$ rpki-client -vvf rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft File: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft (raw, json) Hash identifier: +743fQhovvgSMQYO5trVZQ7wZK+RsvgKMDGlb8np+Hs= Subject key identifier: F2:36:72:3D:06:20:D8:FD:0B:24:5E:3A:94:2C:69:C8:2C:AD:D0:27 Authority key identifier: 29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 Certificate issuer: /CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Certificate serial: 64B96860CDA2FD4A2EA2195F170928BE1E3A6D6A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft Manifest number: 77 Signing time: Wed 29 Jul 2026 16:46:09 +0000 Manifest this update: Wed 29 Jul 2026 16:41:09 +0000 Manifest next update: Thu 30 Jul 2026 20:25:09 +0000 Files and hashes: 1: 3132332e3235332e3234342e302f32322d3234203d3e20313339333939.roa (hash: AkdaEMd+XmRC7LIhRP1qHPpsq0xWW6OO7uiTTYl9niM=) 2: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl (hash: 0a956/qmU6vhjXG21wjLPMpWG7WND6Hm4SXZFhCLSPk=) 3: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (hash: 9IfkkC/i5Kuy1L3bffZaVJ8s7U1zqTIr/KouC9nKsl0=) 4: 323030313a6466303a663730303a3a2f34382d3438203d3e20313339333939.roa (hash: VVOefWlNgIrxkTxjv4HjTw9WKSQHPhLghu8AquJqLFo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 14:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:b9:68:60:cd:a2:fd:4a:2e:a2:19:5f:17:09:28:be:1e:3a:6d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Validity Not Before: Jul 29 16:41:09 2026 GMT Not After : Jul 30 20:25:09 2026 GMT Subject: CN=F236723D0620D8FD0B245E3A942C69C82CADD027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:32:77:fd:9a:27:1c:57:89:42:5a:30:7d:6c: 4d:6f:79:e3:16:86:1a:6c:b1:90:33:6e:37:50:44: 41:62:02:ff:c7:e0:f2:4a:3b:07:c6:34:c3:68:5b: 2e:4e:d2:c4:b1:56:31:8c:aa:20:81:14:47:08:bf: 4c:6c:a3:3e:7b:5f:df:c6:26:e7:c5:6f:83:33:78: 27:f9:b7:e9:34:40:c7:77:b1:e3:82:7c:52:06:89: dd:43:77:5e:98:d2:e5:c1:0e:29:2c:19:8b:6d:2d: 0b:e8:85:18:c0:1a:d1:f7:dc:cd:26:b7:34:ba:0f: bc:a4:1b:7b:06:6a:c0:e5:41:d4:5c:36:51:71:f2: 23:ca:50:8d:af:f2:37:4e:07:11:fa:6f:14:ff:be: fd:e4:fa:66:49:4b:02:9f:e3:76:5c:e9:f6:7e:58: 2d:f4:32:20:8f:aa:a0:44:ac:e3:11:68:7f:9b:f5: d9:27:45:cf:5b:18:65:19:c7:a6:31:d2:28:28:9d: ff:a8:2b:fd:83:51:82:f8:32:31:4b:64:3f:aa:de: 8d:1f:7b:96:b1:58:74:b4:d9:56:ec:fa:c1:48:25: a4:b3:ba:69:bb:17:3d:18:21:76:6e:7e:a3:c7:f7: 7f:88:ed:fd:b2:76:f2:32:ad:83:0a:3a:84:e4:92: fb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:36:72:3D:06:20:D8:FD:0B:24:5E:3A:94:2C:69:C8:2C:AD:D0:27 X509v3 Authority Key Identifier: keyid:29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:a7:6e:d7:e2:7c:9a:78:19:f3:3f:3c:2c:12:5a:04:ab:bf: e7:55:18:83:7e:25:07:3d:f1:86:a9:6b:96:2a:ee:1b:56:91: a4:7b:17:35:42:81:75:6a:91:6c:f9:bb:00:06:c9:47:2f:d3: e6:60:ca:43:fd:d7:53:d5:f5:c3:90:98:81:33:56:1c:83:eb: d0:3f:02:40:22:0c:c9:5a:00:2c:96:15:c6:ef:a4:fb:f0:81: 58:e6:3d:22:e8:4a:58:70:65:98:9d:bb:26:b4:65:eb:92:d1: 4f:f3:df:75:b1:bc:6f:92:17:7d:1b:1a:4b:a9:d6:d6:50:20: 3e:ec:26:bc:3a:88:d7:a8:69:70:54:c3:27:cf:e1:cf:ee:91: bb:bd:8b:f1:8b:73:d0:c0:10:70:56:3a:3a:8a:7c:df:f7:0f: ea:69:07:9b:92:78:20:2f:06:a0:54:ad:7e:b8:b3:ab:ef:00: 4f:44:78:38:2d:8b:73:fa:83:fe:5b:a4:d3:48:2f:93:fa:21: e1:57:82:3c:76:dc:13:90:d5:ae:b6:9e:b5:c7:3c:96:e1:a2: 64:61:9f:ef:79:04:97:8e:12:a5:81:20:e8:3c:e2:66:81:3a: 55:9d:64:b9:26:48:d8:a5:01:7a:86:d7:b9:4f:b0:ad:7e:da: 5d:2c:49:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZLloYM2i/UouohlfFwkovh46bWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGODk1M0QzQkQxM0Q3NEY2MEJBQ0E2MUUwMjgxMUI0 RDZBNkFENDAeFw0yNjA3MjkxNjQxMDlaFw0yNjA3MzAyMDI1MDlaMDMxMTAvBgNV BAMTKEYyMzY3MjNEMDYyMEQ4RkQwQjI0NUUzQTk0MkM2OUM4MkNBREQwMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDMnf9miccV4lCWjB9bE1veeMW hhpssZAzbjdQREFiAv/H4PJKOwfGNMNoWy5O0sSxVjGMqiCBFEcIv0xsoz57X9/G JufFb4MzeCf5t+k0QMd3seOCfFIGid1Dd16Y0uXBDiksGYttLQvohRjAGtH33M0m tzS6D7ykG3sGasDlQdRcNlFx8iPKUI2v8jdOBxH6bxT/vv3k+mZJSwKf43Zc6fZ+ WC30MiCPqqBErOMRaH+b9dknRc9bGGUZx6Yx0igonf+oK/2DUYL4MjFLZD+q3o0f e5axWHS02Vbs+sFIJaSzumm7Fz0YIXZufqPH93+I7f2ydvIyrYMKOoTkkvshAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8jZyPQYg2P0LJF46lCxpyCyt0CcwHwYDVR0j BBgwFoAUKfiVPTvRPXT2C6ymHgKBG01qatQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQyMTk4NWItYTBlNi00ZTA1LWJlZjYtZmU2ZjVhNmUyZjQzLzAvMjlGODk1M0Qz QkQxM0Q3NEY2MEJBQ0E2MUUwMjgxMUI0RDZBNkFENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUY4OTUzRDNCRDEzRDc0RjYwQkFDQTYxRTAyODExQjRENkE2 QUQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQyMTk4NWItYTBlNi00ZTA1LWJl ZjYtZmU2ZjVhNmUyZjQzLzAvMjlGODk1M0QzQkQxM0Q3NEY2MEJBQ0E2MUUwMjgx MUI0RDZBNkFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKnbtfifJp4GfM/PCwSWgSrv+dVGIN+JQc9 8Yapa5Yq7htWkaR7FzVCgXVqkWz5uwAGyUcv0+ZgykP911PV9cOQmIEzVhyD69A/ AkAiDMlaACyWFcbvpPvwgVjmPSLoSlhwZZiduya0ZeuS0U/z33WxvG+SF30bGkup 1tZQID7sJrw6iNeoaXBUwyfP4c/ukbu9i/GLc9DAEHBWOjqKfN/3D+ppB5uSeCAv BqBUrX64s6vvAE9EeDgti3P6g/5bpNNIL5P6IeFXgjx23BOQ1a62nrXHPJbhomRh n+95BJeOEqWBIOg84maBOlWdZLkmSNilAXqG17lPsK1+2l0sSYc= -----END CERTIFICATE-----Generated at Wed Jul 29 18:27:32 2026 by rpki-client