:ee:ca:9f:05:5d:f8:ad:28: 47:f8:55:aa:c2:12:58:19:1a:2a:be:af:7e:64:04:2a:8e:a9: 21:5b:c7:c2:05:e7:2d:20:01:c8:e9:bc:44:2d:71:92:c3:0a: 44:86:37:b6:33:07:18:7b:9c:e1:16:9d:30:01:a5:79:f3:d2: 42:f8:78:6d:62:d6:a9:87:5a:d5:04:48:07:5d:8b:0e:98:e2: 40:cf:6e:40:37:53:8b:d0:1e:f5:44:99:47:3e:7f:51:ec:ed: c1:5c:44:37:0f:03:3a:67:92:0b:4a:ef:2c:65:e2:cf:87:05: 4e:60:e8:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJhYU2E0yqqasMwwtb3CoE4AR1JcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGRjFGNjFBQzVFOTRGNkU2NEE4NzdENjRDODk4ODkx QzkzQjlENDAeFw0yNjA1MTIyMzEyMTFaFw0yNjA1MTQwMDM1MTFaMDMxMTAvBgNV BAMTKDQzNTMyODdFNDVGMTE4RjQ4RDMyMDcwRUUwQUVBRjk5RkFGRkMzMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfZvdHTY4gCQIWMa6Xyzne+PqG Ajg/d0gDi9vFVbzyY8qRiYl1ziLGX6mrZgeyoxZBjxlkdpbxejnXB8jMyeqP/NEQ 7SlfuHMJDkGzhtjrU/qBfUi65DrQ+V60vPn9LWZsicWDFaAtJrraBAnu2qat2ycf IpsvHZkvetLVlbbbjGJ5qz9Lwr9k0WlQDkONtSOYvFggR0CJYVh5wGKvb//wRGcY krsk6TFll6kaD+stGdP+96wjw23HHw6UlP+q7YEBAt+iUml5qGM+vUVfVoTmbZaG IO5Z57TmbM44OggsbCalq9QNut3wRwaCHBIu8xTW8tYaztHOfqblNVysW/z5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ1MofkXxGPSNMgcO4K6vmfr/wwIwHwYDVR0j BBgwFoAUKf8fYaxelPbmSod9ZMiYiRyTudQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODI5ZTcwNjQtYjM1Mi00M2I2LTlmMDktNTE0ZDY4YTI3MzllLzAvMjlGRjFGNjFB QzVFOTRGNkU2NEE4NzdENjRDODk4ODkxQzkzQjlENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUZGMUY2MUFDNUU5NEY2RTY0QTg3N0Q2NEM4OTg4OTFDOTNC OUQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODI5ZTcwNjQtYjM1Mi00M2I2LTlm MDktNTE0ZDY4YTI3MzllLzAvMjlGRjFGNjFBQzVFOTRGNkU2NEE4NzdENjRDODk4 ODkxQzkzQjlENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbVWAXTbRVg4iREWnRwUlXg02MGcaXSuFzd uAEWu1p7iuMjEugGxHzmyEZekUW/2TzSC4xX1gIFz8uHr3eZTdVNW71ljLPmGFi2 SsIRsRTc1mAdaMx7TCzgycCDVkc5NCNSN84P1YqDUF+izV7vxAioKpyJuBfSQjPD 9vPjo4oXtZbW7whp25Tuyp8FXfitKEf4VarCElgZGiq+r35kBCqOqSFbx8IF5y0g AcjpvEQtcZLDCkSGN7YzBxh7nOEWnTABpXnz0kL4eG1i1qmHWtUESAddiw6Y4kDP bkA3U4vQHvVEmUc+f1Hs7cFcRDcPAzpnkgtK7yxl4s+HBU5g6Fs= -----END CERTIFICATE-----Generated at Wed May 13 04:16:19 2026 by rpki-client