$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft File: 29FA80F6176C25C691091C10B9D90672CFD66E6D.mft (raw, json) Hash identifier: 09Wt1hR7cpKWaOZiBgULUpu9jmKxXr9t0DZ+7c63v+I= Subject key identifier: 42:1D:F8:7C:FD:91:AF:21:BA:B3:38:4F:CE:B4:7F:DD:20:FB:EB:C6 Authority key identifier: 29:FA:80:F6:17:6C:25:C6:91:09:1C:10:B9:D9:06:72:CF:D6:6E:6D Certificate issuer: /CN=29FA80F6176C25C691091C10B9D90672CFD66E6D Certificate serial: 575E3754E66BB0702F39984338594F0879EBB69C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft Manifest number: BE Signing time: Tue 22 Sep 2026 06:14:14 +0000 Manifest this update: Tue 22 Sep 2026 06:09:14 +0000 Manifest next update: Wed 23 Sep 2026 09:26:14 +0000 Files and hashes: 1: 3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa (hash: RoLrz7G1R33kfqGbX8nuSO6gHFL4kaqL21h4DNDlHHo=) 2: 29FA80F6176C25C691091C10B9D90672CFD66E6D.crl (hash: ok21gfRWGXibFZFh1WLJJgAn/wXXV7mJmKDtOz6Q3ic=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.crl rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 09:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:5e:37:54:e6:6b:b0:70:2f:39:98:43:38:59:4f:08:79:eb:b6:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29FA80F6176C25C691091C10B9D90672CFD66E6D Validity Not Before: Sep 22 06:09:14 2026 GMT Not After : Sep 23 09:26:14 2026 GMT Subject: CN=421DF87CFD91AF21BAB3384FCEB47FDD20FBEBC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4c:2b:70:8e:b8:e7:56:24:f4:1c:93:1d:d0: 8a:7d:32:7c:29:86:46:8a:bd:9c:87:f3:bf:66:87: 23:de:6d:e4:a6:47:7f:5c:a1:07:be:b7:a2:79:1d: 8d:68:49:4f:cb:82:d3:c0:6e:c0:2c:21:42:ed:a3: 20:34:d4:55:3f:c0:91:a9:ad:8b:85:a3:b2:b6:72: 1b:5c:34:96:6a:52:ae:14:c2:31:f7:8d:bb:56:51: 37:be:b3:0b:e6:a1:31:43:4d:36:37:3f:25:c4:8c: db:60:ba:fd:c3:04:a3:71:00:22:ee:03:e7:a8:f4: 59:8c:45:ec:70:49:8c:ce:84:12:27:77:d2:a8:fe: 33:3f:87:3d:39:c0:f4:ed:89:dc:b2:6c:57:9c:b7: 7f:98:80:a4:d2:b1:c8:cf:6f:19:49:c4:22:d2:e0: 06:a8:7e:5e:3a:c0:20:98:4e:ae:a9:a0:32:6c:80: 72:f2:5d:0e:0a:88:e3:6d:48:3c:6f:dc:4a:bb:81: 98:ac:de:1a:38:32:c0:e4:0b:84:30:32:54:66:b8: 5e:e2:50:f4:d1:c8:36:de:ea:bc:ab:68:6e:ba:b3: 09:69:2b:01:7a:12:1f:98:97:6a:39:95:9d:ab:d0: d6:91:42:a1:27:0f:27:ee:df:87:1b:cd:4b:2c:b2: d5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1D:F8:7C:FD:91:AF:21:BA:B3:38:4F:CE:B4:7F:DD:20:FB:EB:C6 X509v3 Authority Key Identifier: keyid:29:FA:80:F6:17:6C:25:C6:91:09:1C:10:B9:D9:06:72:CF:D6:6E:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/29FA80F6176C25C691091C10B9D90672CFD66E6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/29FA80F6176C25C691091C10B9D90672CFD66E6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:2a:af:a4:16:79:81:5b:f6:41:54:fb:e7:66:a2:09:c0:bd: 44:7d:e1:ee:9d:57:48:11:a5:35:65:b2:8f:87:85:11:3f:a5: f3:d0:58:82:b5:91:30:82:ec:78:d3:5a:3f:66:72:24:9d:c8: 2d:62:71:2f:dd:73:e9:76:73:76:1c:98:23:34:fa:99:bc:76: e1:ad:c3:a2:9c:7b:2d:d3:fe:0d:46:b3:53:d2:e9:d0:59:e6: 2f:3f:ad:9e:74:98:8d:38:23:b7:df:06:69:9e:00:bb:8f:7a: 97:33:2e:17:f0:91:df:1c:97:8c:12:65:55:22:b0:c9:32:ef: f9:66:9d:e7:b8:da:67:29:73:af:d0:66:07:cd:71:b3:fc:e7: 1e:ec:29:58:44:48:fa:5d:1e:2d:9c:4a:d2:f1:97:3b:a0:99: c4:fe:ec:d4:fe:95:46:25:50:ba:23:82:f8:04:2b:24:6e:cc: 2f:13:01:04:9e:62:91:62:19:38:28:6e:56:62:7e:c6:09:04: 1b:df:d0:dd:e9:fd:f1:b5:ce:6e:8b:12:c7:72:4a:2b:d6:91: 85:97:04:e8:d9:ca:f5:a1:9f:7b:33:b0:d9:b0:5c:69:7a:fe: 2c:08:28:55:a4:26:af:a3:6c:c2:95:44:80:5d:11:7a:68:58: bf:4e:42:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV143VOZrsHAvOZhDOFlPCHnrtpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlGQTgwRjYxNzZDMjVDNjkxMDkxQzEwQjlEOTA2NzJD RkQ2NkU2RDAeFw0yNjA5MjIwNjA5MTRaFw0yNjA5MjMwOTI2MTRaMDMxMTAvBgNV BAMTKDQyMURGODdDRkQ5MUFGMjFCQUIzMzg0RkNFQjQ3RkREMjBGQkVCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkTCtwjrjnViT0HJMd0Ip9Mnwp hkaKvZyH879mhyPebeSmR39coQe+t6J5HY1oSU/LgtPAbsAsIULtoyA01FU/wJGp rYuFo7K2chtcNJZqUq4UwjH3jbtWUTe+swvmoTFDTTY3PyXEjNtguv3DBKNxACLu A+eo9FmMRexwSYzOhBInd9Ko/jM/hz05wPTtidyybFect3+YgKTSscjPbxlJxCLS 4Aaofl46wCCYTq6poDJsgHLyXQ4KiONtSDxv3Eq7gZis3ho4MsDkC4QwMlRmuF7i UPTRyDbe6ryraG66swlpKwF6Eh+Yl2o5lZ2r0NaRQqEnDyfu34cbzUssstXxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQh34fP2RryG6szhPzrR/3SD768YwHwYDVR0j BBgwFoAUKfqA9hdsJcaRCRwQudkGcs/Wbm0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGE0OGIyMjItNmRlZC00MjhhLTg4OGYtMTA0NTRiMDg4MGMyLzAvMjlGQTgwRjYx NzZDMjVDNjkxMDkxQzEwQjlEOTA2NzJDRkQ2NkU2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOUZBODBGNjE3NkMyNUM2OTEwOTFDMTBCOUQ5MDY3MkNGRDY2 RTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGE0OGIyMjItNmRlZC00MjhhLTg4 OGYtMTA0NTRiMDg4MGMyLzAvMjlGQTgwRjYxNzZDMjVDNjkxMDkxQzEwQjlEOTA2 NzJDRkQ2NkU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMqr6QWeYFb9kFU++dmognAvUR94e6dV0gR pTVlso+HhRE/pfPQWIK1kTCC7HjTWj9mciSdyC1icS/dc+l2c3YcmCM0+pm8duGt w6Kcey3T/g1Gs1PS6dBZ5i8/rZ50mI04I7ffBmmeALuPepczLhfwkd8cl4wSZVUi sMky7/lmnee42mcpc6/QZgfNcbP85x7sKVhESPpdHi2cStLxlzugmcT+7NT+lUYl ULojgvgEKyRuzC8TAQSeYpFiGTgoblZifsYJBBvf0N3p/fG1zm6LEsdySivWkYWX BOjZyvWhn3szsNmwXGl6/iwIKFWkJq+jbMKVRIBdEXpoWL9OQkc= -----END CERTIFICATE-----Generated at Tue Sep 22 21:02:35 2026 by rpki-client