$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft File: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft (raw, json) Hash identifier: V+TQy+JbBr4kxfel9EX7eKc/MgRvHJGeah4vFD4Fb/s= Subject key identifier: 00:37:1A:9D:93:A5:E0:F2:F6:9F:90:DE:04:82:53:BE:68:79:48:E5 Authority key identifier: 29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 Certificate issuer: /CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Certificate serial: 2A1C0B8464203557BDACF715903100A10D52A1CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft Manifest number: BE Signing time: Mon 21 Sep 2026 03:10:24 +0000 Manifest this update: Mon 21 Sep 2026 03:05:24 +0000 Manifest next update: Tue 22 Sep 2026 05:19:24 +0000 Files and hashes: 1: 3132332e3235332e3234342e302f32322d3234203d3e20313339333939.roa (hash: AkdaEMd+XmRC7LIhRP1qHPpsq0xWW6OO7uiTTYl9niM=) 2: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (hash: 9IfkkC/i5Kuy1L3bffZaVJ8s7U1zqTIr/KouC9nKsl0=) 3: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl (hash: cRZbLayCMOcMRndjdsVqmiSUlWAvOFnNe1tuzQ8Wikg=) 4: 323030313a6466303a663730303a3a2f34382d3438203d3e20313339333939.roa (hash: VVOefWlNgIrxkTxjv4HjTw9WKSQHPhLghu8AquJqLFo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:19:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:1c:0b:84:64:20:35:57:bd:ac:f7:15:90:31:00:a1:0d:52:a1:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Validity Not Before: Sep 21 03:05:24 2026 GMT Not After : Sep 22 05:19:24 2026 GMT Subject: CN=00371A9D93A5E0F2F69F90DE048253BE687948E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bf:eb:61:ff:6e:a6:e9:95:0f:c9:b3:f9:e6: 00:1b:be:92:cc:59:89:f2:18:01:00:67:82:e4:74: b8:10:51:54:05:a1:c6:37:fe:aa:e4:2d:3c:de:31: ac:f7:2d:f2:88:d4:18:4c:ee:ab:b2:00:1d:9d:d9: 52:62:9b:67:3d:2a:b5:59:f3:8d:e3:42:75:1b:5f: d3:8d:40:80:07:48:af:97:ef:db:cf:f5:37:79:43: 7d:b5:b5:81:e1:95:04:bb:4d:11:cc:73:d2:5c:d1: ee:df:88:7f:c2:5f:cc:a5:cb:23:73:94:d3:54:af: 96:5e:a1:d1:14:09:c3:4e:3f:38:de:22:0a:12:6e: 68:de:13:05:3a:79:c8:4d:47:9c:f2:07:0c:84:50: 3a:3f:d1:47:3e:69:d2:94:18:da:fd:93:4a:99:1b: b3:ca:1d:f3:8c:86:43:92:43:d3:bf:e0:de:26:37: e9:ca:98:73:cd:b8:08:53:22:28:23:82:40:70:cb: 0f:6b:39:3a:57:17:00:a3:f5:17:2c:d1:b8:b5:1e: 81:22:a1:17:83:eb:6b:82:8b:4f:ed:da:25:0a:da: 05:c8:34:95:6c:7e:16:bf:7a:5e:0f:9e:a9:38:ca: 47:0c:e9:9d:47:f7:bc:d2:e9:22:45:46:7b:d0:84: 51:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:37:1A:9D:93:A5:E0:F2:F6:9F:90:DE:04:82:53:BE:68:79:48:E5 X509v3 Authority Key Identifier: keyid:29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:59:de:87:0c:d4:de:49:00:b7:31:75:0c:0e:ae:99:d6:bb: b3:09:db:93:92:56:af:2c:9a:a6:07:71:ab:71:2a:9e:06:25: 02:bb:8f:2c:1c:b4:58:58:20:b4:41:8f:11:28:cb:cd:c8:39: 19:88:42:ff:12:59:1b:ff:b4:9b:63:c9:17:63:93:f3:68:a1: 02:13:7a:dd:7e:18:d4:3c:cf:1f:c1:0e:f1:76:18:e6:2b:e0: f4:68:42:1a:75:7a:45:ea:d8:6d:a7:95:23:8e:9e:a8:b3:72: 8a:32:c9:f7:5a:e5:e1:1b:41:2e:ae:f3:b9:6b:72:bf:94:dc: 38:b7:eb:67:da:02:ba:45:3a:46:22:29:1a:80:0b:07:7a:fc: 56:c0:ab:8b:04:78:87:c8:dd:b2:e1:9b:fe:b4:4e:4c:f1:4d: 30:94:df:25:09:66:b0:17:6d:fa:83:ec:a1:07:56:f2:b1:4a: 74:62:b0:6e:71:43:72:03:d2:c9:37:51:22:87:af:b6:83:a0: fc:f0:40:6e:3e:e1:67:79:ff:41:77:cb:bb:35:4a:d4:fd:88: ca:da:08:43:a7:f0:cc:30:5b:73:43:96:72:7d:40:36:3d:be: 5a:02:3a:69:47:56:73:bc:bf:a4:34:e1:2a:a0:92:2a:42:6c: c8:6f:7d:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKhwLhGQgNVe9rPcVkDEAoQ1Soc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGODk1M0QzQkQxM0Q3NEY2MEJBQ0E2MUUwMjgxMUI0 RDZBNkFENDAeFw0yNjA5MjEwMzA1MjRaFw0yNjA5MjIwNTE5MjRaMDMxMTAvBgNV BAMTKDAwMzcxQTlEOTNBNUUwRjJGNjlGOTBERTA0ODI1M0JFNjg3OTQ4RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCv+th/26m6ZUPybP55gAbvpLM WYnyGAEAZ4LkdLgQUVQFocY3/qrkLTzeMaz3LfKI1BhM7quyAB2d2VJim2c9KrVZ 843jQnUbX9ONQIAHSK+X79vP9Td5Q321tYHhlQS7TRHMc9Jc0e7fiH/CX8ylyyNz lNNUr5ZeodEUCcNOPzjeIgoSbmjeEwU6echNR5zyBwyEUDo/0Uc+adKUGNr9k0qZ G7PKHfOMhkOSQ9O/4N4mN+nKmHPNuAhTIigjgkBwyw9rOTpXFwCj9Rcs0bi1HoEi oReD62uCi0/t2iUK2gXINJVsfha/el4Pnqk4ykcM6Z1H97zS6SJFRnvQhFEvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUADcanZOl4PL2n5DeBIJTvmh5SOUwHwYDVR0j BBgwFoAUKfiVPTvRPXT2C6ymHgKBG01qatQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQyMTk4NWItYTBlNi00ZTA1LWJlZjYtZmU2ZjVhNmUyZjQzLzAvMjlGODk1M0Qz QkQxM0Q3NEY2MEJBQ0E2MUUwMjgxMUI0RDZBNkFENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUY4OTUzRDNCRDEzRDc0RjYwQkFDQTYxRTAyODExQjRENkE2 QUQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQyMTk4NWItYTBlNi00ZTA1LWJl ZjYtZmU2ZjVhNmUyZjQzLzAvMjlGODk1M0QzQkQxM0Q3NEY2MEJBQ0E2MUUwMjgx MUI0RDZBNkFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVZ3ocM1N5JALcxdQwOrpnWu7MJ25OSVq8s mqYHcatxKp4GJQK7jywctFhYILRBjxEoy83IORmIQv8SWRv/tJtjyRdjk/NooQIT et1+GNQ8zx/BDvF2GOYr4PRoQhp1ekXq2G2nlSOOnqizcooyyfda5eEbQS6u87lr cr+U3Di362faArpFOkYiKRqACwd6/FbAq4sEeIfI3bLhm/60TkzxTTCU3yUJZrAX bfqD7KEHVvKxSnRisG5xQ3ID0sk3USKHr7aDoPzwQG4+4Wd5/0F3y7s1StT9iMra CEOn8MwwW3NDlnJ9QDY9vloCOmlHVnO8v6Q04SqgkipCbMhvfa4= -----END CERTIFICATE-----Generated at Mon Sep 21 15:45:58 2026 by rpki-client