$ rpki-client -vvf rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft File: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft (raw, json) Hash identifier: Jl24tuYT1BQS1Th8Urb/rBDqrYPYlCgBzlddmcmWgL4= Subject key identifier: 32:B2:D8:BD:82:CA:4A:4C:16:54:5B:92:DD:17:E3:C7:46:A3:0C:DF Authority key identifier: 29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 Certificate issuer: /CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Certificate serial: 7DAA9189BA803F5E4DCDDAC97199F3E6A068DCBE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 19:17:43 +0000 Manifest this update: Sat 13 Jun 2026 19:12:43 +0000 Manifest next update: Sun 14 Jun 2026 22:12:43 +0000 Files and hashes: 1: 3132332e3235332e3234342e302f32322d3234203d3e20313339333939.roa (hash: AkdaEMd+XmRC7LIhRP1qHPpsq0xWW6OO7uiTTYl9niM=) 2: 29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl (hash: 8v0XVvMTg7lsVsvLDy5mZH5iy/Fo7EaWzQ0j2RvUeV0=) 3: 323030313a6466303a663730303a3a2f34382d3438203d3e20313339333939.roa (hash: VVOefWlNgIrxkTxjv4HjTw9WKSQHPhLghu8AquJqLFo=) 4: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (hash: 9IfkkC/i5Kuy1L3bffZaVJ8s7U1zqTIr/KouC9nKsl0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 22:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:aa:91:89:ba:80:3f:5e:4d:cd:da:c9:71:99:f3:e6:a0:68:dc:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29F8953D3BD13D74F60BACA61E02811B4D6A6AD4 Validity Not Before: Jun 13 19:12:43 2026 GMT Not After : Jun 14 22:12:43 2026 GMT Subject: CN=32B2D8BD82CA4A4C16545B92DD17E3C746A30CDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:53:55:dc:57:fb:04:b4:cf:87:1f:11:99:d8: 4d:c1:20:04:22:f7:e7:9d:a8:32:99:b0:a6:f7:8b: 06:05:0e:80:28:4e:12:da:bf:4b:75:c4:40:39:00: c0:2d:5d:17:36:02:9c:91:92:47:03:9e:7a:d2:9e: bd:50:0b:ca:54:8a:c4:53:bd:c5:1f:d4:ef:36:42: 88:42:e9:e9:f4:80:1d:93:ca:17:ab:e9:6f:ab:25: c5:5d:47:fb:12:61:42:df:4c:00:ba:98:b9:1a:0d: 66:e1:3e:f8:21:91:9d:bc:03:e4:3a:c3:ed:13:4d: 12:0b:48:c8:0b:76:b6:f9:9e:3a:d0:1e:ce:b7:81: 42:f6:08:9f:03:a7:8e:35:a9:6c:78:90:f9:97:9c: dd:a3:b9:34:61:59:73:b0:b1:0f:b8:b1:7c:03:02: 1f:b7:4e:22:89:87:98:91:12:66:71:70:a1:72:64: 19:10:91:ba:6f:ce:66:07:70:c2:e0:67:1f:09:65: d8:5a:dd:de:9a:32:63:1f:de:83:cf:d0:66:d2:c2: 24:5d:82:b3:da:44:13:c0:37:8f:6b:65:92:67:f6: 6e:90:ae:8a:95:08:72:e0:60:f1:97:71:64:6d:e3: 61:a5:28:9d:40:19:82:45:ef:2d:ca:20:63:a5:af: 33:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B2:D8:BD:82:CA:4A:4C:16:54:5B:92:DD:17:E3:C7:46:A3:0C:DF X509v3 Authority Key Identifier: keyid:29:F8:95:3D:3B:D1:3D:74:F6:0B:AC:A6:1E:02:81:1B:4D:6A:6A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/29F8953D3BD13D74F60BACA61E02811B4D6A6AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:6a:eb:85:25:ec:79:a2:e5:4a:7d:47:e3:c0:31:7d:25:9d: f2:60:ec:e2:29:11:0f:34:ff:ca:dc:e8:3d:0b:6f:42:a6:8b: 33:d7:95:c7:82:38:88:1c:32:fb:5c:9f:27:20:1e:fc:ad:da: 69:4a:79:48:7e:32:f8:62:8b:f2:f9:14:b2:47:57:83:e8:02: 96:9a:23:22:53:95:16:e5:93:74:6e:cb:d1:82:b5:5e:4c:6a: af:83:17:ed:30:21:95:b5:06:e9:f4:5b:bd:28:6d:9d:dc:05: 3a:c7:11:aa:2c:b0:a0:e7:32:a3:ba:87:1f:02:53:d5:d7:43: 7d:2c:20:47:5b:f6:7e:a3:bd:b9:07:61:cc:a7:d3:02:09:97: b3:e5:c4:4a:96:d4:6b:78:1e:c6:e0:5e:f4:6e:97:87:3f:cd: 4a:17:df:28:1e:e4:57:f7:9c:95:cb:a1:57:6a:d2:91:58:f3: a8:08:60:21:e6:17:47:0e:db:08:ed:b2:6a:7e:8e:7f:c1:e4: d0:2f:cd:ed:5f:f2:a6:e1:10:63:1d:8f:88:85:22:ca:4b:13: cf:6c:2e:1a:2e:b4:b6:eb:f4:cb:ae:2e:e2:32:82:4c:e6:7e: 0b:55:11:2a:61:9a:a1:81:fa:b3:64:8e:7d:c1:28:7b:39:70: 22:8d:53:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfaqRibqAP15NzdrJcZnz5qBo3L4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGODk1M0QzQkQxM0Q3NEY2MEJBQ0E2MUUwMjgxMUI0 RDZBNkFENDAeFw0yNjA2MTMxOTEyNDNaFw0yNjA2MTQyMjEyNDNaMDMxMTAvBgNV BAMTKDMyQjJEOEJEODJDQTRBNEMxNjU0NUI5MkREMTdFM0M3NDZBMzBDREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNU1XcV/sEtM+HHxGZ2E3BIAQi 9+edqDKZsKb3iwYFDoAoThLav0t1xEA5AMAtXRc2ApyRkkcDnnrSnr1QC8pUisRT vcUf1O82QohC6en0gB2Tyher6W+rJcVdR/sSYULfTAC6mLkaDWbhPvghkZ28A+Q6 w+0TTRILSMgLdrb5njrQHs63gUL2CJ8Dp441qWx4kPmXnN2juTRhWXOwsQ+4sXwD Ah+3TiKJh5iREmZxcKFyZBkQkbpvzmYHcMLgZx8JZdha3d6aMmMf3oPP0GbSwiRd grPaRBPAN49rZZJn9m6QroqVCHLgYPGXcWRt42GlKJ1AGYJF7y3KIGOlrzMhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMrLYvYLKSkwWVFuS3Rfjx0ajDN8wHwYDVR0j BBgwFoAUKfiVPTvRPXT2C6ymHgKBG01qatQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDQyMTk4NWItYTBlNi00ZTA1LWJlZjYtZmU2ZjVhNmUyZjQzLzAvMjlGODk1M0Qz QkQxM0Q3NEY2MEJBQ0E2MUUwMjgxMUI0RDZBNkFENC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUY4OTUzRDNCRDEzRDc0RjYwQkFDQTYxRTAyODExQjRENkE2 QUQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQyMTk4NWItYTBlNi00ZTA1LWJl ZjYtZmU2ZjVhNmUyZjQzLzAvMjlGODk1M0QzQkQxM0Q3NEY2MEJBQ0E2MUUwMjgx MUI0RDZBNkFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1q64Ul7Hmi5Up9R+PAMX0lnfJg7OIpEQ80 /8rc6D0Lb0KmizPXlceCOIgcMvtcnycgHvyt2mlKeUh+Mvhii/L5FLJHV4PoApaa IyJTlRblk3Ruy9GCtV5Maq+DF+0wIZW1Bun0W70obZ3cBTrHEaossKDnMqO6hx8C U9XXQ30sIEdb9n6jvbkHYcyn0wIJl7PlxEqW1Gt4HsbgXvRul4c/zUoX3yge5Ff3 nJXLoVdq0pFY86gIYCHmF0cO2wjtsmp+jn/B5NAvze1f8qbhEGMdj4iFIspLE89s LhoutLbr9MuuLuIygkzmfgtVESphmqGB+rNkjn3BKHs5cCKNU6I= -----END CERTIFICATE-----Generated at Sun Jun 14 12:16:55 2026 by rpki-client