$ rpki-client -vvf rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft File: 029298EDFAB613103A6838C4E6588574BAE7834B.mft (raw, json) Hash identifier: dCB7Mz86R+4ghHhV/WN6WF3480VDO78dX+GGgBUml98= Subject key identifier: 95:AD:54:6C:B9:91:FD:4E:65:EC:DE:92:D8:37:99:9E:EC:C0:36:D7 Authority key identifier: 02:92:98:ED:FA:B6:13:10:3A:68:38:C4:E6:58:85:74:BA:E7:83:4B Certificate issuer: /CN=029298EDFAB613103A6838C4E6588574BAE7834B Certificate serial: 53799E54FA69C108B80B28D0F157A94F438D394B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 21:15:59 +0000 Manifest this update: Thu 23 Jul 2026 21:10:59 +0000 Manifest next update: Fri 24 Jul 2026 23:43:59 +0000 Files and hashes: 1: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: kjFpYE2tHcJudyUulebatKRmVdaAJGBwcjnuFBP+Tj8=) 2: 029298EDFAB613103A6838C4E6588574BAE7834B.crl (hash: c+yMttPdVdGnyfRaZD8AhJKCIcNwJOEwcev1BaHCCvA=) 3: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: 5Ux9FZjiRKbHvcLMHj57vi8xCjfaDnZG5BpZ2qxgkCs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.crl rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:79:9e:54:fa:69:c1:08:b8:0b:28:d0:f1:57:a9:4f:43:8d:39:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=029298EDFAB613103A6838C4E6588574BAE7834B Validity Not Before: Jul 23 21:10:59 2026 GMT Not After : Jul 24 23:43:59 2026 GMT Subject: CN=95AD546CB991FD4E65ECDE92D837999EECC036D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f2:30:0e:61:e6:77:59:07:eb:ac:c1:42:13: db:ee:e2:b1:a6:54:91:83:a7:63:62:7d:65:4b:4e: d0:60:44:a1:2d:00:c3:3d:56:c5:e7:33:b4:5e:31: ed:fc:45:8d:cf:5e:1f:5c:0a:09:b0:1c:ef:b0:a7: 69:2e:20:be:79:8a:bc:57:03:53:2d:c9:4b:1f:c9: ec:44:c4:cb:2e:d4:ee:ee:64:70:e7:5c:48:e5:19: e5:44:0d:50:a5:78:ff:11:95:ba:a4:87:f6:ac:dc: 4c:ca:ec:c3:45:46:fe:b7:a5:6d:2e:96:47:15:a7: 39:88:9a:1b:fe:60:5c:85:90:10:70:34:f3:8b:cd: 5e:8d:7b:80:1c:b0:ed:c6:0a:39:a1:a5:4c:53:a9: b1:ce:4c:7b:87:bd:82:f5:c1:36:0a:a2:b6:71:c6: cd:a5:cc:8a:bf:dd:49:f0:64:a4:d5:2e:a0:88:23: f1:34:f3:99:cd:bf:16:0e:78:d4:21:68:d2:1e:0d: 4b:45:4f:0a:73:c6:fc:77:e7:f0:34:e6:31:84:58: 54:9d:a4:fc:22:74:bc:8f:bf:1b:ea:dd:35:39:04: 23:0d:9a:d3:a8:84:37:ec:39:82:94:0a:f2:02:53: e3:0f:56:8d:ea:38:6e:32:13:cc:c2:1a:fd:c1:70: b1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AD:54:6C:B9:91:FD:4E:65:EC:DE:92:D8:37:99:9E:EC:C0:36:D7 X509v3 Authority Key Identifier: keyid:02:92:98:ED:FA:B6:13:10:3A:68:38:C4:E6:58:85:74:BA:E7:83:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/029298EDFAB613103A6838C4E6588574BAE7834B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/029298EDFAB613103A6838C4E6588574BAE7834B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:78:8e:32:2d:0e:88:4e:66:46:72:ec:41:1d:06:23:af:8e: ff:66:39:9c:4b:e5:1c:c4:d0:93:34:55:05:c6:b3:1a:0f:42: d0:83:08:66:ae:cc:0e:09:c3:a2:b9:b4:5a:6b:9b:90:42:1d: d7:94:26:03:af:cf:c2:be:91:4e:74:2b:bc:7f:87:0e:a2:76: f4:cb:7a:a0:d5:cf:e1:5c:42:09:d8:82:0a:ce:95:bd:a5:01: b8:4e:02:9e:b6:bf:b0:c6:80:72:d4:8d:21:9e:3b:1b:d1:c0: 05:e0:f1:95:1e:11:d5:71:60:b6:03:94:e1:4c:e8:b7:33:3f: 08:a6:a0:63:a0:8d:df:68:8f:3e:b7:ce:ce:c6:22:32:88:90: 88:5c:3c:c8:23:5c:f9:98:97:60:6d:a5:dd:4c:9b:ea:1d:d8: 6b:49:47:91:a9:2a:ed:2b:06:cb:73:95:eb:97:2e:c8:94:8a: d4:df:44:a6:c6:5b:9b:2f:73:e6:d2:a3:e9:5e:4e:e5:cd:cf: 8e:b8:32:6a:d4:ed:6b:5e:47:66:0f:76:45:23:be:7a:19:11: 44:c9:ee:52:56:2f:06:1f:f2:e0:3a:3a:65:8f:f4:89:15:39: e5:71:38:97:39:f8:26:d5:4c:32:e8:54:70:2c:f9:6a:b5:64: 07:2d:c6:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU3meVPppwQi4CyjQ8VepT0ONOUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI5Mjk4RURGQUI2MTMxMDNBNjgzOEM0RTY1ODg1NzRC QUU3ODM0QjAeFw0yNjA3MjMyMTEwNTlaFw0yNjA3MjQyMzQzNTlaMDMxMTAvBgNV BAMTKDk1QUQ1NDZDQjk5MUZENEU2NUVDREU5MkQ4Mzc5OTlFRUNDMDM2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT8jAOYeZ3WQfrrMFCE9vu4rGm VJGDp2NifWVLTtBgRKEtAMM9VsXnM7ReMe38RY3PXh9cCgmwHO+wp2kuIL55irxX A1MtyUsfyexExMsu1O7uZHDnXEjlGeVEDVCleP8Rlbqkh/as3EzK7MNFRv63pW0u lkcVpzmImhv+YFyFkBBwNPOLzV6Ne4AcsO3GCjmhpUxTqbHOTHuHvYL1wTYKorZx xs2lzIq/3UnwZKTVLqCII/E085nNvxYOeNQhaNIeDUtFTwpzxvx35/A05jGEWFSd pPwidLyPvxvq3TU5BCMNmtOohDfsOYKUCvICU+MPVo3qOG4yE8zCGv3BcLETAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUla1UbLmR/U5l7N6S2DeZnuzANtcwHwYDVR0j BBgwFoAUApKY7fq2ExA6aDjE5liFdLrng0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRiMGJmNWItNDU2ZC00ZTYyLTlmNDgtNjE5MjE0OWQ1MmMyLzAvMDI5Mjk4RURG QUI2MTMxMDNBNjgzOEM0RTY1ODg1NzRCQUU3ODM0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjkyOThFREZBQjYxMzEwM0E2ODM4QzRFNjU4ODU3NEJBRTc4 MzRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMDI5Mjk4RURGQUI2MTMxMDNBNjgzOEM0RTY1ODg1 NzRCQUU3ODM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZ4jjItDohOZkZy7EEdBiOvjv9mOZxL5RzE 0JM0VQXGsxoPQtCDCGauzA4Jw6K5tFprm5BCHdeUJgOvz8K+kU50K7x/hw6idvTL eqDVz+FcQgnYggrOlb2lAbhOAp62v7DGgHLUjSGeOxvRwAXg8ZUeEdVxYLYDlOFM 6LczPwimoGOgjd9ojz63zs7GIjKIkIhcPMgjXPmYl2Btpd1Mm+od2GtJR5GpKu0r BstzleuXLsiUitTfRKbGW5svc+bSo+leTuXNz464MmrU7WteR2YPdkUjvnoZEUTJ 7lJWLwYf8uA6OmWP9IkVOeVxOJc5+CbVTDLoVHAs+Wq1ZActxi4= -----END CERTIFICATE-----Generated at Fri Jul 24 13:21:41 2026 by rpki-client